./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1123147684 <...> Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. execve("./syz-executor1123147684", ["./syz-executor1123147684"], 0x7ffd0a7386d0 /* 10 vars */) = 0 brk(NULL) = 0x555556b87000 brk(0x555556b87d00) = 0x555556b87d00 arch_prctl(ARCH_SET_FS, 0x555556b87380) = 0 set_tid_address(0x555556b87650) = 5011 set_robust_list(0x555556b87660, 24) = 0 rseq(0x555556b87ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1123147684", 4096) = 28 getrandom("\x67\x4d\x7d\x7e\x47\xce\x9a\x1a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556b87d00 brk(0x555556ba8d00) = 0x555556ba8d00 brk(0x555556ba9000) = 0x555556ba9000 mprotect(0x7f771473a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5012 attached , child_tidptr=0x555556b87650) = 5012 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] set_robust_list(0x555556b87660, 24) = 0 ./strace-static-x86_64: Process 5013 attached [pid 5011] <... clone resumed>, child_tidptr=0x555556b87650) = 5013 [pid 5012] mkdir("./syzkaller.hZmuDq", 0700 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5014 [pid 5013] set_robust_list(0x555556b87660, 24./strace-static-x86_64: Process 5014 attached [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... set_robust_list resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5012] chmod("./syzkaller.hZmuDq", 0777) = 0 [pid 5012] chdir("./syzkaller.hZmuDq") = 0 [pid 5012] mkdir("./0", 0777 [pid 5011] <... clone resumed>, child_tidptr=0x555556b87650) = 5015 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5011] <... clone resumed>, child_tidptr=0x555556b87650) = 5016 ./strace-static-x86_64: Process 5016 attached ./strace-static-x86_64: Process 5015 attached [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] set_robust_list(0x555556b87660, 24 [pid 5013] mkdir("./syzkaller.22t5qZ", 0700) = 0 [pid 5011] <... clone resumed>, child_tidptr=0x555556b87650) = 5017 [pid 5013] chmod("./syzkaller.22t5qZ", 0777 [pid 5015] set_robust_list(0x555556b87660, 24 [pid 5014] <... set_robust_list resumed>) = 0 [pid 5013] <... chmod resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] chdir("./syzkaller.22t5qZ") = 0 [pid 5015] <... set_robust_list resumed>) = 0 [pid 5014] mkdir("./syzkaller.gLSGT5", 0700 [pid 5013] mkdir("./0", 0777 [pid 5015] mkdir("./syzkaller.5j7VNu", 0700 [pid 5013] <... mkdir resumed>) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5018 ./strace-static-x86_64: Process 5017 attached [pid 5017] set_robust_list(0x555556b87660, 24) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5017] mkdir("./syzkaller.jzTKKh", 0700 [pid 5015] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5014] chmod("./syzkaller.gLSGT5", 0777 [pid 5016] set_robust_list(0x555556b87660, 24 [pid 5015] chmod("./syzkaller.5j7VNu", 0777 [pid 5013] <... openat resumed>) = 3 [pid 5014] <... chmod resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5015] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5018 attached [pid 5017] <... mkdir resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5018] set_robust_list(0x555556b87660, 24 [pid 5013] close(3 [pid 5015] chdir("./syzkaller.5j7VNu" [pid 5016] <... set_robust_list resumed>) = 0 [pid 5014] chdir("./syzkaller.gLSGT5" [pid 5018] <... set_robust_list resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5015] <... chdir resumed>) = 0 [pid 5017] chmod("./syzkaller.jzTKKh", 0777 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... chmod resumed>) = 0 [pid 5018] chdir("./0" [pid 5017] chdir("./syzkaller.jzTKKh") = 0 [pid 5015] mkdir("./0", 0777 [pid 5018] <... chdir resumed>) = 0 [pid 5017] mkdir("./0", 0777 [pid 5016] mkdir("./syzkaller.r7LCR2", 0700 [pid 5014] <... chdir resumed>) = 0 [pid 5018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] mkdir("./0", 0777 [pid 5018] setpgid(0, 0) = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5016] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5019 [pid 5016] chmod("./syzkaller.r7LCR2", 0777 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] <... openat resumed>) = 3 [pid 5017] <... mkdir resumed>) = 0 [pid 5018] write(3, "1000", 4) = 4 [pid 5014] <... openat resumed>) = 3 [pid 5018] close(3) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5016] <... chmod resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5018] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] chdir("./syzkaller.r7LCR2" [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5016] <... chdir resumed>) = 0 [pid 5015] <... close resumed>) = 0 ./strace-static-x86_64: Process 5019 attached [pid 5018] <... symlink resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5016] mkdir("./0", 0777 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] close(3 [pid 5019] set_robust_list(0x555556b87660, 24 [pid 5018] memfd_create("syzkaller", 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] <... mkdir resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5020 attached [pid 5020] set_robust_list(0x555556b87660, 24 [pid 5019] <... set_robust_list resumed>) = 0 [pid 5020] <... set_robust_list resumed>) = 0 [pid 5019] chdir("./0") = 0 [pid 5020] chdir("./0" [pid 5019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5022 attached [pid 5020] <... chdir resumed>) = 0 [pid 5019] <... prctl resumed>) = 0 [pid 5017] close(3 [pid 5016] <... openat resumed>) = 3 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5020 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5022 [pid 5022] set_robust_list(0x555556b87660, 24 [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5019] setpgid(0, 0 [pid 5017] <... close resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5022] <... set_robust_list resumed>) = 0 [pid 5020] <... prctl resumed>) = 0 [pid 5019] <... setpgid resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5022] chdir("./0" [pid 5020] setpgid(0, 0 [pid 5019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] close(3 [pid 5022] <... chdir resumed>) = 0 [pid 5020] <... setpgid resumed>) = 0 [pid 5019] <... openat resumed>) = 3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5023 [pid 5016] <... close resumed>) = 0 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5019] write(3, "1000", 4 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5022] <... prctl resumed>) = 0 [pid 5019] <... write resumed>) = 4 [pid 5022] setpgid(0, 0 [pid 5020] <... openat resumed>) = 3 [pid 5019] close(3 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5024 [pid 5022] <... setpgid resumed>) = 0 [pid 5020] write(3, "1000", 4 [pid 5019] <... close resumed>) = 0 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5020] <... write resumed>) = 4 [pid 5019] symlink("/dev/binderfs", "./binderfs" [pid 5022] <... openat resumed>) = 3 [pid 5020] close(3 [pid 5019] <... symlink resumed>) = 0 [pid 5022] write(3, "1000", 4 [pid 5020] <... close resumed>) = 0 [pid 5019] memfd_create("syzkaller", 0 [pid 5022] <... write resumed>) = 4 [pid 5020] symlink("/dev/binderfs", "./binderfs" [pid 5019] <... memfd_create resumed>) = 3 [pid 5022] close(3 [pid 5019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5023 attached [pid 5022] <... close resumed>) = 0 [pid 5020] <... symlink resumed>) = 0 [pid 5019] <... mmap resumed>) = 0x7f770c286000 ./strace-static-x86_64: Process 5024 attached [pid 5023] set_robust_list(0x555556b87660, 24 [pid 5022] symlink("/dev/binderfs", "./binderfs" [pid 5020] memfd_create("syzkaller", 0 [pid 5018] <... memfd_create resumed>) = 3 [pid 5024] set_robust_list(0x555556b87660, 24 [pid 5023] <... set_robust_list resumed>) = 0 [pid 5024] <... set_robust_list resumed>) = 0 [pid 5023] chdir("./0" [pid 5022] <... symlink resumed>) = 0 [pid 5020] <... memfd_create resumed>) = 3 [ 57.821233][ T5018] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5018 'syz-executor112' [pid 5018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5023] <... chdir resumed>) = 0 [pid 5023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5018] <... mmap resumed>) = 0x7f770c286000 [pid 5024] chdir("./0" [pid 5023] <... prctl resumed>) = 0 [pid 5020] <... mmap resumed>) = 0x7f770c286000 [pid 5023] setpgid(0, 0) = 0 [pid 5023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "1000", 4) = 4 [pid 5023] close(3) = 0 [pid 5023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5023] memfd_create("syzkaller", 0) = 3 [pid 5023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5024] <... chdir resumed>) = 0 [pid 5022] memfd_create("syzkaller", 0 [pid 5024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5022] <... memfd_create resumed>) = 3 [pid 5024] <... prctl resumed>) = 0 [pid 5022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5024] setpgid(0, 0 [pid 5022] <... mmap resumed>) = 0x7f770c286000 [pid 5024] <... setpgid resumed>) = 0 [pid 5019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5024] <... openat resumed>) = 3 [pid 5024] write(3, "1000", 4) = 4 [pid 5024] close(3) = 0 [pid 5024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5024] memfd_create("syzkaller", 0) = 3 [pid 5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5019] <... write resumed>) = 2097152 [pid 5022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5019] munmap(0x7f770c286000, 2097152 [pid 5024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5019] <... munmap resumed>) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5019] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5019] close(3) = 0 [pid 5019] mkdir("./file1", 0777 [pid 5023] <... write resumed>) = 2097152 [pid 5019] <... mkdir resumed>) = 0 [pid 5020] <... write resumed>) = 2097152 [pid 5019] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5018] <... write resumed>) = 2097152 [ 57.986934][ T5019] loop1: detected capacity change from 0 to 4096 [ 58.024121][ T5019] ======================================================= [pid 5024] <... write resumed>) = 2097152 [pid 5023] munmap(0x7f770c286000, 2097152 [pid 5022] <... write resumed>) = 2097152 [pid 5018] munmap(0x7f770c286000, 2097152 [pid 5024] munmap(0x7f770c286000, 2097152 [pid 5023] <... munmap resumed>) = 0 [pid 5022] munmap(0x7f770c286000, 2097152 [pid 5020] munmap(0x7f770c286000, 2097152 [pid 5018] <... munmap resumed>) = 0 [pid 5024] <... munmap resumed>) = 0 [pid 5023] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5020] <... munmap resumed>) = 0 [pid 5023] <... openat resumed>) = 4 [pid 5023] ioctl(4, LOOP_SET_FD, 3 [pid 5022] <... munmap resumed>) = 0 [pid 5024] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5022] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5020] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5018] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5024] <... openat resumed>) = 4 [pid 5022] <... openat resumed>) = 4 [pid 5020] <... openat resumed>) = 4 [pid 5018] <... openat resumed>) = 4 [pid 5024] ioctl(4, LOOP_SET_FD, 3 [pid 5022] ioctl(4, LOOP_SET_FD, 3 [pid 5020] ioctl(4, LOOP_SET_FD, 3 [ 58.024121][ T5019] WARNING: The mand mount option has been deprecated and [ 58.024121][ T5019] and is ignored by this kernel. Remove the mand [ 58.024121][ T5019] option from the mount to silence this warning. [ 58.024121][ T5019] ======================================================= [ 58.068178][ T5023] loop5: detected capacity change from 0 to 4096 [ 58.078341][ T5020] loop3: detected capacity change from 0 to 4096 [pid 5018] ioctl(4, LOOP_SET_FD, 3 [pid 5020] <... ioctl resumed>) = 0 [pid 5023] <... ioctl resumed>) = 0 [pid 5023] close(3) = 0 [pid 5023] mkdir("./file1", 0777 [pid 5020] close(3) = 0 [pid 5020] mkdir("./file1", 0777 [pid 5023] <... mkdir resumed>) = 0 [pid 5023] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5020] <... mkdir resumed>) = 0 [pid 5020] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5022] <... ioctl resumed>) = 0 [pid 5022] close(3 [pid 5018] <... ioctl resumed>) = 0 [pid 5024] <... ioctl resumed>) = 0 [pid 5022] <... close resumed>) = 0 [pid 5018] close(3 [pid 5024] close(3 [pid 5022] mkdir("./file1", 0777 [pid 5018] <... close resumed>) = 0 [pid 5024] <... close resumed>) = 0 [pid 5022] <... mkdir resumed>) = 0 [ 58.078657][ T5024] loop4: detected capacity change from 0 to 4096 [ 58.092908][ T5022] loop2: detected capacity change from 0 to 4096 [ 58.100405][ T5018] loop0: detected capacity change from 0 to 4096 [ 58.110831][ T5020] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 58.123487][ T5023] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5018] mkdir("./file1", 0777 [pid 5024] mkdir("./file1", 0777 [pid 5022] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5018] <... mkdir resumed>) = 0 [pid 5024] <... mkdir resumed>) = 0 [pid 5018] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 58.124164][ T5019] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 58.146140][ T5020] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.156101][ T5018] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 58.156359][ T5022] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 58.176810][ T5024] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5024] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5020] <... mount resumed>) = 0 [ 58.177819][ T5018] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.199035][ T5023] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.212214][ T5019] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.221248][ T5022] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5020] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5020] chdir("./file1") = 0 [pid 5020] ioctl(4, LOOP_CLR_FD) = 0 [pid 5020] close(4) = 0 [ 58.229809][ T5027] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.235364][ T5024] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 58.268496][ T5028] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.271746][ T5026] udevd[5026]: incorrect nilfs2 checksum on /dev/loop4 [pid 5023] <... mount resumed>) = 0 [pid 5020] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5019] <... mount resumed>) = 0 [pid 5023] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5023] chdir("./file1") = 0 [pid 5023] ioctl(4, LOOP_CLR_FD) = 0 [pid 5023] close(4) = 0 [pid 5023] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 58.283600][ T5029] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.298526][ T5020] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.300026][ T5023] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5019] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5024] <... mount resumed>) = 0 [pid 5019] chdir("./file1" [pid 5018] <... mount resumed>) = 0 [pid 5022] <... mount resumed>) = 0 [ 58.336278][ T5030] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.348946][ T5020] Remounting filesystem read-only [ 58.356040][ T5031] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.357119][ T5032] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.378224][ T5020] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5022] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5024] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5022] <... openat resumed>) = 3 [pid 5019] <... chdir resumed>) = 0 [pid 5018] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5022] chdir("./file1") = 0 [pid 5022] ioctl(4, LOOP_CLR_FD) = 0 [pid 5022] close(4) = 0 [pid 5022] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5024] <... openat resumed>) = 3 [pid 5019] ioctl(4, LOOP_CLR_FD [pid 5018] <... openat resumed>) = 3 [pid 5024] chdir("./file1" [pid 5019] <... ioctl resumed>) = 0 [pid 5018] chdir("./file1" [pid 5024] <... chdir resumed>) = 0 [pid 5019] close(4 [pid 5018] <... chdir resumed>) = 0 [ 58.384480][ T5023] Remounting filesystem read-only [ 58.398290][ T5022] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.404420][ T5023] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 58.419971][ T5020] NILFS (loop3): repaired inode bitmap for reserved inodes [ 58.424483][ T5023] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5024] ioctl(4, LOOP_CLR_FD [pid 5019] <... close resumed>) = 0 [pid 5018] ioctl(4, LOOP_CLR_FD [pid 5024] <... ioctl resumed>) = 0 [pid 5018] <... ioctl resumed>) = 0 [pid 5019] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5020] <... openat resumed>) = -1 EIO (Input/output error) [pid 5020] exit_group(0) = ? [pid 5024] close(4 [pid 5018] close(4) = 0 [pid 5024] <... close resumed>) = 0 [ 58.432825][ T5020] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.455449][ T5022] Remounting filesystem read-only [ 58.463594][ T5019] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5018] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5024] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5020] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5020, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./0/binderfs") = 0 [ 58.463703][ T5018] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.495398][ T5024] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.497325][ T5019] Remounting filesystem read-only [ 58.518094][ T5022] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 58.523089][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 58.526995][ T5024] Remounting filesystem read-only [ 58.537527][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 58.538913][ T5022] NILFS (loop2): repaired inode bitmap for reserved inodes [ 58.554928][ T5022] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.572180][ T5024] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 58.580864][ T5019] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 58.581285][ T5018] Remounting filesystem read-only [ 58.589926][ T5023] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.594618][ T5024] NILFS (loop4): repaired inode bitmap for reserved inodes [ 58.618428][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 58.628293][ T5018] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5015] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5022] <... openat resumed>) = -1 EIO (Input/output error) [ 58.630605][ T5019] NILFS (loop1): repaired inode bitmap for reserved inodes [ 58.637382][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 58.652521][ T5018] NILFS (loop0): repaired inode bitmap for reserved inodes [ 58.653612][ T5019] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5022] exit_group(0 [pid 5023] <... openat resumed>) = -1 EIO (Input/output error) [pid 5022] <... exit_group resumed>) = ? [pid 5023] exit_group(0 [pid 5022] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5022, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5014] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./0/binderfs") = 0 [pid 5014] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5023] <... exit_group resumed>) = ? [pid 5023] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5023, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5017] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 58.661598][ T5018] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.706098][ T5024] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 58.725483][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 58.726045][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5017] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./0/binderfs") = 0 [pid 5017] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5024] <... openat resumed>) = -1 EIO (Input/output error) [pid 5024] exit_group(0) = ? [pid 5018] <... openat resumed>) = -1 EIO (Input/output error) [pid 5019] <... openat resumed>) = -1 EIO (Input/output error) [pid 5019] exit_group(0) = ? [pid 5024] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5024, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./0/binderfs") = 0 [pid 5016] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 58.733099][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 58.742528][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 58.758967][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 58.774476][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5018] exit_group(0) = ? [pid 5015] <... umount2 resumed>) = 0 [pid 5019] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5019, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5018] +++ exited with 0 +++ [pid 5013] unlink("./0/binderfs" [pid 5015] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... unlink resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] newfstatat(AT_FDCWD, "./0/file1", [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5018, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [ 58.786556][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 58.793709][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 58.794950][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 58.812731][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 58.813501][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 58.820682][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 4 [pid 5012] newfstatat(3, "", [pid 5015] newfstatat(4, "", [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] close(4 [pid 5014] <... umount2 resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 58.835193][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 58.835884][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 58.855717][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 58.866028][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 58.873452][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 58.877056][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5015] <... close resumed>) = 0 [pid 5014] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5015] rmdir("./0/file1" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./0/file1", [pid 5012] unlink("./0/binderfs" [pid 5015] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 58.882713][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 58.891445][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 58.902196][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 58.903987][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 58.910395][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 58.919275][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 58.931783][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... unlink resumed>) = 0 [pid 5015] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] rmdir("./0") = 0 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] mkdir("./1", 0777 [pid 5014] getdents64(4, [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... mkdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] close(4 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] rmdir("./0/file1" [pid 5016] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] close(3 [pid 5016] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(3, [pid 5015] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5033 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./0" [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4 [pid 5014] <... rmdir resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./0/file1" [pid 5014] mkdir("./1", 0777) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./0" [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 ./strace-static-x86_64: Process 5033 attached [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5033] set_robust_list(0x555556b87660, 24 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5033] <... set_robust_list resumed>) = 0 [pid 5014] close(3 [pid 5033] chdir("./1" [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5033] <... chdir resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5034 [pid 5033] <... prctl resumed>) = 0 [pid 5033] setpgid(0, 0./strace-static-x86_64: Process 5034 attached [pid 5017] <... umount2 resumed>) = 0 [pid 5016] mkdir("./1", 0777 [pid 5013] <... umount2 resumed>) = 0 [pid 5034] set_robust_list(0x555556b87660, 24 [pid 5033] <... setpgid resumed>) = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5013] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... set_robust_list resumed>) = 0 [pid 5034] chdir("./1" [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] <... chdir resumed>) = 0 [pid 5033] <... openat resumed>) = 3 [pid 5016] <... openat resumed>) = 3 [pid 5013] newfstatat(AT_FDCWD, "./0/file1", [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] write(3, "1000", 4 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5034] <... prctl resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] setpgid(0, 0) = 0 [pid 5033] <... write resumed>) = 4 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] close(3 [pid 5016] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5033] symlink("/dev/binderfs", "./binderfs" [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5034] <... openat resumed>) = 3 [pid 5033] <... symlink resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5034] write(3, "1000", 4 [pid 5013] newfstatat(4, "", [pid 5034] <... write resumed>) = 4 [pid 5034] close(3 [pid 5033] memfd_create("syzkaller", 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 58.940853][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 58.968125][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5034] <... close resumed>) = 0 [pid 5033] <... memfd_create resumed>) = 3 [pid 5013] getdents64(4, [pid 5034] symlink("/dev/binderfs", "./binderfs" [pid 5033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5035 [pid 5034] <... symlink resumed>) = 0 [pid 5033] <... mmap resumed>) = 0x7f770c286000 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5034] memfd_create("syzkaller", 0 [pid 5017] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] <... memfd_create resumed>) = 3 [pid 5013] getdents64(4, [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] close(4 [pid 5034] <... mmap resumed>) = 0x7f770c286000 [pid 5017] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] <... close resumed>) = 0 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./0/file1") = 0 ./strace-static-x86_64: Process 5035 attached [pid 5017] getdents64(3, [pid 5035] set_robust_list(0x555556b87660, 24 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5035] <... set_robust_list resumed>) = 0 [pid 5017] close(3 [pid 5035] chdir("./1" [pid 5017] <... close resumed>) = 0 [pid 5035] <... chdir resumed>) = 0 [pid 5017] rmdir("./0" [pid 5035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... rmdir resumed>) = 0 [pid 5035] <... prctl resumed>) = 0 [pid 5017] mkdir("./1", 0777 [pid 5035] setpgid(0, 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5035] <... setpgid resumed>) = 0 [pid 5035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] rmdir("./0/file1" [pid 5035] <... openat resumed>) = 3 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] <... rmdir resumed>) = 0 [pid 5035] write(3, "1000", 4 [pid 5017] <... openat resumed>) = 3 [pid 5035] <... write resumed>) = 4 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5013] getdents64(3, [pid 5035] close(3 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5035] <... close resumed>) = 0 [pid 5017] close(3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5035] symlink("/dev/binderfs", "./binderfs" [pid 5017] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5035] <... symlink resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] rmdir("./0" [pid 5035] memfd_create("syzkaller", 0) = 3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5036 [pid 5035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5035] <... mmap resumed>) = 0x7f770c286000 [pid 5013] mkdir("./1", 0777 [pid 5034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5036 attached [pid 5013] close(3 [pid 5036] set_robust_list(0x555556b87660, 24 [pid 5013] <... close resumed>) = 0 [pid 5036] <... set_robust_list resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5036] chdir("./1") = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5037 [pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5036] setpgid(0, 0) = 0 [pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5037 attached [pid 5036] <... openat resumed>) = 3 [pid 5036] write(3, "1000", 4) = 4 [pid 5037] set_robust_list(0x555556b87660, 24 [pid 5036] close(3) = 0 [pid 5037] <... set_robust_list resumed>) = 0 [ 59.039590][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 59.079626][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5036] symlink("/dev/binderfs", "./binderfs" [pid 5037] chdir("./1" [pid 5036] <... symlink resumed>) = 0 [pid 5036] memfd_create("syzkaller", 0 [pid 5037] <... chdir resumed>) = 0 [pid 5037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5036] <... memfd_create resumed>) = 3 [pid 5037] <... prctl resumed>) = 0 [pid 5036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5037] setpgid(0, 0 [pid 5036] <... mmap resumed>) = 0x7f770c286000 [pid 5035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5037] <... setpgid resumed>) = 0 [pid 5037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5037] write(3, "1000", 4) = 4 [pid 5037] close(3) = 0 [pid 5037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5037] memfd_create("syzkaller", 0) = 3 [pid 5037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5033] <... write resumed>) = 2097152 [pid 5033] munmap(0x7f770c286000, 2097152) = 0 [ 59.108067][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 59.143802][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5033] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5033] ioctl(4, LOOP_SET_FD, 3 [pid 5037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5035] <... write resumed>) = 2097152 [pid 5034] <... write resumed>) = 2097152 [pid 5035] munmap(0x7f770c286000, 2097152 [pid 5033] <... ioctl resumed>) = 0 [pid 5033] close(3) = 0 [pid 5033] mkdir("./file1", 0777 [pid 5034] munmap(0x7f770c286000, 2097152 [pid 5033] <... mkdir resumed>) = 0 [pid 5034] <... munmap resumed>) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5035] <... munmap resumed>) = 0 [pid 5034] ioctl(4, LOOP_SET_FD, 3 [pid 5033] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5035] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 59.181008][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 59.191121][ T5033] loop3: detected capacity change from 0 to 4096 [pid 5035] ioctl(4, LOOP_SET_FD, 3 [pid 5034] <... ioctl resumed>) = 0 [pid 5034] close(3) = 0 [pid 5034] mkdir("./file1", 0777) = 0 [pid 5034] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5035] <... ioctl resumed>) = 0 [pid 5035] close(3) = 0 [pid 5035] mkdir("./file1", 0777) = 0 [ 59.221809][ T5034] loop2: detected capacity change from 0 to 4096 [ 59.228865][ T5035] loop4: detected capacity change from 0 to 4096 [ 59.240348][ T5033] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.256661][ T5034] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5035] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5036] <... write resumed>) = 2097152 [pid 5036] munmap(0x7f770c286000, 2097152 [pid 5037] <... write resumed>) = 2097152 [pid 5036] <... munmap resumed>) = 0 [pid 5037] munmap(0x7f770c286000, 2097152 [pid 5036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5037] <... munmap resumed>) = 0 [pid 5036] <... openat resumed>) = 4 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5037] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5036] ioctl(4, LOOP_SET_FD, 3 [pid 5037] <... openat resumed>) = 4 [ 59.263123][ T5035] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.287303][ T5033] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.297807][ T5034] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.310174][ T5035] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5037] ioctl(4, LOOP_SET_FD, 3 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./0/file1") = 0 [pid 5012] getdents64(3, [pid 5037] <... ioctl resumed>) = 0 [pid 5036] <... ioctl resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./0") = 0 [pid 5012] mkdir("./1", 0777) = 0 [pid 5037] close(3 [pid 5036] close(3 [pid 5034] <... mount resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5037] <... close resumed>) = 0 [pid 5035] <... mount resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5035] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5035] <... openat resumed>) = 3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5035] chdir("./file1" [pid 5012] close(3 [pid 5035] <... chdir resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5036] <... close resumed>) = 0 [pid 5035] ioctl(4, LOOP_CLR_FD [pid 5034] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5037] mkdir("./file1", 0777 [pid 5036] mkdir("./file1", 0777 [pid 5035] <... ioctl resumed>) = 0 [pid 5034] <... openat resumed>) = 3 [pid 5037] <... mkdir resumed>) = 0 [pid 5035] close(4 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5040 [pid 5037] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5036] <... mkdir resumed>) = 0 [pid 5035] <... close resumed>) = 0 [ 59.324185][ T5036] loop5: detected capacity change from 0 to 4096 [ 59.331900][ T5037] loop1: detected capacity change from 0 to 4096 [ 59.343771][ T5038] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.360562][ T5039] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5034] chdir("./file1" [pid 5036] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5035] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5034] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5040 attached [pid 5040] set_robust_list(0x555556b87660, 24) = 0 [pid 5040] chdir("./1") = 0 [pid 5040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5040] setpgid(0, 0) = 0 [ 59.379462][ T5037] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.380596][ T5035] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.405938][ T5036] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.416123][ T5041] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5034] ioctl(4, LOOP_CLR_FD) = 0 [pid 5034] close(4) = 0 [pid 5034] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5040] write(3, "1000", 4) = 4 [pid 5040] close(3) = 0 [pid 5040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5040] memfd_create("syzkaller", 0) = 3 [pid 5040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5033] <... mount resumed>) = 0 [pid 5033] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5033] chdir("./file1") = 0 [pid 5033] ioctl(4, LOOP_CLR_FD) = 0 [pid 5033] close(4) = 0 [ 59.428136][ T5036] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.428288][ T5037] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.452693][ T5035] Remounting filesystem read-only [ 59.458200][ T5034] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.475249][ T5034] Remounting filesystem read-only [ 59.485894][ T5033] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.501415][ T5035] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 59.513001][ T5034] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 59.514026][ T5033] Remounting filesystem read-only [ 59.527230][ T5033] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5033] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EIO (Input/output error) [pid 5033] exit_group(0) = ? [pid 5033] +++ exited with 0 +++ [ 59.535706][ T5033] NILFS (loop3): repaired inode bitmap for reserved inodes [ 59.536562][ T5035] NILFS (loop4): repaired inode bitmap for reserved inodes [ 59.543261][ T5033] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.550939][ T5042] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.570171][ T5034] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5035] <... openat resumed>) = -1 EIO (Input/output error) [pid 5035] exit_group(0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5033, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5035] <... exit_group resumed>) = ? [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5035] +++ exited with 0 +++ [pid 5015] <... restart_syscall resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5035, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5015] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] <... restart_syscall resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", [pid 5016] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(3, [pid 5016] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... openat resumed>) = 3 [pid 5015] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(3, "", [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5016] getdents64(3, [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] unlink("./1/binderfs" [pid 5016] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... unlink resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./1/binderfs") = 0 [pid 5016] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5037] <... mount resumed>) = 0 [ 59.583073][ T5035] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.598918][ T5043] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.611296][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 59.612843][ T5034] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5040] <... write resumed>) = 2097152 [pid 5037] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5036] <... mount resumed>) = 0 [pid 5034] <... openat resumed>) = -1 EIO (Input/output error) [pid 5037] <... openat resumed>) = 3 [pid 5036] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5034] exit_group(0 [pid 5040] munmap(0x7f770c286000, 2097152 [pid 5037] chdir("./file1" [pid 5036] <... openat resumed>) = 3 [pid 5034] <... exit_group resumed>) = ? [pid 5040] <... munmap resumed>) = 0 [pid 5037] <... chdir resumed>) = 0 [pid 5036] chdir("./file1" [pid 5034] +++ exited with 0 +++ [pid 5040] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5037] ioctl(4, LOOP_CLR_FD [ 59.624258][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 59.643217][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 59.653415][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 59.661498][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 59.669827][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 59.669826][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5036] <... chdir resumed>) = 0 [pid 5040] <... openat resumed>) = 4 [pid 5037] <... ioctl resumed>) = 0 [pid 5040] ioctl(4, LOOP_SET_FD, 3 [pid 5037] close(4 [pid 5036] ioctl(4, LOOP_CLR_FD [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5037] <... close resumed>) = 0 [pid 5036] <... ioctl resumed>) = 0 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5037] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5036] close(4 [pid 5014] <... restart_syscall resumed>) = 0 [ 59.669849][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 59.677760][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 59.684956][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 59.694478][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 59.701651][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 59.708956][ T5040] loop0: detected capacity change from 0 to 4096 [pid 5040] <... ioctl resumed>) = 0 [pid 5036] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5040] close(3 [pid 5036] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5040] <... close resumed>) = 0 [pid 5040] mkdir("./file1", 0777) = 0 [pid 5040] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 59.745715][ T5037] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.763646][ T5037] Remounting filesystem read-only [ 59.769703][ T5037] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 59.780335][ T5036] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./1/file1", [pid 5014] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./1/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./1") = 0 [pid 5015] mkdir("./2", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5044 [pid 5016] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(3, "", [pid 5016] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5014] getdents64(3, [pid 5016] newfstatat(4, "", [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 59.789670][ T5037] NILFS (loop1): repaired inode bitmap for reserved inodes [ 59.796093][ T5040] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 59.804284][ T5037] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] getdents64(4, [pid 5014] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] close(4 [pid 5014] unlink("./1/binderfs" [pid 5016] <... close resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5016] rmdir("./1/file1" [pid 5014] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5037] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... rmdir resumed>) = 0 [pid 5037] exit_group(0 [pid 5016] getdents64(3, ./strace-static-x86_64: Process 5044 attached [pid 5044] set_robust_list(0x555556b87660, 24) = 0 [pid 5044] chdir("./2") = 0 [pid 5044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5044] setpgid(0, 0) = 0 [pid 5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5037] <... exit_group resumed>) = ? [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5044] <... openat resumed>) = 3 [pid 5037] +++ exited with 0 +++ [pid 5016] close(3 [pid 5044] write(3, "1000", 4) = 4 [pid 5044] close(3) = 0 [pid 5044] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5044] memfd_create("syzkaller", 0) = 3 [pid 5044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./1" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5037, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5016] <... rmdir resumed>) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5013] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] mkdir("./2", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] getdents64(3, [pid 5016] <... openat resumed>) = 3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5016] close(3) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 59.847218][ T5036] Remounting filesystem read-only [ 59.854348][ T5040] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 59.864377][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 59.873422][ T5036] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 59.876491][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] unlink("./1/binderfs" [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5045 [pid 5013] <... unlink resumed>) = 0 [pid 5013] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5045 attached [pid 5045] set_robust_list(0x555556b87660, 24) = 0 [pid 5045] chdir("./2") = 0 [ 59.905801][ T5036] NILFS (loop5): repaired inode bitmap for reserved inodes [ 59.921206][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 59.931597][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 59.941758][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5040] <... mount resumed>) = 0 [pid 5040] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5040] chdir("./file1") = 0 [pid 5040] ioctl(4, LOOP_CLR_FD) = 0 [pid 5040] close(4) = 0 [pid 5040] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5045] <... prctl resumed>) = 0 [ 59.945432][ T5046] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.950163][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 59.964442][ T5040] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 59.976033][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 59.982999][ T5036] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5045] setpgid(0, 0 [pid 5044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5045] <... setpgid resumed>) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "1000", 4) = 4 [pid 5045] close(3) = 0 [pid 5045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5045] memfd_create("syzkaller", 0) = 3 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 59.995245][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5044] <... write resumed>) = 2097152 [pid 5044] munmap(0x7f770c286000, 2097152) = 0 [pid 5044] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5044] close(3) = 0 [pid 5044] mkdir("./file1", 0777) = 0 [pid 5036] <... openat resumed>) = -1 EIO (Input/output error) [pid 5036] exit_group(0) = ? [pid 5036] +++ exited with 0 +++ [ 60.036049][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 60.040377][ T5040] Remounting filesystem read-only [ 60.056621][ T5044] loop3: detected capacity change from 0 to 4096 [ 60.064002][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 60.069408][ T5044] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5044] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5036, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5017] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 60.076163][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 60.083703][ T5040] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 60.095615][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 60.106774][ T5044] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 60.117772][ T5040] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5045] <... write resumed>) = 2097152 [pid 5017] unlink("./1/binderfs") = 0 [pid 5017] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] munmap(0x7f770c286000, 2097152) = 0 [pid 5045] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5045] ioctl(4, LOOP_SET_FD, 3 [pid 5040] <... openat resumed>) = -1 EIO (Input/output error) [pid 5040] exit_group(0) = ? [pid 5040] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5040, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5044] <... mount resumed>) = 0 [pid 5044] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5044] chdir("./file1") = 0 [pid 5044] ioctl(4, LOOP_CLR_FD) = 0 [pid 5044] close(4) = 0 [pid 5044] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 60.125978][ T5040] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.154805][ T5045] loop4: detected capacity change from 0 to 4096 [ 60.162388][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5012] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] <... ioctl resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5045] close(3 [pid 5014] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5045] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 5045] mkdir("./file1", 0777 [pid 5014] newfstatat(AT_FDCWD, "./1/file1", [pid 5013] newfstatat(AT_FDCWD, "./1/file1", [pid 5012] newfstatat(3, "", [pid 5045] <... mkdir resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(3, [pid 5013] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... openat resumed>) = 4 [pid 5013] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 60.177671][ T5044] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.191905][ T5048] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.195095][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 60.221022][ T5044] Remounting filesystem read-only [ 60.226087][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5014] newfstatat(4, "", [pid 5017] <... umount2 resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5012] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5014] getdents64(4, [pid 5013] newfstatat(4, "", [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] unlink("./1/binderfs" [pid 5017] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(4, [pid 5013] getdents64(4, [pid 5012] <... unlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] newfstatat(AT_FDCWD, "./1/file1", [pid 5014] close(4 [pid 5013] getdents64(4, [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 60.226110][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 60.226130][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 60.226144][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 60.259017][ T5045] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 60.270382][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 60.276421][ T5044] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5014] rmdir("./1/file1" [pid 5013] close(4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] getdents64(3, [pid 5013] rmdir("./1/file1" [pid 5017] <... openat resumed>) = 4 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5014] close(3 [pid 5013] getdents64(3, [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] getdents64(4, [pid 5014] rmdir("./1" [pid 5013] close(3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5014] mkdir("./2", 0777 [pid 5013] rmdir("./1" [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5017] close(4 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] mkdir("./2", 0777 [pid 5017] <... close resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5017] rmdir("./1/file1" [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] <... rmdir resumed>) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... openat resumed>) = 3 [pid 5017] getdents64(3, [pid 5014] close(3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] close(3./strace-static-x86_64: Process 5049 attached [pid 5017] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5049] set_robust_list(0x555556b87660, 24 [pid 5017] rmdir("./1" [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5049 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5049] <... set_robust_list resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5049] chdir("./2" [pid 5017] mkdir("./2", 0777 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5050 [ 60.286181][ T5044] NILFS (loop3): repaired inode bitmap for reserved inodes [ 60.291401][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 60.293885][ T5044] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.318899][ T5045] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) ./strace-static-x86_64: Process 5050 attached [pid 5049] <... chdir resumed>) = 0 [pid 5044] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... mkdir resumed>) = 0 [pid 5050] set_robust_list(0x555556b87660, 24 [pid 5049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5044] exit_group(0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5050] <... set_robust_list resumed>) = 0 [pid 5049] <... prctl resumed>) = 0 [pid 5044] <... exit_group resumed>) = ? [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5050] chdir("./2" [pid 5049] setpgid(0, 0 [pid 5044] +++ exited with 0 +++ [pid 5017] <... close resumed>) = 0 [pid 5050] <... chdir resumed>) = 0 [pid 5049] <... setpgid resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5050] <... prctl resumed>) = 0 [pid 5049] <... openat resumed>) = 3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5051 [ 60.339648][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 60.347949][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 60.356262][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 60.365210][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5050] setpgid(0, 0 [pid 5049] write(3, "1000", 4 [pid 5045] <... mount resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5051 attached [pid 5050] <... setpgid resumed>) = 0 [pid 5049] <... write resumed>) = 4 [pid 5045] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5051] set_robust_list(0x555556b87660, 24 [pid 5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5049] close(3 [pid 5045] <... openat resumed>) = 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5051] <... set_robust_list resumed>) = 0 [pid 5050] <... openat resumed>) = 3 [pid 5049] <... close resumed>) = 0 [pid 5045] chdir("./file1" [pid 5015] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(AT_FDCWD, "./1/file1", [pid 5051] chdir("./2" [pid 5050] write(3, "1000", 4 [pid 5049] symlink("/dev/binderfs", "./binderfs" [pid 5045] <... chdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5051] <... chdir resumed>) = 0 [pid 5050] <... write resumed>) = 4 [pid 5049] <... symlink resumed>) = 0 [pid 5045] ioctl(4, LOOP_CLR_FD [pid 5015] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5050] close(3 [pid 5049] memfd_create("syzkaller", 0 [pid 5045] <... ioctl resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5050] <... close resumed>) = 0 [pid 5049] <... memfd_create resumed>) = 3 [pid 5045] close(4 [pid 5015] newfstatat(3, "", [pid 5012] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5051] <... prctl resumed>) = 0 [pid 5050] symlink("/dev/binderfs", "./binderfs" [pid 5049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5045] <... close resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... openat resumed>) = 4 [pid 5051] setpgid(0, 0 [pid 5050] <... symlink resumed>) = 0 [pid 5049] <... mmap resumed>) = 0x7f770c286000 [pid 5045] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] getdents64(3, [pid 5012] newfstatat(4, "", [pid 5051] <... setpgid resumed>) = 0 [pid 5050] memfd_create("syzkaller", 0 [pid 5051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5050] <... memfd_create resumed>) = 3 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5051] <... openat resumed>) = 3 [pid 5051] write(3, "1000", 4) = 4 [pid 5051] close(3) = 0 [pid 5051] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5051] memfd_create("syzkaller", 0) = 3 [pid 5051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(4, [pid 5050] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5012] getdents64(4, [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] unlink("./2/binderfs" [pid 5012] close(4 [pid 5015] <... unlink resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5015] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] rmdir("./1/file1") = 0 [ 60.392730][ T5052] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.425394][ T5045] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./1") = 0 [pid 5012] mkdir("./2", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] close(3) = 0 [pid 5051] <... write resumed>) = 2097152 [ 60.470273][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 60.485852][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 60.494147][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5051] munmap(0x7f770c286000, 2097152) = 0 [pid 5051] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5053 ./strace-static-x86_64: Process 5053 attached [pid 5053] set_robust_list(0x555556b87660, 24 [pid 5051] ioctl(4, LOOP_SET_FD, 3 [pid 5053] <... set_robust_list resumed>) = 0 [pid 5053] chdir("./2") = 0 [pid 5053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 60.534037][ T5045] Remounting filesystem read-only [ 60.542884][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 60.556031][ T5045] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 60.557843][ T5051] loop5: detected capacity change from 0 to 4096 [ 60.563991][ T5045] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5053] setpgid(0, 0) = 0 [pid 5053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5053] write(3, "1000", 4) = 4 [pid 5053] close(3) = 0 [pid 5053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5053] memfd_create("syzkaller", 0) = 3 [pid 5053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5049] <... write resumed>) = 2097152 [pid 5015] <... umount2 resumed>) = 0 [pid 5050] <... write resumed>) = 2097152 [pid 5049] munmap(0x7f770c286000, 2097152 [pid 5051] <... ioctl resumed>) = 0 [pid 5051] close(3) = 0 [ 60.586773][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 60.595635][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5051] mkdir("./file1", 0777) = 0 [pid 5049] <... munmap resumed>) = 0 [pid 5050] munmap(0x7f770c286000, 2097152 [pid 5049] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5045] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5050] <... munmap resumed>) = 0 [pid 5049] <... openat resumed>) = 4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5045] exit_group(0 [pid 5050] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5049] ioctl(4, LOOP_SET_FD, 3 [pid 5045] <... exit_group resumed>) = ? [pid 5015] newfstatat(AT_FDCWD, "./2/file1", [pid 5051] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5050] <... openat resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5050] ioctl(4, LOOP_SET_FD, 3 [pid 5045] +++ exited with 0 +++ [pid 5015] <... openat resumed>) = 4 [pid 5049] <... ioctl resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=9 /* 0.09 s */} --- [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, [pid 5016] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(4, [pid 5016] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5015] close(4 [pid 5016] newfstatat(3, "", [pid 5015] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] rmdir("./2/file1" [pid 5016] getdents64(3, [pid 5015] <... rmdir resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] getdents64(3, [pid 5016] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(3 [pid 5049] close(3 [pid 5016] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5015] <... close resumed>) = 0 [ 60.625311][ T5045] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.651926][ T5049] loop2: detected capacity change from 0 to 4096 [ 60.662007][ T5050] loop1: detected capacity change from 0 to 4096 [ 60.669089][ T5051] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5050] <... ioctl resumed>) = 0 [pid 5049] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5050] close(3 [pid 5049] mkdir("./file1", 0777 [pid 5015] rmdir("./2" [pid 5050] <... close resumed>) = 0 [pid 5049] <... mkdir resumed>) = 0 [pid 5016] unlink("./2/binderfs" [pid 5050] mkdir("./file1", 0777 [pid 5049] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5051] <... mount resumed>) = 0 [pid 5050] <... mkdir resumed>) = 0 [pid 5016] <... unlink resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5050] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] mkdir("./3", 0777) = 0 [ 60.682033][ T5051] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 60.697603][ T5049] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 60.705381][ T5054] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.720309][ T5050] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5051] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5053] <... write resumed>) = 2097152 [pid 5053] munmap(0x7f770c286000, 2097152) = 0 [pid 5053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5053] ioctl(4, LOOP_SET_FD, 3 [pid 5051] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5051] chdir("./file1" [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5053] <... ioctl resumed>) = 0 [pid 5053] close(3) = 0 [pid 5053] mkdir("./file1", 0777) = 0 [ 60.721870][ T5049] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 60.737256][ T5053] loop0: detected capacity change from 0 to 4096 [ 60.748301][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 60.749036][ T5050] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 60.755775][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 60.769798][ T5053] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5053] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5051] <... chdir resumed>) = 0 [pid 5015] close(3 [pid 5051] ioctl(4, LOOP_CLR_FD) = 0 [pid 5051] close(4) = 0 [pid 5051] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5055 attached [ 60.781885][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 60.793626][ T5051] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 60.805708][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 60.816021][ T5053] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5055] set_robust_list(0x555556b87660, 24 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5055 [pid 5055] <... set_robust_list resumed>) = 0 [pid 5050] <... mount resumed>) = 0 [pid 5055] chdir("./3" [pid 5050] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5055] <... chdir resumed>) = 0 [pid 5050] <... openat resumed>) = 3 [pid 5050] chdir("./file1") = 0 [pid 5050] ioctl(4, LOOP_CLR_FD) = 0 [pid 5050] close(4) = 0 [pid 5050] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 60.834577][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 60.843202][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 60.852830][ T5051] Remounting filesystem read-only [ 60.859003][ T5050] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5055] setpgid(0, 0) = 0 [pid 5055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "1000", 4) = 4 [pid 5055] close(3) = 0 [pid 5055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5055] memfd_create("syzkaller", 0) = 3 [ 60.880954][ T5056] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.909055][ T5051] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 60.923263][ T5050] Remounting filesystem read-only [pid 5055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5049] <... mount resumed>) = 0 [pid 5049] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5049] chdir("./file1") = 0 [pid 5049] ioctl(4, LOOP_CLR_FD) = 0 [ 60.932869][ T5050] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 60.948789][ T5057] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.969492][ T5058] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.969577][ T5050] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5049] close(4 [pid 5055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5053] <... mount resumed>) = 0 [pid 5049] <... close resumed>) = 0 [pid 5053] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5049] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5053] <... openat resumed>) = 3 [pid 5053] chdir("./file1") = 0 [pid 5053] ioctl(4, LOOP_CLR_FD) = 0 [pid 5053] close(4) = 0 [ 60.991554][ T5051] NILFS (loop5): repaired inode bitmap for reserved inodes [ 61.003547][ T5049] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.018462][ T5053] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5053] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./2/file1" [pid 5055] <... write resumed>) = 2097152 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./2") = 0 [pid 5016] mkdir("./3", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5055] munmap(0x7f770c286000, 2097152 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5059 ./strace-static-x86_64: Process 5059 attached [pid 5059] set_robust_list(0x555556b87660, 24) = 0 [pid 5059] chdir("./3") = 0 [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] setpgid(0, 0) = 0 [ 61.025700][ T5051] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.059194][ T5050] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.078323][ T5049] Remounting filesystem read-only [pid 5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5055] <... munmap resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5051] <... openat resumed>) = -1 EIO (Input/output error) [pid 5050] <... openat resumed>) = -1 EIO (Input/output error) [pid 5059] write(3, "1000", 4) = 4 [pid 5059] close(3) = 0 [pid 5059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] memfd_create("syzkaller", 0) = 3 [pid 5059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5055] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5051] exit_group(0 [pid 5050] exit_group(0 [pid 5055] <... openat resumed>) = 4 [pid 5055] ioctl(4, LOOP_SET_FD, 3 [pid 5051] <... exit_group resumed>) = ? [pid 5050] <... exit_group resumed>) = ? [pid 5051] +++ exited with 0 +++ [pid 5050] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5051, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5050, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [ 61.089388][ T5049] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 61.089721][ T5053] Remounting filesystem read-only [ 61.098367][ T5049] NILFS (loop2): repaired inode bitmap for reserved inodes [ 61.111339][ T5049] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.131679][ T5055] loop3: detected capacity change from 0 to 4096 [pid 5055] <... ioctl resumed>) = 0 [pid 5049] <... openat resumed>) = -1 EIO (Input/output error) [pid 5055] close(3 [pid 5049] exit_group(0 [pid 5055] <... close resumed>) = 0 [pid 5049] <... exit_group resumed>) = ? [pid 5017] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5055] mkdir("./file1", 0777 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] newfstatat(3, "", [pid 5013] <... openat resumed>) = 3 [pid 5055] <... mkdir resumed>) = 0 [pid 5049] +++ exited with 0 +++ [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] newfstatat(3, "", [pid 5055] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] getdents64(3, [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5049, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] getdents64(3, [pid 5017] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] newfstatat(AT_FDCWD, "./2/binderfs", [ 61.143994][ T5053] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 61.164249][ T5055] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.164670][ T5053] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5013] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5053] <... openat resumed>) = -1 EIO (Input/output error) [pid 5053] exit_group(0) = ? [pid 5013] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5017] unlink("./2/binderfs" [pid 5014] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5013] unlink("./2/binderfs" [pid 5017] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... unlink resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5053] +++ exited with 0 +++ [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./2/binderfs" [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5053, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5014] <... unlink resumed>) = 0 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5012] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 61.183057][ T5053] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.209017][ T5055] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 61.209945][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 61.228841][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 61.236505][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./2/binderfs") = 0 [pid 5012] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5055] <... mount resumed>) = 0 [pid 5055] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5055] chdir("./file1") = 0 [pid 5055] ioctl(4, LOOP_CLR_FD) = 0 [pid 5055] close(4) = 0 [ 61.236895][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 61.243280][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 61.251591][ T5055] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.265611][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 61.277017][ T5060] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5055] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5059] <... write resumed>) = 2097152 [pid 5059] munmap(0x7f770c286000, 2097152) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5059] ioctl(4, LOOP_SET_FD, 3) = 0 [ 61.283076][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 61.302237][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 61.314071][ T5059] loop4: detected capacity change from 0 to 4096 [ 61.321186][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 61.329044][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 61.337406][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5059] close(3) = 0 [pid 5059] mkdir("./file1", 0777) = 0 [ 61.345401][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 61.347165][ T5055] Remounting filesystem read-only [ 61.353984][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 61.359371][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 61.367124][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 61.374297][ T5055] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 61.381848][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 61.389173][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 61.396318][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 61.403511][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 61.410330][ T5059] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.417737][ T5055] NILFS (loop3): repaired inode bitmap for reserved inodes [ 61.428227][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 61.435457][ T5055] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 61.459315][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 61.475913][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 61.483070][ T5059] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5059] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./2/file1") = 0 [pid 5014] getdents64(3, [pid 5013] <... umount2 resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5055] <... openat resumed>) = -1 EIO (Input/output error) [ 61.486051][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 61.493755][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5014] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./2/file1", [pid 5012] <... umount2 resumed>) = 0 [pid 5055] exit_group(0) = ? [pid 5017] <... umount2 resumed>) = 0 [pid 5014] rmdir("./2" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... mount resumed>) = 0 [pid 5055] +++ exited with 0 +++ [pid 5017] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... rmdir resumed>) = 0 [pid 5013] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5055, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5059] <... openat resumed>) = 3 [pid 5017] newfstatat(AT_FDCWD, "./2/file1", [pid 5014] mkdir("./3", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./2/file1", [pid 5059] chdir("./file1" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... openat resumed>) = 4 [pid 5012] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(4, "", [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... chdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] ioctl(4, LOOP_CLR_FD [pid 5017] <... openat resumed>) = 4 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] getdents64(4, [pid 5012] <... openat resumed>) = 4 [pid 5059] <... ioctl resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 61.564625][ T5061] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.593373][ T5059] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] newfstatat(4, "", [pid 5059] close(4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... openat resumed>) = 3 [pid 5013] getdents64(4, [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] getdents64(4, [pid 5059] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] close(4 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, [pid 5015] <... openat resumed>) = 3 [pid 5013] <... close resumed>) = 0 [pid 5012] getdents64(4, [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] newfstatat(3, "", [pid 5013] rmdir("./2/file1" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] close(4 [pid 5017] <... close resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] getdents64(3, [pid 5012] <... close resumed>) = 0 [pid 5017] rmdir("./2/file1" [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] rmdir("./2/file1" [pid 5017] <... rmdir resumed>) = 0 [pid 5015] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3 [pid 5012] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5012] getdents64(3, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5013] rmdir("./2" [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] close(3 [pid 5017] <... close resumed>) = 0 [pid 5015] unlink("./3/binderfs" [pid 5013] mkdir("./3", 0777 [pid 5012] <... close resumed>) = 0 [pid 5017] rmdir("./2" [pid 5015] <... unlink resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5012] rmdir("./2" [pid 5017] <... rmdir resumed>) = 0 [pid 5015] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] <... rmdir resumed>) = 0 [pid 5017] mkdir("./3", 0777 [pid 5013] <... openat resumed>) = 3 [pid 5012] mkdir("./3", 0777 [pid 5017] <... mkdir resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5012] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] <... openat resumed>) = 3 [pid 5013] close(3 [pid 5012] <... openat resumed>) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... close resumed>) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5014] close(3 [pid 5012] close(3 [pid 5017] <... close resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5062 [pid 5012] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5063 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5064 ./strace-static-x86_64: Process 5062 attached [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5065 [pid 5062] set_robust_list(0x555556b87660, 24./strace-static-x86_64: Process 5064 attached ) = 0 [pid 5064] set_robust_list(0x555556b87660, 24 [pid 5062] chdir("./3" [pid 5064] <... set_robust_list resumed>) = 0 [pid 5062] <... chdir resumed>) = 0 [pid 5064] chdir("./3" [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... chdir resumed>) = 0 [pid 5062] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5065 attached [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] setpgid(0, 0 [pid 5064] <... prctl resumed>) = 0 [pid 5062] <... setpgid resumed>) = 0 [pid 5064] setpgid(0, 0 [pid 5065] set_robust_list(0x555556b87660, 24 [pid 5064] <... setpgid resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5062] write(3, "1000", 4./strace-static-x86_64: Process 5063 attached [pid 5065] chdir("./3" [pid 5064] write(3, "1000", 4 [pid 5062] <... write resumed>) = 4 [pid 5064] <... write resumed>) = 4 [pid 5062] close(3 [pid 5065] <... chdir resumed>) = 0 [pid 5064] close(3 [pid 5063] set_robust_list(0x555556b87660, 24 [pid 5062] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5062] symlink("/dev/binderfs", "./binderfs" [pid 5065] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... set_robust_list resumed>) = 0 [pid 5064] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... symlink resumed>) = 0 [pid 5065] <... prctl resumed>) = 0 [pid 5064] <... symlink resumed>) = 0 [pid 5063] chdir("./3" [ 61.610237][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 61.624016][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 61.653127][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5062] memfd_create("syzkaller", 0 [pid 5065] setpgid(0, 0 [pid 5064] memfd_create("syzkaller", 0 [pid 5063] <... chdir resumed>) = 0 [pid 5062] <... memfd_create resumed>) = 3 [pid 5064] <... memfd_create resumed>) = 3 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... mmap resumed>) = 0x7f770c286000 [pid 5064] <... mmap resumed>) = 0x7f770c286000 [pid 5065] <... setpgid resumed>) = 0 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... prctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] setpgid(0, 0) = 0 [pid 5065] write(3, "1000", 4 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... write resumed>) = 4 [pid 5065] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5063] write(3, "1000", 4 [pid 5065] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... write resumed>) = 4 [pid 5065] <... symlink resumed>) = 0 [pid 5063] close(3 [pid 5065] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5065] <... memfd_create resumed>) = 3 [pid 5063] symlink("/dev/binderfs", "./binderfs" [pid 5065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... symlink resumed>) = 0 [pid 5065] <... mmap resumed>) = 0x7f770c286000 [pid 5063] memfd_create("syzkaller", 0 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... memfd_create resumed>) = 3 [ 61.653223][ T5059] Remounting filesystem read-only [ 61.668353][ T5059] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 61.685633][ T5059] NILFS (loop4): repaired inode bitmap for reserved inodes [ 61.693814][ T5059] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5059] <... openat resumed>) = -1 EIO (Input/output error) [pid 5059] exit_group(0) = ? [ 61.731309][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [pid 5065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... write resumed>) = 2097152 [pid 5059] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5059, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5016] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./3/binderfs") = 0 [pid 5016] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] munmap(0x7f770c286000, 2097152 [pid 5064] <... write resumed>) = 2097152 [pid 5064] munmap(0x7f770c286000, 2097152) = 0 [pid 5062] <... munmap resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5064] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 61.775759][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 61.796597][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5062] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... openat resumed>) = 4 [pid 5064] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./file1", 0777) = 0 [pid 5062] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5065] <... write resumed>) = 2097152 [pid 5065] munmap(0x7f770c286000, 2097152) = 0 [pid 5063] <... write resumed>) = 2097152 [ 61.821965][ T5062] loop1: detected capacity change from 0 to 4096 [ 61.829972][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 61.835615][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 61.838981][ T5064] loop0: detected capacity change from 0 to 4096 [ 61.845662][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 61.867989][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] munmap(0x7f770c286000, 2097152 [pid 5064] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] close(3) = 0 [pid 5064] mkdir("./file1", 0777 [pid 5063] <... munmap resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 61.868944][ T5062] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.876244][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 61.904854][ T5065] loop2: detected capacity change from 0 to 4096 [ 61.906102][ T5064] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5065] close(3 [pid 5063] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./3/file1" [pid 5065] mkdir("./file1", 0777) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5065] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] rmdir("./3") = 0 [pid 5015] mkdir("./4", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5066] set_robust_list(0x555556b87660, 24) = 0 [pid 5066] chdir("./4") = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs") = 0 [ 61.920278][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 61.931631][ T5063] loop5: detected capacity change from 0 to 4096 [ 61.943858][ T5065] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.966974][ T5062] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5066] memfd_create("syzkaller", 0) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5063] close(3) = 0 [pid 5063] mkdir("./file1", 0777) = 0 [pid 5063] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 61.977083][ T5064] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 61.980644][ T5065] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 62.010122][ T5063] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] chdir("./file1") = 0 [pid 5062] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] close(4) = 0 [ 62.035161][ T5067] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.055893][ T5062] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.073433][ T5063] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5062] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = 0 [pid 5064] <... mount resumed>) = 0 [pid 5016] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... write resumed>) = 2097152 [pid 5064] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5063] <... mount resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5064] chdir("./file1") = 0 [pid 5064] ioctl(4, LOOP_CLR_FD) = 0 [pid 5064] close(4) = 0 [pid 5064] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5066] munmap(0x7f770c286000, 2097152 [pid 5063] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] newfstatat(AT_FDCWD, "./3/file1", [pid 5066] <... munmap resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5066] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... openat resumed>) = 3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] chdir("./file1" [pid 5016] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... chdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(4, LOOP_CLR_FD [pid 5016] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... ioctl resumed>) = 0 [pid 5016] <... openat resumed>) = 4 [ 62.077285][ T5068] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.102388][ T5069] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.115993][ T5064] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5063] close(4) = 0 [pid 5016] newfstatat(4, "", [pid 5063] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5065] <... mount resumed>) = 0 [pid 5016] close(4 [pid 5065] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5016] rmdir("./3/file1" [pid 5065] chdir("./file1" [pid 5016] <... rmdir resumed>) = 0 [pid 5065] <... chdir resumed>) = 0 [pid 5016] getdents64(3, [pid 5065] ioctl(4, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5016] close(3 [pid 5066] <... ioctl resumed>) = 0 [ 62.139153][ T5062] Remounting filesystem read-only [ 62.139503][ T5063] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.145348][ T5066] loop3: detected capacity change from 0 to 4096 [ 62.170142][ T5070] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] close(4 [pid 5016] <... close resumed>) = 0 [pid 5066] close(3) = 0 [pid 5066] mkdir("./file1", 0777 [pid 5065] <... close resumed>) = 0 [pid 5016] rmdir("./3" [pid 5065] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] mkdir("./4", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 62.187356][ T5062] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 62.198461][ T5064] Remounting filesystem read-only [ 62.199196][ T5065] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.209066][ T5062] NILFS (loop1): repaired inode bitmap for reserved inodes [ 62.228929][ T5063] Remounting filesystem read-only [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5071 ./strace-static-x86_64: Process 5071 attached [ 62.234334][ T5064] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 62.239644][ T5063] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 62.244457][ T5064] NILFS (loop0): repaired inode bitmap for reserved inodes [ 62.259132][ T5066] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 62.273333][ T5062] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5071] set_robust_list(0x555556b87660, 24) = 0 [pid 5071] chdir("./4" [pid 5062] <... openat resumed>) = -1 EIO (Input/output error) [pid 5071] <... chdir resumed>) = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] exit_group(0) = ? [pid 5062] +++ exited with 0 +++ [ 62.284153][ T5063] NILFS (loop5): repaired inode bitmap for reserved inodes [ 62.290226][ T5064] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.311348][ T5066] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 62.312605][ T5065] Remounting filesystem read-only [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] setpgid(0, 0 [pid 5013] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... setpgid resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] write(3, "1000", 4 [pid 5013] getdents64(3, [pid 5071] <... write resumed>) = 4 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5071] close(3 [pid 5013] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./3/binderfs") = 0 [pid 5013] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... openat resumed>) = -1 EIO (Input/output error) [pid 5064] <... openat resumed>) = -1 EIO (Input/output error) [pid 5064] exit_group(0) = ? [pid 5064] +++ exited with 0 +++ [ 62.329100][ T5063] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.356677][ T5065] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 62.363860][ T5072] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.370157][ T5065] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5071] <... symlink resumed>) = 0 [pid 5066] <... mount resumed>) = 0 [pid 5065] <... openat resumed>) = -1 EIO (Input/output error) [pid 5063] exit_group(0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5071] memfd_create("syzkaller", 0 [pid 5066] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5065] exit_group(0 [pid 5063] <... exit_group resumed>) = ? [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... memfd_create resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] chdir("./file1" [pid 5065] <... exit_group resumed>) = ? [pid 5063] +++ exited with 0 +++ [pid 5071] <... mmap resumed>) = 0x7f770c286000 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5063, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] +++ exited with 0 +++ [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5012] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... chdir resumed>) = 0 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] ioctl(4, LOOP_CLR_FD [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5065, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5012] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... ioctl resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5066] close(4 [pid 5017] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(3, "", [pid 5066] <... close resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] getdents64(3, [pid 5017] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] getdents64(3, [pid 5012] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 62.388447][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 62.389623][ T5065] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.395332][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5017] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] unlink("./3/binderfs" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... unlink resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5012] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./3/binderfs") = 0 [pid 5017] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./3/binderfs") = 0 [ 62.437823][ T5066] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.445209][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 62.462106][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 62.470296][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 62.483088][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5014] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 62.491932][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 62.491943][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 62.491961][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 62.499800][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 62.507568][ T5066] Remounting filesystem read-only [ 62.514331][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 62.533659][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5071] munmap(0x7f770c286000, 2097152) = 0 [ 62.533700][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 62.544519][ T5066] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 62.548998][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 62.556815][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 62.563914][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 62.572684][ T5066] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5071] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 62.578771][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 62.593506][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 62.594544][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 62.608563][ T5066] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 62.609650][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 62.630499][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5066] <... openat resumed>) = -1 EIO (Input/output error) [pid 5071] close(3) = 0 [pid 5071] mkdir("./file1", 0777) = 0 [pid 5071] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5066] exit_group(0) = ? [pid 5013] close(4) = 0 [pid 5013] rmdir("./3/file1") = 0 [pid 5013] getdents64(3, [pid 5066] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5015] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 62.638296][ T5071] loop4: detected capacity change from 0 to 4096 [ 62.638381][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 62.655784][ T5071] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5015] unlink("./4/binderfs") = 0 [pid 5015] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5013] rmdir("./3") = 0 [pid 5013] mkdir("./4", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5073 [pid 5014] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, ./strace-static-x86_64: Process 5073 attached 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./3/file1" [pid 5073] set_robust_list(0x555556b87660, 24 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./3" [pid 5073] <... set_robust_list resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./4", 0777 [pid 5073] chdir("./4" [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] <... chdir resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5073] <... prctl resumed>) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5073] setpgid(0, 0 [pid 5014] <... close resumed>) = 0 [pid 5073] <... setpgid resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1000", 4) = 4 [pid 5073] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] memfd_create("syzkaller", 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5074 [pid 5073] <... memfd_create resumed>) = 3 [ 62.694053][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 62.702291][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 62.703411][ T5071] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 62.719031][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 62.728378][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 ./strace-static-x86_64: Process 5074 attached [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5074] set_robust_list(0x555556b87660, 24) = 0 [pid 5074] chdir("./4" [pid 5071] <... mount resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... chdir resumed>) = 0 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... openat resumed>) = 3 [pid 5074] <... prctl resumed>) = 0 [pid 5071] chdir("./file1" [pid 5074] setpgid(0, 0 [pid 5071] <... chdir resumed>) = 0 [pid 5074] <... setpgid resumed>) = 0 [pid 5071] ioctl(4, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] close(4) = 0 [pid 5074] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5074] <... write resumed>) = 4 [ 62.757831][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 62.776791][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 62.784791][ T5075] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.796696][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... umount2 resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] memfd_create("syzkaller", 0) = 3 [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5017] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./3/file1") = 0 [ 62.815708][ T5071] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./3") = 0 [pid 5017] mkdir("./4", 0777 [pid 5012] <... umount2 resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5012] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... openat resumed>) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5012] newfstatat(AT_FDCWD, "./3/file1", [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] close(3 [pid 5012] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5076 [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, ./strace-static-x86_64: Process 5076 attached 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5076] set_robust_list(0x555556b87660, 24 [pid 5012] close(4 [pid 5076] <... set_robust_list resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5076] chdir("./4" [pid 5012] rmdir("./3/file1" [pid 5076] <... chdir resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] getdents64(3, [pid 5076] <... prctl resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5076] setpgid(0, 0 [pid 5012] close(3 [pid 5076] <... setpgid resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] rmdir("./3" [pid 5076] <... openat resumed>) = 3 [pid 5012] <... rmdir resumed>) = 0 [pid 5076] write(3, "1000", 4 [pid 5012] mkdir("./4", 0777 [pid 5076] <... write resumed>) = 4 [pid 5012] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5076] symlink("/dev/binderfs", "./binderfs" [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5076] <... symlink resumed>) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] memfd_create("syzkaller", 0 [pid 5012] close(3 [pid 5076] <... memfd_create resumed>) = 3 [pid 5012] <... close resumed>) = 0 [pid 5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... mmap resumed>) = 0x7f770c286000 [pid 5073] <... write resumed>) = 2097152 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5077 [ 62.865997][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 62.889807][ T5071] Remounting filesystem read-only [pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5077 attached [pid 5073] munmap(0x7f770c286000, 2097152 [pid 5077] set_robust_list(0x555556b87660, 24 [pid 5073] <... munmap resumed>) = 0 [pid 5077] <... set_robust_list resumed>) = 0 [pid 5077] chdir("./4") = 0 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] setpgid(0, 0 [pid 5073] <... openat resumed>) = 4 [pid 5077] <... setpgid resumed>) = 0 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... ioctl resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5077] write(3, "1000", 4 [pid 5073] <... close resumed>) = 0 [pid 5077] <... write resumed>) = 4 [pid 5073] mkdir("./file1", 0777 [pid 5077] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5073] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5077] symlink("/dev/binderfs", "./binderfs" [pid 5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... symlink resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] memfd_create("syzkaller", 0) = 3 [pid 5015] newfstatat(AT_FDCWD, "./4/file1", [pid 5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 62.929388][ T5071] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 62.945996][ T5073] loop1: detected capacity change from 0 to 4096 [ 62.964173][ T5073] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... write resumed>) = 2097152 [pid 5074] munmap(0x7f770c286000, 2097152 [pid 5015] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, [pid 5074] <... munmap resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5076] <... write resumed>) = 2097152 [pid 5074] ioctl(4, LOOP_SET_FD, 3 [pid 5071] exit_group(0 [pid 5015] close(4 [pid 5071] <... exit_group resumed>) = ? [pid 5074] <... ioctl resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./4/file1" [pid 5074] close(3) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5074] mkdir("./file1", 0777 [pid 5071] +++ exited with 0 +++ [pid 5015] getdents64(3, [pid 5074] <... mkdir resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5074] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5015] close(3 [pid 5016] <... restart_syscall resumed>) = 0 [pid 5015] <... close resumed>) = 0 [ 62.985704][ T5071] NILFS (loop4): repaired inode bitmap for reserved inodes [ 62.993570][ T5071] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.020269][ T5074] loop2: detected capacity change from 0 to 4096 [pid 5015] rmdir("./4") = 0 [pid 5076] munmap(0x7f770c286000, 2097152 [pid 5015] mkdir("./5", 0777 [pid 5076] <... munmap resumed>) = 0 [pid 5016] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... mkdir resumed>) = 0 [pid 5077] <... write resumed>) = 2097152 [pid 5077] munmap(0x7f770c286000, 2097152 [pid 5076] <... openat resumed>) = 4 [pid 5016] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... munmap resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5077] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... ioctl resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5015] <... openat resumed>) = 3 [pid 5076] close(3) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5076] mkdir("./file1", 0777 [pid 5016] getdents64(3, [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... mkdir resumed>) = 0 [pid 5076] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] close(3) = 0 [ 63.037776][ T5074] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.052181][ T5074] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.063298][ T5076] loop5: detected capacity change from 0 to 4096 [ 63.069242][ T5077] loop0: detected capacity change from 0 to 4096 [pid 5016] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... ioctl resumed>) = 0 [pid 5077] close(3) = 0 [pid 5077] mkdir("./file1", 0777) = 0 [pid 5077] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5079 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./4/binderfs") = 0 [pid 5016] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mount resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] chdir("./file1") = 0 [pid 5074] ioctl(4, LOOP_CLR_FD) = 0 [pid 5074] close(4) = 0 [pid 5074] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 5079 attached [pid 5079] set_robust_list(0x555556b87660, 24) = 0 [pid 5079] chdir("./5") = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 63.081481][ T5073] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.086441][ T5076] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.106089][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 63.112884][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 63.120765][ T5074] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5079] memfd_create("syzkaller", 0) = 3 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 63.130055][ T5078] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.146698][ T5077] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.155816][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 63.166007][ T5076] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.178243][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5073] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 63.187901][ T5077] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.199898][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 63.200088][ T5074] Remounting filesystem read-only [ 63.222538][ T5080] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5073] chdir("./file1") = 0 [pid 5073] ioctl(4, LOOP_CLR_FD) = 0 [pid 5073] close(4) = 0 [pid 5076] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 63.235300][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 63.256251][ T5074] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 63.257154][ T5081] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.273714][ T5074] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5076] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] chdir("./file1") = 0 [pid 5076] ioctl(4, LOOP_CLR_FD) = 0 [pid 5076] close(4) = 0 [pid 5079] <... write resumed>) = 2097152 [pid 5076] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5079] munmap(0x7f770c286000, 2097152) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... openat resumed>) = -1 EIO (Input/output error) [pid 5074] exit_group(0) = ? [ 63.276169][ T5073] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.300740][ T5073] Remounting filesystem read-only [ 63.304789][ T5074] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.324319][ T5076] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5074] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=9 /* 0.09 s */} --- [pid 5014] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./4/file1", [pid 5014] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] <... ioctl resumed>) = 0 [pid 5079] close(3) = 0 [ 63.340413][ T5079] loop3: detected capacity change from 0 to 4096 [ 63.357336][ T5073] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 63.365331][ T5073] NILFS (loop1): repaired inode bitmap for reserved inodes [ 63.380489][ T5082] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5079] mkdir("./file1", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./4/binderfs" [pid 5077] <... mount resumed>) = 0 [pid 5016] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... unlink resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5016] <... openat resumed>) = 4 [pid 5014] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] chdir("./file1" [pid 5016] getdents64(4, [pid 5079] <... mkdir resumed>) = 0 [pid 5079] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5077] <... chdir resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5077] ioctl(4, LOOP_CLR_FD [pid 5016] getdents64(4, [pid 5077] <... ioctl resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5016] close(4) = 0 [pid 5073] <... openat resumed>) = -1 EIO (Input/output error) [pid 5073] exit_group(0) = ? [ 63.397137][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 63.399446][ T5079] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.405135][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 63.414928][ T5073] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.427175][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5073] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5016] rmdir("./4/file1" [pid 5077] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... rmdir resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5016] getdents64(3, [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5079] <... mount resumed>) = 0 [ 63.443541][ T5076] Remounting filesystem read-only [ 63.450369][ T5076] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 63.456089][ T5079] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.467886][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 63.467923][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5079] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5079] chdir("./file1" [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./4" [pid 5013] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./5", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... chdir resumed>) = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] ioctl(4, LOOP_CLR_FD [pid 5016] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5079] <... ioctl resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5013] newfstatat(3, "", [pid 5079] close(4 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5079] <... close resumed>) = 0 [pid 5016] close(3 [pid 5013] getdents64(3, [pid 5079] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [ 63.482970][ T5077] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.517541][ T5079] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.525958][ T5076] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5084 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./4/binderfs") = 0 [ 63.534265][ T5083] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.542796][ T5076] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.565324][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 63.571976][ T5077] Remounting filesystem read-only [ 63.583703][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5013] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5084 attached [pid 5084] set_robust_list(0x555556b87660, 24) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./4/file1" [pid 5084] chdir("./5" [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./4") = 0 [pid 5014] mkdir("./5", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... chdir resumed>) = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] setpgid(0, 0) = 0 [ 63.603145][ T5079] Remounting filesystem read-only [ 63.613215][ T5079] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 63.621765][ T5077] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 63.625440][ T5079] NILFS (loop3): repaired inode bitmap for reserved inodes [ 63.635572][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 63.645354][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5014] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... openat resumed>) = 3 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5085 ./strace-static-x86_64: Process 5085 attached [pid 5084] write(3, "1000", 4 [pid 5085] set_robust_list(0x555556b87660, 24) = 0 [pid 5085] chdir("./5") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5085] memfd_create("syzkaller", 0) = 3 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 63.655152][ T5077] NILFS (loop0): repaired inode bitmap for reserved inodes [ 63.664506][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 63.672474][ T5077] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 63.687162][ T5079] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5084] <... write resumed>) = 4 [pid 5084] close(3) = 0 [pid 5084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] memfd_create("syzkaller", 0) = 3 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = -1 EIO (Input/output error) [pid 5084] <... mmap resumed>) = 0x7f770c286000 [pid 5076] exit_group(0 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5079] <... openat resumed>) = -1 EIO (Input/output error) [pid 5076] <... exit_group resumed>) = ? [pid 5076] +++ exited with 0 +++ [pid 5079] exit_group(0) = ? [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5017] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5079] +++ exited with 0 +++ [pid 5017] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5017] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5015] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] unlink("./4/binderfs" [pid 5015] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... unlink resumed>) = 0 [ 63.695056][ T2828] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 63.725134][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 63.732370][ T2828] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5015] <... openat resumed>) = 3 [pid 5017] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] exit_group(0 [pid 5015] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5077] <... exit_group resumed>) = ? [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./5/binderfs") = 0 [pid 5015] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] <... write resumed>) = 2097152 [pid 5085] munmap(0x7f770c286000, 2097152 [pid 5077] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 63.756470][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 63.761690][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 63.763376][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 63.763410][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 63.790569][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5012] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./4/binderfs") = 0 [pid 5012] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... write resumed>) = 2097152 [pid 5085] <... munmap resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5085] ioctl(4, LOOP_SET_FD, 3 [pid 5084] munmap(0x7f770c286000, 2097152) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5085] mkdir("./file1", 0777) = 0 [ 63.802954][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 63.813063][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 63.818728][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 63.824753][ T5085] loop2: detected capacity change from 0 to 4096 [ 63.827846][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 63.848096][ T5084] loop4: detected capacity change from 0 to 4096 [pid 5085] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5084] <... ioctl resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] mkdir("./file1", 0777) = 0 [ 63.851265][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 63.862110][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 63.862145][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 63.862160][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 63.880926][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 63.886733][ T5085] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5084] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, [pid 5017] <... openat resumed>) = 4 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./4/file1" [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./4" [pid 5013] close(4) = 0 [pid 5013] rmdir("./4/file1" [pid 5017] <... rmdir resumed>) = 0 [pid 5017] mkdir("./5", 0777) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./4") = 0 [pid 5013] mkdir("./5", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [ 63.906236][ T5084] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.919302][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5086 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5087 ./strace-static-x86_64: Process 5087 attached ./strace-static-x86_64: Process 5086 attached [pid 5087] set_robust_list(0x555556b87660, 24 [pid 5086] set_robust_list(0x555556b87660, 24) = 0 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5086] chdir("./5" [pid 5087] chdir("./5" [pid 5086] <... chdir resumed>) = 0 [pid 5087] <... chdir resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... prctl resumed>) = 0 [pid 5087] <... prctl resumed>) = 0 [pid 5086] setpgid(0, 0 [pid 5087] setpgid(0, 0 [pid 5086] <... setpgid resumed>) = 0 [pid 5087] <... setpgid resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] write(3, "1000", 4 [pid 5086] <... openat resumed>) = 3 [pid 5087] <... write resumed>) = 4 [pid 5086] write(3, "1000", 4 [pid 5087] close(3 [pid 5086] <... write resumed>) = 4 [pid 5087] <... close resumed>) = 0 [pid 5086] close(3 [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5086] <... close resumed>) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs" [pid 5087] <... symlink resumed>) = 0 [pid 5086] <... symlink resumed>) = 0 [pid 5087] memfd_create("syzkaller", 0 [pid 5086] memfd_create("syzkaller", 0 [pid 5087] <... memfd_create resumed>) = 3 [pid 5086] <... memfd_create resumed>) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5087] <... mmap resumed>) = 0x7f770c286000 [ 63.948485][ T5084] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 63.963747][ T5085] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] <... mount resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5015] <... openat resumed>) = 4 [pid 5084] chdir("./file1" [pid 5015] newfstatat(4, "", [pid 5084] <... chdir resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] ioctl(4, LOOP_CLR_FD [pid 5015] getdents64(4, [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(4 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5084] <... close resumed>) = 0 [ 64.002885][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 64.021431][ T5088] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5084] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] getdents64(4, [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4 [pid 5085] <... mount resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./5/file1") = 0 [pid 5085] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./5") = 0 [pid 5085] <... openat resumed>) = 3 [pid 5015] mkdir("./6", 0777 [pid 5085] chdir("./file1" [pid 5015] <... mkdir resumed>) = 0 [pid 5085] <... chdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] ioctl(4, LOOP_CLR_FD [pid 5015] <... openat resumed>) = 3 [pid 5085] <... ioctl resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5085] close(4 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5087] <... write resumed>) = 2097152 [pid 5085] <... close resumed>) = 0 [pid 5015] close(3 [pid 5085] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5087] munmap(0x7f770c286000, 2097152) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 64.046747][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 64.055683][ T5089] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.055921][ T5084] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5086] <... write resumed>) = 2097152 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] munmap(0x7f770c286000, 2097152 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 64.115805][ T5085] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.131180][ T5084] Remounting filesystem read-only [ 64.154295][ T5084] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5087] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5090 attached [pid 5086] <... munmap resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5090 [pid 5012] newfstatat(AT_FDCWD, "./4/file1", [pid 5090] set_robust_list(0x555556b87660, 24 [pid 5086] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5086] <... openat resumed>) = 4 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5087] <... ioctl resumed>) = 0 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5012] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] chdir("./6" [pid 5087] close(3) = 0 [pid 5087] mkdir("./file1", 0777) = 0 [pid 5087] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5090] <... chdir resumed>) = 0 [pid 5086] <... ioctl resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] close(3 [pid 5012] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5090] <... prctl resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5090] setpgid(0, 0 [pid 5086] mkdir("./file1", 0777 [pid 5012] <... openat resumed>) = 4 [pid 5090] <... setpgid resumed>) = 0 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5090] <... openat resumed>) = 3 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5090] write(3, "1000", 4 [pid 5012] close(4 [pid 5090] <... write resumed>) = 4 [pid 5012] <... close resumed>) = 0 [pid 5086] <... mkdir resumed>) = 0 [pid 5090] close(3 [pid 5012] rmdir("./4/file1" [pid 5090] <... close resumed>) = 0 [pid 5086] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... rmdir resumed>) = 0 [pid 5090] symlink("/dev/binderfs", "./binderfs" [pid 5012] getdents64(3, [pid 5090] <... symlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [ 64.166788][ T5087] loop5: detected capacity change from 0 to 4096 [ 64.176359][ T5086] loop1: detected capacity change from 0 to 4096 [ 64.181517][ T5084] NILFS (loop4): repaired inode bitmap for reserved inodes [ 64.192392][ T5087] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5090] memfd_create("syzkaller", 0 [pid 5012] close(3 [pid 5084] <... openat resumed>) = -1 EIO (Input/output error) [pid 5084] exit_group(0) = ? [pid 5084] +++ exited with 0 +++ [pid 5090] <... memfd_create resumed>) = 3 [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5012] <... close resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5012] rmdir("./4" [pid 5016] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] mkdir("./5", 0777 [pid 5016] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... mkdir resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5016] newfstatat(3, "", [pid 5012] <... openat resumed>) = 3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] close(3 [ 64.208702][ T5086] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.219158][ T5084] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.220796][ T5086] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 64.244566][ T5085] Remounting filesystem read-only [ 64.249942][ T5087] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... close resumed>) = 0 [pid 5016] unlink("./5/binderfs") = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5093 ./strace-static-x86_64: Process 5093 attached [pid 5093] set_robust_list(0x555556b87660, 24) = 0 [pid 5093] chdir("./5") = 0 [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5093] setpgid(0, 0) = 0 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5093] write(3, "1000", 4) = 4 [pid 5093] close(3) = 0 [pid 5093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] <... mount resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5086] <... mount resumed>) = 0 [pid 5093] memfd_create("syzkaller", 0 [pid 5087] <... openat resumed>) = 3 [pid 5086] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5093] <... memfd_create resumed>) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] chdir("./file1" [ 64.273442][ T5085] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 64.283318][ T5092] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.295100][ T5091] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.306649][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 64.308234][ T5085] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5086] chdir("./file1" [pid 5093] <... mmap resumed>) = 0x7f770c286000 [pid 5087] <... chdir resumed>) = 0 [pid 5086] <... chdir resumed>) = 0 [pid 5086] ioctl(4, LOOP_CLR_FD) = 0 [pid 5086] close(4 [pid 5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5087] ioctl(4, LOOP_CLR_FD [pid 5086] <... close resumed>) = 0 [pid 5085] <... openat resumed>) = -1 EIO (Input/output error) [ 64.324097][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 64.324448][ T5085] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.348275][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 64.355268][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5086] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5087] <... ioctl resumed>) = 0 [pid 5085] exit_group(0 [pid 5087] close(4 [pid 5085] <... exit_group resumed>) = ? [pid 5090] <... write resumed>) = 2097152 [pid 5087] <... close resumed>) = 0 [pid 5085] +++ exited with 0 +++ [pid 5090] munmap(0x7f770c286000, 2097152 [pid 5087] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5090] <... munmap resumed>) = 0 [pid 5014] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./5/binderfs") = 0 [ 64.363273][ T5086] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.378985][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 64.389215][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 64.401875][ T5087] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5090] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5090] close(3 [pid 5016] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] mkdir("./file1", 0777 [pid 5016] newfstatat(AT_FDCWD, "./5/file1", [pid 5090] <... mkdir resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 64.420989][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 64.432467][ T5090] loop3: detected capacity change from 0 to 4096 [ 64.434712][ T5086] Remounting filesystem read-only [ 64.441132][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 64.452378][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 64.461733][ T5087] Remounting filesystem read-only [pid 5016] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5090] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./5/file1") = 0 [ 64.473154][ T5087] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 64.484001][ T5090] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.484607][ T5086] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 64.494333][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 64.511838][ T5090] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./5") = 0 [pid 5016] mkdir("./6", 0777 [pid 5093] <... write resumed>) = 2097152 [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5094 [pid 5093] munmap(0x7f770c286000, 2097152./strace-static-x86_64: Process 5094 attached [pid 5094] set_robust_list(0x555556b87660, 24) = 0 [ 64.524427][ T5087] NILFS (loop5): repaired inode bitmap for reserved inodes [ 64.545682][ T5087] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.565788][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5094] chdir("./6" [pid 5093] <... munmap resumed>) = 0 [pid 5087] <... openat resumed>) = -1 EIO (Input/output error) [pid 5087] exit_group(0 [pid 5094] <... chdir resumed>) = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0 [pid 5087] <... exit_group resumed>) = ? [pid 5094] <... setpgid resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5093] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5094] write(3, "1000", 4 [pid 5093] <... openat resumed>) = 4 [pid 5094] <... write resumed>) = 4 [pid 5093] ioctl(4, LOOP_SET_FD, 3 [pid 5087] +++ exited with 0 +++ [ 64.573357][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 64.587218][ T5086] NILFS (loop1): repaired inode bitmap for reserved inodes [ 64.594594][ T5086] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.611441][ T5093] loop0: detected capacity change from 0 to 4096 [pid 5094] close(3 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5094] <... close resumed>) = 0 [pid 5094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] memfd_create("syzkaller", 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5094] <... memfd_create resumed>) = 3 [pid 5017] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... openat resumed>) = 3 [pid 5094] <... mmap resumed>) = 0x7f770c286000 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./5/binderfs") = 0 [pid 5017] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... mount resumed>) = 0 [pid 5093] <... ioctl resumed>) = 0 [pid 5093] close(3 [pid 5090] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5093] <... close resumed>) = 0 [pid 5093] mkdir("./file1", 0777) = 0 [pid 5093] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5090] <... openat resumed>) = 3 [pid 5090] chdir("./file1") = 0 [ 64.611850][ T5095] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.629997][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 64.645952][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 64.656856][ T5093] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.665647][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5090] ioctl(4, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5090] <... ioctl resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5090] close(4 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./5/file1" [pid 5090] <... close resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./5") = 0 [pid 5014] mkdir("./6", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] <... write resumed>) = 2097152 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5096 [pid 5086] <... openat resumed>) = -1 EIO (Input/output error) [pid 5086] exit_group(0) = ? [pid 5090] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5086] +++ exited with 0 +++ ./strace-static-x86_64: Process 5096 attached [pid 5096] set_robust_list(0x555556b87660, 24) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5094] munmap(0x7f770c286000, 2097152 [pid 5013] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5096] chdir("./6") = 0 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5013] getdents64(3, [pid 5096] setpgid(0, 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./5/binderfs") = 0 [pid 5013] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5096] <... setpgid resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 64.674587][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 64.697145][ T5090] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.697408][ T5093] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5096] write(3, "1000", 4 [pid 5094] <... munmap resumed>) = 0 [pid 5096] <... write resumed>) = 4 [pid 5096] close(3) = 0 [pid 5096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5096] memfd_create("syzkaller", 0) = 3 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5094] <... ioctl resumed>) = 0 [pid 5094] close(3) = 0 [pid 5094] mkdir("./file1", 0777) = 0 [ 64.737667][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 64.739962][ T5094] loop4: detected capacity change from 0 to 4096 [ 64.744504][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 64.756839][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 64.766645][ T5090] Remounting filesystem read-only [pid 5094] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 64.790767][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 64.795124][ T5090] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 64.807775][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 64.815364][ T5094] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.816267][ T5090] NILFS (loop3): repaired inode bitmap for reserved inodes [ 64.832824][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5093] <... mount resumed>) = 0 [pid 5093] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5093] chdir("./file1") = 0 [pid 5093] ioctl(4, LOOP_CLR_FD) = 0 [pid 5093] close(4) = 0 [ 64.848618][ T5094] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 64.858654][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 64.867610][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 64.872685][ T5093] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5093] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5096] <... write resumed>) = 2097152 [pid 5096] munmap(0x7f770c286000, 2097152 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./5/file1", [pid 5096] <... munmap resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5096] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5017] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5096] <... openat resumed>) = 4 [pid 5017] <... openat resumed>) = 4 [pid 5096] ioctl(4, LOOP_SET_FD, 3 [ 64.885919][ T5090] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 64.908014][ T5097] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./5/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./5") = 0 [pid 5017] mkdir("./6", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5099 ./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x555556b87660, 24) = 0 [pid 5099] chdir("./6" [pid 5094] <... mount resumed>) = 0 [pid 5094] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5099] <... chdir resumed>) = 0 [pid 5094] <... openat resumed>) = 3 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] <... ioctl resumed>) = 0 [pid 5094] chdir("./file1" [pid 5099] write(3, "1000", 4 [pid 5096] close(3 [pid 5094] <... chdir resumed>) = 0 [pid 5099] <... write resumed>) = 4 [pid 5096] <... close resumed>) = 0 [pid 5094] ioctl(4, LOOP_CLR_FD [pid 5099] close(3 [pid 5096] mkdir("./file1", 0777 [pid 5094] <... ioctl resumed>) = 0 [pid 5099] <... close resumed>) = 0 [pid 5096] <... mkdir resumed>) = 0 [pid 5094] close(4 [pid 5099] symlink("/dev/binderfs", "./binderfs" [ 64.940812][ T5096] loop2: detected capacity change from 0 to 4096 [ 64.956653][ T5098] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5096] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5099] <... symlink resumed>) = 0 [pid 5094] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5099] memfd_create("syzkaller", 0 [pid 5094] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5099] <... memfd_create resumed>) = 3 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5090] <... openat resumed>) = -1 EIO (Input/output error) [pid 5090] exit_group(0) = ? [pid 5090] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./6/binderfs") = 0 [pid 5015] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [ 64.993842][ T5096] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.006130][ T5094] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.022733][ T5093] Remounting filesystem read-only [ 65.028623][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./5/file1") = 0 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 65.043856][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 65.044291][ T5093] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 65.052527][ T5096] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.070225][ T5094] Remounting filesystem read-only [ 65.078374][ T5094] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 65.083577][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [ 65.089046][ T5094] NILFS (loop4): repaired inode bitmap for reserved inodes [ 65.100426][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 65.101589][ T5093] NILFS (loop0): repaired inode bitmap for reserved inodes [ 65.116054][ T5093] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.128001][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5013] rmdir("./5" [pid 5099] <... write resumed>) = 2097152 [pid 5099] munmap(0x7f770c286000, 2097152) = 0 [pid 5099] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5094] <... openat resumed>) = -1 EIO (Input/output error) [pid 5093] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... rmdir resumed>) = 0 [pid 5093] exit_group(0 [pid 5013] mkdir("./6", 0777 [pid 5093] <... exit_group resumed>) = ? [pid 5094] exit_group(0 [pid 5093] +++ exited with 0 +++ [pid 5013] <... mkdir resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... openat resumed>) = 3 [pid 5012] newfstatat(3, "", [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5101 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./5/binderfs") = 0 [pid 5012] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5101 attached [pid 5094] <... exit_group resumed>) = ? [pid 5101] set_robust_list(0x555556b87660, 24 [pid 5096] <... mount resumed>) = 0 [ 65.132394][ T5094] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.148080][ T5099] loop5: detected capacity change from 0 to 4096 [ 65.161674][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 65.181262][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5094] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./6/binderfs") = 0 [pid 5016] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... set_robust_list resumed>) = 0 [pid 5099] <... ioctl resumed>) = 0 [pid 5096] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... umount2 resumed>) = 0 [ 65.195901][ T5100] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.206713][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 65.218681][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 65.220347][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 65.225388][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5101] chdir("./6" [pid 5099] close(3 [pid 5096] <... openat resumed>) = 3 [pid 5015] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... chdir resumed>) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] <... close resumed>) = 0 [pid 5096] chdir("./file1" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] memfd_create("syzkaller", 0) = 3 [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5096] <... chdir resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./6/file1", [pid 5096] ioctl(4, LOOP_CLR_FD [pid 5099] mkdir("./file1", 0777 [pid 5096] <... ioctl resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5099] <... mkdir resumed>) = 0 [pid 5096] close(4 [pid 5015] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5096] <... close resumed>) = 0 [ 65.232614][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 65.244119][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 65.249364][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 65.263462][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5096] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./6/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [ 65.286647][ T5099] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.297469][ T5096] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.303904][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 65.320866][ T5099] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] rmdir("./6") = 0 [pid 5015] mkdir("./7", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5012] <... umount2 resumed>) = 0 [ 65.353451][ T5096] Remounting filesystem read-only [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5102 attached ) = -1 EINVAL (Invalid argument) [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5102 [pid 5012] newfstatat(AT_FDCWD, "./5/file1", [pid 5102] set_robust_list(0x555556b87660, 24 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5102] chdir("./7" [pid 5101] <... write resumed>) = 2097152 [pid 5096] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5102] <... chdir resumed>) = 0 [pid 5096] exit_group(0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] <... exit_group resumed>) = ? [ 65.374722][ T5096] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 65.385924][ T5096] NILFS (loop2): repaired inode bitmap for reserved inodes [ 65.396404][ T5096] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.405300][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5012] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5102] <... prctl resumed>) = 0 [pid 5099] <... mount resumed>) = 0 [pid 5096] +++ exited with 0 +++ [pid 5012] <... openat resumed>) = 4 [pid 5102] setpgid(0, 0 [pid 5099] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5012] newfstatat(4, "", [pid 5102] <... setpgid resumed>) = 0 [pid 5099] <... openat resumed>) = 3 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5101] munmap(0x7f770c286000, 2097152 [pid 5099] chdir("./file1" [pid 5014] <... restart_syscall resumed>) = 0 [pid 5012] getdents64(4, [pid 5102] <... openat resumed>) = 3 [pid 5101] <... munmap resumed>) = 0 [pid 5099] <... chdir resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5102] write(3, "1000", 4 [pid 5099] ioctl(4, LOOP_CLR_FD [pid 5012] getdents64(4, [pid 5102] <... write resumed>) = 4 [pid 5099] <... ioctl resumed>) = 0 [pid 5014] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5102] close(3 [pid 5101] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5099] close(4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(4 [pid 5102] <... close resumed>) = 0 [pid 5101] <... openat resumed>) = 4 [pid 5099] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... close resumed>) = 0 [pid 5102] symlink("/dev/binderfs", "./binderfs" [pid 5101] ioctl(4, LOOP_SET_FD, 3 [pid 5099] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... openat resumed>) = 3 [pid 5012] rmdir("./5/file1" [pid 5102] <... symlink resumed>) = 0 [pid 5014] newfstatat(3, "", [pid 5012] <... rmdir resumed>) = 0 [pid 5102] memfd_create("syzkaller", 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, [pid 5102] <... memfd_create resumed>) = 3 [pid 5014] getdents64(3, [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] close(3 [pid 5102] <... mmap resumed>) = 0x7f770c286000 [pid 5014] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] rmdir("./5" [pid 5014] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5012] <... rmdir resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] mkdir("./6", 0777 [pid 5014] unlink("./6/binderfs" [pid 5012] <... mkdir resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5014] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5104 [ 65.419389][ T5103] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.432367][ T5099] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.444639][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 65.448345][ T5101] loop1: detected capacity change from 0 to 4096 [pid 5016] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5104 attached [pid 5104] set_robust_list(0x555556b87660, 24) = 0 [pid 5104] chdir("./6") = 0 [pid 5016] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... prctl resumed>) = 0 [pid 5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] newfstatat(AT_FDCWD, "./6/file1", [pid 5104] setpgid(0, 0 [pid 5101] <... ioctl resumed>) = 0 [pid 5101] close(3 [pid 5104] <... setpgid resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5101] mkdir("./file1", 0777 [pid 5016] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] <... openat resumed>) = 3 [pid 5101] <... mkdir resumed>) = 0 [pid 5104] write(3, "1000", 4 [ 65.496637][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 65.507088][ T5099] Remounting filesystem read-only [ 65.516222][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 65.535871][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5101] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... write resumed>) = 4 [pid 5102] <... write resumed>) = 2097152 [pid 5102] munmap(0x7f770c286000, 2097152) = 0 [pid 5102] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5104] close(3 [pid 5016] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5102] ioctl(4, LOOP_SET_FD, 3 [pid 5104] <... close resumed>) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5104] symlink("/dev/binderfs", "./binderfs" [pid 5016] newfstatat(4, "", [pid 5104] <... symlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5104] memfd_create("syzkaller", 0 [pid 5016] getdents64(4, [pid 5104] <... memfd_create resumed>) = 3 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5104] <... mmap resumed>) = 0x7f770c286000 [pid 5016] close(4 [pid 5102] <... ioctl resumed>) = 0 [pid 5102] close(3) = 0 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./6/file1" [pid 5102] mkdir("./file1", 0777 [pid 5016] <... rmdir resumed>) = 0 [ 65.543058][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 65.550787][ T5101] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.551540][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 65.561698][ T5102] loop3: detected capacity change from 0 to 4096 [ 65.569132][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 65.574555][ T5099] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5102] <... mkdir resumed>) = 0 [pid 5102] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] close(3) = 0 [pid 5016] rmdir("./6") = 0 [pid 5016] mkdir("./7", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5105 [ 65.599040][ T5101] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.614294][ T5099] NILFS (loop5): repaired inode bitmap for reserved inodes [ 65.624766][ T5102] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) ./strace-static-x86_64: Process 5105 attached [pid 5105] set_robust_list(0x555556b87660, 24) = 0 [pid 5105] chdir("./7") = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] memfd_create("syzkaller", 0) = 3 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5101] <... mount resumed>) = 0 [pid 5101] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5101] chdir("./file1" [pid 5014] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... chdir resumed>) = 0 [pid 5101] ioctl(4, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] <... ioctl resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5101] close(4) = 0 [ 65.652482][ T5102] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.670363][ T5099] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.689492][ T5106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5101] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... openat resumed>) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./6/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./6") = 0 [pid 5014] mkdir("./7", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 65.705258][ T5101] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] close(3 [pid 5104] <... write resumed>) = 2097152 [pid 5102] <... mount resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5102] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5102] <... openat resumed>) = 3 [pid 5099] <... openat resumed>) = -1 EIO (Input/output error) [pid 5102] chdir("./file1") = 0 ./strace-static-x86_64: Process 5108 attached [pid 5104] munmap(0x7f770c286000, 2097152 [pid 5102] ioctl(4, LOOP_CLR_FD [pid 5099] exit_group(0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5108 [pid 5108] set_robust_list(0x555556b87660, 24 [pid 5104] <... munmap resumed>) = 0 [pid 5102] <... ioctl resumed>) = 0 [pid 5099] <... exit_group resumed>) = ? [pid 5108] <... set_robust_list resumed>) = 0 [pid 5102] close(4 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5102] <... close resumed>) = 0 [ 65.750553][ T5107] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.766523][ T5101] Remounting filesystem read-only [ 65.776818][ T5101] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5102] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5108] chdir("./7" [pid 5099] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5017] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5108] <... chdir resumed>) = 0 [pid 5104] <... openat resumed>) = 4 [pid 5017] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./6/binderfs") = 0 [pid 5017] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5104] ioctl(4, LOOP_SET_FD, 3 [pid 5101] <... openat resumed>) = -1 EIO (Input/output error) [pid 5108] <... prctl resumed>) = 0 [pid 5104] <... ioctl resumed>) = 0 [pid 5101] exit_group(0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4 [pid 5104] close(3 [pid 5101] <... exit_group resumed>) = ? [pid 5108] <... write resumed>) = 4 [pid 5108] close(3) = 0 [pid 5108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5108] memfd_create("syzkaller", 0) = 3 [ 65.786913][ T5102] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.787906][ T5101] NILFS (loop1): repaired inode bitmap for reserved inodes [ 65.810329][ T5101] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 65.821823][ T5102] Remounting filesystem read-only [ 65.832661][ T5104] loop0: detected capacity change from 0 to 4096 [ 65.832675][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5105] <... write resumed>) = 2097152 [pid 5105] munmap(0x7f770c286000, 2097152) = 0 [pid 5105] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5104] <... close resumed>) = 0 [pid 5101] +++ exited with 0 +++ [pid 5104] mkdir("./file1", 0777 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5104] <... mkdir resumed>) = 0 [pid 5013] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5104] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./6/binderfs") = 0 [pid 5013] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] <... ioctl resumed>) = 0 [pid 5105] close(3) = 0 [pid 5105] mkdir("./file1", 0777) = 0 [ 65.861373][ T5105] loop4: detected capacity change from 0 to 4096 [ 65.876226][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 65.884037][ T5104] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.884862][ T5102] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 65.894300][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5105] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 65.905680][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 65.917052][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 65.918259][ T5105] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.935875][ T5104] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.935953][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 65.935989][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5108] munmap(0x7f770c286000, 2097152) = 0 [pid 5108] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5108] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5108] close(3) = 0 [pid 5108] mkdir("./file1", 0777) = 0 [ 65.953835][ T5102] NILFS (loop3): repaired inode bitmap for reserved inodes [ 65.965294][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 65.976367][ T5105] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 65.981954][ T5108] loop2: detected capacity change from 0 to 4096 [ 65.986619][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5108] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5105] <... mount resumed>) = 0 [pid 5102] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... umount2 resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5105] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5102] exit_group(0 [pid 5013] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] <... openat resumed>) = 3 [pid 5102] <... exit_group resumed>) = ? [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] chdir("./file1" [pid 5102] +++ exited with 0 +++ [pid 5013] newfstatat(AT_FDCWD, "./6/file1", [pid 5105] <... chdir resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5105] ioctl(4, LOOP_CLR_FD [pid 5013] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] <... ioctl resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 66.003729][ T5102] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.007826][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 66.025441][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 66.033360][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 66.034333][ T5108] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.050558][ T5109] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5105] close(4 [pid 5015] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5105] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 4 [pid 5105] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] newfstatat(4, "", [pid 5017] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5104] <... mount resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5013] getdents64(4, [pid 5017] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5104] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] newfstatat(4, "", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5104] <... openat resumed>) = 3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, [pid 5013] getdents64(4, [pid 5104] chdir("./file1" [pid 5017] getdents64(4, [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5104] <... chdir resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(4 [pid 5104] ioctl(4, LOOP_CLR_FD [pid 5017] getdents64(4, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5104] <... ioctl resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5108] <... mount resumed>) = 0 [pid 5104] close(4 [pid 5017] close(4 [pid 5015] newfstatat(AT_FDCWD, "./7/binderfs", [ 66.083242][ T5110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.084645][ T5105] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.113224][ T5108] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] rmdir("./6/file1" [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./6/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./6") = 0 [pid 5017] mkdir("./7", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5108] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5104] <... close resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5108] <... openat resumed>) = 3 [pid 5104] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] unlink("./7/binderfs" [pid 5013] getdents64(3, [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5112 ./strace-static-x86_64: Process 5112 attached [pid 5112] set_robust_list(0x555556b87660, 24) = 0 [pid 5112] chdir("./7") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5108] chdir("./file1" [pid 5015] <... unlink resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5112] memfd_create("syzkaller", 0 [pid 5108] <... chdir resumed>) = 0 [pid 5015] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3 [pid 5112] <... memfd_create resumed>) = 3 [pid 5108] ioctl(4, LOOP_CLR_FD [pid 5013] <... close resumed>) = 0 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5108] <... ioctl resumed>) = 0 [pid 5013] rmdir("./6" [pid 5112] <... mmap resumed>) = 0x7f770c286000 [pid 5108] close(4) = 0 [pid 5013] <... rmdir resumed>) = 0 [ 66.135995][ T5111] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.149634][ T5105] Remounting filesystem read-only [ 66.159707][ T5104] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5013] mkdir("./7", 0777 [pid 5108] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... openat resumed>) = 3 [ 66.195423][ T5105] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 66.204519][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 66.213234][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 66.221904][ T5108] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.238168][ T5104] Remounting filesystem read-only [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5113 attached [pid 5113] set_robust_list(0x555556b87660, 24) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5113 [ 66.243689][ T5105] NILFS (loop4): repaired inode bitmap for reserved inodes [ 66.252177][ T5104] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 66.260909][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 66.261365][ T5108] Remounting filesystem read-only [ 66.274640][ T5105] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5113] chdir("./7") = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3) = 0 [pid 5113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5113] memfd_create("syzkaller", 0) = 3 [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5105] <... openat resumed>) = -1 EIO (Input/output error) [ 66.289976][ T5104] NILFS (loop0): repaired inode bitmap for reserved inodes [ 66.298348][ T5108] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 66.306699][ T5104] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.322534][ T5108] NILFS (loop2): repaired inode bitmap for reserved inodes [ 66.327512][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [pid 5108] <... openat resumed>) = -1 EIO (Input/output error) [pid 5105] exit_group(0 [pid 5104] <... openat resumed>) = -1 EIO (Input/output error) [pid 5105] <... exit_group resumed>) = ? [pid 5104] exit_group(0 [pid 5105] +++ exited with 0 +++ [pid 5108] exit_group(0 [pid 5104] <... exit_group resumed>) = ? [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5108] <... exit_group resumed>) = ? [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5112] <... write resumed>) = 2097152 [pid 5104] +++ exited with 0 +++ [pid 5016] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5112] munmap(0x7f770c286000, 2097152 [pid 5108] +++ exited with 0 +++ [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5112] <... munmap resumed>) = 0 [pid 5016] unlink("./7/binderfs" [pid 5015] <... umount2 resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5016] <... unlink resumed>) = 0 [pid 5015] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5112] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] newfstatat(AT_FDCWD, "./7/file1", [pid 5014] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [ 66.338209][ T5108] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.354543][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 66.364448][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5012] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5112] <... openat resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5012] newfstatat(3, "", [pid 5015] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 3 [pid 5012] getdents64(3, [pid 5015] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] newfstatat(3, "", [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] <... openat resumed>) = 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] newfstatat(4, "", [pid 5014] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5015] getdents64(4, [pid 5014] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] unlink("./6/binderfs" [pid 5015] getdents64(4, [pid 5014] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5012] <... unlink resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] close(4 [pid 5014] unlink("./7/binderfs" [pid 5015] <... close resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5015] rmdir("./7/file1" [pid 5014] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... rmdir resumed>) = 0 [pid 5112] <... ioctl resumed>) = 0 [pid 5112] close(3) = 0 [pid 5112] mkdir("./file1", 0777) = 0 [pid 5112] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./7") = 0 [pid 5015] mkdir("./8", 0777) = 0 [ 66.404964][ T5112] loop5: detected capacity change from 0 to 4096 [ 66.422779][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 66.422964][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 66.430475][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5113] <... write resumed>) = 2097152 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5113] munmap(0x7f770c286000, 2097152 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5113] <... munmap resumed>) = 0 [ 66.450102][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 66.450587][ T5112] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.455660][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 66.469591][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 66.483711][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 66.484791][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 66.492301][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5015] close(3 [pid 5113] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5015] <... close resumed>) = 0 [pid 5113] <... openat resumed>) = 4 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 66.498211][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 66.512829][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 66.513313][ T5112] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 66.520601][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 66.530805][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 66.538954][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5113] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5114 ./strace-static-x86_64: Process 5114 attached [pid 5114] set_robust_list(0x555556b87660, 24 [pid 5113] <... ioctl resumed>) = 0 [pid 5114] <... set_robust_list resumed>) = 0 [pid 5113] close(3) = 0 [pid 5114] chdir("./8" [pid 5113] mkdir("./file1", 0777 [pid 5114] <... chdir resumed>) = 0 [pid 5113] <... mkdir resumed>) = 0 [pid 5114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5113] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5114] <... prctl resumed>) = 0 [pid 5112] <... mount resumed>) = 0 [ 66.551845][ T5113] loop1: detected capacity change from 0 to 4096 [ 66.554137][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 66.566317][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 66.575405][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 66.579277][ T5115] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.587341][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5112] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5114] setpgid(0, 0 [pid 5112] <... openat resumed>) = 3 [pid 5112] chdir("./file1") = 0 [pid 5112] ioctl(4, LOOP_CLR_FD) = 0 [pid 5112] close(4) = 0 [pid 5112] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5114] <... setpgid resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5114] <... openat resumed>) = 3 [pid 5014] newfstatat(AT_FDCWD, "./7/file1", [pid 5114] write(3, "1000", 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5114] <... write resumed>) = 4 [pid 5014] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5114] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5114] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... openat resumed>) = 4 [pid 5114] <... symlink resumed>) = 0 [pid 5014] newfstatat(4, "", [pid 5114] memfd_create("syzkaller", 0) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5114] <... mmap resumed>) = 0x7f770c286000 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./7/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./7" [pid 5016] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./8", 0777 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5016] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] close(3) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] newfstatat(4, "", [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5116 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 66.605140][ T5113] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.622652][ T5113] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 66.625899][ T5112] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 ./strace-static-x86_64: Process 5116 attached [pid 5116] set_robust_list(0x555556b87660, 24 [pid 5012] rmdir("./6/file1") = 0 [pid 5116] <... set_robust_list resumed>) = 0 [pid 5116] chdir("./8") = 0 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5116] setpgid(0, 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5116] <... setpgid resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] close(3) = 0 [pid 5012] rmdir("./6") = 0 [pid 5116] <... openat resumed>) = 3 [pid 5116] write(3, "1000", 4) = 4 [pid 5116] close(3) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5113] <... mount resumed>) = 0 [pid 5016] close(4 [pid 5113] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./7/file1" [pid 5113] <... openat resumed>) = 3 [pid 5012] mkdir("./7", 0777 [pid 5113] chdir("./file1" [pid 5016] <... rmdir resumed>) = 0 [pid 5113] <... chdir resumed>) = 0 [pid 5016] getdents64(3, [pid 5113] ioctl(4, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5113] <... ioctl resumed>) = 0 [pid 5016] close(3 [pid 5113] close(4 [pid 5016] <... close resumed>) = 0 [pid 5113] <... close resumed>) = 0 [pid 5016] rmdir("./7" [pid 5113] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5116] symlink("/dev/binderfs", "./binderfs" [pid 5016] <... rmdir resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5116] <... symlink resumed>) = 0 [pid 5116] memfd_create("syzkaller", 0) = 3 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] <... openat resumed>) = 3 [ 66.683798][ T5117] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.712703][ T5113] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5116] <... mmap resumed>) = 0x7f770c286000 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5016] mkdir("./8", 0777 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] <... mkdir resumed>) = 0 [pid 5012] close(3 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5118 [pid 5016] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5118 attached [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5118] set_robust_list(0x555556b87660, 24 [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5113] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5118] <... set_robust_list resumed>) = 0 [pid 5113] exit_group(0 [pid 5016] close(3 [pid 5118] chdir("./7" [pid 5113] <... exit_group resumed>) = ? [pid 5016] <... close resumed>) = 0 [pid 5118] <... chdir resumed>) = 0 [pid 5113] +++ exited with 0 +++ [ 66.734043][ T5113] Remounting filesystem read-only [ 66.742187][ T5113] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 66.752254][ T5113] NILFS (loop1): repaired inode bitmap for reserved inodes [ 66.761496][ T5113] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.761602][ T5112] Remounting filesystem read-only [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5119 [pid 5118] setpgid(0, 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5118] <... setpgid resumed>) = 0 [pid 5013] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5118] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5118] write(3, "1000", 4) = 4 [pid 5013] <... openat resumed>) = 3 [pid 5118] close(3 [pid 5013] newfstatat(3, "", [pid 5118] <... close resumed>) = 0 ./strace-static-x86_64: Process 5119 attached [pid 5118] symlink("/dev/binderfs", "./binderfs" [pid 5116] <... write resumed>) = 2097152 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5119] set_robust_list(0x555556b87660, 24) = 0 [pid 5118] <... symlink resumed>) = 0 [pid 5116] munmap(0x7f770c286000, 2097152 [pid 5013] getdents64(3, [pid 5116] <... munmap resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5118] memfd_create("syzkaller", 0 [pid 5013] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] chdir("./8") = 0 [pid 5118] <... memfd_create resumed>) = 3 [pid 5116] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5116] <... openat resumed>) = 4 [pid 5119] <... prctl resumed>) = 0 [pid 5118] <... mmap resumed>) = 0x7f770c286000 [pid 5116] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5114] <... write resumed>) = 2097152 [pid 5114] munmap(0x7f770c286000, 2097152 [pid 5119] setpgid(0, 0 [pid 5114] <... munmap resumed>) = 0 [pid 5114] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 66.824604][ T5112] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 66.833388][ T5112] NILFS (loop5): repaired inode bitmap for reserved inodes [ 66.841854][ T5112] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 66.864512][ T5114] loop3: detected capacity change from 0 to 4096 [pid 5114] ioctl(4, LOOP_SET_FD, 3 [pid 5013] unlink("./7/binderfs" [pid 5119] <... setpgid resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] <... openat resumed>) = 3 [pid 5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5116] <... ioctl resumed>) = 0 [pid 5114] <... ioctl resumed>) = 0 [pid 5112] <... openat resumed>) = -1 EIO (Input/output error) [pid 5119] write(3, "1000", 4 [pid 5116] close(3 [pid 5114] close(3 [pid 5112] exit_group(0 [pid 5119] <... write resumed>) = 4 [pid 5116] <... close resumed>) = 0 [pid 5114] <... close resumed>) = 0 [pid 5112] <... exit_group resumed>) = ? [pid 5119] close(3 [pid 5116] mkdir("./file1", 0777 [pid 5114] mkdir("./file1", 0777 [pid 5119] <... close resumed>) = 0 [pid 5112] +++ exited with 0 +++ [pid 5116] <... mkdir resumed>) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5119] symlink("/dev/binderfs", "./binderfs" [pid 5116] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5114] <... mkdir resumed>) = 0 [pid 5119] <... symlink resumed>) = 0 [pid 5118] <... write resumed>) = 2097152 [pid 5114] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5119] memfd_create("syzkaller", 0 [pid 5118] munmap(0x7f770c286000, 2097152 [pid 5119] <... memfd_create resumed>) = 3 [ 66.865883][ T5116] loop2: detected capacity change from 0 to 4096 [ 66.882602][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 66.890541][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 66.908373][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5118] <... munmap resumed>) = 0 [pid 5118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5118] ioctl(4, LOOP_SET_FD, 3 [pid 5017] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5118] <... ioctl resumed>) = 0 [ 66.916156][ T5114] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.917301][ T5116] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.936670][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 66.937105][ T5118] loop0: detected capacity change from 0 to 4096 [ 66.944728][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 66.958724][ T5114] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5118] close(3) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] mkdir("./file1", 0777) = 0 [pid 5118] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./7/binderfs") = 0 [pid 5017] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] <... mount resumed>) = 0 [pid 5114] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5114] chdir("./file1") = 0 [pid 5114] ioctl(4, LOOP_CLR_FD) = 0 [pid 5114] close(4) = 0 [ 66.968544][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 66.978986][ T5116] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 66.991340][ T5118] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 67.002643][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 67.012953][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5114] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = 0 [pid 5116] <... mount resumed>) = 0 [pid 5013] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5116] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5119] <... write resumed>) = 2097152 [pid 5119] munmap(0x7f770c286000, 2097152) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 5116] <... openat resumed>) = 3 [pid 5116] chdir("./file1" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5116] <... chdir resumed>) = 0 [pid 5116] ioctl(4, LOOP_CLR_FD [pid 5013] newfstatat(AT_FDCWD, "./7/file1", [pid 5116] <... ioctl resumed>) = 0 [pid 5116] close(4) = 0 [ 67.018794][ T5114] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.040645][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 67.047835][ T5120] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.060973][ T5121] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5116] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5119] <... ioctl resumed>) = 0 [pid 5119] close(3) = 0 [pid 5119] mkdir("./file1", 0777) = 0 [pid 5119] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 67.076716][ T5116] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.076889][ T5119] loop4: detected capacity change from 0 to 4096 [ 67.106847][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 67.115435][ T5119] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./7/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./7") = 0 [ 67.117437][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 67.126157][ T5118] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 67.132695][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 67.150300][ T5114] Remounting filesystem read-only [ 67.155701][ T5116] Remounting filesystem read-only [ 67.161442][ T5119] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] mkdir("./8", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5124 [ 67.176501][ T5116] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 67.206592][ T5114] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 67.207348][ T5123] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5119] <... mount resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5119] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] <... openat resumed>) = 3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./7/file1", [pid 5119] chdir("./file1") = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5119] ioctl(4, LOOP_CLR_FD [pid 5017] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] <... ioctl resumed>) = 0 [pid 5119] close(4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] <... close resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5119] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... openat resumed>) = 4 [pid 5017] newfstatat(4, "", ./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x555556b87660, 24) = 0 [pid 5124] chdir("./8") = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5124] setpgid(0, 0) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] <... mount resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5124] write(3, "1000", 4) = 4 [pid 5124] close(3) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] getdents64(4, [pid 5118] <... openat resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5118] chdir("./file1" [pid 5124] memfd_create("syzkaller", 0 [pid 5118] <... chdir resumed>) = 0 [pid 5017] getdents64(4, [pid 5124] <... memfd_create resumed>) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5118] ioctl(4, LOOP_CLR_FD [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5118] <... ioctl resumed>) = 0 [pid 5118] close(4 [pid 5017] close(4 [pid 5118] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./7/file1" [ 67.214536][ T5114] NILFS (loop3): repaired inode bitmap for reserved inodes [ 67.237006][ T5119] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.252423][ T5122] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.256467][ T5116] NILFS (loop2): repaired inode bitmap for reserved inodes [ 67.272363][ T5119] Remounting filesystem read-only [pid 5118] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./7") = 0 [ 67.279673][ T5118] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.299263][ T5119] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 67.308875][ T5116] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] mkdir("./8", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5119] <... openat resumed>) = -1 EIO (Input/output error) [pid 5116] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5119] exit_group(0 [pid 5116] exit_group(0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5119] <... exit_group resumed>) = ? [pid 5116] <... exit_group resumed>) = ? [pid 5017] close(3 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5116] +++ exited with 0 +++ [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5125 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5125 attached [pid 5119] +++ exited with 0 +++ [pid 5014] newfstatat(3, "", [pid 5125] set_robust_list(0x555556b87660, 24 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5125] <... set_robust_list resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5014] getdents64(3, [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5125] chdir("./8" [pid 5014] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5125] <... chdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 67.324281][ T5119] NILFS (loop4): repaired inode bitmap for reserved inodes [ 67.333277][ T5119] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.334378][ T5118] Remounting filesystem read-only [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5124] <... write resumed>) = 2097152 [pid 5016] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5125] <... prctl resumed>) = 0 [pid 5125] setpgid(0, 0 [pid 5016] <... openat resumed>) = 3 [pid 5014] unlink("./8/binderfs" [pid 5114] <... openat resumed>) = -1 EIO (Input/output error) [pid 5125] <... setpgid resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5014] <... unlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] getdents64(3, [pid 5014] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... openat resumed>) = 3 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5125] write(3, "1000", 4 [pid 5114] exit_group(0 [pid 5124] munmap(0x7f770c286000, 2097152 [pid 5125] <... write resumed>) = 4 [pid 5114] <... exit_group resumed>) = ? [pid 5016] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... munmap resumed>) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5124] ioctl(4, LOOP_SET_FD, 3 [pid 5125] close(3 [pid 5114] +++ exited with 0 +++ [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 67.375913][ T5114] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.395064][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 67.402804][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 67.408327][ T5124] loop1: detected capacity change from 0 to 4096 [ 67.412041][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5125] <... close resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5125] symlink("/dev/binderfs", "./binderfs" [pid 5124] <... ioctl resumed>) = 0 [pid 5124] close(3) = 0 [pid 5124] mkdir("./file1", 0777) = 0 [pid 5124] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5125] <... symlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5114, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5125] memfd_create("syzkaller", 0 [pid 5016] unlink("./8/binderfs" [ 67.418085][ T5118] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 67.432327][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 67.438228][ T5118] NILFS (loop0): repaired inode bitmap for reserved inodes [ 67.440644][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 67.448403][ T5124] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 67.454636][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5125] <... memfd_create resumed>) = 3 [pid 5016] <... unlink resumed>) = 0 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... mmap resumed>) = 0x7f770c286000 [pid 5015] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./8/binderfs") = 0 [ 67.465322][ T5118] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.489502][ T5124] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 67.495935][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 67.518567][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5015] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] <... openat resumed>) = -1 EIO (Input/output error) [pid 5125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... umount2 resumed>) = 0 [pid 5118] exit_group(0) = ? [pid 5118] +++ exited with 0 +++ [pid 5014] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5124] <... mount resumed>) = 0 [pid 5124] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5124] chdir("./file1") = 0 [pid 5124] ioctl(4, LOOP_CLR_FD) = 0 [ 67.528726][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 67.541282][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 67.552605][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 67.559969][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5124] close(4) = 0 [pid 5014] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", [pid 5014] <... openat resumed>) = 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5125] <... write resumed>) = 2097152 [ 67.569254][ T5126] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.585556][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 67.587419][ T5124] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.593365][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 67.617626][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5125] munmap(0x7f770c286000, 2097152 [pid 5014] newfstatat(4, "", [pid 5012] getdents64(3, [pid 5125] <... munmap resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5125] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] getdents64(4, [pid 5012] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... openat resumed>) = 4 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5125] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5125] <... ioctl resumed>) = 0 [pid 5014] close(4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] unlink("./7/binderfs" [pid 5125] close(3 [pid 5014] rmdir("./8/file1" [pid 5125] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5125] mkdir("./file1", 0777 [pid 5014] getdents64(3, [pid 5012] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... mkdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5125] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] close(3) = 0 [pid 5014] rmdir("./8") = 0 [pid 5014] mkdir("./9", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5127 [pid 5016] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./8/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./8") = 0 [pid 5016] mkdir("./9", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [ 67.624246][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 67.636487][ T5125] loop5: detected capacity change from 0 to 4096 [ 67.637332][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 67.658465][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 67.667813][ T5125] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5128 ./strace-static-x86_64: Process 5128 attached [pid 5128] set_robust_list(0x555556b87660, 24) = 0 [pid 5128] chdir("./9") = 0 ./strace-static-x86_64: Process 5127 attached [pid 5128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] set_robust_list(0x555556b87660, 24 [pid 5128] setpgid(0, 0 [pid 5127] <... set_robust_list resumed>) = 0 [pid 5128] <... setpgid resumed>) = 0 [pid 5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5128] write(3, "1000", 4) = 4 [pid 5128] close(3) = 0 [pid 5128] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5128] memfd_create("syzkaller", 0) = 3 [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 67.686596][ T5124] Remounting filesystem read-only [ 67.690717][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 67.701298][ T5124] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 67.709328][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 67.719179][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5127] chdir("./9") = 0 [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] setpgid(0, 0) = 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5127] write(3, "1000", 4) = 4 [pid 5127] close(3) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5127] memfd_create("syzkaller", 0) = 3 [ 67.730024][ T5125] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 67.736630][ T5124] NILFS (loop1): repaired inode bitmap for reserved inodes [ 67.739952][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 67.760813][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5125] <... mount resumed>) = 0 [pid 5127] <... mmap resumed>) = 0x7f770c286000 [pid 5125] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5125] <... openat resumed>) = 3 [pid 5015] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] chdir("./file1") = 0 [pid 5125] ioctl(4, LOOP_CLR_FD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5125] <... ioctl resumed>) = 0 [pid 5125] close(4 [pid 5015] newfstatat(AT_FDCWD, "./8/file1", [pid 5125] <... close resumed>) = 0 [pid 5125] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 67.790827][ T5129] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.795590][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 67.810322][ T5124] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5124] <... openat resumed>) = -1 EIO (Input/output error) [pid 5124] exit_group(0 [pid 5128] <... write resumed>) = 2097152 [pid 5015] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5128] munmap(0x7f770c286000, 2097152 [pid 5015] <... openat resumed>) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, [pid 5124] <... exit_group resumed>) = ? [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5124] +++ exited with 0 +++ [pid 5015] rmdir("./8/file1" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [pid 5015] <... rmdir resumed>) = 0 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5128] <... munmap resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] <... restart_syscall resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5128] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5015] <... close resumed>) = 0 [pid 5013] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] <... openat resumed>) = 4 [pid 5015] rmdir("./8" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5128] ioctl(4, LOOP_SET_FD, 3 [pid 5013] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [ 67.848907][ T5125] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 67.885205][ T5128] loop4: detected capacity change from 0 to 4096 [pid 5015] mkdir("./9", 0777 [pid 5013] newfstatat(3, "", [pid 5015] <... mkdir resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] getdents64(3, [pid 5015] <... openat resumed>) = 3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./8/binderfs") = 0 [pid 5013] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] <... ioctl resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5128] close(3) = 0 [pid 5128] mkdir("./file1", 0777) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5128] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5130 ./strace-static-x86_64: Process 5130 attached [pid 5127] <... write resumed>) = 2097152 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] set_robust_list(0x555556b87660, 24 [pid 5127] munmap(0x7f770c286000, 2097152 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] <... set_robust_list resumed>) = 0 [pid 5130] chdir("./9") = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] setpgid(0, 0) = 0 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5012] newfstatat(AT_FDCWD, "./7/file1", [pid 5130] write(3, "1000", 4) = 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5130] close(3 [pid 5012] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... close resumed>) = 0 [pid 5130] symlink("/dev/binderfs", "./binderfs" [pid 5127] <... munmap resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] <... symlink resumed>) = 0 [ 67.901681][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 67.914828][ T5125] Remounting filesystem read-only [ 67.924707][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 67.934245][ T5128] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5130] memfd_create("syzkaller", 0) = 3 [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5127] <... openat resumed>) = 4 [pid 5012] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5127] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", [pid 5127] <... ioctl resumed>) = 0 [ 67.957756][ T5125] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 67.966258][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 67.967412][ T5125] NILFS (loop5): repaired inode bitmap for reserved inodes [ 67.981758][ T5127] loop2: detected capacity change from 0 to 4096 [ 67.988870][ T5125] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5127] close(3 [pid 5125] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5127] <... close resumed>) = 0 [pid 5125] exit_group(0 [pid 5012] getdents64(4, [pid 5127] mkdir("./file1", 0777 [pid 5125] <... exit_group resumed>) = ? [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5127] <... mkdir resumed>) = 0 [pid 5125] +++ exited with 0 +++ [pid 5012] getdents64(4, [pid 5127] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5125, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5012] close(4 [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... close resumed>) = 0 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5012] rmdir("./7/file1") = 0 [pid 5012] getdents64(3, [pid 5017] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(3 [pid 5017] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... close resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5012] rmdir("./7" [pid 5017] newfstatat(3, "", [pid 5012] <... rmdir resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] mkdir("./8", 0777 [pid 5017] getdents64(3, [pid 5012] <... mkdir resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5017] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 67.994108][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 68.011476][ T5128] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.027273][ T5127] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.036376][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5012] close(3 [pid 5130] <... write resumed>) = 2097152 [pid 5017] unlink("./8/binderfs" [pid 5012] <... close resumed>) = 0 [pid 5130] munmap(0x7f770c286000, 2097152 [pid 5017] <... unlink resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5130] <... munmap resumed>) = 0 [pid 5128] <... mount resumed>) = 0 [pid 5017] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5132 ./strace-static-x86_64: Process 5132 attached [pid 5132] set_robust_list(0x555556b87660, 24) = 0 [pid 5132] chdir("./8") = 0 [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5128] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5132] setpgid(0, 0 [pid 5130] <... openat resumed>) = 4 [pid 5128] <... openat resumed>) = 3 [pid 5132] <... setpgid resumed>) = 0 [pid 5130] ioctl(4, LOOP_SET_FD, 3 [pid 5128] chdir("./file1" [pid 5013] <... umount2 resumed>) = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5132] write(3, "1000", 4) = 4 [pid 5132] close(3) = 0 [pid 5132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5132] memfd_create("syzkaller", 0) = 3 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 68.054287][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 68.070587][ T5131] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.082263][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 68.091126][ T5127] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.096366][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5130] <... ioctl resumed>) = 0 [pid 5128] <... chdir resumed>) = 0 [pid 5013] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] ioctl(4, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] close(3 [pid 5128] <... ioctl resumed>) = 0 [pid 5130] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./8/file1", [pid 5130] mkdir("./file1", 0777 [pid 5128] close(4 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5130] <... mkdir resumed>) = 0 [pid 5128] <... close resumed>) = 0 [pid 5013] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5128] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 68.108803][ T5130] loop3: detected capacity change from 0 to 4096 [ 68.118238][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 68.126878][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 68.134223][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 68.144027][ T5128] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5013] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... openat resumed>) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5127] <... mount resumed>) = 0 [pid 5013] close(4 [pid 5127] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5013] <... close resumed>) = 0 [ 68.159861][ T5130] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.187339][ T5133] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.199786][ T5130] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5127] chdir("./file1") = 0 [pid 5127] ioctl(4, LOOP_CLR_FD) = 0 [pid 5127] close(4) = 0 [pid 5013] rmdir("./8/file1" [pid 5127] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./8") = 0 [pid 5013] mkdir("./9", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5134 ./strace-static-x86_64: Process 5134 attached [pid 5134] set_robust_list(0x555556b87660, 24) = 0 [ 68.210370][ T5128] Remounting filesystem read-only [ 68.216029][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 68.226189][ T5127] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.230011][ T5128] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5134] chdir("./9") = 0 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5132] <... write resumed>) = 2097152 [pid 5130] <... mount resumed>) = 0 [pid 5134] <... prctl resumed>) = 0 [pid 5130] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5134] setpgid(0, 0 [pid 5130] <... openat resumed>) = 3 [pid 5134] <... setpgid resumed>) = 0 [pid 5132] munmap(0x7f770c286000, 2097152 [pid 5130] chdir("./file1" [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5130] <... chdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5132] <... munmap resumed>) = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5132] ioctl(4, LOOP_SET_FD, 3 [pid 5134] <... openat resumed>) = 3 [pid 5130] ioctl(4, LOOP_CLR_FD [pid 5134] write(3, "1000", 4 [ 68.269352][ T5135] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.283596][ T5127] Remounting filesystem read-only [ 68.297443][ T5128] NILFS (loop4): repaired inode bitmap for reserved inodes [ 68.303117][ T5132] loop0: detected capacity change from 0 to 4096 [pid 5017] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... write resumed>) = 4 [pid 5130] <... ioctl resumed>) = 0 [pid 5128] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] close(3 [pid 5132] <... ioctl resumed>) = 0 [pid 5130] close(4 [pid 5017] newfstatat(AT_FDCWD, "./8/file1", [pid 5134] <... close resumed>) = 0 [pid 5132] close(3 [pid 5130] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs" [pid 5130] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5132] <... close resumed>) = 0 [pid 5017] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... symlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5134] memfd_create("syzkaller", 0 [pid 5017] <... openat resumed>) = 4 [pid 5132] mkdir("./file1", 0777 [pid 5134] <... memfd_create resumed>) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] newfstatat(4, "", [pid 5134] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./8/file1") = 0 [pid 5128] exit_group(0 [pid 5017] getdents64(3, [pid 5128] <... exit_group resumed>) = ? [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./8") = 0 [pid 5017] mkdir("./9", 0777 [pid 5132] <... mkdir resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5132] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5128] +++ exited with 0 +++ [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5128, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [ 68.313109][ T5128] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.317092][ T5127] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 68.338240][ T5130] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./9/binderfs") = 0 [pid 5016] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] close(3 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... close resumed>) = 0 [ 68.372229][ T5132] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.380843][ T5127] NILFS (loop2): repaired inode bitmap for reserved inodes [ 68.391868][ T5130] Remounting filesystem read-only [ 68.396892][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 68.403732][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 68.411899][ T5130] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5136 attached , child_tidptr=0x555556b87650) = 5136 [pid 5136] set_robust_list(0x555556b87660, 24) = 0 [pid 5136] chdir("./9") = 0 [pid 5134] <... write resumed>) = 2097152 [ 68.418587][ T5127] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.441070][ T5132] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.452163][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 68.456206][ T5130] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5134] munmap(0x7f770c286000, 2097152 [pid 5132] <... mount resumed>) = 0 [pid 5130] <... openat resumed>) = -1 EIO (Input/output error) [pid 5127] <... openat resumed>) = -1 EIO (Input/output error) [pid 5127] exit_group(0) = ? [pid 5127] +++ exited with 0 +++ [pid 5136] <... prctl resumed>) = 0 [pid 5136] setpgid(0, 0 [pid 5134] <... munmap resumed>) = 0 [pid 5132] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5130] exit_group(0 [pid 5136] <... setpgid resumed>) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5132] <... openat resumed>) = 3 [pid 5130] <... exit_group resumed>) = ? [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5127, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5130] +++ exited with 0 +++ [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... openat resumed>) = 4 [pid 5132] chdir("./file1" [pid 5136] <... openat resumed>) = 3 [pid 5134] ioctl(4, LOOP_SET_FD, 3 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5132] <... chdir resumed>) = 0 [ 68.463946][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 68.473788][ T5130] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.474960][ T5137] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.494930][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 68.507853][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5014] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5132] ioctl(4, LOOP_CLR_FD [pid 5136] write(3, "1000", 4 [pid 5014] newfstatat(3, "", [pid 5132] <... ioctl resumed>) = 0 [pid 5132] close(4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5136] <... write resumed>) = 4 [pid 5132] <... close resumed>) = 0 [pid 5015] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] getdents64(3, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] close(3 [pid 5015] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5136] <... close resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] symlink("/dev/binderfs", "./binderfs" [pid 5015] newfstatat(3, "", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5136] <... symlink resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5015] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] unlink("./9/binderfs" [pid 5136] memfd_create("syzkaller", 0 [pid 5014] <... unlink resumed>) = 0 [pid 5015] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] <... memfd_create resumed>) = 3 [pid 5015] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./9/binderfs" [pid 5136] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... unlink resumed>) = 0 [pid 5015] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... ioctl resumed>) = 0 [pid 5134] close(3) = 0 [ 68.519632][ T5134] loop1: detected capacity change from 0 to 4096 [ 68.530077][ T5132] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.555147][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5134] mkdir("./file1", 0777) = 0 [pid 5134] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./9/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./9") = 0 [pid 5016] mkdir("./10", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 68.570383][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 68.580193][ T5134] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.585700][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 68.597684][ T5132] Remounting filesystem read-only [ 68.603151][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 68.612091][ T5132] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5016] close(3 [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5138 [ 68.630580][ T5132] NILFS (loop0): repaired inode bitmap for reserved inodes [ 68.637970][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 68.645036][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 68.654367][ T5134] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.664968][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 ./strace-static-x86_64: Process 5138 attached [pid 5138] set_robust_list(0x555556b87660, 24) = 0 [pid 5136] <... write resumed>) = 2097152 [pid 5132] <... openat resumed>) = -1 EIO (Input/output error) [pid 5134] <... mount resumed>) = 0 [pid 5134] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5134] chdir("./file1") = 0 [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5134] close(4 [pid 5138] chdir("./10" [pid 5136] munmap(0x7f770c286000, 2097152 [pid 5134] <... close resumed>) = 0 [pid 5132] exit_group(0 [pid 5138] <... chdir resumed>) = 0 [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5136] <... munmap resumed>) = 0 [pid 5134] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5132] <... exit_group resumed>) = ? [ 68.672297][ T5132] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.681397][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 68.687275][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 68.695774][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 68.704530][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 68.716744][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5138] <... prctl resumed>) = 0 [pid 5136] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5132] +++ exited with 0 +++ [pid 5014] <... umount2 resumed>) = 0 [pid 5138] setpgid(0, 0) = 0 [pid 5136] <... openat resumed>) = 4 [pid 5014] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5138] <... openat resumed>) = 3 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5012] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] <... ioctl resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5138] write(3, "1000", 4) = 4 [pid 5138] close(3) = 0 [pid 5138] symlink("/dev/binderfs", "./binderfs" [pid 5012] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5138] <... symlink resumed>) = 0 [pid 5138] memfd_create("syzkaller", 0) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5136] close(3 [pid 5015] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./8/binderfs") = 0 [ 68.729076][ T5134] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.748314][ T5136] loop5: detected capacity change from 0 to 4096 [ 68.759241][ T5139] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5012] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] <... close resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./9/file1", [pid 5136] mkdir("./file1", 0777 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5136] <... mkdir resumed>) = 0 [pid 5014] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./9/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] rmdir("./9" [pid 5015] newfstatat(AT_FDCWD, "./9/file1", [pid 5014] <... rmdir resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] mkdir("./10", 0777 [pid 5015] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... mkdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] <... openat resumed>) = 3 [ 68.782820][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 68.798995][ T5136] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 68.800458][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 68.821035][ T5134] Remounting filesystem read-only [pid 5015] newfstatat(4, "", [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] getdents64(4, [pid 5014] close(3 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... close resumed>) = 0 [pid 5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] getdents64(4, [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5140 ./strace-static-x86_64: Process 5140 attached [ 68.833090][ T5136] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 68.849707][ T5134] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 68.863917][ T5134] NILFS (loop1): repaired inode bitmap for reserved inodes [ 68.872477][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5015] rmdir("./9/file1" [pid 5140] set_robust_list(0x555556b87660, 24 [pid 5138] <... write resumed>) = 2097152 [pid 5015] <... rmdir resumed>) = 0 [pid 5140] <... set_robust_list resumed>) = 0 [pid 5015] getdents64(3, [pid 5140] chdir("./10" [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5140] <... chdir resumed>) = 0 [pid 5015] close(3 [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... close resumed>) = 0 [pid 5140] <... prctl resumed>) = 0 [pid 5015] rmdir("./9" [pid 5140] setpgid(0, 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5140] <... setpgid resumed>) = 0 [pid 5015] mkdir("./10", 0777 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... mkdir resumed>) = 0 [pid 5140] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5140] write(3, "1000", 4 [pid 5015] <... openat resumed>) = 3 [pid 5140] <... write resumed>) = 4 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5140] close(3 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5140] <... close resumed>) = 0 [pid 5015] close(3 [pid 5140] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... close resumed>) = 0 [pid 5140] <... symlink resumed>) = 0 [pid 5138] munmap(0x7f770c286000, 2097152 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5140] memfd_create("syzkaller", 0) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5142 attached ) = 0x7f770c286000 [pid 5138] <... munmap resumed>) = 0 [pid 5134] <... openat resumed>) = -1 EIO (Input/output error) [pid 5142] set_robust_list(0x555556b87660, 24) = 0 [pid 5138] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5134] exit_group(0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5142 [ 68.881953][ T5134] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.898458][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 68.911387][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 68.919678][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5142] chdir("./10" [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5138] <... openat resumed>) = 4 [pid 5136] <... mount resumed>) = 0 [pid 5134] <... exit_group resumed>) = ? [pid 5136] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5142] <... chdir resumed>) = 0 [pid 5138] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... openat resumed>) = 3 [pid 5136] chdir("./file1") = 0 [pid 5136] ioctl(4, LOOP_CLR_FD) = 0 [pid 5136] close(4 [pid 5134] +++ exited with 0 +++ [pid 5136] <... close resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5136] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] setpgid(0, 0 [pid 5013] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] <... setpgid resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5142] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5142] write(3, "1000", 4 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5142] <... write resumed>) = 4 [pid 5013] getdents64(3, [pid 5142] close(3) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5142] symlink("/dev/binderfs", "./binderfs" [pid 5013] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] <... symlink resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5142] memfd_create("syzkaller", 0 [pid 5013] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5142] <... memfd_create resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] unlink("./9/binderfs" [pid 5142] <... mmap resumed>) = 0x7f770c286000 [pid 5013] <... unlink resumed>) = 0 [ 68.927754][ T5141] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.943126][ T5136] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 68.945978][ T5138] loop4: detected capacity change from 0 to 4096 [ 68.973940][ T5136] Remounting filesystem read-only [pid 5013] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", [pid 5138] <... ioctl resumed>) = 0 [pid 5138] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5138] <... close resumed>) = 0 [pid 5012] getdents64(4, [pid 5138] mkdir("./file1", 0777 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 68.986779][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 68.994341][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 68.994416][ T5136] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5138] <... mkdir resumed>) = 0 [pid 5012] getdents64(4, [pid 5138] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5140] <... write resumed>) = 2097152 [pid 5012] close(4) = 0 [pid 5012] rmdir("./8/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./8") = 0 [pid 5012] mkdir("./9", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5143 ./strace-static-x86_64: Process 5143 attached [pid 5143] set_robust_list(0x555556b87660, 24) = 0 [pid 5143] chdir("./9") = 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5143] setpgid(0, 0) = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5143] write(3, "1000", 4) = 4 [pid 5143] close(3) = 0 [pid 5143] symlink("/dev/binderfs", "./binderfs" [pid 5140] munmap(0x7f770c286000, 2097152 [pid 5143] <... symlink resumed>) = 0 [pid 5143] memfd_create("syzkaller", 0) = 3 [pid 5140] <... munmap resumed>) = 0 [ 69.033879][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 69.036262][ T5138] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.048111][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 69.059230][ T5136] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5142] <... write resumed>) = 2097152 [pid 5140] <... openat resumed>) = 4 [pid 5142] munmap(0x7f770c286000, 2097152 [pid 5140] ioctl(4, LOOP_SET_FD, 3 [pid 5142] <... munmap resumed>) = 0 [pid 5142] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 69.082243][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 69.089983][ T5136] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.092256][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 69.116077][ T5140] loop2: detected capacity change from 0 to 4096 [ 69.117061][ T5138] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5142] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5140] <... ioctl resumed>) = 0 [pid 5142] close(3 [pid 5140] close(3 [pid 5142] <... close resumed>) = 0 [pid 5140] <... close resumed>) = 0 [pid 5142] mkdir("./file1", 0777 [pid 5140] mkdir("./file1", 0777 [pid 5142] <... mkdir resumed>) = 0 [pid 5140] <... mkdir resumed>) = 0 [pid 5140] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5142] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5136] <... openat resumed>) = -1 EIO (Input/output error) [pid 5136] exit_group(0) = ? [pid 5136] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [ 69.134862][ T5142] loop3: detected capacity change from 0 to 4096 [ 69.148509][ T5140] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.158645][ T5142] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5017] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./9/binderfs" [pid 5013] <... umount2 resumed>) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5013] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5143] <... write resumed>) = 2097152 [pid 5013] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 69.176964][ T5140] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 69.188308][ T5142] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 69.208266][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 69.215040][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5138] <... mount resumed>) = 0 [pid 5013] newfstatat(4, "", [pid 5138] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5138] chdir("./file1") = 0 [pid 5138] ioctl(4, LOOP_CLR_FD) = 0 [pid 5143] munmap(0x7f770c286000, 2097152 [pid 5138] close(4) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5138] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] getdents64(4, [pid 5143] <... munmap resumed>) = 0 [pid 5143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5143] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 69.229741][ T5144] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.230310][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 69.253142][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 69.253357][ T5138] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.260609][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5013] getdents64(4, [pid 5142] <... mount resumed>) = 0 [pid 5140] <... mount resumed>) = 0 [pid 5143] <... ioctl resumed>) = 0 [pid 5143] close(3) = 0 [pid 5143] mkdir("./file1", 0777 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5142] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5140] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5142] <... openat resumed>) = 3 [pid 5140] <... openat resumed>) = 3 [pid 5142] chdir("./file1" [pid 5013] close(4 [pid 5142] <... chdir resumed>) = 0 [pid 5140] chdir("./file1" [pid 5013] <... close resumed>) = 0 [pid 5013] rmdir("./9/file1" [pid 5142] ioctl(4, LOOP_CLR_FD [pid 5140] <... chdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5140] ioctl(4, LOOP_CLR_FD [pid 5142] <... ioctl resumed>) = 0 [pid 5140] <... ioctl resumed>) = 0 [pid 5142] close(4 [ 69.278046][ T5143] loop0: detected capacity change from 0 to 4096 [ 69.290390][ T5146] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.290865][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 69.308654][ T5145] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] getdents64(3, [pid 5142] <... close resumed>) = 0 [pid 5140] close(4 [pid 5143] <... mkdir resumed>) = 0 [pid 5143] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5142] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5140] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5140] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] close(3) = 0 [pid 5013] rmdir("./9") = 0 [pid 5013] mkdir("./10", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5147 ./strace-static-x86_64: Process 5147 attached [ 69.327893][ T5143] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.338573][ T5142] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.340022][ T5138] Remounting filesystem read-only [ 69.359611][ T5140] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5147] set_robust_list(0x555556b87660, 24) = 0 [pid 5147] chdir("./10") = 0 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5147] setpgid(0, 0) = 0 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5147] write(3, "1000", 4) = 4 [pid 5147] close(3) = 0 [pid 5147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5147] memfd_create("syzkaller", 0) = 3 [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 69.388525][ T5142] Remounting filesystem read-only [ 69.393449][ T5143] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 69.404087][ T5142] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 69.413453][ T5138] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 69.419285][ T5142] NILFS (loop3): repaired inode bitmap for reserved inodes [ 69.429519][ T5140] Remounting filesystem read-only [ 69.453002][ T5140] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 69.482065][ T5142] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5143] <... mount resumed>) = 0 [pid 5143] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5143] chdir("./file1") = 0 [pid 5143] ioctl(4, LOOP_CLR_FD) = 0 [pid 5143] close(4) = 0 [pid 5143] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./9/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./9") = 0 [pid 5017] mkdir("./10", 0777) = 0 [pid 5142] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5142] exit_group(0 [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5149 ./strace-static-x86_64: Process 5149 attached [pid 5142] <... exit_group resumed>) = ? [pid 5149] set_robust_list(0x555556b87660, 24) = 0 [pid 5149] chdir("./10") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 69.484619][ T5138] NILFS (loop4): repaired inode bitmap for reserved inodes [ 69.504251][ T5140] NILFS (loop2): repaired inode bitmap for reserved inodes [ 69.507448][ T5148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.522909][ T5140] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.527148][ T5143] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5147] <... write resumed>) = 2097152 [pid 5142] +++ exited with 0 +++ [pid 5149] write(3, "1000", 4 [pid 5147] munmap(0x7f770c286000, 2097152 [pid 5149] <... write resumed>) = 4 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5149] close(3 [pid 5015] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5149] symlink("/dev/binderfs", "./binderfs" [pid 5015] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5149] <... symlink resumed>) = 0 [pid 5147] <... munmap resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5149] memfd_create("syzkaller", 0 [pid 5147] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5140] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] newfstatat(3, "", [pid 5149] <... memfd_create resumed>) = 3 [pid 5147] <... openat resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5147] ioctl(4, LOOP_SET_FD, 3 [pid 5140] exit_group(0 [pid 5015] getdents64(3, [pid 5149] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5140] <... exit_group resumed>) = ? [pid 5015] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./10/binderfs") = 0 [ 69.579175][ T5138] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.604005][ T5147] loop1: detected capacity change from 0 to 4096 [ 69.615681][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] <... ioctl resumed>) = 0 [pid 5140] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5147] close(3 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5147] <... close resumed>) = 0 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] mkdir("./file1", 0777 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5147] <... mkdir resumed>) = 0 [pid 5147] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./10/binderfs" [pid 5138] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... unlink resumed>) = 0 [pid 5014] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5138] exit_group(0) = ? [pid 5138] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5138, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./10/binderfs") = 0 [ 69.622503][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 69.638871][ T5143] Remounting filesystem read-only [ 69.648820][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 69.656926][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 69.657457][ T5147] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5016] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... write resumed>) = 2097152 [pid 5149] munmap(0x7f770c286000, 2097152) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 69.663615][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 69.673898][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 69.681231][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 69.688453][ T5143] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 69.703744][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 69.710795][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 69.718859][ T5147] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5149] close(3) = 0 [pid 5149] mkdir("./file1", 0777) = 0 [ 69.727459][ T5149] loop5: detected capacity change from 0 to 4096 [ 69.729160][ T5143] NILFS (loop0): repaired inode bitmap for reserved inodes [ 69.735883][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 69.749489][ T5143] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.751551][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5149] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5147] <... mount resumed>) = 0 [pid 5147] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5143] <... openat resumed>) = -1 EIO (Input/output error) [pid 5147] <... openat resumed>) = 3 [pid 5143] exit_group(0 [pid 5147] chdir("./file1" [pid 5143] <... exit_group resumed>) = ? [pid 5147] <... chdir resumed>) = 0 [pid 5143] +++ exited with 0 +++ [pid 5147] ioctl(4, LOOP_CLR_FD) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5147] close(4 [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5147] <... close resumed>) = 0 [pid 5012] <... restart_syscall resumed>) = 0 [ 69.766505][ T5150] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.772696][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 69.790489][ T5149] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.795659][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 69.808385][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 69.817621][ T5149] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5147] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./9/binderfs") = 0 [ 69.828373][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 69.836201][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 69.847021][ T5147] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.853517][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5012] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] <... umount2 resumed>) = 0 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 69.875912][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 69.882721][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 69.902142][ T5147] Remounting filesystem read-only [ 69.905090][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 69.915480][ T5151] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] getdents64(4, [pid 5149] <... mount resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5149] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] getdents64(4, [pid 5149] <... openat resumed>) = 3 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5149] chdir("./file1" [pid 5014] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] close(4 [pid 5149] <... chdir resumed>) = 0 [pid 5014] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./10/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./10") = 0 [pid 5014] mkdir("./11", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5152 ./strace-static-x86_64: Process 5152 attached [pid 5152] set_robust_list(0x555556b87660, 24) = 0 [pid 5152] chdir("./11") = 0 [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5152] setpgid(0, 0) = 0 [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... close resumed>) = 0 [pid 5149] ioctl(4, LOOP_CLR_FD [pid 5015] rmdir("./10/file1" [pid 5152] <... openat resumed>) = 3 [pid 5152] write(3, "1000", 4) = 4 [pid 5152] close(3) = 0 [pid 5152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5152] memfd_create("syzkaller", 0) = 3 [pid 5149] <... ioctl resumed>) = 0 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] <... rmdir resumed>) = 0 [pid 5149] close(4) = 0 [ 69.917707][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 69.932030][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 69.944585][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 69.956185][ T5147] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 69.964505][ T5147] NILFS (loop1): repaired inode bitmap for reserved inodes [ 69.969237][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5149] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [ 69.985595][ T5149] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 69.995972][ T5147] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.026433][ T5149] Remounting filesystem read-only [pid 5015] rmdir("./10" [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5016] close(4 [pid 5015] mkdir("./11", 0777 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./10/file1" [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5153 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./10" [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./11", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5153 attached ) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5153] set_robust_list(0x555556b87660, 24 [pid 5016] close(3) = 0 [pid 5153] <... set_robust_list resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5153] chdir("./11" [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5154 [pid 5153] <... chdir resumed>) = 0 [pid 5153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5154 attached [pid 5153] setpgid(0, 0 [pid 5154] set_robust_list(0x555556b87660, 24 [pid 5153] <... setpgid resumed>) = 0 [pid 5154] <... set_robust_list resumed>) = 0 [pid 5154] chdir("./11" [ 70.034808][ T5149] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5154] <... chdir resumed>) = 0 [pid 5153] <... openat resumed>) = 3 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5154] memfd_create("syzkaller", 0) = 3 [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5153] write(3, "1000", 4) = 4 [pid 5153] close(3) = 0 [pid 5153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5153] memfd_create("syzkaller", 0 [pid 5012] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5153] <... memfd_create resumed>) = 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] newfstatat(AT_FDCWD, "./9/file1", [pid 5153] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5147] <... openat resumed>) = -1 EIO (Input/output error) [pid 5147] exit_group(0) = ? [pid 5012] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5147] +++ exited with 0 +++ [pid 5012] <... openat resumed>) = 4 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] newfstatat(4, "", [pid 5152] <... write resumed>) = 2097152 [pid 5152] munmap(0x7f770c286000, 2097152 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, [pid 5013] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5152] <... munmap resumed>) = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5013] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] close(4 [ 70.094786][ T5149] NILFS (loop5): repaired inode bitmap for reserved inodes [ 70.129785][ T5149] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5152] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... openat resumed>) = 3 [pid 5012] <... close resumed>) = 0 [pid 5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] newfstatat(3, "", [pid 5012] rmdir("./9/file1" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, [pid 5012] getdents64(3, [pid 5153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5012] rmdir("./9" [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./10/binderfs" [pid 5012] <... rmdir resumed>) = 0 [pid 5152] <... ioctl resumed>) = 0 [pid 5152] close(3 [pid 5013] <... unlink resumed>) = 0 [pid 5012] mkdir("./10", 0777 [pid 5013] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... mkdir resumed>) = 0 [pid 5149] <... openat resumed>) = -1 EIO (Input/output error) [pid 5149] exit_group(0) = ? [pid 5149] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5152] <... close resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5152] mkdir("./file1", 0777 [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... openat resumed>) = 3 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.151887][ T5152] loop2: detected capacity change from 0 to 4096 [ 70.186926][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 70.193669][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5012] close(3 [pid 5017] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... close resumed>) = 0 [pid 5154] <... write resumed>) = 2097152 [pid 5154] munmap(0x7f770c286000, 2097152) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5154] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5154] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5155 attached [pid 5152] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5155 [pid 5152] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./10/binderfs") = 0 [pid 5017] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] <... ioctl resumed>) = 0 [pid 5154] close(3) = 0 [pid 5154] mkdir("./file1", 0777) = 0 [pid 5154] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 70.218304][ T5154] loop4: detected capacity change from 0 to 4096 [ 70.231938][ T5152] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.244152][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 70.247479][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 70.252002][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5155] set_robust_list(0x555556b87660, 24) = 0 [pid 5153] <... write resumed>) = 2097152 [pid 5153] munmap(0x7f770c286000, 2097152 [pid 5155] chdir("./10") = 0 [pid 5153] <... munmap resumed>) = 0 [pid 5153] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5153] ioctl(4, LOOP_SET_FD, 3 [ 70.259286][ T5154] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.275097][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 70.283413][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 70.284982][ T5153] loop3: detected capacity change from 0 to 4096 [ 70.291538][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 70.298656][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5155] setpgid(0, 0) = 0 [pid 5153] <... ioctl resumed>) = 0 [pid 5153] close(3) = 0 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5153] mkdir("./file1", 0777 [pid 5155] <... openat resumed>) = 3 [pid 5153] <... mkdir resumed>) = 0 [pid 5153] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5155] write(3, "1000", 4) = 4 [pid 5155] close(3) = 0 [pid 5155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5155] memfd_create("syzkaller", 0) = 3 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 70.304811][ T5152] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 70.321883][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 70.322722][ T5154] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 70.345749][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 70.354330][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5152] <... mount resumed>) = 0 [pid 5152] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5152] chdir("./file1") = 0 [pid 5152] ioctl(4, LOOP_CLR_FD) = 0 [pid 5152] close(4) = 0 [ 70.362214][ T5153] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.386708][ T5153] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5152] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = 0 [pid 5154] <... mount resumed>) = 0 [pid 5013] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] <... openat resumed>) = 3 [pid 5013] newfstatat(AT_FDCWD, "./10/file1", [pid 5154] chdir("./file1" [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5154] <... chdir resumed>) = 0 [pid 5153] <... mount resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [ 70.406257][ T5152] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.408064][ T5156] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.425025][ T5157] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.451563][ T5152] Remounting filesystem read-only [pid 5013] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] ioctl(4, LOOP_CLR_FD [pid 5153] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] <... ioctl resumed>) = 0 [pid 5153] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5154] close(4 [pid 5153] chdir("./file1" [pid 5017] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./10/file1", [pid 5154] <... close resumed>) = 0 [pid 5153] <... chdir resumed>) = 0 [pid 5152] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... openat resumed>) = 4 [pid 5154] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5153] ioctl(4, LOOP_CLR_FD) = 0 [pid 5152] exit_group(0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(4, "", [pid 5153] close(4 [pid 5152] <... exit_group resumed>) = ? [pid 5017] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5013] getdents64(4, [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 70.461998][ T5158] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.475668][ T5152] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 70.483542][ T5152] NILFS (loop2): repaired inode bitmap for reserved inodes [ 70.491526][ T5152] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] close(4 [pid 5013] getdents64(4, [pid 5017] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5153] <... close resumed>) = 0 [pid 5017] rmdir("./10/file1" [pid 5013] close(4 [pid 5017] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5153] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5152] +++ exited with 0 +++ [pid 5017] getdents64(3, [pid 5013] rmdir("./10/file1" [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5017] close(3 [pid 5013] getdents64(3, [pid 5017] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] rmdir("./10" [pid 5013] close(3 [pid 5017] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5017] mkdir("./11", 0777 [pid 5013] rmdir("./10" [pid 5017] <... mkdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5155] <... write resumed>) = 2097152 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] mkdir("./11", 0777 [pid 5017] <... openat resumed>) = 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... openat resumed>) = 3 [pid 5017] close(3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5155] munmap(0x7f770c286000, 2097152 [pid 5017] <... close resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5155] <... munmap resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] close(3) = 0 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5159 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5160 [pid 5155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5159 attached [ 70.511773][ T5154] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.530338][ T5153] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.547231][ T5154] Remounting filesystem read-only [ 70.553568][ T5154] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 70.557218][ T5155] loop0: detected capacity change from 0 to 4096 [pid 5014] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5160 attached [pid 5160] set_robust_list(0x555556b87660, 24) = 0 [pid 5160] chdir("./11" [pid 5159] set_robust_list(0x555556b87660, 24 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] <... chdir resumed>) = 0 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5160] setpgid(0, 0) = 0 [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] <... set_robust_list resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5160] write(3, "1000", 4) = 4 [pid 5160] close(3) = 0 [pid 5159] chdir("./11" [pid 5014] <... openat resumed>) = 3 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5160] memfd_create("syzkaller", 0) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5159] <... chdir resumed>) = 0 [pid 5014] newfstatat(3, "", [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5155] <... ioctl resumed>) = 0 [pid 5159] <... prctl resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5155] close(3) = 0 [ 70.562291][ T5154] NILFS (loop4): repaired inode bitmap for reserved inodes [ 70.576975][ T5153] Remounting filesystem read-only [ 70.583261][ T5153] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 70.592234][ T5154] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.607747][ T5153] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5155] mkdir("./file1", 0777 [pid 5159] setpgid(0, 0 [pid 5155] <... mkdir resumed>) = 0 [pid 5154] <... openat resumed>) = -1 EIO (Input/output error) [pid 5153] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] getdents64(3, [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5159] <... setpgid resumed>) = 0 [pid 5155] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5154] exit_group(0 [pid 5153] exit_group(0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] <... exit_group resumed>) = ? [pid 5153] <... exit_group resumed>) = ? [pid 5014] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] write(3, "1000", 4 [pid 5154] +++ exited with 0 +++ [pid 5153] +++ exited with 0 +++ [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5159] <... write resumed>) = 4 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5153, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] newfstatat(AT_FDCWD, "./11/binderfs", [ 70.615756][ T5153] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.647242][ T5155] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5159] close(3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5160] <... write resumed>) = 2097152 [pid 5159] <... close resumed>) = 0 [pid 5016] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5160] munmap(0x7f770c286000, 2097152 [pid 5159] symlink("/dev/binderfs", "./binderfs" [pid 5016] newfstatat(3, "", [pid 5015] newfstatat(3, "", [pid 5014] unlink("./11/binderfs" [pid 5159] <... symlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5160] <... munmap resumed>) = 0 [pid 5016] getdents64(3, [pid 5015] getdents64(3, [pid 5014] <... unlink resumed>) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5159] memfd_create("syzkaller", 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... openat resumed>) = 4 [pid 5159] <... memfd_create resumed>) = 3 [pid 5016] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5015] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./11/binderfs" [pid 5015] unlink("./11/binderfs" [pid 5016] <... unlink resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5016] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 70.669028][ T5155] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 70.691794][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 70.699764][ T5160] loop1: detected capacity change from 0 to 4096 [ 70.706976][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... ioctl resumed>) = 0 [pid 5159] <... mmap resumed>) = 0x7f770c286000 [pid 5160] close(3) = 0 [pid 5160] mkdir("./file1", 0777) = 0 [pid 5155] <... mount resumed>) = 0 [ 70.708989][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 70.713887][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 70.721155][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 70.730379][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 70.744005][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 70.745349][ T5161] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5160] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5155] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5155] chdir("./file1") = 0 [pid 5155] ioctl(4, LOOP_CLR_FD) = 0 [pid 5155] close(4) = 0 [ 70.747117][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 70.771153][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 70.780654][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 70.786698][ T5160] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.788695][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 70.807421][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5155] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5159] <... write resumed>) = 2097152 [pid 5159] munmap(0x7f770c286000, 2097152) = 0 [ 70.814911][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 70.815961][ T5160] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 70.823418][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 70.832561][ T5155] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.839927][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 70.861474][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5159] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5159] close(3) = 0 [pid 5159] mkdir("./file1", 0777) = 0 [ 70.872695][ T5155] Remounting filesystem read-only [ 70.880275][ T5159] loop5: detected capacity change from 0 to 4096 [ 70.901004][ T5159] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.911398][ T5155] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5159] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5160] <... mount resumed>) = 0 [pid 5160] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5160] chdir("./file1") = 0 [pid 5160] ioctl(4, LOOP_CLR_FD) = 0 [pid 5160] close(4) = 0 [pid 5160] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 70.915122][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 70.920645][ T5162] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.927927][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 70.937640][ T5155] NILFS (loop0): repaired inode bitmap for reserved inodes [ 70.954663][ T5159] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./11/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./11") = 0 [pid 5014] mkdir("./12", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5155] <... openat resumed>) = -1 EIO (Input/output error) [pid 5155] exit_group(0) = ? [pid 5155] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 70.965406][ T5160] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 70.983081][ T5160] Remounting filesystem read-only [ 70.993748][ T5155] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.012208][ T5160] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] <... mount resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5159] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5159] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5159] chdir("./file1" [pid 5012] newfstatat(3, "", [pid 5159] <... chdir resumed>) = 0 [pid 5159] ioctl(4, LOOP_CLR_FD [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5159] <... ioctl resumed>) = 0 [pid 5012] getdents64(3, [pid 5159] close(4) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5159] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5164 [pid 5015] <... umount2 resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./10/binderfs", ./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x555556b87660, 24) = 0 [pid 5164] chdir("./12") = 0 [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] newfstatat(AT_FDCWD, "./11/file1", [pid 5012] unlink("./10/binderfs" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... unlink resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... prctl resumed>) = 0 [pid 5015] <... openat resumed>) = 4 [pid 5164] setpgid(0, 0 [pid 5015] newfstatat(4, "", [pid 5164] <... setpgid resumed>) = 0 [ 71.029661][ T5163] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.049779][ T5159] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.051132][ T5160] NILFS (loop1): repaired inode bitmap for reserved inodes [ 71.072906][ T5159] Remounting filesystem read-only [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5164] write(3, "1000", 4) = 4 [pid 5164] close(3) = 0 [pid 5164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5164] memfd_create("syzkaller", 0) = 3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(4, [ 71.081536][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 71.102228][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 71.110376][ T5159] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5015] close(4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... close resumed>) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./11/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./11") = 0 [pid 5015] rmdir("./11/file1" [pid 5016] mkdir("./12", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5165 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, ./strace-static-x86_64: Process 5165 attached [pid 5165] set_robust_list(0x555556b87660, 24) = 0 [pid 5165] chdir("./12") = 0 [pid 5165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5165] setpgid(0, 0) = 0 [pid 5165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./11" [pid 5165] write(3, "1000", 4) = 4 [pid 5165] close(3 [pid 5015] <... rmdir resumed>) = 0 [pid 5165] <... close resumed>) = 0 [pid 5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] mkdir("./12", 0777 [pid 5165] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5165] memfd_create("syzkaller", 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5165] <... memfd_create resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5165] <... mmap resumed>) = 0x7f770c286000 [ 71.128345][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 71.136171][ T5159] NILFS (loop5): repaired inode bitmap for reserved inodes [ 71.145168][ T5159] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5159] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... close resumed>) = 0 [pid 5159] exit_group(0) = ? [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5159] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5166 [pid 5017] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./11/binderfs" [pid 5164] <... write resumed>) = 2097152 [ 71.184604][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 71.193260][ T5160] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.193843][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 71.215345][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 ./strace-static-x86_64: Process 5166 attached [pid 5017] <... unlink resumed>) = 0 [pid 5166] set_robust_list(0x555556b87660, 24 [pid 5017] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5166] <... set_robust_list resumed>) = 0 [pid 5166] chdir("./12") = 0 [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5164] munmap(0x7f770c286000, 2097152 [pid 5166] setpgid(0, 0) = 0 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5166] write(3, "1000", 4) = 4 [pid 5166] close(3) = 0 [pid 5166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5166] memfd_create("syzkaller", 0) = 3 [pid 5166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5160] <... openat resumed>) = -1 EIO (Input/output error) [pid 5160] exit_group(0) = ? [pid 5166] <... mmap resumed>) = 0x7f770c286000 [pid 5164] <... munmap resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5164] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... openat resumed>) = 4 [pid 5160] +++ exited with 0 +++ [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5164] ioctl(4, LOOP_SET_FD, 3 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5012] newfstatat(AT_FDCWD, "./10/file1", [pid 5164] <... ioctl resumed>) = 0 [ 71.272789][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 71.288022][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 71.310371][ T5164] loop2: detected capacity change from 0 to 4096 [pid 5164] close(3) = 0 [pid 5164] mkdir("./file1", 0777 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5012] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... mkdir resumed>) = 0 [pid 5164] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(4, "", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", [pid 5012] getdents64(4, [pid 5165] <... write resumed>) = 2097152 [pid 5165] munmap(0x7f770c286000, 2097152) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(4, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5012] close(4 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... close resumed>) = 0 [pid 5013] unlink("./11/binderfs" [pid 5012] rmdir("./10/file1" [pid 5013] <... unlink resumed>) = 0 [pid 5165] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 [pid 5012] getdents64(3, [pid 5165] <... openat resumed>) = 4 [ 71.317502][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 71.325598][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 71.335954][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 71.339069][ T5164] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.353290][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5165] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./10" [pid 5165] <... ioctl resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] mkdir("./11", 0777 [pid 5165] close(3 [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5165] <... close resumed>) = 0 [pid 5165] mkdir("./file1", 0777) = 0 [pid 5165] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5167 [ 71.367336][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 71.369226][ T5165] loop4: detected capacity change from 0 to 4096 [ 71.374659][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 71.400618][ T5165] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.413820][ T5164] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5166] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5167 attached [pid 5167] set_robust_list(0x555556b87660, 24) = 0 [pid 5167] chdir("./11") = 0 [pid 5166] munmap(0x7f770c286000, 2097152 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5167] setpgid(0, 0) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5166] <... munmap resumed>) = 0 [pid 5166] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5167] <... openat resumed>) = 3 [pid 5166] ioctl(4, LOOP_SET_FD, 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5166] <... ioctl resumed>) = 0 [pid 5166] close(3) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5166] mkdir("./file1", 0777 [pid 5017] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5166] <... mkdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5166] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 71.438997][ T5166] loop3: detected capacity change from 0 to 4096 [ 71.460446][ T5165] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 71.460836][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5017] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5164] <... mount resumed>) = 0 [pid 5164] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5164] chdir("./file1") = 0 [pid 5164] ioctl(4, LOOP_CLR_FD) = 0 [pid 5164] close(4) = 0 [ 71.481229][ T5166] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.494261][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 71.502456][ T5166] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 71.517420][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5164] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] rmdir("./11/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5166] <... mount resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./11") = 0 [pid 5166] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] mkdir("./12", 0777 [pid 5166] <... openat resumed>) = 3 [pid 5017] <... mkdir resumed>) = 0 [pid 5166] chdir("./file1" [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5166] <... chdir resumed>) = 0 [pid 5166] ioctl(4, LOOP_CLR_FD [pid 5017] <... openat resumed>) = 3 [pid 5166] <... ioctl resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5166] close(4 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5166] <... close resumed>) = 0 [pid 5017] close(3 [pid 5166] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... close resumed>) = 0 [ 71.525426][ T5164] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.542084][ T5168] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.556219][ T5169] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.568692][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5165] <... mount resumed>) = 0 [pid 5165] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5171 [pid 5165] <... openat resumed>) = 3 [pid 5165] chdir("./file1") = 0 [pid 5165] ioctl(4, LOOP_CLR_FD) = 0 [pid 5165] close(4) = 0 [pid 5165] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = 0 [ 71.583709][ T5166] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.586529][ T5170] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.617104][ T5165] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.632867][ T5164] Remounting filesystem read-only [pid 5167] <... write resumed>) = 2097152 [pid 5167] munmap(0x7f770c286000, 2097152./strace-static-x86_64: Process 5171 attached [pid 5171] set_robust_list(0x555556b87660, 24) = 0 [pid 5167] <... munmap resumed>) = 0 [pid 5171] chdir("./12" [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5171] <... chdir resumed>) = 0 [pid 5167] <... openat resumed>) = 4 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5167] ioctl(4, LOOP_SET_FD, 3 [pid 5171] <... prctl resumed>) = 0 [pid 5013] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] setpgid(0, 0) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./11/file1", [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5171] write(3, "1000", 4 [pid 5013] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... write resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5171] close(3 [pid 5013] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5171] <... close resumed>) = 0 [pid 5171] symlink("/dev/binderfs", "./binderfs" [pid 5013] <... openat resumed>) = 4 [pid 5171] <... symlink resumed>) = 0 [pid 5171] memfd_create("syzkaller", 0) = 3 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 71.638642][ T5166] Remounting filesystem read-only [ 71.647188][ T5164] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 71.655083][ T5164] NILFS (loop2): repaired inode bitmap for reserved inodes [ 71.657058][ T5166] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 71.665983][ T5167] loop0: detected capacity change from 0 to 4096 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./11/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5167] <... ioctl resumed>) = 0 [pid 5167] close(3) = 0 [pid 5167] mkdir("./file1", 0777) = 0 [pid 5167] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] close(3 [pid 5166] <... openat resumed>) = -1 EIO (Input/output error) [ 71.696804][ T5165] Remounting filesystem read-only [ 71.710394][ T5166] NILFS (loop3): repaired inode bitmap for reserved inodes [ 71.722748][ T5165] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 71.723284][ T5166] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5164] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... close resumed>) = 0 [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5166] exit_group(0) = ? [pid 5164] exit_group(0 [pid 5013] rmdir("./11" [pid 5166] +++ exited with 0 +++ [pid 5164] <... exit_group resumed>) = ? [pid 5013] <... rmdir resumed>) = 0 [pid 5164] +++ exited with 0 +++ [pid 5165] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5166, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5013] mkdir("./12", 0777 [pid 5165] exit_group(0 [pid 5015] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5165] <... exit_group resumed>) = ? [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... restart_syscall resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5014] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5165] +++ exited with 0 +++ [pid 5015] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5165, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [ 71.747898][ T5164] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.748818][ T5167] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.764200][ T5165] NILFS (loop4): repaired inode bitmap for reserved inodes [ 71.781518][ T5165] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] <... openat resumed>) = 3 [pid 5014] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... openat resumed>) = 3 [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5014] <... openat resumed>) = 3 [pid 5016] <... restart_syscall resumed>) = 0 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5016] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... openat resumed>) = 3 [pid 5014] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5016] newfstatat(3, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] unlink("./12/binderfs" [pid 5016] getdents64(3, [pid 5014] <... unlink resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... write resumed>) = 2097152 [pid 5015] newfstatat(3, "", [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./12/binderfs") = 0 [ 71.807693][ T5167] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 71.818541][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 71.828043][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 71.836515][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 71.836649][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 71.843557][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5016] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] munmap(0x7f770c286000, 2097152 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] getdents64(3, [pid 5013] close(3 [pid 5171] <... munmap resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... close resumed>) = 0 [pid 5015] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5173 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./12/binderfs") = 0 [pid 5015] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 71.850604][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 71.859831][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 71.875739][ T5172] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.884258][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 71.886971][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 71.894862][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5171] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5167] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5173 attached [pid 5173] set_robust_list(0x555556b87660, 24) = 0 [pid 5173] chdir("./12") = 0 [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5173] setpgid(0, 0) = 0 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5171] ioctl(4, LOOP_SET_FD, 3 [pid 5167] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5173] <... openat resumed>) = 3 [pid 5173] write(3, "1000", 4) = 4 [pid 5173] close(3) = 0 [pid 5173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5173] memfd_create("syzkaller", 0) = 3 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5171] <... ioctl resumed>) = 0 [pid 5167] <... openat resumed>) = 3 [pid 5171] close(3 [pid 5167] chdir("./file1" [pid 5171] <... close resumed>) = 0 [pid 5167] <... chdir resumed>) = 0 [pid 5171] mkdir("./file1", 0777 [pid 5167] ioctl(4, LOOP_CLR_FD [pid 5171] <... mkdir resumed>) = 0 [pid 5167] <... ioctl resumed>) = 0 [pid 5171] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5167] close(4) = 0 [ 71.901719][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 71.911304][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 71.922551][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 71.930693][ T5171] loop5: detected capacity change from 0 to 4096 [ 71.931742][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5167] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [ 71.950875][ T5167] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 71.972460][ T5171] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.978948][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 71.989024][ T5171] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] rmdir("./12/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./12") = 0 [pid 5016] mkdir("./13", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 72.012766][ T5167] Remounting filesystem read-only [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] close(3) = 0 [pid 5171] <... mount resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5171] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] <... openat resumed>) = 4 [pid 5014] newfstatat(4, "", [pid 5171] <... openat resumed>) = 3 [ 72.043925][ T5167] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 72.061743][ T5167] NILFS (loop0): repaired inode bitmap for reserved inodes [ 72.062371][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 72.070604][ T5174] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5171] chdir("./file1" [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5175 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./12/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./12") = 0 [pid 5014] mkdir("./13", 0777 [pid 5171] <... chdir resumed>) = 0 [pid 5171] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5175 attached ) = 0 [pid 5167] <... openat resumed>) = -1 EIO (Input/output error) [pid 5175] set_robust_list(0x555556b87660, 24 [pid 5171] close(4 [pid 5175] <... set_robust_list resumed>) = 0 [pid 5171] <... close resumed>) = 0 [pid 5167] exit_group(0 [pid 5014] <... mkdir resumed>) = 0 [pid 5175] chdir("./13" [pid 5171] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5175] <... chdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5176 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5167] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5176 attached [pid 5176] set_robust_list(0x555556b87660, 24) = 0 [pid 5176] chdir("./13") = 0 [pid 5176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5176] setpgid(0, 0) = 0 [pid 5176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] <... prctl resumed>) = 0 [pid 5175] setpgid(0, 0 [pid 5167] +++ exited with 0 +++ [pid 5176] write(3, "1000", 4 [pid 5175] <... setpgid resumed>) = 0 [pid 5176] <... write resumed>) = 4 [ 72.090305][ T5167] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.119253][ T5171] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.135391][ T5171] Remounting filesystem read-only [pid 5176] close(3 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5176] <... close resumed>) = 0 [pid 5176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5173] <... write resumed>) = 2097152 [pid 5173] munmap(0x7f770c286000, 2097152 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5175] <... openat resumed>) = 3 [pid 5012] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] <... munmap resumed>) = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [pid 5175] write(3, "1000", 4 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 72.145256][ T5171] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 72.153640][ T5171] NILFS (loop5): repaired inode bitmap for reserved inodes [ 72.162397][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 72.167419][ T5173] loop1: detected capacity change from 0 to 4096 [ 72.170763][ T5171] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5175] <... write resumed>) = 4 [pid 5012] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5175] close(3 [pid 5012] <... openat resumed>) = 3 [pid 5175] <... close resumed>) = 0 [pid 5012] newfstatat(3, "", [pid 5175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5173] <... ioctl resumed>) = 0 [pid 5173] close(3) = 0 [pid 5173] mkdir("./file1", 0777) = 0 [pid 5012] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5173] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 72.191783][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5012] unlink("./11/binderfs" [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5171] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... umount2 resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5171] exit_group(0 [pid 5012] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... exit_group resumed>) = ? [pid 5015] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] +++ exited with 0 +++ [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./12/file1", [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5015] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... openat resumed>) = 4 [pid 5017] <... openat resumed>) = 3 [ 72.229549][ T5173] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.242131][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 72.255300][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5017] newfstatat(3, "", [pid 5015] newfstatat(4, "", [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5015] getdents64(4, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, [pid 5176] <... write resumed>) = 2097152 [pid 5175] <... write resumed>) = 2097152 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5175] munmap(0x7f770c286000, 2097152 [pid 5017] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5176] munmap(0x7f770c286000, 2097152) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5176] ioctl(4, LOOP_SET_FD, 3 [pid 5175] <... munmap resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] close(4 [pid 5175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5017] unlink("./12/binderfs" [pid 5015] <... close resumed>) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5175] <... openat resumed>) = 4 [pid 5015] rmdir("./12/file1") = 0 [pid 5175] ioctl(4, LOOP_SET_FD, 3 [ 72.274757][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 72.290393][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 72.295220][ T5173] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 72.298587][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 72.312298][ T5176] loop2: detected capacity change from 0 to 4096 [ 72.317136][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5017] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5176] <... ioctl resumed>) = 0 [pid 5176] close(3) = 0 [pid 5176] mkdir("./file1", 0777 [pid 5015] getdents64(3, [pid 5176] <... mkdir resumed>) = 0 [pid 5176] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5175] <... ioctl resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5175] close(3 [pid 5015] <... close resumed>) = 0 [pid 5175] <... close resumed>) = 0 [pid 5173] <... mount resumed>) = 0 [pid 5173] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5173] chdir("./file1") = 0 [pid 5173] ioctl(4, LOOP_CLR_FD) = 0 [pid 5173] close(4 [pid 5175] mkdir("./file1", 0777 [pid 5173] <... close resumed>) = 0 [ 72.332250][ T5175] loop4: detected capacity change from 0 to 4096 [ 72.339719][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 72.342892][ T5176] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.347390][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 72.365257][ T5177] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] rmdir("./12" [pid 5173] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5175] <... mkdir resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5175] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] mkdir("./13", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5012] <... umount2 resumed>) = 0 [ 72.379593][ T5173] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.385715][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 72.404039][ T5175] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.406654][ T5176] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5012] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] newfstatat(AT_FDCWD, "./11/file1", [pid 5015] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5178 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5178 attached [ 72.426086][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 72.433850][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 72.441232][ T5175] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 72.454897][ T5173] Remounting filesystem read-only [ 72.460563][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 72.472479][ T5173] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5012] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5178] set_robust_list(0x555556b87660, 24) = 0 [pid 5012] newfstatat(4, "", [pid 5178] chdir("./13") = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] getdents64(4, [pid 5178] <... prctl resumed>) = 0 [pid 5175] <... mount resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5178] setpgid(0, 0 [pid 5175] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] getdents64(4, [pid 5178] <... setpgid resumed>) = 0 [pid 5173] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... umount2 resumed>) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5175] <... openat resumed>) = 3 [pid 5173] exit_group(0 [pid 5017] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4 [pid 5175] chdir("./file1" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5178] <... openat resumed>) = 3 [pid 5175] <... chdir resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./12/file1", [pid 5012] <... close resumed>) = 0 [pid 5178] write(3, "1000", 4 [pid 5175] ioctl(4, LOOP_CLR_FD [pid 5173] <... exit_group resumed>) = ? [pid 5178] <... write resumed>) = 4 [pid 5175] <... ioctl resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] rmdir("./11/file1" [pid 5178] close(3 [pid 5175] close(4 [pid 5017] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] <... close resumed>) = 0 [pid 5175] <... close resumed>) = 0 [pid 5173] +++ exited with 0 +++ [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... rmdir resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5178] symlink("/dev/binderfs", "./binderfs" [pid 5175] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] restart_syscall(<... resuming interrupted clone ...> [ 72.481103][ T5173] NILFS (loop1): repaired inode bitmap for reserved inodes [ 72.489175][ T5173] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.504473][ T5179] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5012] getdents64(3, [pid 5013] <... restart_syscall resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5178] <... symlink resumed>) = 0 [pid 5013] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] newfstatat(4, "", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(3 [pid 5013] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./12/binderfs") = 0 [pid 5013] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] memfd_create("syzkaller", 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... close resumed>) = 0 [pid 5178] <... memfd_create resumed>) = 3 [pid 5017] getdents64(4, [pid 5012] rmdir("./11" [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... rmdir resumed>) = 0 [pid 5178] <... mmap resumed>) = 0x7f770c286000 [pid 5017] getdents64(4, [pid 5012] mkdir("./12", 0777 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4 [pid 5012] <... mkdir resumed>) = 0 [pid 5017] <... close resumed>) = 0 [ 72.544026][ T5175] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.559903][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 72.567734][ T5175] Remounting filesystem read-only [ 72.576088][ T5175] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 72.585360][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] rmdir("./12/file1" [pid 5012] <... openat resumed>) = 3 [pid 5176] <... mount resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5176] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5176] chdir("./file1") = 0 [pid 5176] ioctl(4, LOOP_CLR_FD) = 0 [pid 5176] close(4) = 0 [pid 5176] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] getdents64(3, [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5017] close(3 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./12") = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5181 [ 72.598662][ T5180] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.606350][ T5176] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.615578][ T5175] NILFS (loop4): repaired inode bitmap for reserved inodes [ 72.636823][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] mkdir("./13", 0777./strace-static-x86_64: Process 5181 attached [pid 5181] set_robust_list(0x555556b87660, 24) = 0 [pid 5181] chdir("./12") = 0 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] setpgid(0, 0) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5181] write(3, "1000", 4) = 4 [pid 5181] close(3) = 0 [pid 5181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5181] memfd_create("syzkaller", 0) = 3 [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5181] <... mmap resumed>) = 0x7f770c286000 ./strace-static-x86_64: Process 5182 attached [pid 5178] <... write resumed>) = 2097152 [pid 5175] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5182 [pid 5182] set_robust_list(0x555556b87660, 24 [pid 5178] munmap(0x7f770c286000, 2097152 [pid 5182] <... set_robust_list resumed>) = 0 [pid 5178] <... munmap resumed>) = 0 [pid 5175] exit_group(0 [pid 5182] chdir("./13" [pid 5178] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5175] <... exit_group resumed>) = ? [pid 5182] <... chdir resumed>) = 0 [pid 5182] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5178] <... openat resumed>) = 4 [pid 5182] <... prctl resumed>) = 0 [ 72.637797][ T5175] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5182] setpgid(0, 0) = 0 [pid 5178] <... ioctl resumed>) = 0 [pid 5175] +++ exited with 0 +++ [pid 5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5178] close(3 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5182] <... openat resumed>) = 3 [pid 5178] <... close resumed>) = 0 [pid 5182] write(3, "1000", 4) = 4 [pid 5016] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] close(3 [pid 5178] mkdir("./file1", 0777 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5182] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5182] symlink("/dev/binderfs", "./binderfs" [pid 5016] <... openat resumed>) = 3 [pid 5182] <... symlink resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5182] memfd_create("syzkaller", 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5182] <... memfd_create resumed>) = 3 [pid 5178] <... mkdir resumed>) = 0 [pid 5016] getdents64(3, [pid 5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5178] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5182] <... mmap resumed>) = 0x7f770c286000 [ 72.694306][ T5178] loop3: detected capacity change from 0 to 4096 [ 72.695336][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 72.717310][ T5176] Remounting filesystem read-only [ 72.725945][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 72.745837][ T5178] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.746882][ T5176] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 72.755869][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 72.764776][ T5176] NILFS (loop2): repaired inode bitmap for reserved inodes [ 72.786263][ T5178] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5016] unlink("./13/binderfs") = 0 [pid 5016] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] <... write resumed>) = 2097152 [pid 5182] munmap(0x7f770c286000, 2097152 [pid 5013] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5182] <... munmap resumed>) = 0 [pid 5181] <... write resumed>) = 2097152 [pid 5181] munmap(0x7f770c286000, 2097152) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5182] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 72.794523][ T5176] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.820225][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 72.837440][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5013] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] <... openat resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5181] <... openat resumed>) = 4 [pid 5181] ioctl(4, LOOP_SET_FD, 3 [pid 5182] ioctl(4, LOOP_SET_FD, 3 [pid 5013] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5176] <... openat resumed>) = -1 EIO (Input/output error) [pid 5176] exit_group(0) = ? [pid 5176] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5176, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5181] <... ioctl resumed>) = 0 [pid 5181] close(3) = 0 [pid 5181] mkdir("./file1", 0777 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./13/binderfs" [pid 5182] <... ioctl resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5178] <... mount resumed>) = 0 [pid 5013] newfstatat(4, "", [pid 5178] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5178] <... openat resumed>) = 3 [pid 5178] chdir("./file1" [pid 5014] <... unlink resumed>) = 0 [pid 5013] getdents64(4, [pid 5178] <... chdir resumed>) = 0 [pid 5014] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5182] close(3 [pid 5178] ioctl(4, LOOP_CLR_FD [pid 5013] getdents64(4, [pid 5181] <... mkdir resumed>) = 0 [ 72.846486][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 72.846819][ T5183] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.857771][ T5181] loop0: detected capacity change from 0 to 4096 [ 72.865809][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 72.878879][ T5182] loop5: detected capacity change from 0 to 4096 [ 72.889225][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5181] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5182] <... close resumed>) = 0 [pid 5178] <... ioctl resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5182] mkdir("./file1", 0777 [pid 5178] close(4 [pid 5013] close(4 [pid 5182] <... mkdir resumed>) = 0 [pid 5178] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5013] <... close resumed>) = 0 [ 72.891530][ T5181] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.897435][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 72.914963][ T5181] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 72.925323][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5182] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5178] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./12/file1") = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(3, [pid 5016] newfstatat(AT_FDCWD, "./13/file1", [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] close(3) = 0 [pid 5016] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./12" [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... rmdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] mkdir("./13", 0777 [pid 5016] <... openat resumed>) = 4 [pid 5013] <... mkdir resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5016] getdents64(4, [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5016] close(4 [pid 5013] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] rmdir("./13/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./13") = 0 [pid 5016] mkdir("./14", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5184 [pid 5016] <... openat resumed>) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5184 attached [ 72.943911][ T5178] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 72.955863][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 72.967349][ T5182] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.990412][ T5178] Remounting filesystem read-only [pid 5184] set_robust_list(0x555556b87660, 24 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5184] <... set_robust_list resumed>) = 0 [pid 5016] close(3) = 0 [pid 5184] chdir("./13" [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5184] <... chdir resumed>) = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5185 [ 72.996623][ T5178] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 73.004637][ T5178] NILFS (loop3): repaired inode bitmap for reserved inodes [ 73.015053][ T5182] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.018650][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5184] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5185 attached [pid 5185] set_robust_list(0x555556b87660, 24) = 0 [pid 5185] chdir("./14") = 0 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5185] setpgid(0, 0) = 0 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5185] write(3, "1000", 4) = 4 [pid 5185] close(3) = 0 [pid 5185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5185] memfd_create("syzkaller", 0) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5184] write(3, "1000", 4) = 4 [pid 5181] <... mount resumed>) = 0 [pid 5184] close(3 [pid 5181] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5184] <... close resumed>) = 0 [pid 5181] chdir("./file1" [pid 5184] symlink("/dev/binderfs", "./binderfs" [pid 5181] <... chdir resumed>) = 0 [pid 5184] <... symlink resumed>) = 0 [pid 5181] ioctl(4, LOOP_CLR_FD [pid 5184] memfd_create("syzkaller", 0 [pid 5181] <... ioctl resumed>) = 0 [pid 5184] <... memfd_create resumed>) = 3 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5181] close(4 [pid 5184] <... mmap resumed>) = 0x7f770c286000 [pid 5181] <... close resumed>) = 0 [ 73.044090][ T5186] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.076560][ T5181] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5181] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5182] <... mount resumed>) = 0 [pid 5182] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5182] chdir("./file1") = 0 [pid 5182] ioctl(4, LOOP_CLR_FD) = 0 [pid 5182] close(4) = 0 [ 73.085844][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 73.102314][ T5178] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.106450][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 73.124673][ T5187] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5182] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5184] <... write resumed>) = 2097152 [pid 5184] munmap(0x7f770c286000, 2097152) = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 73.143401][ T5182] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.155213][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 73.169821][ T5181] Remounting filesystem read-only [ 73.176839][ T5181] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 73.185412][ T5184] loop1: detected capacity change from 0 to 4096 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5184] <... ioctl resumed>) = 0 [pid 5184] close(3) = 0 [pid 5184] mkdir("./file1", 0777 [pid 5185] <... write resumed>) = 2097152 [pid 5178] <... openat resumed>) = -1 EIO (Input/output error) [pid 5178] exit_group(0) = ? [pid 5178] +++ exited with 0 +++ [pid 5184] <... mkdir resumed>) = 0 [pid 5184] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5178, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5015] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] munmap(0x7f770c286000, 2097152) = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 73.192540][ T5181] NILFS (loop0): repaired inode bitmap for reserved inodes [ 73.200796][ T5182] Remounting filesystem read-only [ 73.207335][ T5181] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.217528][ T5182] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 73.236938][ T5184] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5185] ioctl(4, LOOP_SET_FD, 3 [pid 5181] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = 0 [pid 5185] <... ioctl resumed>) = 0 [pid 5185] close(3 [pid 5015] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] <... close resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5181] exit_group(0 [pid 5015] newfstatat(3, "", [pid 5014] newfstatat(AT_FDCWD, "./13/file1", [pid 5185] mkdir("./file1", 0777) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5185] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5014] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./13/binderfs" [pid 5014] <... openat resumed>) = 4 [pid 5015] <... unlink resumed>) = 0 [pid 5015] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5181] <... exit_group resumed>) = ? [ 73.244878][ T5185] loop4: detected capacity change from 0 to 4096 [ 73.256635][ T5184] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.271096][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 73.276478][ T5185] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.279109][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5014] getdents64(4, [pid 5181] +++ exited with 0 +++ [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5014] close(4 [ 73.295200][ T5182] NILFS (loop5): repaired inode bitmap for reserved inodes [ 73.298404][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 73.310513][ T5185] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.312277][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 73.321685][ T5182] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.328356][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5012] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] rmdir("./13/file1" [pid 5012] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5012] newfstatat(3, "", [pid 5185] <... mount resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5185] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] getdents64(3, [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5185] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] close(3 [pid 5012] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5185] chdir("./file1" [pid 5014] rmdir("./13" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... chdir resumed>) = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [pid 5185] close(4 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5185] <... close resumed>) = 0 [pid 5185] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] mkdir("./14", 0777 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5184] <... mount resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5012] unlink("./12/binderfs" [pid 5184] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] <... unlink resumed>) = 0 [ 73.357569][ T5189] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.367039][ T5185] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.369120][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 73.383863][ T5188] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5184] <... openat resumed>) = 3 [pid 5182] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... openat resumed>) = 3 [pid 5012] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5184] chdir("./file1" [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5182] exit_group(0 [pid 5184] <... chdir resumed>) = 0 [pid 5182] <... exit_group resumed>) = ? [pid 5184] ioctl(4, LOOP_CLR_FD [pid 5014] close(3 [pid 5182] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5182, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5184] <... ioctl resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5184] close(4 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5184] <... close resumed>) = 0 ./strace-static-x86_64: Process 5190 attached [pid 5190] set_robust_list(0x555556b87660, 24) = 0 [pid 5190] chdir("./14") = 0 [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5190] setpgid(0, 0) = 0 [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] <... umount2 resumed>) = 0 [pid 5190] write(3, "1000", 4) = 4 [pid 5190] close(3) = 0 [pid 5190] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5190 [ 73.408672][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 73.416901][ T5185] Remounting filesystem read-only [ 73.422566][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 73.431145][ T5185] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 73.441508][ T5184] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", [pid 5190] memfd_create("syzkaller", 0) = 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./13/file1", [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5190] <... mmap resumed>) = 0x7f770c286000 [pid 5015] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./13/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./13") = 0 [pid 5015] mkdir("./14", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./13/binderfs") = 0 [pid 5017] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5191 ./strace-static-x86_64: Process 5191 attached [pid 5191] set_robust_list(0x555556b87660, 24) = 0 [pid 5191] chdir("./14") = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] memfd_create("syzkaller", 0) = 3 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 73.457450][ T5185] NILFS (loop4): repaired inode bitmap for reserved inodes [ 73.464751][ T5185] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.482253][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 73.495223][ T5184] Remounting filesystem read-only [ 73.525818][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 73.538907][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 73.560058][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 73.560103][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 73.576161][ T5184] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 73.584094][ T5184] NILFS (loop1): repaired inode bitmap for reserved inodes [ 73.602268][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 73.602891][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5185] <... openat resumed>) = -1 EIO (Input/output error) [pid 5185] exit_group(0) = ? [pid 5190] <... write resumed>) = 2097152 [pid 5185] +++ exited with 0 +++ [pid 5190] munmap(0x7f770c286000, 2097152 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5016] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./14/binderfs") = 0 [pid 5190] <... munmap resumed>) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... openat resumed>) = 4 [pid 5190] ioctl(4, LOOP_SET_FD, 3 [pid 5191] <... write resumed>) = 2097152 [ 73.609561][ T5184] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.643622][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 73.644550][ T5190] loop2: detected capacity change from 0 to 4096 [ 73.655987][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 73.664748][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5191] munmap(0x7f770c286000, 2097152) = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5191] ioctl(4, LOOP_SET_FD, 3 [pid 5190] <... ioctl resumed>) = 0 [pid 5190] close(3) = 0 [pid 5190] mkdir("./file1", 0777) = 0 [pid 5190] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5191] <... ioctl resumed>) = 0 [pid 5191] close(3) = 0 [pid 5191] mkdir("./file1", 0777) = 0 [pid 5191] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 73.674261][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 73.678431][ T5191] loop3: detected capacity change from 0 to 4096 [ 73.689659][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 73.707754][ T5190] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.711145][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5012] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./12/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5184] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] rmdir("./12" [pid 5184] exit_group(0 [pid 5012] <... rmdir resumed>) = 0 [pid 5184] <... exit_group resumed>) = ? [pid 5012] mkdir("./13", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5184] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5192 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./13/binderfs") = 0 [pid 5013] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5192 attached [pid 5192] set_robust_list(0x555556b87660, 24) = 0 [pid 5192] chdir("./13") = 0 [pid 5192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5192] setpgid(0, 0) = 0 [ 73.734108][ T5191] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.745041][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 73.758898][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 73.767251][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5192] write(3, "1000", 4) = 4 [pid 5192] close(3) = 0 [pid 5192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 73.781817][ T5190] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.792005][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 73.803134][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 73.818231][ T5191] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 73.836867][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 73.864513][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... umount2 resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5017] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... mount resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5017] newfstatat(AT_FDCWD, "./13/file1", [pid 5016] newfstatat(AT_FDCWD, "./14/file1", [pid 5190] chdir("./file1") = 0 [pid 5190] ioctl(4, LOOP_CLR_FD [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5190] <... ioctl resumed>) = 0 [pid 5190] close(4) = 0 [pid 5190] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 73.889873][ T5193] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.916527][ T5190] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 73.929431][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... mount resumed>) = 0 [pid 5191] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5191] chdir("./file1") = 0 [pid 5191] ioctl(4, LOOP_CLR_FD) = 0 [pid 5191] close(4) = 0 [pid 5191] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... openat resumed>) = 4 [pid 5016] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] newfstatat(4, "", [pid 5016] <... openat resumed>) = 4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5016] getdents64(4, [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(4, [pid 5017] close(4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] close(4) = 0 [pid 5017] rmdir("./13/file1" [pid 5016] rmdir("./14/file1" [pid 5017] <... rmdir resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, [pid 5016] getdents64(3, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] close(3 [pid 5017] rmdir("./13" [pid 5016] <... close resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5016] rmdir("./14" [pid 5017] mkdir("./14", 0777 [pid 5016] <... rmdir resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [ 73.932023][ T5194] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.952570][ T5191] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] mkdir("./15", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5192] <... write resumed>) = 2097152 [pid 5017] close(3 [pid 5016] <... openat resumed>) = 3 [pid 5192] munmap(0x7f770c286000, 2097152) = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5192] ioctl(4, LOOP_SET_FD, 3 [pid 5017] <... close resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5195 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5196 attached ./strace-static-x86_64: Process 5195 attached , child_tidptr=0x555556b87650) = 5196 [pid 5195] set_robust_list(0x555556b87660, 24) = 0 [pid 5195] chdir("./14") = 0 [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5195] setpgid(0, 0) = 0 [pid 5196] set_robust_list(0x555556b87660, 24) = 0 [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5195] write(3, "1000", 4) = 4 [pid 5195] close(3) = 0 [pid 5195] symlink("/dev/binderfs", "./binderfs") = 0 [ 73.986606][ T5190] Remounting filesystem read-only [ 73.994344][ T5190] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 74.000035][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 74.005194][ T5192] loop0: detected capacity change from 0 to 4096 [ 74.017973][ T5191] Remounting filesystem read-only [ 74.024972][ T5191] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5195] memfd_create("syzkaller", 0 [pid 5196] chdir("./15" [pid 5195] <... memfd_create resumed>) = 3 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5196] <... chdir resumed>) = 0 [pid 5195] <... mmap resumed>) = 0x7f770c286000 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5196] setpgid(0, 0) = 0 [pid 5192] <... ioctl resumed>) = 0 [pid 5192] close(3) = 0 [pid 5192] mkdir("./file1", 0777 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5192] <... mkdir resumed>) = 0 [pid 5196] write(3, "1000", 4 [pid 5192] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5196] <... write resumed>) = 4 [pid 5196] close(3) = 0 [ 74.044027][ T5190] NILFS (loop2): repaired inode bitmap for reserved inodes [ 74.065855][ T5191] NILFS (loop3): repaired inode bitmap for reserved inodes [ 74.073227][ T5191] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5190] <... openat resumed>) = -1 EIO (Input/output error) [pid 5190] exit_group(0) = ? [ 74.096942][ T5190] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5190] +++ exited with 0 +++ [pid 5191] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5191] exit_group(0) = ? [pid 5014] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./14/binderfs") = 0 [pid 5014] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... write resumed>) = 2097152 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 74.139230][ T5192] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.164714][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 74.164788][ T5192] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5195] munmap(0x7f770c286000, 2097152 [pid 5013] <... umount2 resumed>) = 0 [pid 5195] <... munmap resumed>) = 0 [pid 5015] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... ioctl resumed>) = 0 [pid 5195] close(3) = 0 [pid 5195] mkdir("./file1", 0777 [pid 5015] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(AT_FDCWD, "./13/file1", [pid 5195] <... mkdir resumed>) = 0 [pid 5015] unlink("./14/binderfs" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 74.187479][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 74.196478][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 74.209657][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 74.221040][ T5195] loop5: detected capacity change from 0 to 4096 [pid 5013] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... unlink resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, [pid 5196] <... write resumed>) = 2097152 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5196] munmap(0x7f770c286000, 2097152 [pid 5013] getdents64(4, [pid 5196] <... munmap resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [ 74.234004][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 74.234250][ T5195] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.250111][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 74.251533][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 74.258698][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 74.265980][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 74.273874][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [pid 5196] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] close(4 [pid 5196] <... openat resumed>) = 4 [pid 5013] <... close resumed>) = 0 [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5013] rmdir("./13/file1") = 0 [pid 5192] <... mount resumed>) = 0 [pid 5192] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] getdents64(3, [pid 5192] <... openat resumed>) = 3 [pid 5192] chdir("./file1" [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5192] <... chdir resumed>) = 0 [pid 5192] ioctl(4, LOOP_CLR_FD) = 0 [pid 5192] close(4) = 0 [pid 5013] <... close resumed>) = 0 [ 74.287450][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 74.287712][ T5197] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.295365][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 74.314414][ T5195] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 74.322679][ T5196] loop4: detected capacity change from 0 to 4096 [pid 5192] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] rmdir("./13") = 0 [pid 5013] mkdir("./14", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5196] <... ioctl resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5196] close(3 [pid 5014] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./14/file1", [pid 5196] <... close resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5196] mkdir("./file1", 0777 [pid 5013] close(3 [pid 5014] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5196] <... mkdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5196] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./14/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./14") = 0 [pid 5014] mkdir("./15", 0777 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5199 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5200 [ 74.334154][ T5192] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.376888][ T5196] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5195] <... mount resumed>) = 0 [pid 5195] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5195] chdir("./file1") = 0 [pid 5195] ioctl(4, LOOP_CLR_FD) = 0 [pid 5195] close(4) = 0 [pid 5195] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 5199 attached [pid 5199] set_robust_list(0x555556b87660, 24./strace-static-x86_64: Process 5200 attached ) = 0 [pid 5200] set_robust_list(0x555556b87660, 24) = 0 [pid 5199] chdir("./14" [pid 5200] chdir("./15" [pid 5199] <... chdir resumed>) = 0 [pid 5200] <... chdir resumed>) = 0 [pid 5200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5200] <... prctl resumed>) = 0 [pid 5200] setpgid(0, 0 [pid 5199] <... prctl resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5200] <... setpgid resumed>) = 0 [pid 5200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5199] setpgid(0, 0 [pid 5200] <... openat resumed>) = 3 [pid 5200] write(3, "1000", 4) = 4 [pid 5200] close(3) = 0 [pid 5200] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5200] memfd_create("syzkaller", 0) = 3 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5199] <... setpgid resumed>) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 74.380514][ T5192] Remounting filesystem read-only [ 74.397639][ T5195] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.413384][ T5198] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.430656][ T5196] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] <... openat resumed>) = 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5199] write(3, "1000", 4 [pid 5015] newfstatat(AT_FDCWD, "./14/file1", [pid 5199] <... write resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5199] close(3) = 0 [pid 5015] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5199] <... symlink resumed>) = 0 [pid 5015] <... openat resumed>) = 4 [pid 5015] newfstatat(4, "", [pid 5199] memfd_create("syzkaller", 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5199] <... memfd_create resumed>) = 3 [pid 5015] getdents64(4, [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, [pid 5199] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./14/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [ 74.442033][ T5192] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 74.481834][ T5192] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5015] rmdir("./14") = 0 [pid 5015] mkdir("./15", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5202 [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5202 attached [ 74.493553][ T5195] Remounting filesystem read-only [pid 5202] set_robust_list(0x555556b87660, 24) = 0 [pid 5202] chdir("./15") = 0 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5202] setpgid(0, 0) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5202] write(3, "1000", 4) = 4 [pid 5202] close(3) = 0 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5202] memfd_create("syzkaller", 0) = 3 [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5196] <... mount resumed>) = 0 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5196] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5196] chdir("./file1") = 0 [pid 5199] <... write resumed>) = 2097152 [pid 5199] munmap(0x7f770c286000, 2097152 [pid 5196] ioctl(4, LOOP_CLR_FD) = 0 [ 74.516719][ T5201] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.528316][ T5195] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 74.546229][ T5192] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5196] close(4) = 0 [pid 5199] <... munmap resumed>) = 0 [pid 5196] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5199] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5199] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5192] <... openat resumed>) = -1 EIO (Input/output error) [ 74.575613][ T5195] NILFS (loop5): repaired inode bitmap for reserved inodes [ 74.584822][ T5196] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.603131][ T5199] loop1: detected capacity change from 0 to 4096 [ 74.605624][ T5195] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5199] close(3) = 0 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5199] mkdir("./file1", 0777 [pid 5192] exit_group(0 [pid 5199] <... mkdir resumed>) = 0 [pid 5192] <... exit_group resumed>) = ? [pid 5199] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5200] <... write resumed>) = 2097152 [pid 5192] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5192, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5200] munmap(0x7f770c286000, 2097152) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5012] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5202] <... write resumed>) = 2097152 [pid 5012] <... openat resumed>) = 3 [ 74.626392][ T5196] Remounting filesystem read-only [ 74.638252][ T5199] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.648196][ T5196] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 74.660349][ T5200] loop2: detected capacity change from 0 to 4096 [ 74.661437][ T5199] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5195] <... openat resumed>) = -1 EIO (Input/output error) [pid 5195] exit_group(0) = ? [pid 5195] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5202] munmap(0x7f770c286000, 2097152 [pid 5200] <... ioctl resumed>) = 0 [pid 5012] newfstatat(3, "", [pid 5017] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./14/binderfs") = 0 [pid 5017] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5200] <... close resumed>) = 0 [pid 5202] <... munmap resumed>) = 0 [pid 5200] mkdir("./file1", 0777 [pid 5196] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] getdents64(3, [pid 5202] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5200] <... mkdir resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5202] <... openat resumed>) = 4 [pid 5200] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./13/binderfs" [pid 5202] <... ioctl resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5202] close(3 [pid 5012] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5202] <... close resumed>) = 0 [pid 5202] mkdir("./file1", 0777) = 0 [pid 5202] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5196] exit_group(0) = ? [ 74.672109][ T5196] NILFS (loop4): repaired inode bitmap for reserved inodes [ 74.684149][ T5196] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.700432][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 74.705159][ T5202] loop3: detected capacity change from 0 to 4096 [ 74.708319][ T5200] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5196] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./15/binderfs") = 0 [ 74.723903][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 74.726163][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 74.737145][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 74.745293][ T5202] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.746179][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 74.755694][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5016] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] <... mount resumed>) = 0 [ 74.762310][ T5200] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 74.780270][ T5203] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.791728][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 74.791788][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 74.806321][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 74.813647][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 74.815299][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5199] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5199] chdir("./file1") = 0 [ 74.822142][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 74.831124][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 74.843021][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 74.851094][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 74.851216][ T5202] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 74.861881][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5199] ioctl(4, LOOP_CLR_FD) = 0 [pid 5199] close(4) = 0 [pid 5199] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5200] <... mount resumed>) = 0 [pid 5200] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5200] chdir("./file1") = 0 [pid 5200] ioctl(4, LOOP_CLR_FD) = 0 [pid 5200] close(4) = 0 [ 74.871487][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 74.886505][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 74.895408][ T5199] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.896560][ T5204] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5200] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = 0 [pid 5202] <... mount resumed>) = 0 [pid 5202] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5202] chdir("./file1") = 0 [pid 5202] ioctl(4, LOOP_CLR_FD) = 0 [pid 5202] close(4) = 0 [pid 5202] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 74.924738][ T5200] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.939614][ T5205] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.954327][ T5202] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 74.963541][ T5199] Remounting filesystem read-only [pid 5017] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] newfstatat(4, "", [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./15/file1" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5017] getdents64(4, [pid 5016] rmdir("./15" [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./16", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5206 ./strace-static-x86_64: Process 5206 attached [pid 5206] set_robust_list(0x555556b87660, 24) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./14/file1") = 0 [pid 5012] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] chdir("./16") = 0 [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5206] setpgid(0, 0) = 0 [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5206] write(3, "1000", 4) = 4 [pid 5206] close(3) = 0 [pid 5206] symlink("/dev/binderfs", "./binderfs" [pid 5017] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 74.996195][ T5200] Remounting filesystem read-only [ 75.007636][ T5202] Remounting filesystem read-only [ 75.008226][ T5199] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 75.021907][ T5200] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] newfstatat(AT_FDCWD, "./13/file1", [pid 5206] <... symlink resumed>) = 0 [pid 5206] memfd_create("syzkaller", 0) = 3 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5017] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... close resumed>) = 0 [pid 5012] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] rmdir("./14" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... rmdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] mkdir("./15", 0777 [pid 5012] <... openat resumed>) = 4 [pid 5017] <... mkdir resumed>) = 0 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, [pid 5017] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5012] close(4 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... close resumed>) = 0 [pid 5017] close(3 [pid 5012] rmdir("./13/file1" [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... rmdir resumed>) = 0 [pid 5012] getdents64(3, [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5207 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [ 75.045275][ T5202] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 75.046099][ T5199] NILFS (loop1): repaired inode bitmap for reserved inodes [ 75.059766][ T5200] NILFS (loop2): repaired inode bitmap for reserved inodes [ 75.085931][ T5202] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5012] close(3) = 0 ./strace-static-x86_64: Process 5207 attached [pid 5012] rmdir("./13") = 0 [pid 5207] set_robust_list(0x555556b87660, 24) = 0 [pid 5012] mkdir("./14", 0777) = 0 [pid 5207] chdir("./15") = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 75.108065][ T5200] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.131495][ T5202] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5207] setpgid(0, 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5207] <... setpgid resumed>) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] close(3) = 0 [pid 5207] <... openat resumed>) = 3 [pid 5202] <... openat resumed>) = -1 EIO (Input/output error) [pid 5200] <... openat resumed>) = -1 EIO (Input/output error) [pid 5199] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5207] write(3, "1000", 4 [pid 5200] exit_group(0 [pid 5199] exit_group(0 [pid 5207] <... write resumed>) = 4 [pid 5199] <... exit_group resumed>) = ? [pid 5207] close(3 [pid 5200] <... exit_group resumed>) = ? [pid 5207] <... close resumed>) = 0 [pid 5199] +++ exited with 0 +++ [pid 5207] symlink("/dev/binderfs", "./binderfs" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5200] +++ exited with 0 +++ [pid 5013] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5208 [pid 5013] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5207] <... symlink resumed>) = 0 [pid 5207] memfd_create("syzkaller", 0 [pid 5013] <... openat resumed>) = 3 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5200, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, [pid 5014] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... memfd_create resumed>) = 3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 75.138338][ T5199] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5013] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5207] <... mmap resumed>) = 0x7f770c286000 [pid 5014] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./14/binderfs") = 0 [pid 5013] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(3, "", [pid 5202] exit_group(0) = ? [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5208 attached [pid 5014] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5208] set_robust_list(0x555556b87660, 24 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5208] <... set_robust_list resumed>) = 0 [pid 5014] unlink("./15/binderfs" [pid 5208] chdir("./14" [pid 5014] <... unlink resumed>) = 0 [pid 5208] <... chdir resumed>) = 0 [pid 5206] <... write resumed>) = 2097152 [pid 5202] +++ exited with 0 +++ [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5208] setpgid(0, 0 [pid 5015] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... setpgid resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5208] write(3, "1000", 4 [pid 5015] newfstatat(3, "", [pid 5208] <... write resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5208] close(3 [pid 5015] getdents64(3, [pid 5208] <... close resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5208] symlink("/dev/binderfs", "./binderfs" [pid 5015] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... symlink resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] memfd_create("syzkaller", 0 [pid 5015] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5208] <... memfd_create resumed>) = 3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] unlink("./15/binderfs" [pid 5208] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... unlink resumed>) = 0 [ 75.193456][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 75.213727][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 75.215934][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 75.228493][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 75.237086][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5206] munmap(0x7f770c286000, 2097152) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5206] close(3) = 0 [pid 5206] mkdir("./file1", 0777) = 0 [ 75.237433][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 75.243970][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 75.250965][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 75.261425][ T5206] loop4: detected capacity change from 0 to 4096 [ 75.283971][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5206] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5207] <... write resumed>) = 2097152 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5207] munmap(0x7f770c286000, 2097152) = 0 [pid 5207] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 75.291409][ T5206] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.292721][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 75.306546][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 75.308791][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 75.322577][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 75.330022][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5207] close(3) = 0 [pid 5207] mkdir("./file1", 0777) = 0 [pid 5207] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5208] <... write resumed>) = 2097152 [ 75.339224][ T5207] loop5: detected capacity change from 0 to 4096 [ 75.341973][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 75.353418][ T5206] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.365205][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 75.369050][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 75.374259][ T5207] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5208] munmap(0x7f770c286000, 2097152) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5208] close(3) = 0 [pid 5208] mkdir("./file1", 0777) = 0 [ 75.382500][ T5208] loop0: detected capacity change from 0 to 4096 [ 75.389838][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 75.428936][ T5209] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5208] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5206] <... mount resumed>) = 0 [pid 5206] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5206] chdir("./file1") = 0 [pid 5206] ioctl(4, LOOP_CLR_FD) = 0 [pid 5206] close(4) = 0 [pid 5014] <... umount2 resumed>) = 0 [ 75.447333][ T5208] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.447763][ T5207] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.476855][ T5206] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5206] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5207] <... mount resumed>) = 0 [pid 5014] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(AT_FDCWD, "./15/file1", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(AT_FDCWD, "./14/file1", [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5207] <... openat resumed>) = 3 [pid 5207] chdir("./file1") = 0 [pid 5207] ioctl(4, LOOP_CLR_FD [pid 5015] <... openat resumed>) = 4 [pid 5207] <... ioctl resumed>) = 0 [pid 5207] close(4 [pid 5015] newfstatat(4, "", [pid 5014] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... close resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5207] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] getdents64(4, [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./15/file1") = 0 [ 75.495184][ T5210] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.508959][ T5208] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.530338][ T5206] Remounting filesystem read-only [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(3) = 0 [pid 5015] rmdir("./15" [pid 5014] <... openat resumed>) = 4 [pid 5013] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./16", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5212 [ 75.530327][ T5207] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.536481][ T5207] Remounting filesystem read-only [ 75.557192][ T5206] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 75.567115][ T5206] NILFS (loop4): repaired inode bitmap for reserved inodes [ 75.574863][ T5206] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.588807][ T5207] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5014] newfstatat(4, "", [pid 5013] <... openat resumed>) = 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] newfstatat(4, "", [pid 5014] getdents64(4, ./strace-static-x86_64: Process 5212 attached [pid 5206] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5212] set_robust_list(0x555556b87660, 24 [pid 5206] exit_group(0 [pid 5212] <... set_robust_list resumed>) = 0 [pid 5014] getdents64(4, [pid 5013] getdents64(4, [pid 5212] chdir("./16" [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5208] <... mount resumed>) = 0 [pid 5014] close(4 [pid 5013] getdents64(4, [pid 5206] <... exit_group resumed>) = ? [pid 5014] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5212] <... chdir resumed>) = 0 [pid 5208] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5206] +++ exited with 0 +++ [pid 5014] rmdir("./15/file1" [pid 5013] close(4 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5206, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5208] <... openat resumed>) = 3 [pid 5013] rmdir("./14/file1" [pid 5212] <... prctl resumed>) = 0 [pid 5208] chdir("./file1" [pid 5014] getdents64(3, [pid 5013] <... rmdir resumed>) = 0 [pid 5212] setpgid(0, 0 [pid 5208] <... chdir resumed>) = 0 [pid 5016] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] getdents64(3, [pid 5212] <... setpgid resumed>) = 0 [pid 5208] ioctl(4, LOOP_CLR_FD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5208] <... ioctl resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... close resumed>) = 0 [pid 5013] close(3 [pid 5212] <... openat resumed>) = 3 [pid 5208] close(4 [pid 5016] <... openat resumed>) = 3 [pid 5014] rmdir("./15" [pid 5013] <... close resumed>) = 0 [pid 5212] write(3, "1000", 4 [pid 5208] <... close resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5014] <... rmdir resumed>) = 0 [pid 5013] rmdir("./14" [pid 5212] <... write resumed>) = 4 [pid 5208] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] mkdir("./16", 0777 [pid 5212] close(3 [pid 5207] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] getdents64(3, [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5212] <... close resumed>) = 0 [pid 5207] exit_group(0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5212] symlink("/dev/binderfs", "./binderfs" [pid 5207] <... exit_group resumed>) = ? [ 75.598645][ T5211] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.600418][ T5207] NILFS (loop5): repaired inode bitmap for reserved inodes [ 75.621429][ T5207] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] <... openat resumed>) = 3 [pid 5212] <... symlink resumed>) = 0 [pid 5207] +++ exited with 0 +++ [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5212] memfd_create("syzkaller", 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5212] <... memfd_create resumed>) = 3 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5014] close(3 [pid 5212] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] mkdir("./15", 0777 [pid 5016] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... mkdir resumed>) = 0 [pid 5017] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] unlink("./16/binderfs" [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5213 [pid 5013] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5213 attached [pid 5212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... openat resumed>) = 3 [pid 5016] <... unlink resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5213] set_robust_list(0x555556b87660, 24 [pid 5017] newfstatat(3, "", [pid 5016] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] close(3 [pid 5017] getdents64(3, [pid 5013] <... close resumed>) = 0 [pid 5213] <... set_robust_list resumed>) = 0 [pid 5213] chdir("./16" [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5213] <... chdir resumed>) = 0 [pid 5017] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x555556b87660, 24) = 0 [pid 5214] chdir("./15") = 0 [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5214] setpgid(0, 0) = 0 [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5214] write(3, "1000", 4) = 4 [pid 5214] close(3) = 0 [pid 5214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5214] memfd_create("syzkaller", 0 [pid 5213] <... prctl resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5213] setpgid(0, 0 [pid 5017] unlink("./15/binderfs" [pid 5213] <... setpgid resumed>) = 0 [pid 5214] <... memfd_create resumed>) = 3 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5214 [pid 5017] <... unlink resumed>) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5213] <... openat resumed>) = 3 [pid 5213] write(3, "1000", 4) = 4 [pid 5213] close(3) = 0 [pid 5213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5213] memfd_create("syzkaller", 0) = 3 [pid 5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 75.638503][ T5208] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.665650][ T5208] Remounting filesystem read-only [ 75.679925][ T5208] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 75.692016][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5212] <... write resumed>) = 2097152 [pid 5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 75.721505][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 75.733881][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 75.737800][ T5208] NILFS (loop0): repaired inode bitmap for reserved inodes [ 75.750265][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 75.754633][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5212] munmap(0x7f770c286000, 2097152 [pid 5213] <... write resumed>) = 2097152 [pid 5212] <... munmap resumed>) = 0 [pid 5212] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5213] munmap(0x7f770c286000, 2097152 [pid 5212] <... openat resumed>) = 4 [pid 5213] <... munmap resumed>) = 0 [ 75.765290][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 75.771872][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 75.780507][ T5208] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.789605][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 75.804379][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 75.806219][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5212] ioctl(4, LOOP_SET_FD, 3 [pid 5213] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5212] <... ioctl resumed>) = 0 [pid 5214] <... write resumed>) = 2097152 [pid 5214] munmap(0x7f770c286000, 2097152 [pid 5208] <... openat resumed>) = -1 EIO (Input/output error) [pid 5208] exit_group(0) = ? [pid 5213] ioctl(4, LOOP_SET_FD, 3 [pid 5212] close(3 [pid 5214] <... munmap resumed>) = 0 [pid 5208] +++ exited with 0 +++ [pid 5214] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5214] ioctl(4, LOOP_SET_FD, 3 [pid 5212] <... close resumed>) = 0 [pid 5212] mkdir("./file1", 0777 [pid 5213] <... ioctl resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5213] close(3 [pid 5212] <... mkdir resumed>) = 0 [pid 5212] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5213] <... close resumed>) = 0 [pid 5213] mkdir("./file1", 0777 [pid 5012] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] <... ioctl resumed>) = 0 [pid 5213] <... mkdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 75.819071][ T5212] loop3: detected capacity change from 0 to 4096 [ 75.820816][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 75.826386][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 75.841495][ T5213] loop2: detected capacity change from 0 to 4096 [ 75.843917][ T5214] loop1: detected capacity change from 0 to 4096 [ 75.858417][ T5212] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5214] close(3 [pid 5213] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] <... close resumed>) = 0 [pid 5214] mkdir("./file1", 0777 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5214] <... mkdir resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./15/file1", [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(3, [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... openat resumed>) = 4 [pid 5012] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] newfstatat(4, "", [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 75.872863][ T5212] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.887213][ T5213] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.910497][ T5215] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5012] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5017] getdents64(4, [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5212] <... mount resumed>) = 0 [pid 5212] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5212] chdir("./file1") = 0 [pid 5212] ioctl(4, LOOP_CLR_FD) = 0 [pid 5212] close(4) = 0 [pid 5212] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] newfstatat(AT_FDCWD, "./16/file1", [pid 5012] unlink("./14/binderfs" [pid 5017] getdents64(4, [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] close(4 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] rmdir("./15/file1" [pid 5016] <... openat resumed>) = 4 [pid 5017] <... rmdir resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5017] getdents64(3, [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(4, [pid 5017] close(3 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] <... close resumed>) = 0 [pid 5016] getdents64(4, [pid 5017] rmdir("./15" [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... rmdir resumed>) = 0 [ 75.922429][ T5214] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.925358][ T5212] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 75.948024][ T5213] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.958892][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5016] close(4 [pid 5017] mkdir("./16", 0777 [pid 5016] <... close resumed>) = 0 [pid 5213] <... mount resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5016] rmdir("./16/file1" [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5016] <... rmdir resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5016] getdents64(3, [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5017] close(3 [pid 5016] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] rmdir("./16" [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... rmdir resumed>) = 0 [pid 5213] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] mkdir("./17", 0777 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5217 [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5213] <... openat resumed>) = 3 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5218 ./strace-static-x86_64: Process 5218 attached [pid 5213] chdir("./file1") = 0 [pid 5218] set_robust_list(0x555556b87660, 24 [pid 5213] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5217 attached ) = 0 [pid 5217] set_robust_list(0x555556b87660, 24 [pid 5213] close(4 [pid 5217] <... set_robust_list resumed>) = 0 [pid 5217] chdir("./16") = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5217] setpgid(0, 0) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5213] <... close resumed>) = 0 [pid 5217] write(3, "1000", 4 [pid 5213] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5217] <... write resumed>) = 4 [pid 5217] close(3) = 0 [ 75.966111][ T5214] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 75.967352][ T5216] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.988355][ T5212] Remounting filesystem read-only [ 75.996339][ T5212] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 75.998540][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 76.005013][ T5212] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5217] memfd_create("syzkaller", 0) = 3 [pid 5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5218] <... set_robust_list resumed>) = 0 [pid 5218] chdir("./17") = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [ 76.028059][ T5213] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.055806][ T5213] Remounting filesystem read-only [ 76.058732][ T5219] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4 [pid 5214] <... mount resumed>) = 0 [pid 5214] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5214] chdir("./file1") = 0 [pid 5214] ioctl(4, LOOP_CLR_FD) = 0 [pid 5214] close(4 [pid 5218] <... write resumed>) = 4 [pid 5214] <... close resumed>) = 0 [pid 5214] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5218] close(3) = 0 [pid 5218] symlink("/dev/binderfs", "./binderfs" [ 76.062426][ T5213] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 76.080537][ T5212] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.082638][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 76.103143][ T5213] NILFS (loop2): repaired inode bitmap for reserved inodes [ 76.111808][ T5214] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5218] <... symlink resumed>) = 0 [pid 5212] <... openat resumed>) = -1 EIO (Input/output error) [pid 5218] memfd_create("syzkaller", 0 [pid 5212] exit_group(0 [pid 5218] <... memfd_create resumed>) = 3 [pid 5212] <... exit_group resumed>) = ? [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5212] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5015] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./16/binderfs") = 0 [ 76.128191][ T5213] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.148888][ T5214] Remounting filesystem read-only [ 76.161148][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 76.166166][ T5214] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5015] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5217] <... write resumed>) = 2097152 [pid 5213] <... openat resumed>) = -1 EIO (Input/output error) [pid 5213] exit_group(0 [pid 5217] munmap(0x7f770c286000, 2097152 [pid 5213] <... exit_group resumed>) = ? [pid 5213] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 76.175833][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 76.194315][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 76.198118][ T5214] NILFS (loop1): repaired inode bitmap for reserved inodes [ 76.213971][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5218] <... write resumed>) = 2097152 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./16/binderfs") = 0 [pid 5014] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5217] <... munmap resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5217] ioctl(4, LOOP_SET_FD, 3 [pid 5218] munmap(0x7f770c286000, 2097152 [pid 5214] <... openat resumed>) = -1 EIO (Input/output error) [ 76.225786][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 76.230735][ T5214] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.240146][ T5217] loop5: detected capacity change from 0 to 4096 [ 76.248774][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 76.254432][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 76.268713][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5218] <... munmap resumed>) = 0 [pid 5217] <... ioctl resumed>) = 0 [pid 5214] exit_group(0 [pid 5012] <... umount2 resumed>) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5217] close(3 [pid 5214] <... exit_group resumed>) = ? [pid 5012] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5214, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5217] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] mkdir("./file1", 0777 [pid 5218] <... openat resumed>) = 4 [pid 5217] <... mkdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./14/file1", [pid 5218] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(4, "", [pid 5013] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5012] getdents64(4, [pid 5013] newfstatat(3, "", [pid 5217] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, [pid 5012] getdents64(4, [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [ 76.275413][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 76.278483][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 76.294308][ T5218] loop4: detected capacity change from 0 to 4096 [ 76.304841][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 76.306208][ T5217] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.315068][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5013] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] <... ioctl resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] rmdir("./14/file1" [pid 5218] close(3 [pid 5013] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5012] <... rmdir resumed>) = 0 [pid 5218] <... close resumed>) = 0 [pid 5218] mkdir("./file1", 0777 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5218] <... mkdir resumed>) = 0 [pid 5013] unlink("./15/binderfs" [pid 5012] close(3 [pid 5013] <... unlink resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5013] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] rmdir("./14") = 0 [pid 5012] mkdir("./15", 0777) = 0 [ 76.329954][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 76.339108][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 76.341518][ T5217] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 76.355901][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5220 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./16/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [ 76.371920][ T5218] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.384670][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 76.400021][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5014] rmdir("./16") = 0 [pid 5014] mkdir("./17", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5220 attached [pid 5220] set_robust_list(0x555556b87660, 24 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5221 [pid 5220] <... set_robust_list resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", [pid 5220] chdir("./15" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5221 attached [pid 5220] <... chdir resumed>) = 0 [pid 5221] set_robust_list(0x555556b87660, 24 [pid 5015] getdents64(4, [pid 5221] <... set_robust_list resumed>) = 0 [pid 5221] chdir("./17" [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5221] <... chdir resumed>) = 0 [pid 5220] <... prctl resumed>) = 0 [pid 5015] getdents64(4, [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5220] setpgid(0, 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5221] <... prctl resumed>) = 0 [pid 5220] <... setpgid resumed>) = 0 [pid 5015] close(4 [pid 5221] setpgid(0, 0 [pid 5015] <... close resumed>) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5221] <... setpgid resumed>) = 0 [pid 5015] rmdir("./16/file1" [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5220] <... openat resumed>) = 3 [pid 5015] <... rmdir resumed>) = 0 [pid 5221] <... openat resumed>) = 3 [pid 5220] write(3, "1000", 4 [pid 5015] getdents64(3, [pid 5221] write(3, "1000", 4 [pid 5220] <... write resumed>) = 4 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5221] <... write resumed>) = 4 [pid 5220] close(3 [pid 5015] close(3 [pid 5221] close(3 [pid 5220] <... close resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5221] <... close resumed>) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs" [pid 5015] rmdir("./16" [pid 5221] symlink("/dev/binderfs", "./binderfs" [pid 5220] <... symlink resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5221] <... symlink resumed>) = 0 [ 76.433092][ T5218] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 76.448826][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5015] mkdir("./17", 0777 [pid 5221] memfd_create("syzkaller", 0 [pid 5220] memfd_create("syzkaller", 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5221] <... memfd_create resumed>) = 3 [pid 5220] <... memfd_create resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5218] <... mount resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5221] <... mmap resumed>) = 0x7f770c286000 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5220] <... mmap resumed>) = 0x7f770c286000 [pid 5218] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5218] <... openat resumed>) = 3 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5224 ./strace-static-x86_64: Process 5224 attached [pid 5224] set_robust_list(0x555556b87660, 24) = 0 [pid 5218] chdir("./file1") = 0 [pid 5218] ioctl(4, LOOP_CLR_FD) = 0 [pid 5217] <... mount resumed>) = 0 [pid 5217] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5217] chdir("./file1") = 0 [pid 5224] chdir("./17" [pid 5217] ioctl(4, LOOP_CLR_FD [pid 5224] <... chdir resumed>) = 0 [pid 5217] <... ioctl resumed>) = 0 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5217] close(4 [pid 5224] <... prctl resumed>) = 0 [pid 5218] close(4 [pid 5217] <... close resumed>) = 0 [pid 5224] setpgid(0, 0 [pid 5218] <... close resumed>) = 0 [ 76.476612][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 76.481103][ T5223] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.506231][ T5222] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5217] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5224] <... setpgid resumed>) = 0 [pid 5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5218] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4) = 4 [pid 5224] close(3) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5224] memfd_create("syzkaller", 0) = 3 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 76.524559][ T5217] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.530904][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 76.556388][ T5218] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5220] <... write resumed>) = 2097152 [pid 5220] munmap(0x7f770c286000, 2097152 [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5220] <... munmap resumed>) = 0 [pid 5220] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 76.577803][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 76.591074][ T5218] Remounting filesystem read-only [ 76.597571][ T5217] Remounting filesystem read-only [ 76.606786][ T5217] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 76.615050][ T5217] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5220] ioctl(4, LOOP_SET_FD, 3) = 0 [ 76.626103][ T5220] loop0: detected capacity change from 0 to 4096 [ 76.635330][ T5218] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 76.647374][ T918] cfg80211: failed to load regulatory.db [pid 5013] <... umount2 resumed>) = 0 [pid 5220] close(3) = 0 [pid 5220] mkdir("./file1", 0777) = 0 [pid 5220] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5224] <... write resumed>) = 2097152 [pid 5013] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5224] munmap(0x7f770c286000, 2097152 [pid 5013] getdents64(4, [pid 5221] <... write resumed>) = 2097152 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5221] munmap(0x7f770c286000, 2097152 [pid 5013] getdents64(4, [pid 5224] <... munmap resumed>) = 0 [pid 5221] <... munmap resumed>) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] close(4 [pid 5224] <... openat resumed>) = 4 [pid 5013] <... close resumed>) = 0 [pid 5224] ioctl(4, LOOP_SET_FD, 3 [pid 5221] <... openat resumed>) = 4 [ 76.666201][ T5217] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 76.696054][ T5220] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.705079][ T5218] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5013] rmdir("./15/file1" [pid 5221] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./15") = 0 [pid 5013] mkdir("./16", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5221] <... ioctl resumed>) = 0 [pid 5217] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5221] close(3 [pid 5217] exit_group(0 [pid 5221] <... close resumed>) = 0 [pid 5217] <... exit_group resumed>) = ? [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5226 ./strace-static-x86_64: Process 5226 attached [pid 5221] mkdir("./file1", 0777 [pid 5226] set_robust_list(0x555556b87660, 24) = 0 [pid 5217] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5221] <... mkdir resumed>) = 0 [pid 5226] chdir("./16" [pid 5017] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... chdir resumed>) = 0 [pid 5221] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5224] <... ioctl resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5226] <... prctl resumed>) = 0 [pid 5224] close(3 [pid 5017] <... openat resumed>) = 3 [ 76.733968][ T5224] loop3: detected capacity change from 0 to 4096 [ 76.744019][ T5221] loop2: detected capacity change from 0 to 4096 [ 76.757695][ T5220] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 76.758323][ T5218] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5226] setpgid(0, 0 [pid 5224] <... close resumed>) = 0 [pid 5017] newfstatat(3, "", [pid 5226] <... setpgid resumed>) = 0 [pid 5224] mkdir("./file1", 0777 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5224] <... mkdir resumed>) = 0 [pid 5017] getdents64(3, [pid 5226] <... openat resumed>) = 3 [pid 5224] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5226] write(3, "1000", 4 [pid 5017] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... write resumed>) = 4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5226] close(3 [pid 5017] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5226] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5226] symlink("/dev/binderfs", "./binderfs" [pid 5017] unlink("./16/binderfs" [pid 5226] <... symlink resumed>) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5226] memfd_create("syzkaller", 0 [pid 5017] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... memfd_create resumed>) = 3 [pid 5226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5220] <... mount resumed>) = 0 [ 76.798045][ T5221] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.808457][ T5224] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.816676][ T5227] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.828901][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 76.830186][ T5221] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5220] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5220] chdir("./file1") = 0 [pid 5220] ioctl(4, LOOP_CLR_FD) = 0 [pid 5220] close(4) = 0 [pid 5220] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5218] <... openat resumed>) = -1 EIO (Input/output error) [pid 5218] exit_group(0) = ? [ 76.841544][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 76.855013][ T5224] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 76.878103][ T5220] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5218] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5016] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./17/binderfs") = 0 [ 76.895879][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5016] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] <... mount resumed>) = 0 [pid 5226] <... write resumed>) = 2097152 [pid 5226] munmap(0x7f770c286000, 2097152) = 0 [pid 5226] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5221] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5226] <... openat resumed>) = 4 [ 76.919376][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 76.932973][ T5228] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.945192][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 76.953938][ T5226] loop1: detected capacity change from 0 to 4096 [ 76.954949][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5226] ioctl(4, LOOP_SET_FD, 3 [pid 5221] <... openat resumed>) = 3 [pid 5221] chdir("./file1" [pid 5226] <... ioctl resumed>) = 0 [pid 5226] close(3) = 0 [pid 5226] mkdir("./file1", 0777) = 0 [pid 5226] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5221] <... chdir resumed>) = 0 [ 76.961542][ T5220] Remounting filesystem read-only [ 76.967898][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 76.980000][ T5229] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.980278][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 76.999860][ T5220] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 77.005639][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5221] ioctl(4, LOOP_CLR_FD [pid 5224] <... mount resumed>) = 0 [pid 5221] <... ioctl resumed>) = 0 [pid 5221] close(4 [pid 5224] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5221] <... close resumed>) = 0 [pid 5224] <... openat resumed>) = 3 [pid 5221] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5224] chdir("./file1") = 0 [pid 5224] ioctl(4, LOOP_CLR_FD) = 0 [pid 5224] close(4) = 0 [ 77.015469][ T5226] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 77.038901][ T5221] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.041767][ T5220] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5224] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = 0 [ 77.062053][ T5224] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.083927][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 77.095089][ T5226] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 77.105800][ T5221] Remounting filesystem read-only [ 77.108342][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5017] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5220] <... openat resumed>) = -1 EIO (Input/output error) [ 77.116206][ T5221] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 77.121838][ T5220] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.141219][ T5224] Remounting filesystem read-only [ 77.147494][ T5221] NILFS (loop2): repaired inode bitmap for reserved inodes [ 77.149460][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5220] exit_group(0) = ? [pid 5220] +++ exited with 0 +++ [pid 5017] <... openat resumed>) = 4 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5017] newfstatat(4, "", [pid 5226] <... mount resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5226] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, [pid 5012] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] close(4 [pid 5012] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... close resumed>) = 0 [pid 5226] <... openat resumed>) = 3 [pid 5017] rmdir("./16/file1" [pid 5012] <... openat resumed>) = 3 [pid 5226] chdir("./file1") = 0 [pid 5221] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... rmdir resumed>) = 0 [pid 5012] newfstatat(3, "", [pid 5017] getdents64(3, [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] getdents64(3, [pid 5017] close(3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... close resumed>) = 0 [pid 5226] ioctl(4, LOOP_CLR_FD [pid 5221] exit_group(0 [pid 5017] rmdir("./16" [pid 5012] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... ioctl resumed>) = 0 [pid 5226] close(4 [pid 5017] <... rmdir resumed>) = 0 [pid 5226] <... close resumed>) = 0 [pid 5017] mkdir("./17", 0777 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 77.163200][ T5221] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.182321][ T5230] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.193653][ T5224] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5226] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... mkdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5221] <... exit_group resumed>) = ? [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5012] unlink("./15/binderfs" [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5012] <... unlink resumed>) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5231 ./strace-static-x86_64: Process 5231 attached [pid 5221] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5231] set_robust_list(0x555556b87660, 24) = 0 [pid 5014] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] chdir("./17" [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5231] <... chdir resumed>) = 0 [pid 5016] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 3 [pid 5231] <... prctl resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./17/file1", [pid 5014] newfstatat(3, "", [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] getdents64(3, [pid 5231] setpgid(0, 0) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] newfstatat(4, "", [pid 5014] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] getdents64(4, [pid 5014] newfstatat(AT_FDCWD, "./17/binderfs", [ 77.217496][ T5226] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.243290][ T5224] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5231] <... openat resumed>) = 3 [pid 5014] unlink("./17/binderfs" [pid 5231] write(3, "1000", 4 [pid 5016] getdents64(4, [pid 5231] <... write resumed>) = 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5016] close(4 [pid 5014] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] close(3 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./17/file1" [pid 5231] <... close resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./17" [pid 5231] symlink("/dev/binderfs", "./binderfs" [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./18", 0777 [pid 5231] <... symlink resumed>) = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5231] memfd_create("syzkaller", 0 [pid 5016] <... openat resumed>) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5231] <... memfd_create resumed>) = 3 [pid 5016] <... close resumed>) = 0 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5231] <... mmap resumed>) = 0x7f770c286000 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5232 ./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x555556b87660, 24) = 0 [pid 5232] chdir("./18") = 0 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] setpgid(0, 0) = 0 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] write(3, "1000", 4) = 4 [pid 5232] close(3) = 0 [pid 5232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5232] memfd_create("syzkaller", 0) = 3 [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 77.258546][ T5224] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.286726][ T5226] Remounting filesystem read-only [ 77.295090][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 77.304572][ T5226] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5224] <... openat resumed>) = -1 EIO (Input/output error) [pid 5224] exit_group(0) = ? [pid 5224] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./17/binderfs" [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... unlink resumed>) = 0 [ 77.317964][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 77.325808][ T5226] NILFS (loop1): repaired inode bitmap for reserved inodes [ 77.335329][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 77.337659][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5015] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5232] <... write resumed>) = 2097152 [ 77.369327][ T5226] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.369929][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 77.394970][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 77.403043][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 77.414339][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5232] munmap(0x7f770c286000, 2097152 [pid 5226] <... openat resumed>) = -1 EIO (Input/output error) [pid 5226] exit_group(0 [pid 5232] <... munmap resumed>) = 0 [pid 5232] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5226] <... exit_group resumed>) = ? [pid 5232] ioctl(4, LOOP_SET_FD, 3 [pid 5226] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./16/binderfs") = 0 [pid 5013] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] <... write resumed>) = 2097152 [ 77.423466][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 77.439286][ T5232] loop4: detected capacity change from 0 to 4096 [ 77.452538][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 77.460319][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5231] munmap(0x7f770c286000, 2097152) = 0 [pid 5231] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5231] ioctl(4, LOOP_SET_FD, 3 [pid 5232] <... ioctl resumed>) = 0 [pid 5232] close(3) = 0 [pid 5232] mkdir("./file1", 0777) = 0 [ 77.460979][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 77.475342][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 77.483452][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 77.491543][ T5231] loop5: detected capacity change from 0 to 4096 [ 77.494301][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 77.505638][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 77.506798][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [pid 5232] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5231] <... ioctl resumed>) = 0 [pid 5231] close(3) = 0 [pid 5231] mkdir("./file1", 0777) = 0 [ 77.519892][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 77.527703][ T5232] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 77.537517][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 77.544830][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 77.556654][ T5231] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5231] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... umount2 resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5014] newfstatat(4, "", [pid 5012] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] rmdir("./15/file1" [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./15" [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] mkdir("./16", 0777 [pid 5014] rmdir("./17/file1" [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5014] <... rmdir resumed>) = 0 [ 77.583685][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 77.601892][ T5232] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 77.605881][ T5231] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 77.615411][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5012] <... openat resumed>) = 3 [pid 5014] getdents64(3, [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5233 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./17") = 0 [pid 5014] mkdir("./18", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 ./strace-static-x86_64: Process 5233 attached [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5233] set_robust_list(0x555556b87660, 24) = 0 [pid 5233] chdir("./16" [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5233] <... chdir resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5234 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5233] write(3, "1000", 4) = 4 [pid 5233] close(3) = 0 [pid 5233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5233] memfd_create("syzkaller", 0) = 3 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5234 attached ) = 0x7f770c286000 [pid 5234] set_robust_list(0x555556b87660, 24) = 0 [pid 5234] chdir("./18") = 0 [ 77.635734][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 77.642727][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] <... mount resumed>) = 0 [pid 5234] setpgid(0, 0 [pid 5232] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5232] chdir("./file1") = 0 [pid 5232] ioctl(4, LOOP_CLR_FD) = 0 [pid 5232] close(4) = 0 [pid 5232] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5234] <... setpgid resumed>) = 0 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5234] write(3, "1000", 4) = 4 [pid 5234] close(3) = 0 [pid 5234] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5234] memfd_create("syzkaller", 0) = 3 [pid 5231] <... mount resumed>) = 0 [ 77.687919][ T5235] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.708700][ T5232] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5231] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5234] <... mmap resumed>) = 0x7f770c286000 [pid 5231] <... openat resumed>) = 3 [pid 5231] chdir("./file1") = 0 [pid 5231] ioctl(4, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = 0 [pid 5231] <... ioctl resumed>) = 0 [pid 5013] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] close(4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5231] <... close resumed>) = 0 [ 77.732360][ T5236] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... openat resumed>) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./16/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./16") = 0 [pid 5013] mkdir("./17", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... umount2 resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5237 [pid 5015] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5233] <... write resumed>) = 2097152 [pid 5015] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 5237 attached [pid 5015] newfstatat(4, "", [pid 5237] set_robust_list(0x555556b87660, 24 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5237] <... set_robust_list resumed>) = 0 [pid 5015] getdents64(4, [pid 5237] chdir("./17" [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5237] <... chdir resumed>) = 0 [pid 5015] getdents64(4, [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5237] <... prctl resumed>) = 0 [pid 5015] close(4 [pid 5237] setpgid(0, 0 [pid 5015] <... close resumed>) = 0 [pid 5237] <... setpgid resumed>) = 0 [pid 5015] rmdir("./17/file1" [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... rmdir resumed>) = 0 [pid 5237] <... openat resumed>) = 3 [pid 5015] getdents64(3, [ 77.759037][ T5231] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.775586][ T5232] Remounting filesystem read-only [pid 5237] write(3, "1000", 4 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5237] <... write resumed>) = 4 [pid 5015] close(3 [pid 5237] close(3 [pid 5015] <... close resumed>) = 0 [pid 5237] <... close resumed>) = 0 [pid 5015] rmdir("./17" [pid 5237] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... rmdir resumed>) = 0 [pid 5237] <... symlink resumed>) = 0 [pid 5015] mkdir("./18", 0777 [pid 5237] memfd_create("syzkaller", 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5237] <... memfd_create resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... openat resumed>) = 3 [pid 5237] <... mmap resumed>) = 0x7f770c286000 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5238 ./strace-static-x86_64: Process 5238 attached [pid 5238] set_robust_list(0x555556b87660, 24) = 0 [pid 5238] chdir("./18") = 0 [pid 5238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5238] setpgid(0, 0) = 0 [pid 5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 77.802984][ T5232] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5238] write(3, "1000", 4 [pid 5233] munmap(0x7f770c286000, 2097152 [pid 5238] <... write resumed>) = 4 [pid 5238] close(3 [pid 5233] <... munmap resumed>) = 0 [pid 5238] <... close resumed>) = 0 [pid 5238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5238] memfd_create("syzkaller", 0 [pid 5233] <... openat resumed>) = 4 [pid 5238] <... memfd_create resumed>) = 3 [pid 5233] ioctl(4, LOOP_SET_FD, 3 [pid 5238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 77.845607][ T5232] NILFS (loop4): repaired inode bitmap for reserved inodes [ 77.859577][ T5233] loop0: detected capacity change from 0 to 4096 [ 77.866229][ T5231] Remounting filesystem read-only [ 77.876533][ T5231] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5234] <... write resumed>) = 2097152 [pid 5234] munmap(0x7f770c286000, 2097152 [pid 5233] <... ioctl resumed>) = 0 [pid 5233] close(3) = 0 [pid 5233] mkdir("./file1", 0777) = 0 [ 77.876758][ T5232] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5233] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5234] <... munmap resumed>) = 0 [ 77.925796][ T5231] NILFS (loop5): repaired inode bitmap for reserved inodes [ 77.933791][ T5233] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 77.948352][ T5231] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 77.966039][ T5234] loop2: detected capacity change from 0 to 4096 [pid 5234] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5234] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5234] close(3) = 0 [pid 5234] mkdir("./file1", 0777) = 0 [pid 5234] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5237] <... write resumed>) = 2097152 [pid 5237] munmap(0x7f770c286000, 2097152) = 0 [pid 5237] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5237] ioctl(4, LOOP_SET_FD, 3 [pid 5232] <... openat resumed>) = -1 EIO (Input/output error) [pid 5232] exit_group(0) = ? [pid 5238] <... write resumed>) = 2097152 [pid 5238] munmap(0x7f770c286000, 2097152 [pid 5231] <... openat resumed>) = -1 EIO (Input/output error) [pid 5231] exit_group(0) = ? [pid 5232] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5238] <... munmap resumed>) = 0 [pid 5231] +++ exited with 0 +++ [pid 5016] <... restart_syscall resumed>) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5016] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5238] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5238] <... openat resumed>) = 4 [ 77.967357][ T5233] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 78.002260][ T5234] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.007160][ T5237] loop1: detected capacity change from 0 to 4096 [pid 5016] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5238] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... openat resumed>) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] getdents64(3, [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... openat resumed>) = 3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(3, "", [pid 5016] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] getdents64(3, [pid 5016] unlink("./18/binderfs" [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... unlink resumed>) = 0 [pid 5017] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./17/binderfs" [pid 5237] <... ioctl resumed>) = 0 [pid 5237] close(3 [pid 5017] <... unlink resumed>) = 0 [pid 5237] <... close resumed>) = 0 [pid 5017] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] mkdir("./file1", 0777) = 0 [pid 5234] <... mount resumed>) = 0 [pid 5237] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5238] <... ioctl resumed>) = 0 [pid 5238] close(3) = 0 [ 78.039412][ T5234] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 78.041007][ T5238] loop3: detected capacity change from 0 to 4096 [ 78.066302][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 78.073104][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5238] mkdir("./file1", 0777) = 0 [pid 5238] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5234] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5234] chdir("./file1") = 0 [pid 5234] ioctl(4, LOOP_CLR_FD) = 0 [pid 5234] close(4) = 0 [ 78.086933][ T5239] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.092410][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 78.099199][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 78.106388][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 78.119539][ T5237] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.130309][ T5238] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.142330][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 78.150617][ T5234] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.166085][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 78.173560][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 78.181246][ T5238] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5234] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5233] chdir("./file1") = 0 [pid 5233] ioctl(4, LOOP_CLR_FD) = 0 [pid 5233] close(4) = 0 [ 78.182199][ T5240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.191144][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 78.217665][ T5233] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.233577][ T5234] Remounting filesystem read-only [pid 5233] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = 0 [pid 5238] <... mount resumed>) = 0 [pid 5238] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5238] chdir("./file1") = 0 [pid 5238] ioctl(4, LOOP_CLR_FD) = 0 [pid 5238] close(4) = 0 [ 78.243814][ T5237] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 78.261019][ T5241] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.263505][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 78.275643][ T5234] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5238] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./18/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./18") = 0 [pid 5016] mkdir("./19", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5242 ./strace-static-x86_64: Process 5242 attached [ 78.283457][ T5238] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.314865][ T5233] Remounting filesystem read-only [ 78.320515][ T5234] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5242] set_robust_list(0x555556b87660, 24) = 0 [pid 5242] chdir("./19") = 0 [ 78.351888][ T5233] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 78.359990][ T5234] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.361044][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 78.376153][ T5238] Remounting filesystem read-only [ 78.383005][ T5233] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5237] <... mount resumed>) = 0 [pid 5242] <... prctl resumed>) = 0 [pid 5237] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5242] setpgid(0, 0) = 0 [pid 5242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5237] <... openat resumed>) = 3 [pid 5234] <... openat resumed>) = -1 EIO (Input/output error) [pid 5242] <... openat resumed>) = 3 [pid 5237] chdir("./file1" [pid 5242] write(3, "1000", 4) = 4 [pid 5237] <... chdir resumed>) = 0 [pid 5234] exit_group(0 [pid 5242] close(3 [pid 5234] <... exit_group resumed>) = ? [pid 5242] <... close resumed>) = 0 [pid 5237] ioctl(4, LOOP_CLR_FD [pid 5242] symlink("/dev/binderfs", "./binderfs" [pid 5237] <... ioctl resumed>) = 0 [pid 5242] <... symlink resumed>) = 0 [pid 5237] close(4 [pid 5242] memfd_create("syzkaller", 0 [pid 5237] <... close resumed>) = 0 [ 78.387511][ T5243] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.395114][ T5233] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.416058][ T5238] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 78.422439][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5237] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5242] <... memfd_create resumed>) = 3 [pid 5242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5233] <... openat resumed>) = -1 EIO (Input/output error) [pid 5233] exit_group(0) = ? [pid 5234] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./18/binderfs") = 0 [pid 5014] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 78.442518][ T5237] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./16/binderfs") = 0 [pid 5012] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./17/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./17") = 0 [pid 5017] mkdir("./18", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5244 ./strace-static-x86_64: Process 5244 attached [ 78.485946][ T5238] NILFS (loop3): repaired inode bitmap for reserved inodes [ 78.491805][ T5237] Remounting filesystem read-only [ 78.512343][ T5238] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.529172][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5244] set_robust_list(0x555556b87660, 24) = 0 [pid 5242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5244] chdir("./18") = 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] setpgid(0, 0) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1000", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5244] memfd_create("syzkaller", 0) = 3 [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 78.536743][ T5237] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 78.543313][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 78.558486][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 78.567595][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 78.574721][ T5237] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5238] <... openat resumed>) = -1 EIO (Input/output error) [pid 5238] exit_group(0) = ? [ 78.583806][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 78.595983][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 78.603279][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 78.610541][ T5237] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.615554][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5238] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5238, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5015] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./18/binderfs" [pid 5242] <... write resumed>) = 2097152 [pid 5015] <... unlink resumed>) = 0 [pid 5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5242] munmap(0x7f770c286000, 2097152) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 78.639268][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 78.660226][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 78.665678][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 78.674285][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 78.676325][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5242] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5242] close(3) = 0 [pid 5242] mkdir("./file1", 0777) = 0 [pid 5237] <... openat resumed>) = -1 EIO (Input/output error) [pid 5242] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5237] exit_group(0) = ? [pid 5244] <... write resumed>) = 2097152 [pid 5237] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5244] munmap(0x7f770c286000, 2097152 [pid 5013] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] <... munmap resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5244] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... openat resumed>) = 3 [ 78.690717][ T5242] loop4: detected capacity change from 0 to 4096 [ 78.690762][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 78.709607][ T5242] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 78.722527][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 78.733927][ T5244] loop5: detected capacity change from 0 to 4096 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./17/binderfs") = 0 [pid 5013] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5244] <... ioctl resumed>) = 0 [pid 5244] close(3) = 0 [pid 5244] mkdir("./file1", 0777 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./16/file1", [pid 5244] <... mkdir resumed>) = 0 [pid 5244] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 78.742200][ T5242] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 78.759508][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 78.771852][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 78.780319][ T5244] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5012] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./18/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./18") = 0 [pid 5014] mkdir("./19", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5012] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./16/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5246 [pid 5012] close(3) = 0 [pid 5012] rmdir("./16") = 0 [pid 5012] mkdir("./17", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ./strace-static-x86_64: Process 5246 attached [pid 5246] set_robust_list(0x555556b87660, 24 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5246] <... set_robust_list resumed>) = 0 [ 78.782677][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 78.797776][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 78.797800][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 78.830616][ T5244] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5242] <... mount resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5246] chdir("./19") = 0 [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5246] setpgid(0, 0) = 0 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5246] write(3, "1000", 4) = 4 [pid 5246] close(3) = 0 [pid 5246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5246] memfd_create("syzkaller", 0) = 3 [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5242] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5242] <... openat resumed>) = 3 [pid 5242] chdir("./file1"./strace-static-x86_64: Process 5247 attached ) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5247 [pid 5242] ioctl(4, LOOP_CLR_FD [pid 5247] set_robust_list(0x555556b87660, 24 [pid 5242] <... ioctl resumed>) = 0 [pid 5247] <... set_robust_list resumed>) = 0 [pid 5242] close(4 [pid 5247] chdir("./17" [pid 5242] <... close resumed>) = 0 [pid 5247] <... chdir resumed>) = 0 [pid 5242] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] setpgid(0, 0) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 78.832363][ T5245] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.857678][ T5242] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 78.885147][ T5242] Remounting filesystem read-only [pid 5247] write(3, "1000", 4) = 4 [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5247] close(3) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... umount2 resumed>) = 0 [pid 5247] <... symlink resumed>) = 0 [pid 5247] memfd_create("syzkaller", 0) = 3 [pid 5015] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./18/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./18" [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./19", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5247] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5249 [ 78.891739][ T5242] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 78.902180][ T5242] NILFS (loop4): repaired inode bitmap for reserved inodes [ 78.913006][ T5242] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5244] <... mount resumed>) = 0 [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5244] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5242] <... openat resumed>) = -1 EIO (Input/output error) ./strace-static-x86_64: Process 5249 attached [pid 5249] set_robust_list(0x555556b87660, 24) = 0 [pid 5249] chdir("./19") = 0 [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5249] setpgid(0, 0) = 0 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5249] write(3, "1000", 4) = 4 [pid 5249] close(3) = 0 [pid 5249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5249] memfd_create("syzkaller", 0) = 3 [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5244] <... openat resumed>) = 3 [pid 5242] exit_group(0 [pid 5244] chdir("./file1" [pid 5242] <... exit_group resumed>) = ? [pid 5244] <... chdir resumed>) = 0 [pid 5244] ioctl(4, LOOP_CLR_FD [pid 5242] +++ exited with 0 +++ [ 78.948606][ T5248] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.964789][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5247] <... write resumed>) = 2097152 [pid 5246] <... write resumed>) = 2097152 [pid 5244] <... ioctl resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5242, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5244] close(4 [pid 5247] munmap(0x7f770c286000, 2097152 [pid 5244] <... close resumed>) = 0 [pid 5246] munmap(0x7f770c286000, 2097152) = 0 [pid 5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5247] <... munmap resumed>) = 0 [ 78.993369][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 79.007800][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 79.023461][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5244] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5246] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... openat resumed>) = 4 [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5247] <... openat resumed>) = 4 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5016] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", [pid 5246] <... ioctl resumed>) = 0 [pid 5246] close(3) = 0 [pid 5246] mkdir("./file1", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./19/binderfs") = 0 [pid 5016] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... mkdir resumed>) = 0 [ 79.032581][ T5244] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.047062][ T5246] loop2: detected capacity change from 0 to 4096 [ 79.054989][ T5247] loop0: detected capacity change from 0 to 4096 [ 79.069024][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 79.077241][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 79.077336][ T5246] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5246] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5247] <... ioctl resumed>) = 0 [pid 5249] <... write resumed>) = 2097152 [pid 5249] munmap(0x7f770c286000, 2097152) = 0 [pid 5249] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5249] ioctl(4, LOOP_SET_FD, 3 [pid 5247] close(3 [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", [pid 5247] <... close resumed>) = 0 [pid 5247] mkdir("./file1", 0777 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5247] <... mkdir resumed>) = 0 [pid 5247] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./17/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [ 79.084576][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 79.084596][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 79.114093][ T5249] loop3: detected capacity change from 0 to 4096 [ 79.116926][ T5244] Remounting filesystem read-only [ 79.131522][ T5247] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5013] close(3) = 0 [pid 5013] rmdir("./17") = 0 [pid 5013] mkdir("./18", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5249] <... ioctl resumed>) = 0 [pid 5249] close(3) = 0 [pid 5249] mkdir("./file1", 0777 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5250 [pid 5249] <... mkdir resumed>) = 0 [pid 5249] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5250 attached [pid 5250] set_robust_list(0x555556b87660, 24) = 0 [pid 5250] chdir("./18") = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0) = 0 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5250] write(3, "1000", 4) = 4 [pid 5250] close(3) = 0 [pid 5250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5250] memfd_create("syzkaller", 0) = 3 [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 79.143662][ T5249] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.159304][ T5246] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.170085][ T5247] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.181862][ T5244] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 79.193856][ T5249] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.198915][ T5244] NILFS (loop5): repaired inode bitmap for reserved inodes [ 79.226203][ T5251] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.235812][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5247] <... mount resumed>) = 0 [pid 5246] <... mount resumed>) = 0 [pid 5246] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5246] chdir("./file1") = 0 [pid 5246] ioctl(4, LOOP_CLR_FD) = 0 [pid 5246] close(4) = 0 [pid 5246] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5247] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5244] <... openat resumed>) = -1 EIO (Input/output error) [pid 5247] <... openat resumed>) = 3 [pid 5244] exit_group(0 [pid 5247] chdir("./file1" [pid 5244] <... exit_group resumed>) = ? [pid 5244] +++ exited with 0 +++ [pid 5247] <... chdir resumed>) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5247] ioctl(4, LOOP_CLR_FD) = 0 [pid 5247] close(4) = 0 [pid 5017] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [ 79.239214][ T5244] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.251601][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 79.258732][ T5252] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.276686][ T5246] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5247] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5250] <... write resumed>) = 2097152 [pid 5250] munmap(0x7f770c286000, 2097152 [pid 5017] <... openat resumed>) = 3 [pid 5017] newfstatat(3, "", [pid 5249] <... mount resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5249] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5250] <... munmap resumed>) = 0 [pid 5250] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] getdents64(3, [pid 5249] <... openat resumed>) = 3 [pid 5249] chdir("./file1" [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5249] <... chdir resumed>) = 0 [pid 5017] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] <... openat resumed>) = 4 [pid 5249] ioctl(4, LOOP_CLR_FD [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5250] ioctl(4, LOOP_SET_FD, 3 [pid 5017] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5249] <... ioctl resumed>) = 0 [pid 5249] close(4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5249] <... close resumed>) = 0 [ 79.310826][ T5247] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.325990][ T5253] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.353606][ T5246] Remounting filesystem read-only [pid 5017] unlink("./18/binderfs") = 0 [pid 5249] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5250] <... ioctl resumed>) = 0 [pid 5250] close(3 [pid 5016] newfstatat(AT_FDCWD, "./19/file1", [pid 5250] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5250] mkdir("./file1", 0777) = 0 [pid 5016] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 79.353899][ T5249] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.360416][ T5246] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 79.382432][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 79.382515][ T5250] loop1: detected capacity change from 0 to 4096 [ 79.403099][ T5247] Remounting filesystem read-only [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5250] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] close(4) = 0 [pid 5016] rmdir("./19/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./19") = 0 [pid 5016] mkdir("./20", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5254 [ 79.404644][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 79.424164][ T5250] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.434004][ T5246] NILFS (loop2): repaired inode bitmap for reserved inodes [ 79.442803][ T5249] Remounting filesystem read-only [ 79.453814][ T5247] NILFS (loop0): inode bitmap is inconsistent for reserved inodes ./strace-static-x86_64: Process 5254 attached [pid 5254] set_robust_list(0x555556b87660, 24) = 0 [pid 5254] chdir("./20") = 0 [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5254] setpgid(0, 0) = 0 [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5254] write(3, "1000", 4) = 4 [pid 5254] close(3) = 0 [pid 5254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5254] memfd_create("syzkaller", 0) = 3 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 79.455608][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 79.469498][ T5250] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.476145][ T5246] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.491375][ T5247] NILFS (loop0): repaired inode bitmap for reserved inodes [ 79.502223][ T5249] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 79.520474][ T5249] NILFS (loop3): repaired inode bitmap for reserved inodes [ 79.528250][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 79.536776][ T5249] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.546222][ T5247] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5246] <... openat resumed>) = -1 EIO (Input/output error) [pid 5249] <... openat resumed>) = -1 EIO (Input/output error) [pid 5249] exit_group(0 [pid 5246] exit_group(0 [pid 5254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5246] <... exit_group resumed>) = ? [pid 5246] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5249] <... exit_group resumed>) = ? [pid 5014] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5249] +++ exited with 0 +++ [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5015] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./19/binderfs" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... unlink resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] <... mount resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./19/binderfs") = 0 [ 79.556838][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 79.578239][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 79.596835][ T5255] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.609377][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5254] <... write resumed>) = 2097152 [pid 5250] <... openat resumed>) = 3 [pid 5254] munmap(0x7f770c286000, 2097152 [pid 5250] chdir("./file1" [pid 5247] <... openat resumed>) = -1 EIO (Input/output error) [pid 5250] <... chdir resumed>) = 0 [pid 5250] ioctl(4, LOOP_CLR_FD [pid 5254] <... munmap resumed>) = 0 [pid 5250] <... ioctl resumed>) = 0 [pid 5247] exit_group(0 [pid 5254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5247] <... exit_group resumed>) = ? [pid 5250] close(4) = 0 [ 79.616605][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 79.623447][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 79.625599][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 79.636602][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 79.638816][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 79.652567][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 79.661949][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5250] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5254] <... openat resumed>) = 4 [pid 5247] +++ exited with 0 +++ [pid 5254] ioctl(4, LOOP_SET_FD, 3 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5254] <... ioctl resumed>) = 0 [pid 5254] close(3) = 0 [pid 5254] mkdir("./file1", 0777) = 0 [pid 5012] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5254] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] <... umount2 resumed>) = 0 [ 79.670934][ T5250] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.670975][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 79.693802][ T5254] loop4: detected capacity change from 0 to 4096 [ 79.703699][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 79.714062][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5017] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./17/binderfs") = 0 [pid 5012] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./18/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./18") = 0 [pid 5017] mkdir("./19", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./19/file1" [pid 5017] <... openat resumed>) = 3 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] rmdir("./19" [pid 5017] close(3) = 0 [pid 5014] <... rmdir resumed>) = 0 [ 79.724226][ T5254] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.743584][ T5254] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 79.748905][ T5250] Remounting filesystem read-only [ 79.754393][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5256 [pid 5014] mkdir("./20", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5257 ./strace-static-x86_64: Process 5257 attached [pid 5257] set_robust_list(0x555556b87660, 24) = 0 [pid 5257] chdir("./20") = 0 [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5257] setpgid(0, 0) = 0 [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5256 attached ) = 3 [pid 5257] write(3, "1000", 4) = 4 [pid 5257] close(3) = 0 [pid 5257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5257] memfd_create("syzkaller", 0 [ 79.780573][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 79.791730][ T5250] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 79.805540][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 79.823850][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5256] set_robust_list(0x555556b87660, 24 [pid 5257] <... memfd_create resumed>) = 3 [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5256] <... set_robust_list resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5256] chdir("./19" [pid 5015] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5256] <... chdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] newfstatat(AT_FDCWD, "./19/file1", [pid 5256] <... prctl resumed>) = 0 [pid 5254] <... mount resumed>) = 0 [pid 5256] setpgid(0, 0 [pid 5254] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5256] <... setpgid resumed>) = 0 [pid 5254] <... openat resumed>) = 3 [pid 5015] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5254] chdir("./file1" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5256] write(3, "1000", 4 [pid 5254] <... chdir resumed>) = 0 [pid 5256] <... write resumed>) = 4 [pid 5015] <... openat resumed>) = 4 [pid 5256] close(3 [pid 5254] ioctl(4, LOOP_CLR_FD [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5256] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5254] <... ioctl resumed>) = 0 [pid 5256] symlink("/dev/binderfs", "./binderfs" [pid 5254] close(4 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5256] <... symlink resumed>) = 0 [pid 5254] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5256] memfd_create("syzkaller", 0 [pid 5254] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5256] <... memfd_create resumed>) = 3 [ 79.831941][ T5258] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.841790][ T5250] NILFS (loop1): repaired inode bitmap for reserved inodes [ 79.855689][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 79.863162][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 79.872976][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5015] close(4 [pid 5256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... close resumed>) = 0 [pid 5256] <... mmap resumed>) = 0x7f770c286000 [pid 5015] rmdir("./19/file1" [pid 5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [ 79.885413][ T5254] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 79.897769][ T5250] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./19") = 0 [pid 5015] mkdir("./20", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5259 ./strace-static-x86_64: Process 5259 attached [pid 5259] set_robust_list(0x555556b87660, 24) = 0 [pid 5257] <... write resumed>) = 2097152 [pid 5259] chdir("./20") = 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5259] setpgid(0, 0) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5250] <... openat resumed>) = -1 EIO (Input/output error) [pid 5259] close(3 [pid 5250] exit_group(0 [pid 5259] <... close resumed>) = 0 [pid 5250] <... exit_group resumed>) = ? [ 79.936025][ T5254] Remounting filesystem read-only [ 79.953007][ T5254] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5259] symlink("/dev/binderfs", "./binderfs" [pid 5257] munmap(0x7f770c286000, 2097152 [pid 5250] +++ exited with 0 +++ [pid 5012] <... umount2 resumed>) = 0 [pid 5257] <... munmap resumed>) = 0 [pid 5257] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5259] <... symlink resumed>) = 0 [pid 5259] memfd_create("syzkaller", 0 [pid 5257] ioctl(4, LOOP_SET_FD, 3 [pid 5259] <... memfd_create resumed>) = 3 [pid 5257] <... ioctl resumed>) = 0 [pid 5256] <... write resumed>) = 2097152 [pid 5012] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5257] close(3 [pid 5256] munmap(0x7f770c286000, 2097152 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5259] <... mmap resumed>) = 0x7f770c286000 [pid 5257] <... close resumed>) = 0 [pid 5256] <... munmap resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./17/file1", [pid 5257] mkdir("./file1", 0777 [pid 5256] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5254] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] <... mkdir resumed>) = 0 [pid 5256] <... openat resumed>) = 4 [pid 5254] exit_group(0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5257] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5256] ioctl(4, LOOP_SET_FD, 3 [pid 5254] <... exit_group resumed>) = ? [pid 5013] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5254] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5254, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5013] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 79.997227][ T5254] NILFS (loop4): repaired inode bitmap for reserved inodes [ 80.010066][ T5257] loop2: detected capacity change from 0 to 4096 [ 80.017351][ T5254] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5256] <... ioctl resumed>) = 0 [pid 5013] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] close(3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5016] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5013] unlink("./18/binderfs" [pid 5016] newfstatat(3, "", [pid 5013] <... unlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5256] <... close resumed>) = 0 [pid 5016] getdents64(3, [pid 5259] <... write resumed>) = 2097152 [pid 5012] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5256] mkdir("./file1", 0777 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./20/binderfs") = 0 [ 80.042095][ T5256] loop5: detected capacity change from 0 to 4096 [ 80.049026][ T5257] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.060250][ T5257] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 80.071769][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 80.082203][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 80.090733][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5016] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] munmap(0x7f770c286000, 2097152 [pid 5256] <... mkdir resumed>) = 0 [pid 5012] <... openat resumed>) = 4 [pid 5259] <... munmap resumed>) = 0 [pid 5256] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] newfstatat(4, "", [pid 5257] <... mount resumed>) = 0 [pid 5257] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5257] chdir("./file1") = 0 [pid 5257] ioctl(4, LOOP_CLR_FD) = 0 [pid 5257] close(4) = 0 [pid 5259] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 80.090762][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 80.100252][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 80.106831][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 80.119800][ T5260] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.131576][ T5256] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5257] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5259] <... openat resumed>) = 4 [pid 5012] getdents64(4, [pid 5259] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5259] <... ioctl resumed>) = 0 [pid 5012] getdents64(4, [pid 5259] close(3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5259] <... close resumed>) = 0 [pid 5012] close(4 [pid 5259] mkdir("./file1", 0777 [pid 5012] <... close resumed>) = 0 [pid 5259] <... mkdir resumed>) = 0 [pid 5012] rmdir("./17/file1" [pid 5259] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... rmdir resumed>) = 0 [ 80.132043][ T5257] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.156315][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 80.163289][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 80.171678][ T5259] loop3: detected capacity change from 0 to 4096 [ 80.181249][ T5256] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 80.181942][ T5257] Remounting filesystem read-only [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3 [pid 5013] <... umount2 resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5013] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] rmdir("./17") = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./18/file1", [ 80.195927][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 80.198493][ T5257] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 80.204257][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 80.212591][ T5259] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.229945][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 80.241086][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5012] mkdir("./18", 0777 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5013] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5013] <... openat resumed>) = 4 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] newfstatat(4, "", [pid 5012] close(3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... close resumed>) = 0 [pid 5013] getdents64(4, [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5262 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./18/file1" [pid 5256] <... mount resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5256] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5256] chdir("./file1") = 0 [pid 5256] ioctl(4, LOOP_CLR_FD) = 0 [pid 5256] close(4) = 0 [ 80.243399][ T5257] NILFS (loop2): repaired inode bitmap for reserved inodes [ 80.279725][ T5261] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5256] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 5262 attached [pid 5257] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... umount2 resumed>) = 0 [pid 5013] getdents64(3, [pid 5262] set_robust_list(0x555556b87660, 24 [pid 5257] exit_group(0 [pid 5016] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5262] <... set_robust_list resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5262] chdir("./18" [pid 5257] <... exit_group resumed>) = ? [pid 5016] newfstatat(AT_FDCWD, "./20/file1", [pid 5013] close(3 [pid 5257] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5013] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] rmdir("./18" [pid 5262] <... chdir resumed>) = 0 [pid 5016] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... rmdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5262] <... prctl resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] newfstatat(3, "", [pid 5013] mkdir("./19", 0777 [pid 5262] setpgid(0, 0) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... mkdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] newfstatat(4, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./20/binderfs" [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... unlink resumed>) = 0 [ 80.283356][ T5256] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.299392][ T5257] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.321052][ T5259] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5262] <... openat resumed>) = 3 [pid 5016] getdents64(4, [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5262] write(3, "1000", 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... openat resumed>) = 3 [pid 5262] <... write resumed>) = 4 [pid 5016] getdents64(4, [ 80.346165][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 80.352917][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 80.362286][ T5256] Remounting filesystem read-only [ 80.367924][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 80.374248][ T5256] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 80.377581][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 80.384690][ T5256] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5262] close(3 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5262] <... close resumed>) = 0 [pid 5016] close(4 [pid 5013] close(3 [pid 5259] <... mount resumed>) = 0 [pid 5259] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5259] chdir("./file1") = 0 [pid 5259] ioctl(4, LOOP_CLR_FD) = 0 [pid 5259] close(4) = 0 [pid 5259] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5262] symlink("/dev/binderfs", "./binderfs" [pid 5016] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [ 80.391066][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 80.398574][ T5256] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.405904][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 80.424673][ T5259] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5262] <... symlink resumed>) = 0 [pid 5016] rmdir("./20/file1" [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5256] <... openat resumed>) = -1 EIO (Input/output error) [pid 5262] memfd_create("syzkaller", 0 [pid 5256] exit_group(0) = ? [pid 5016] <... rmdir resumed>) = 0 [pid 5262] <... memfd_create resumed>) = 3 [pid 5016] getdents64(3, [pid 5262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5264 [pid 5262] <... mmap resumed>) = 0x7f770c286000 [pid 5016] close(3 [pid 5256] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5256, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./20"./strace-static-x86_64: Process 5264 attached [pid 5264] set_robust_list(0x555556b87660, 24 [pid 5017] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... rmdir resumed>) = 0 [pid 5264] <... set_robust_list resumed>) = 0 [pid 5262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] mkdir("./21", 0777 [pid 5264] chdir("./19" [pid 5017] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] <... mkdir resumed>) = 0 [pid 5017] newfstatat(3, "", [pid 5264] <... chdir resumed>) = 0 [pid 5264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5264] <... prctl resumed>) = 0 [pid 5017] getdents64(3, [pid 5016] <... openat resumed>) = 3 [pid 5264] setpgid(0, 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5264] <... setpgid resumed>) = 0 [pid 5017] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 80.442219][ T5263] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.457839][ T5259] Remounting filesystem read-only [ 80.464432][ T5259] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 80.473977][ T5259] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] close(3 [pid 5264] <... openat resumed>) = 3 [pid 5262] <... write resumed>) = 2097152 [pid 5259] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5016] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5264] write(3, "1000", 4 [pid 5262] munmap(0x7f770c286000, 2097152 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5264] <... write resumed>) = 4 [pid 5262] <... munmap resumed>) = 0 [pid 5017] unlink("./19/binderfs" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5264] close(3 [pid 5262] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] <... unlink resumed>) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5265 [pid 5014] newfstatat(AT_FDCWD, "./20/file1", [pid 5264] <... close resumed>) = 0 [pid 5262] <... openat resumed>) = 4 [pid 5017] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5264] symlink("/dev/binderfs", "./binderfs" [pid 5262] ioctl(4, LOOP_SET_FD, 3 [pid 5014] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5265 attached [pid 5264] <... symlink resumed>) = 0 [pid 5259] exit_group(0 [pid 5265] set_robust_list(0x555556b87660, 24) = 0 [pid 5265] chdir("./21") = 0 [pid 5265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5265] setpgid(0, 0) = 0 [pid 5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... openat resumed>) = 4 [pid 5265] <... openat resumed>) = 3 [pid 5259] <... exit_group resumed>) = ? [pid 5259] +++ exited with 0 +++ [pid 5265] write(3, "1000", 4) = 4 [pid 5265] close(3) = 0 [pid 5265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5265] memfd_create("syzkaller", 0) = 3 [pid 5265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5014] newfstatat(4, "", [pid 5264] memfd_create("syzkaller", 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5264] <... memfd_create resumed>) = 3 [pid 5014] getdents64(4, [pid 5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5264] <... mmap resumed>) = 0x7f770c286000 [pid 5014] getdents64(4, [pid 5015] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(4 [pid 5015] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] <... close resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5014] rmdir("./20/file1" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, [pid 5014] getdents64(3, [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 80.500580][ T5259] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.536773][ T5262] loop0: detected capacity change from 0 to 4096 [ 80.544278][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5015] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5014] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./20/binderfs" [pid 5014] <... close resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5015] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] rmdir("./20") = 0 [pid 5014] mkdir("./21", 0777 [pid 5265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5262] <... ioctl resumed>) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5266 [pid 5262] close(3./strace-static-x86_64: Process 5266 attached [pid 5266] set_robust_list(0x555556b87660, 24) = 0 [pid 5262] <... close resumed>) = 0 [pid 5262] mkdir("./file1", 0777 [pid 5266] chdir("./21") = 0 [pid 5266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5266] setpgid(0, 0) = 0 [pid 5266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5266] write(3, "1000", 4) = 4 [pid 5266] close(3) = 0 [pid 5266] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5266] memfd_create("syzkaller", 0) = 3 [pid 5266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5265] <... write resumed>) = 2097152 [pid 5265] munmap(0x7f770c286000, 2097152 [pid 5262] <... mkdir resumed>) = 0 [ 80.563430][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 80.585700][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 80.595252][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 80.605431][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5262] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5265] <... munmap resumed>) = 0 [pid 5265] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5265] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5265] close(3) = 0 [pid 5265] mkdir("./file1", 0777) = 0 [ 80.617940][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 80.627385][ T5262] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.636592][ T5265] loop4: detected capacity change from 0 to 4096 [ 80.637642][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 80.647282][ T5265] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.660003][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5265] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] rmdir("./19/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./19") = 0 [pid 5017] mkdir("./20", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5267 [pid 5264] <... write resumed>) = 2097152 [pid 5264] munmap(0x7f770c286000, 2097152./strace-static-x86_64: Process 5267 attached [pid 5267] set_robust_list(0x555556b87660, 24 [pid 5264] <... munmap resumed>) = 0 [pid 5264] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5267] <... set_robust_list resumed>) = 0 [pid 5264] <... openat resumed>) = 4 [ 80.660026][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 80.671653][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 80.682777][ T5262] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 80.693447][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5264] ioctl(4, LOOP_SET_FD, 3 [pid 5267] chdir("./20" [pid 5264] <... ioctl resumed>) = 0 [pid 5264] close(3) = 0 [pid 5264] mkdir("./file1", 0777) = 0 [pid 5264] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5267] <... chdir resumed>) = 0 [pid 5267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5267] setpgid(0, 0 [pid 5262] <... mount resumed>) = 0 [pid 5267] <... setpgid resumed>) = 0 [pid 5262] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5262] <... openat resumed>) = 3 [pid 5262] chdir("./file1" [pid 5267] <... openat resumed>) = 3 [pid 5262] <... chdir resumed>) = 0 [pid 5267] write(3, "1000", 4 [pid 5266] <... write resumed>) = 2097152 [pid 5262] ioctl(4, LOOP_CLR_FD) = 0 [pid 5267] <... write resumed>) = 4 [ 80.736138][ T5264] loop1: detected capacity change from 0 to 4096 [ 80.737507][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 80.753019][ T5264] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.753483][ T5268] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.776932][ T5265] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5262] close(4 [pid 5267] close(3 [pid 5266] munmap(0x7f770c286000, 2097152 [pid 5262] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5267] <... close resumed>) = 0 [pid 5266] <... munmap resumed>) = 0 [pid 5262] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5267] symlink("/dev/binderfs", "./binderfs" [pid 5266] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5267] <... symlink resumed>) = 0 [pid 5266] <... openat resumed>) = 4 [pid 5267] memfd_create("syzkaller", 0 [pid 5266] ioctl(4, LOOP_SET_FD, 3 [pid 5267] <... memfd_create resumed>) = 3 [pid 5266] <... ioctl resumed>) = 0 [pid 5015] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5267] <... mmap resumed>) = 0x7f770c286000 [pid 5015] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5266] close(3 [pid 5015] newfstatat(4, "", [pid 5266] <... close resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5266] mkdir("./file1", 0777 [pid 5015] getdents64(4, [pid 5266] <... mkdir resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 80.798500][ T5264] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 80.807957][ T5266] loop2: detected capacity change from 0 to 4096 [ 80.809055][ T5262] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5266] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5265] <... mount resumed>) = 0 [pid 5015] rmdir("./20/file1" [pid 5265] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... rmdir resumed>) = 0 [pid 5265] <... openat resumed>) = 3 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./20") = 0 [pid 5015] mkdir("./21", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5265] chdir("./file1" [pid 5264] <... mount resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5271 ./strace-static-x86_64: Process 5271 attached [pid 5265] <... chdir resumed>) = 0 [pid 5264] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5265] ioctl(4, LOOP_CLR_FD [pid 5271] set_robust_list(0x555556b87660, 24 [pid 5264] <... openat resumed>) = 3 [ 80.841169][ T5266] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.852870][ T5269] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.867006][ T5270] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.880226][ T5262] Remounting filesystem read-only [pid 5271] <... set_robust_list resumed>) = 0 [pid 5265] <... ioctl resumed>) = 0 [pid 5264] chdir("./file1" [pid 5271] chdir("./21") = 0 [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] setpgid(0, 0) = 0 [pid 5265] close(4 [pid 5264] <... chdir resumed>) = 0 [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5271] write(3, "1000", 4) = 4 [pid 5271] close(3) = 0 [pid 5271] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5267] <... write resumed>) = 2097152 [pid 5265] <... close resumed>) = 0 [pid 5264] ioctl(4, LOOP_CLR_FD [pid 5262] <... openat resumed>) = -1 EIO (Input/output error) [pid 5271] memfd_create("syzkaller", 0) = 3 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5267] munmap(0x7f770c286000, 2097152 [pid 5265] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5264] <... ioctl resumed>) = 0 [pid 5267] <... munmap resumed>) = 0 [pid 5264] close(4 [ 80.893568][ T5262] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 80.902794][ T5262] NILFS (loop0): repaired inode bitmap for reserved inodes [ 80.911283][ T5262] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.931696][ T5266] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5262] exit_group(0) = ? [pid 5267] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5264] <... close resumed>) = 0 [pid 5267] <... openat resumed>) = 4 [pid 5264] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5262] +++ exited with 0 +++ [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5267] ioctl(4, LOOP_SET_FD, 3 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5262, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5012] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 80.949451][ T5265] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 80.972584][ T5265] Remounting filesystem read-only [ 80.979574][ T5265] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./18/binderfs") = 0 [pid 5012] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5266] <... mount resumed>) = 0 [pid 5266] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5267] <... ioctl resumed>) = 0 [pid 5266] <... openat resumed>) = 3 [pid 5267] close(3 [pid 5266] chdir("./file1" [pid 5267] <... close resumed>) = 0 [pid 5266] <... chdir resumed>) = 0 [ 80.988789][ T5264] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.003965][ T5267] loop5: detected capacity change from 0 to 4096 [ 81.012521][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 81.019679][ T5272] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.036536][ T5265] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5267] mkdir("./file1", 0777 [pid 5266] ioctl(4, LOOP_CLR_FD [pid 5267] <... mkdir resumed>) = 0 [pid 5266] <... ioctl resumed>) = 0 [pid 5267] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5266] close(4) = 0 [ 81.039069][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 81.051771][ T5264] Remounting filesystem read-only [ 81.058597][ T5265] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.075439][ T5267] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5266] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5271] <... write resumed>) = 2097152 [pid 5271] munmap(0x7f770c286000, 2097152) = 0 [pid 5271] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5265] <... openat resumed>) = -1 EIO (Input/output error) [pid 5271] ioctl(4, LOOP_SET_FD, 3 [ 81.089160][ T5266] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.098678][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 81.111192][ T5267] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 81.121471][ T5264] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 81.127177][ T5266] Remounting filesystem read-only [ 81.131816][ T5271] loop3: detected capacity change from 0 to 4096 [ 81.141877][ T5266] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5265] exit_group(0 [pid 5267] <... mount resumed>) = 0 [pid 5265] <... exit_group resumed>) = ? [pid 5271] <... ioctl resumed>) = 0 [pid 5271] close(3) = 0 [pid 5271] mkdir("./file1", 0777) = 0 [pid 5267] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5265] +++ exited with 0 +++ [pid 5267] <... openat resumed>) = 3 [pid 5271] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5265, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5016] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5267] chdir("./file1" [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./21/binderfs") = 0 [ 81.142200][ T5264] NILFS (loop1): repaired inode bitmap for reserved inodes [ 81.152253][ T5273] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.163473][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 81.176340][ T5266] NILFS (loop2): repaired inode bitmap for reserved inodes [ 81.184508][ T5266] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] <... chdir resumed>) = 0 [pid 5266] <... openat resumed>) = -1 EIO (Input/output error) [pid 5264] <... openat resumed>) = -1 EIO (Input/output error) [pid 5267] ioctl(4, LOOP_CLR_FD) = 0 [pid 5266] exit_group(0 [ 81.196453][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 81.200760][ T5264] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.206604][ T5271] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.221233][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 81.238304][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5264] exit_group(0 [pid 5267] close(4 [pid 5266] <... exit_group resumed>) = ? [pid 5264] <... exit_group resumed>) = ? [pid 5267] <... close resumed>) = 0 [pid 5266] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5266, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5264] +++ exited with 0 +++ [pid 5267] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./21/binderfs") = 0 [pid 5014] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5264, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./18/file1", [pid 5013] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(3, "", [pid 5012] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(3, [pid 5012] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(4, "", [ 81.247088][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 81.258744][ T5267] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.277103][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 81.280981][ T5267] Remounting filesystem read-only [ 81.285063][ T5271] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./19/binderfs" [pid 5012] getdents64(4, [pid 5013] <... unlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./18/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [ 81.305477][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 81.314278][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 81.325365][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 81.333948][ T5267] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 81.334454][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 81.343157][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5012] rmdir("./18") = 0 [pid 5012] mkdir("./19", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5274 attached [pid 5274] set_robust_list(0x555556b87660, 24 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5274 [pid 5274] <... set_robust_list resumed>) = 0 [pid 5274] chdir("./19") = 0 [pid 5274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5274] setpgid(0, 0) = 0 [pid 5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5274] write(3, "1000", 4) = 4 [pid 5274] close(3) = 0 [pid 5274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5274] memfd_create("syzkaller", 0) = 3 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 81.352232][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 81.371781][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 81.381387][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 81.385879][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 81.397070][ T5267] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5271] <... mount resumed>) = 0 [pid 5267] <... openat resumed>) = -1 EIO (Input/output error) [pid 5271] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5271] chdir("./file1") = 0 [pid 5271] ioctl(4, LOOP_CLR_FD) = 0 [pid 5271] close(4) = 0 [ 81.404828][ T5267] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.406519][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 81.428000][ T5275] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.428537][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 81.442692][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5271] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5267] exit_group(0) = ? [pid 5267] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5267, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5017] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./20/binderfs") = 0 [pid 5017] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 81.447410][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 81.465878][ T5271] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.488693][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5274] <... write resumed>) = 2097152 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [ 81.516590][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 81.524215][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 81.543190][ T5271] Remounting filesystem read-only [ 81.548272][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 81.548296][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5274] munmap(0x7f770c286000, 2097152 [pid 5016] getdents64(4, [pid 5014] <... umount2 resumed>) = 0 [pid 5274] <... munmap resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = 0 [pid 5274] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5016] close(4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] <... openat resumed>) = 4 [pid 5016] <... close resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./21/file1", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5274] ioctl(4, LOOP_SET_FD, 3 [pid 5016] rmdir("./21/file1" [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] newfstatat(AT_FDCWD, "./19/file1", [pid 5274] <... ioctl resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5014] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] getdents64(3, [pid 5013] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] close(3 [pid 5014] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... close resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5013] <... openat resumed>) = 4 [pid 5014] newfstatat(4, "", [pid 5016] rmdir("./21" [pid 5013] newfstatat(4, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5016] <... rmdir resumed>) = 0 [pid 5013] getdents64(4, [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] mkdir("./22", 0777 [pid 5014] getdents64(4, [pid 5013] getdents64(4, [pid 5016] <... mkdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5014] close(4 [pid 5013] close(4 [pid 5016] <... openat resumed>) = 3 [pid 5013] <... close resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] rmdir("./21/file1" [pid 5013] rmdir("./19/file1" [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, [pid 5013] getdents64(3, [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5016] close(3 [pid 5013] close(3 [pid 5274] close(3 [pid 5016] <... close resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5274] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] rmdir("./21" [pid 5013] <... close resumed>) = 0 [pid 5274] mkdir("./file1", 0777 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5276 [pid 5014] <... rmdir resumed>) = 0 [pid 5013] rmdir("./19" [pid 5014] mkdir("./22", 0777 [pid 5013] <... rmdir resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] mkdir("./20", 0777 [pid 5014] <... openat resumed>) = 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5014] close(3 [pid 5013] <... openat resumed>) = 3 [pid 5014] <... close resumed>) = 0 [pid 5274] <... mkdir resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5276 attached [pid 5276] set_robust_list(0x555556b87660, 24 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5277 [pid 5013] close(3) = 0 [ 81.548316][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 81.548330][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 81.566009][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 81.577011][ T5271] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 81.606079][ T5274] loop0: detected capacity change from 0 to 4096 [pid 5276] <... set_robust_list resumed>) = 0 [pid 5274] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5276] chdir("./22") = 0 [pid 5276] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5276] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5278 attached ./strace-static-x86_64: Process 5277 attached [pid 5276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5278 [pid 5276] <... openat resumed>) = 3 [pid 5276] write(3, "1000", 4) = 4 [pid 5276] close(3) = 0 [pid 5278] set_robust_list(0x555556b87660, 24 [pid 5277] set_robust_list(0x555556b87660, 24 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5277] <... set_robust_list resumed>) = 0 [pid 5276] symlink("/dev/binderfs", "./binderfs" [pid 5017] newfstatat(AT_FDCWD, "./20/file1", [pid 5278] <... set_robust_list resumed>) = 0 [pid 5277] chdir("./22" [pid 5276] <... symlink resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5278] chdir("./20" [pid 5277] <... chdir resumed>) = 0 [pid 5276] memfd_create("syzkaller", 0 [pid 5017] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5276] <... memfd_create resumed>) = 3 [pid 5276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5278] <... chdir resumed>) = 0 [pid 5277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5271] <... openat resumed>) = -1 EIO (Input/output error) [pid 5278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5277] <... prctl resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5278] <... prctl resumed>) = 0 [pid 5277] setpgid(0, 0 [pid 5017] <... openat resumed>) = 4 [pid 5278] setpgid(0, 0) = 0 [pid 5277] <... setpgid resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5278] <... openat resumed>) = 3 [pid 5277] <... openat resumed>) = 3 [pid 5276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5271] exit_group(0 [pid 5017] getdents64(4, [pid 5278] write(3, "1000", 4 [pid 5277] write(3, "1000", 4 [pid 5271] <... exit_group resumed>) = ? [pid 5278] <... write resumed>) = 4 [pid 5277] <... write resumed>) = 4 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5271] +++ exited with 0 +++ [pid 5277] close(3 [pid 5278] close(3 [pid 5277] <... close resumed>) = 0 [pid 5278] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5277] symlink("/dev/binderfs", "./binderfs" [pid 5278] symlink("/dev/binderfs", "./binderfs" [pid 5277] <... symlink resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5278] <... symlink resumed>) = 0 [pid 5017] close(4 [pid 5015] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... close resumed>) = 0 [pid 5277] memfd_create("syzkaller", 0 [pid 5017] rmdir("./20/file1" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5278] memfd_create("syzkaller", 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, [pid 5015] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5277] <... memfd_create resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5278] <... memfd_create resumed>) = 3 [pid 5277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] close(3 [pid 5015] <... openat resumed>) = 3 [pid 5278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5277] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... close resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5278] <... mmap resumed>) = 0x7f770c286000 [pid 5017] rmdir("./20" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, [pid 5017] mkdir("./21", 0777 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... openat resumed>) = 3 [ 81.652182][ T5274] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.652465][ T5271] NILFS (loop3): repaired inode bitmap for reserved inodes [ 81.672990][ T5271] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.692787][ T5274] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5017] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... close resumed>) = 0 [pid 5015] unlink("./21/binderfs" [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... unlink resumed>) = 0 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5280 [pid 5015] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] <... mount resumed>) = 0 [pid 5274] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5274] chdir("./file1") = 0 [pid 5274] ioctl(4, LOOP_CLR_FD) = 0 [pid 5274] close(4) = 0 [pid 5274] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5276] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5280 attached [pid 5276] munmap(0x7f770c286000, 2097152 [pid 5280] set_robust_list(0x555556b87660, 24) = 0 [pid 5280] chdir("./21") = 0 [pid 5276] <... munmap resumed>) = 0 [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5276] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5280] <... prctl resumed>) = 0 [pid 5276] <... openat resumed>) = 4 [pid 5280] setpgid(0, 0 [pid 5276] ioctl(4, LOOP_SET_FD, 3 [pid 5280] <... setpgid resumed>) = 0 [ 81.740521][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 81.750033][ T5279] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.762587][ T5274] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.771062][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5280] write(3, "1000", 4) = 4 [pid 5280] close(3) = 0 [pid 5280] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5280] memfd_create("syzkaller", 0) = 3 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5276] <... ioctl resumed>) = 0 [pid 5276] close(3) = 0 [pid 5276] mkdir("./file1", 0777) = 0 [ 81.793039][ T5276] loop4: detected capacity change from 0 to 4096 [ 81.799665][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 81.825808][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 81.835152][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5276] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5277] <... write resumed>) = 2097152 [pid 5278] <... write resumed>) = 2097152 [ 81.840344][ T5274] Remounting filesystem read-only [ 81.847440][ T5276] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.871735][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 81.881835][ T5276] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5277] munmap(0x7f770c286000, 2097152 [pid 5278] munmap(0x7f770c286000, 2097152 [pid 5277] <... munmap resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5278] <... munmap resumed>) = 0 [pid 5277] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5276] <... mount resumed>) = 0 [pid 5015] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5276] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5276] chdir("./file1") = 0 [pid 5276] ioctl(4, LOOP_CLR_FD) = 0 [pid 5280] <... write resumed>) = 2097152 [pid 5278] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5277] <... openat resumed>) = 4 [pid 5276] close(4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 81.883631][ T5274] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 81.916196][ T5281] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.932145][ T5274] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5280] munmap(0x7f770c286000, 2097152 [pid 5278] <... openat resumed>) = 4 [pid 5277] ioctl(4, LOOP_SET_FD, 3 [pid 5276] <... close resumed>) = 0 [pid 5276] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5280] <... munmap resumed>) = 0 [pid 5278] ioctl(4, LOOP_SET_FD, 3 [pid 5015] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5278] <... ioctl resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5280] <... openat resumed>) = 4 [pid 5278] close(3 [pid 5015] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5274] <... openat resumed>) = -1 EIO (Input/output error) [ 81.940120][ T5274] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.948080][ T5276] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 81.956870][ T5277] loop2: detected capacity change from 0 to 4096 [ 81.976869][ T5278] loop1: detected capacity change from 0 to 4096 [ 81.986498][ T5280] loop5: detected capacity change from 0 to 4096 [pid 5280] ioctl(4, LOOP_SET_FD, 3 [pid 5278] <... close resumed>) = 0 [pid 5277] <... ioctl resumed>) = 0 [pid 5274] exit_group(0 [pid 5015] <... openat resumed>) = 4 [pid 5280] <... ioctl resumed>) = 0 [pid 5278] mkdir("./file1", 0777 [pid 5277] close(3 [pid 5274] <... exit_group resumed>) = ? [pid 5015] newfstatat(4, "", [pid 5278] <... mkdir resumed>) = 0 [pid 5277] <... close resumed>) = 0 [pid 5274] +++ exited with 0 +++ [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5278] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5277] mkdir("./file1", 0777 [pid 5015] getdents64(4, [pid 5277] <... mkdir resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5277] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5274, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] close(4) = 0 [pid 5015] rmdir("./21/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./21") = 0 [pid 5015] mkdir("./22", 0777 [pid 5280] close(3 [pid 5015] <... mkdir resumed>) = 0 [pid 5280] <... close resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5280] mkdir("./file1", 0777 [pid 5015] <... openat resumed>) = 3 [pid 5280] <... mkdir resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5280] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 81.986853][ T5276] Remounting filesystem read-only [ 82.000302][ T5278] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.009896][ T5276] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 82.010151][ T5277] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.018315][ T5276] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5282 ./strace-static-x86_64: Process 5282 attached [pid 5012] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./19/binderfs") = 0 [pid 5012] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] set_robust_list(0x555556b87660, 24) = 0 [pid 5282] chdir("./22") = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5282] setpgid(0, 0) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5282] write(3, "1000", 4) = 4 [pid 5282] close(3) = 0 [ 82.043385][ T5276] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.058803][ T5280] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.069134][ T5278] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.069324][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5282] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5282] memfd_create("syzkaller", 0) = 3 [pid 5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5276] <... openat resumed>) = -1 EIO (Input/output error) [pid 5276] exit_group(0) = ? [pid 5276] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5276, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./22/binderfs", [ 82.078873][ T5277] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.096415][ T5280] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.126928][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 82.134946][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./22/binderfs" [pid 5282] <... write resumed>) = 2097152 [pid 5282] munmap(0x7f770c286000, 2097152) = 0 [pid 5282] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5016] <... unlink resumed>) = 0 [pid 5016] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5278] <... mount resumed>) = 0 [pid 5278] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5282] <... openat resumed>) = 4 [ 82.142439][ T5283] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.144818][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 82.161252][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 82.169995][ T5284] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.171081][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 82.183358][ T5282] loop3: detected capacity change from 0 to 4096 [pid 5282] ioctl(4, LOOP_SET_FD, 3 [pid 5278] <... openat resumed>) = 3 [pid 5282] <... ioctl resumed>) = 0 [pid 5282] close(3) = 0 [pid 5282] mkdir("./file1", 0777 [pid 5278] chdir("./file1" [pid 5277] <... mount resumed>) = 0 [pid 5282] <... mkdir resumed>) = 0 [pid 5280] <... mount resumed>) = 0 [pid 5278] <... chdir resumed>) = 0 [pid 5277] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5282] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5280] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5278] ioctl(4, LOOP_CLR_FD [pid 5277] <... openat resumed>) = 3 [pid 5280] <... openat resumed>) = 3 [pid 5278] <... ioctl resumed>) = 0 [pid 5277] chdir("./file1" [pid 5280] chdir("./file1" [pid 5278] close(4 [pid 5277] <... chdir resumed>) = 0 [ 82.187864][ T5285] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.197373][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 82.205385][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 82.220563][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 82.223498][ T5282] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.227937][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5280] <... chdir resumed>) = 0 [pid 5278] <... close resumed>) = 0 [pid 5277] ioctl(4, LOOP_CLR_FD [pid 5280] ioctl(4, LOOP_CLR_FD [pid 5278] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5277] <... ioctl resumed>) = 0 [pid 5280] <... ioctl resumed>) = 0 [pid 5277] close(4 [pid 5280] close(4 [pid 5277] <... close resumed>) = 0 [pid 5280] <... close resumed>) = 0 [pid 5277] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5280] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 82.245213][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 82.246715][ T5282] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.252582][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 82.270064][ T5278] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./19/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./19") = 0 [pid 5012] mkdir("./20", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5286 ./strace-static-x86_64: Process 5286 attached [pid 5286] set_robust_list(0x555556b87660, 24) = 0 [pid 5286] chdir("./20") = 0 [pid 5286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5286] setpgid(0, 0) = 0 [ 82.286948][ T5277] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.302431][ T5280] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5286] write(3, "1000", 4) = 4 [pid 5286] close(3) = 0 [pid 5286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5286] memfd_create("syzkaller", 0) = 3 [pid 5286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 82.336261][ T5278] Remounting filesystem read-only [ 82.342117][ T5277] Remounting filesystem read-only [ 82.347998][ T5280] Remounting filesystem read-only [ 82.357179][ T5278] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 82.366528][ T5280] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 82.370881][ T5278] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = 0 [ 82.374370][ T5280] NILFS (loop5): repaired inode bitmap for reserved inodes [ 82.374413][ T5280] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.404911][ T5277] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 82.412241][ T5278] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.415401][ T5277] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5016] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... mount resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5280] <... openat resumed>) = -1 EIO (Input/output error) [pid 5278] <... openat resumed>) = -1 EIO (Input/output error) [pid 5277] <... openat resumed>) = -1 EIO (Input/output error) [pid 5282] <... openat resumed>) = 3 [pid 5282] chdir("./file1" [pid 5016] newfstatat(AT_FDCWD, "./22/file1", [pid 5282] <... chdir resumed>) = 0 [pid 5280] exit_group(0 [pid 5277] exit_group(0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5286] <... write resumed>) = 2097152 [pid 5282] ioctl(4, LOOP_CLR_FD [pid 5280] <... exit_group resumed>) = ? [pid 5278] exit_group(0 [pid 5277] <... exit_group resumed>) = ? [pid 5016] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... ioctl resumed>) = 0 [pid 5282] close(4) = 0 [pid 5282] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 82.436061][ T5287] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.447620][ T5277] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5286] munmap(0x7f770c286000, 2097152 [pid 5280] +++ exited with 0 +++ [pid 5278] <... exit_group resumed>) = ? [pid 5277] +++ exited with 0 +++ [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5278] +++ exited with 0 +++ [pid 5016] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./22/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./22") = 0 [pid 5016] mkdir("./23", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5288 ./strace-static-x86_64: Process 5288 attached [pid 5288] set_robust_list(0x555556b87660, 24) = 0 [pid 5288] chdir("./23") = 0 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5288] setpgid(0, 0) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5288] write(3, "1000", 4) = 4 [pid 5288] close(3) = 0 [pid 5288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5288] memfd_create("syzkaller", 0) = 3 [pid 5288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5278, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5277, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5013] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", [pid 5017] newfstatat(3, "", [pid 5014] newfstatat(3, "", [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] getdents64(3, [pid 5017] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(3, [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5013] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] unlink("./21/binderfs" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5017] <... unlink resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5017] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5288] <... mmap resumed>) = 0x7f770c286000 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./20/binderfs" [pid 5014] unlink("./22/binderfs" [pid 5013] <... unlink resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5013] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 82.485914][ T5282] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.517929][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 82.524910][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5286] <... munmap resumed>) = 0 [pid 5286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5286] ioctl(4, LOOP_SET_FD, 3 [pid 5288] <... write resumed>) = 2097152 [ 82.532048][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 82.539062][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 82.551094][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 82.553008][ T5282] Remounting filesystem read-only [ 82.558808][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 82.572684][ T5286] loop0: detected capacity change from 0 to 4096 [pid 5288] munmap(0x7f770c286000, 2097152 [pid 5286] <... ioctl resumed>) = 0 [pid 5286] close(3) = 0 [pid 5286] mkdir("./file1", 0777 [pid 5288] <... munmap resumed>) = 0 [pid 5286] <... mkdir resumed>) = 0 [pid 5288] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5288] ioctl(4, LOOP_SET_FD, 3 [ 82.584208][ T5282] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 82.590571][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 82.602518][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 82.615694][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 82.619674][ T5288] loop4: detected capacity change from 0 to 4096 [ 82.623000][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5286] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5288] <... ioctl resumed>) = 0 [pid 5288] close(3) = 0 [pid 5288] mkdir("./file1", 0777) = 0 [ 82.638096][ T5286] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.648152][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 82.654736][ T5282] NILFS (loop3): repaired inode bitmap for reserved inodes [ 82.655950][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 82.663451][ T5282] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5288] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5282] <... openat resumed>) = -1 EIO (Input/output error) [pid 5282] exit_group(0) = ? [pid 5282] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [ 82.670910][ T5286] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.694911][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 82.698197][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 82.702258][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 82.709480][ T5288] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.716624][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5015] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./22/binderfs") = 0 [ 82.727555][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 82.733240][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 82.754134][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 82.761223][ T5288] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 82.772871][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5015] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./20/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5014] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./20" [pid 5286] <... mount resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5286] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... rmdir resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./22/file1", [pid 5286] <... openat resumed>) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] mkdir("./21", 0777 [pid 5286] chdir("./file1" [pid 5013] <... mkdir resumed>) = 0 [pid 5286] <... chdir resumed>) = 0 [pid 5014] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 82.785683][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 82.792686][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 82.820497][ T5289] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5286] ioctl(4, LOOP_CLR_FD) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 3 [pid 5286] close(4 [pid 5014] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5286] <... close resumed>) = 0 [pid 5286] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... openat resumed>) = 4 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./21/file1", [pid 5014] newfstatat(4, "", [pid 5013] close(3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4 [pid 5014] getdents64(4, [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./21/file1" [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5291 [pid 5014] close(4) = 0 [pid 5014] rmdir("./22/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./22" [pid 5017] <... rmdir resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [ 82.836200][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 82.854045][ T5286] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.858065][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5014] mkdir("./23", 0777 [pid 5017] getdents64(3, ./strace-static-x86_64: Process 5291 attached [pid 5288] <... mount resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./21") = 0 [pid 5017] mkdir("./22", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5288] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5291] set_robust_list(0x555556b87660, 24 [pid 5288] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 3 [pid 5291] <... set_robust_list resumed>) = 0 [pid 5288] chdir("./file1" [pid 5015] <... umount2 resumed>) = 0 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5292 ./strace-static-x86_64: Process 5292 attached [pid 5292] set_robust_list(0x555556b87660, 24) = 0 [pid 5292] chdir("./22") = 0 [pid 5291] chdir("./21" [pid 5288] <... chdir resumed>) = 0 [pid 5015] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5292] setpgid(0, 0) = 0 [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5292] symlink("/dev/binderfs", "./binderfs" [pid 5291] <... chdir resumed>) = 0 [pid 5288] ioctl(4, LOOP_CLR_FD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5292] <... symlink resumed>) = 0 [pid 5292] memfd_create("syzkaller", 0) = 3 [ 82.901527][ T5290] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.927262][ T5286] Remounting filesystem read-only [ 82.932846][ T5286] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 82.941342][ T5286] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5288] <... ioctl resumed>) = 0 [pid 5286] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] newfstatat(AT_FDCWD, "./22/file1", [pid 5014] close(3 [pid 5291] <... prctl resumed>) = 0 [pid 5288] close(4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... close resumed>) = 0 [pid 5291] setpgid(0, 0 [pid 5288] <... close resumed>) = 0 [pid 5015] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5291] <... setpgid resumed>) = 0 [pid 5288] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5286] exit_group(0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5293 attached [pid 5015] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5291] <... openat resumed>) = 3 [pid 5286] <... exit_group resumed>) = ? [pid 5015] <... openat resumed>) = 4 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5293 [pid 5291] write(3, "1000", 4 [pid 5015] newfstatat(4, "", [pid 5293] set_robust_list(0x555556b87660, 24 [pid 5291] <... write resumed>) = 4 [pid 5286] +++ exited with 0 +++ [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5293] <... set_robust_list resumed>) = 0 [pid 5291] close(3 [pid 5015] getdents64(4, [pid 5293] chdir("./23" [pid 5291] <... close resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5286, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5293] <... chdir resumed>) = 0 [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5291] symlink("/dev/binderfs", "./binderfs" [pid 5015] getdents64(4, [pid 5012] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] <... prctl resumed>) = 0 [pid 5291] <... symlink resumed>) = 0 [pid 5293] setpgid(0, 0 [pid 5291] memfd_create("syzkaller", 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5293] <... setpgid resumed>) = 0 [pid 5291] <... memfd_create resumed>) = 3 [pid 5015] close(4 [pid 5012] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... close resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5293] <... openat resumed>) = 3 [pid 5291] <... mmap resumed>) = 0x7f770c286000 [pid 5015] rmdir("./22/file1" [pid 5012] newfstatat(3, "", [pid 5293] write(3, "1000", 4) = 4 [pid 5293] close(3) = 0 [pid 5293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5293] memfd_create("syzkaller", 0) = 3 [ 82.949143][ T5286] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 82.973766][ T5288] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] <... rmdir resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, [pid 5012] getdents64(3, [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./22" [pid 5012] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... rmdir resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] mkdir("./23", 0777 [pid 5012] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5015] <... mkdir resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5012] unlink("./20/binderfs" [pid 5015] <... openat resumed>) = 3 [pid 5012] <... unlink resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5012] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5294 [ 83.016854][ T5288] Remounting filesystem read-only [ 83.037013][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 83.043758][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 83.051643][ T5288] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5294 attached [pid 5292] <... write resumed>) = 2097152 [pid 5294] set_robust_list(0x555556b87660, 24) = 0 [pid 5294] chdir("./23") = 0 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5294] setpgid(0, 0) = 0 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5294] write(3, "1000", 4) = 4 [pid 5294] close(3) = 0 [pid 5294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5294] memfd_create("syzkaller", 0) = 3 [ 83.074414][ T5288] NILFS (loop4): repaired inode bitmap for reserved inodes [ 83.081934][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5292] munmap(0x7f770c286000, 2097152) = 0 [pid 5291] <... write resumed>) = 2097152 [pid 5291] munmap(0x7f770c286000, 2097152 [pid 5292] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5292] ioctl(4, LOOP_SET_FD, 3 [pid 5291] <... munmap resumed>) = 0 [pid 5288] <... openat resumed>) = -1 EIO (Input/output error) [pid 5291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5288] exit_group(0 [pid 5291] <... openat resumed>) = 4 [pid 5291] ioctl(4, LOOP_SET_FD, 3 [pid 5288] <... exit_group resumed>) = ? [ 83.114729][ T5288] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.130030][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 83.139197][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 83.146393][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 83.150278][ T5292] loop5: detected capacity change from 0 to 4096 [pid 5288] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", [pid 5291] <... ioctl resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, [pid 5291] close(3) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5291] mkdir("./file1", 0777 [pid 5016] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./23/binderfs") = 0 [pid 5291] <... mkdir resumed>) = 0 [pid 5016] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5291] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5293] <... write resumed>) = 2097152 [pid 5293] munmap(0x7f770c286000, 2097152) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5292] <... ioctl resumed>) = 0 [pid 5292] close(3) = 0 [ 83.166532][ T5291] loop1: detected capacity change from 0 to 4096 [ 83.191371][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 83.192314][ T5291] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.207865][ T5293] loop2: detected capacity change from 0 to 4096 [pid 5292] mkdir("./file1", 0777) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5292] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5293] <... ioctl resumed>) = 0 [pid 5293] close(3 [pid 5012] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./20/file1", [pid 5293] mkdir("./file1", 0777) = 0 [pid 5293] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 83.217690][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 83.225739][ T5291] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 83.236726][ T5292] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.243198][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 83.256122][ T5292] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5012] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5294] <... write resumed>) = 2097152 [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", [pid 5294] munmap(0x7f770c286000, 2097152) = 0 [pid 5291] <... mount resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5294] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5291] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] getdents64(4, [pid 5294] <... openat resumed>) = 4 [ 83.256959][ T5293] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.274642][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 83.285447][ T5295] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.289482][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 83.298563][ T5293] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5291] <... openat resumed>) = 3 [pid 5291] chdir("./file1" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5291] <... chdir resumed>) = 0 [pid 5012] getdents64(4, [pid 5291] ioctl(4, LOOP_CLR_FD [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5291] <... ioctl resumed>) = 0 [pid 5012] close(4 [pid 5291] close(4) = 0 [pid 5012] <... close resumed>) = 0 [pid 5292] <... mount resumed>) = 0 [pid 5291] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] rmdir("./20/file1" [pid 5292] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] <... rmdir resumed>) = 0 [pid 5292] <... openat resumed>) = 3 [pid 5294] <... ioctl resumed>) = 0 [pid 5294] close(3) = 0 [pid 5294] mkdir("./file1", 0777) = 0 [pid 5294] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5292] chdir("./file1" [pid 5012] getdents64(3, [pid 5292] <... chdir resumed>) = 0 [ 83.303268][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 83.324693][ T5294] loop3: detected capacity change from 0 to 4096 [ 83.332648][ T5296] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.344836][ T5291] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5292] ioctl(4, LOOP_CLR_FD [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5292] <... ioctl resumed>) = 0 [pid 5012] close(3) = 0 [pid 5292] close(4 [pid 5012] rmdir("./20" [pid 5292] <... close resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [ 83.361111][ T5294] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.368539][ T5291] Remounting filesystem read-only [ 83.393594][ T5292] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.393963][ T5294] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5292] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5293] <... mount resumed>) = 0 [pid 5012] mkdir("./21", 0777 [pid 5016] <... umount2 resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5293] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5293] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5293] chdir("./file1" [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5293] <... chdir resumed>) = 0 [pid 5293] ioctl(4, LOOP_CLR_FD [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5293] <... ioctl resumed>) = 0 [pid 5012] close(3 [pid 5293] close(4 [pid 5016] <... openat resumed>) = 4 [pid 5012] <... close resumed>) = 0 [pid 5293] <... close resumed>) = 0 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, [pid 5293] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] close(4) = 0 [pid 5016] rmdir("./23/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./23") = 0 [pid 5016] mkdir("./24", 0777) = 0 [ 83.412957][ T5297] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.432098][ T5291] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 83.441447][ T5292] Remounting filesystem read-only [ 83.456222][ T5291] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5298 attached ) = -1 ENXIO (No such device or address) [pid 5298] set_robust_list(0x555556b87660, 24 [pid 5016] close(3 [pid 5298] <... set_robust_list resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5298] chdir("./21" [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5298] <... chdir resumed>) = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5299 [pid 5298] <... prctl resumed>) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5298 [pid 5298] setpgid(0, 0) = 0 [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5298] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5299 attached [pid 5298] close(3 [pid 5299] set_robust_list(0x555556b87660, 24 [pid 5298] <... close resumed>) = 0 [pid 5299] <... set_robust_list resumed>) = 0 [pid 5298] symlink("/dev/binderfs", "./binderfs" [pid 5299] chdir("./24" [pid 5298] <... symlink resumed>) = 0 [pid 5299] <... chdir resumed>) = 0 [pid 5298] memfd_create("syzkaller", 0 [pid 5299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5298] <... memfd_create resumed>) = 3 [pid 5299] <... prctl resumed>) = 0 [pid 5298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5299] setpgid(0, 0 [pid 5298] <... mmap resumed>) = 0x7f770c286000 [pid 5299] <... setpgid resumed>) = 0 [pid 5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1000", 4) = 4 [pid 5299] close(3) = 0 [pid 5299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5299] memfd_create("syzkaller", 0) = 3 [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 83.465149][ T5293] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.492618][ T5292] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 83.503257][ T5291] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.524437][ T5293] Remounting filesystem read-only [ 83.529838][ T5292] NILFS (loop5): repaired inode bitmap for reserved inodes [ 83.544407][ T5293] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5291] <... openat resumed>) = -1 EIO (Input/output error) [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5291] exit_group(0 [pid 5298] <... write resumed>) = 2097152 [pid 5294] <... mount resumed>) = 0 [pid 5293] <... openat resumed>) = -1 EIO (Input/output error) [pid 5292] <... openat resumed>) = -1 EIO (Input/output error) [pid 5291] <... exit_group resumed>) = ? [pid 5298] munmap(0x7f770c286000, 2097152 [pid 5294] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5293] exit_group(0 [pid 5292] exit_group(0 [pid 5298] <... munmap resumed>) = 0 [pid 5294] <... openat resumed>) = 3 [pid 5293] <... exit_group resumed>) = ? [pid 5292] <... exit_group resumed>) = ? [pid 5291] +++ exited with 0 +++ [pid 5298] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5294] chdir("./file1" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5291, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5298] <... openat resumed>) = 4 [pid 5294] <... chdir resumed>) = 0 [pid 5293] +++ exited with 0 +++ [pid 5292] +++ exited with 0 +++ [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5298] ioctl(4, LOOP_SET_FD, 3 [pid 5294] ioctl(4, LOOP_CLR_FD [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 83.562019][ T5292] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.578284][ T5293] NILFS (loop2): repaired inode bitmap for reserved inodes [ 83.586142][ T5293] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.596672][ T5300] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] <... restart_syscall resumed>) = 0 [pid 5294] <... ioctl resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5294] close(4 [pid 5014] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] <... write resumed>) = 2097152 [pid 5298] <... ioctl resumed>) = 0 [pid 5294] <... close resumed>) = 0 [pid 5017] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] munmap(0x7f770c286000, 2097152 [pid 5298] close(3 [pid 5294] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] <... munmap resumed>) = 0 [pid 5298] <... close resumed>) = 0 [pid 5299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5298] mkdir("./file1", 0777 [pid 5299] <... openat resumed>) = 4 [pid 5298] <... mkdir resumed>) = 0 [pid 5299] ioctl(4, LOOP_SET_FD, 3 [ 83.640532][ T5298] loop0: detected capacity change from 0 to 4096 [ 83.657553][ T5294] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.662418][ T5299] loop4: detected capacity change from 0 to 4096 [pid 5298] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", [pid 5017] newfstatat(3, "", [pid 5013] newfstatat(3, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5017] getdents64(3, [pid 5013] getdents64(3, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5299] <... ioctl resumed>) = 0 [pid 5299] close(3) = 0 [pid 5299] mkdir("./file1", 0777) = 0 [pid 5299] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5017] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./23/binderfs" [pid 5013] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5014] <... unlink resumed>) = 0 [pid 5014] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] unlink("./22/binderfs" [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 83.681887][ T5298] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.688429][ T5294] Remounting filesystem read-only [ 83.700726][ T5294] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 83.709949][ T5298] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 83.710539][ T5294] NILFS (loop3): repaired inode bitmap for reserved inodes [ 83.728701][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5298] <... mount resumed>) = 0 [pid 5294] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... unlink resumed>) = 0 [pid 5013] unlink("./21/binderfs" [pid 5298] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5294] exit_group(0 [pid 5017] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... unlink resumed>) = 0 [pid 5298] <... openat resumed>) = 3 [pid 5294] <... exit_group resumed>) = ? [pid 5013] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5298] chdir("./file1" [pid 5294] +++ exited with 0 +++ [pid 5298] <... chdir resumed>) = 0 [pid 5298] ioctl(4, LOOP_CLR_FD) = 0 [ 83.734763][ T5301] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.735408][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 83.746066][ T5294] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.768714][ T5299] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.779591][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5298] close(4) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [ 83.787061][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 83.788157][ T5298] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.794931][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 83.817340][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 83.817428][ T5299] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 83.817629][ T5298] Remounting filesystem read-only [pid 5298] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 83.836242][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 83.847108][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 83.853854][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 83.862319][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 83.870896][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 83.881017][ T5298] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5299] <... mount resumed>) = 0 [pid 5015] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = 0 [pid 5299] <... openat resumed>) = 3 [pid 5015] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5014] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] chdir("./file1") = 0 [pid 5299] ioctl(4, LOOP_CLR_FD) = 0 [pid 5299] close(4) = 0 [ 83.881395][ T5302] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.889760][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 83.907443][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 83.913306][ T5298] NILFS (loop0): repaired inode bitmap for reserved inodes [ 83.920253][ T5299] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5299] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] unlink("./23/binderfs" [pid 5014] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5014] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 83.934631][ T5298] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 83.937782][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 83.959872][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 83.969196][ T5299] Remounting filesystem read-only [ 83.970808][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 83.975181][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5014] newfstatat(4, "", [pid 5298] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5298] exit_group(0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5298] <... exit_group resumed>) = ? [pid 5014] getdents64(4, [pid 5298] +++ exited with 0 +++ [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5298, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 83.983770][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 83.989090][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 84.005390][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 84.007124][ T5299] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 84.013624][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 84.020661][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 84.028386][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./23/file1") = 0 [pid 5012] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5012] <... openat resumed>) = 3 [pid 5014] <... close resumed>) = 0 [pid 5012] newfstatat(3, "", [pid 5014] rmdir("./23" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] getdents64(3, [pid 5014] mkdir("./24", 0777 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... mkdir resumed>) = 0 [pid 5012] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5014] <... openat resumed>) = 3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] unlink("./21/binderfs") = 0 [pid 5014] close(3 [pid 5012] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [ 84.042697][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 84.044337][ T5299] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5303 ./strace-static-x86_64: Process 5303 attached [pid 5303] set_robust_list(0x555556b87660, 24) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5303] chdir("./24" [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5303] <... chdir resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./23/file1", [pid 5303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5303] <... prctl resumed>) = 0 [pid 5015] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5303] setpgid(0, 0 [pid 5017] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, [pid 5013] <... umount2 resumed>) = 0 [pid 5303] <... setpgid resumed>) = 0 [pid 5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5303] <... openat resumed>) = 3 [pid 5303] write(3, "1000", 4) = 4 [pid 5303] close(3) = 0 [pid 5303] symlink("/dev/binderfs", "./binderfs" [pid 5017] newfstatat(AT_FDCWD, "./22/file1", [pid 5015] close(4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... close resumed>) = 0 [pid 5017] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] rmdir("./23/file1" [pid 5303] <... symlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... rmdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] getdents64(3, [pid 5017] <... openat resumed>) = 4 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] newfstatat(4, "", [pid 5015] close(3 [pid 5303] memfd_create("syzkaller", 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] rmdir("./23" [pid 5013] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] <... memfd_create resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] getdents64(4, [pid 5015] mkdir("./24", 0777 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] newfstatat(AT_FDCWD, "./21/file1", [pid 5303] <... mmap resumed>) = 0x7f770c286000 [ 84.089270][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 84.094112][ T5299] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.112433][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 84.132581][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5017] close(4 [pid 5015] <... mkdir resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./21/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./21") = 0 [pid 5013] mkdir("./22", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5017] <... close resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] <... close resumed>) = 0 [pid 5017] rmdir("./22/file1" [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5304 ./strace-static-x86_64: Process 5304 attached [pid 5304] set_robust_list(0x555556b87660, 24) = 0 [pid 5304] chdir("./22") = 0 [pid 5015] <... openat resumed>) = 3 [pid 5304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5304] setpgid(0, 0 [pid 5017] getdents64(3, [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5304] <... setpgid resumed>) = 0 [pid 5304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] close(3 [pid 5015] close(3 [pid 5304] <... openat resumed>) = 3 [pid 5017] <... close resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5304] write(3, "1000", 4 [pid 5017] rmdir("./22" [pid 5304] <... write resumed>) = 4 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5304] close(3 [pid 5017] <... rmdir resumed>) = 0 [pid 5304] <... close resumed>) = 0 [pid 5017] mkdir("./23", 0777 [pid 5304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5305 [pid 5304] memfd_create("syzkaller", 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5304] <... memfd_create resumed>) = 3 [pid 5017] <... openat resumed>) = 3 [pid 5304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5304] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5305 attached [pid 5299] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] close(3 [pid 5299] exit_group(0 [pid 5017] <... close resumed>) = 0 [pid 5305] set_robust_list(0x555556b87660, 24 [pid 5299] <... exit_group resumed>) = ? [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5305] <... set_robust_list resumed>) = 0 [pid 5299] +++ exited with 0 +++ [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5306 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5299, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [ 84.154744][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 84.163959][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 84.171893][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5305] chdir("./24") = 0 [pid 5016] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... openat resumed>) = 3 [pid 5012] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(3, "", ./strace-static-x86_64: Process 5306 attached [pid 5305] <... prctl resumed>) = 0 [pid 5303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] set_robust_list(0x555556b87660, 24 [pid 5305] setpgid(0, 0 [pid 5016] getdents64(3, [pid 5306] <... set_robust_list resumed>) = 0 [pid 5305] <... setpgid resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] newfstatat(AT_FDCWD, "./21/file1", [pid 5306] chdir("./23" [pid 5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... chdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5305] <... openat resumed>) = 3 [pid 5016] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5306] <... prctl resumed>) = 0 [pid 5305] write(3, "1000", 4 [pid 5304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] setpgid(0, 0 [pid 5305] <... write resumed>) = 4 [pid 5016] unlink("./24/binderfs" [pid 5306] <... setpgid resumed>) = 0 [pid 5305] close(3 [pid 5016] <... unlink resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... openat resumed>) = 3 [pid 5305] <... close resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5306] write(3, "1000", 4 [pid 5305] symlink("/dev/binderfs", "./binderfs" [pid 5306] <... write resumed>) = 4 [pid 5306] close(3 [pid 5305] <... symlink resumed>) = 0 [pid 5306] <... close resumed>) = 0 [pid 5306] symlink("/dev/binderfs", "./binderfs" [pid 5012] <... openat resumed>) = 4 [pid 5306] <... symlink resumed>) = 0 [pid 5305] memfd_create("syzkaller", 0 [pid 5012] newfstatat(4, "", [pid 5306] memfd_create("syzkaller", 0 [pid 5305] <... memfd_create resumed>) = 3 [pid 5306] <... memfd_create resumed>) = 3 [pid 5305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5305] <... mmap resumed>) = 0x7f770c286000 [pid 5012] getdents64(4, [pid 5306] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./21/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./21") = 0 [pid 5012] mkdir("./22", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5307 ./strace-static-x86_64: Process 5307 attached [pid 5307] set_robust_list(0x555556b87660, 24) = 0 [pid 5307] chdir("./22") = 0 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5307] setpgid(0, 0) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5307] write(3, "1000", 4) = 4 [pid 5307] close(3) = 0 [pid 5307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5303] <... write resumed>) = 2097152 [pid 5307] memfd_create("syzkaller", 0 [pid 5303] munmap(0x7f770c286000, 2097152 [pid 5307] <... memfd_create resumed>) = 3 [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5303] <... munmap resumed>) = 0 [pid 5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5303] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5303] <... openat resumed>) = 4 [ 84.270072][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 84.285883][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5303] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5304] <... write resumed>) = 2097152 [pid 5303] close(3) = 0 [pid 5303] mkdir("./file1", 0777) = 0 [pid 5303] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5304] munmap(0x7f770c286000, 2097152) = 0 [pid 5305] <... write resumed>) = 2097152 [pid 5304] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5305] munmap(0x7f770c286000, 2097152 [ 84.317595][ T5303] loop2: detected capacity change from 0 to 4096 [ 84.325715][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 84.332897][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 84.349796][ T5303] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5304] ioctl(4, LOOP_SET_FD, 3 [pid 5305] <... munmap resumed>) = 0 [pid 5304] <... ioctl resumed>) = 0 [pid 5305] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5304] close(3 [pid 5305] <... openat resumed>) = 4 [pid 5304] <... close resumed>) = 0 [pid 5305] ioctl(4, LOOP_SET_FD, 3 [pid 5304] mkdir("./file1", 0777) = 0 [pid 5304] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5306] <... write resumed>) = 2097152 [ 84.365937][ T5304] loop1: detected capacity change from 0 to 4096 [ 84.378443][ T5305] loop3: detected capacity change from 0 to 4096 [ 84.389343][ T5304] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.395467][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 84.406276][ T5303] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5306] munmap(0x7f770c286000, 2097152 [pid 5307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5305] <... ioctl resumed>) = 0 [pid 5306] <... munmap resumed>) = 0 [pid 5306] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5306] ioctl(4, LOOP_SET_FD, 3 [pid 5305] close(3) = 0 [pid 5305] mkdir("./file1", 0777) = 0 [pid 5305] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5306] <... ioctl resumed>) = 0 [pid 5306] close(3) = 0 [pid 5306] mkdir("./file1", 0777) = 0 [ 84.406535][ T5304] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 84.418179][ T5306] loop5: detected capacity change from 0 to 4096 [ 84.438847][ T5305] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.447452][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 84.456630][ T5305] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5306] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5307] <... write resumed>) = 2097152 [pid 5307] munmap(0x7f770c286000, 2097152 [pid 5303] <... mount resumed>) = 0 [pid 5303] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5307] <... munmap resumed>) = 0 [pid 5303] <... openat resumed>) = 3 [pid 5303] chdir("./file1" [pid 5307] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5303] <... chdir resumed>) = 0 [pid 5303] ioctl(4, LOOP_CLR_FD) = 0 [pid 5307] <... openat resumed>) = 4 [pid 5303] close(4 [pid 5307] ioctl(4, LOOP_SET_FD, 3 [pid 5303] <... close resumed>) = 0 [ 84.466711][ T5306] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.481156][ T5308] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.500605][ T5303] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.504576][ T5306] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 84.515756][ T5307] loop0: detected capacity change from 0 to 4096 [ 84.554130][ T5309] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5303] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5304] <... mount resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5304] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5016] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./24/file1", [pid 5304] chdir("./file1") = 0 [pid 5304] ioctl(4, LOOP_CLR_FD [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5304] <... ioctl resumed>) = 0 [pid 5016] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5304] close(4) = 0 [pid 5307] <... ioctl resumed>) = 0 [pid 5304] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./24/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./24") = 0 [pid 5016] mkdir("./25", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5311 [pid 5307] close(3) = 0 [pid 5307] mkdir("./file1", 0777./strace-static-x86_64: Process 5311 attached [pid 5311] set_robust_list(0x555556b87660, 24) = 0 [pid 5311] chdir("./25") = 0 [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5311] setpgid(0, 0) = 0 [ 84.564189][ T5303] Remounting filesystem read-only [ 84.579378][ T5304] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.603615][ T5303] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5307] <... mkdir resumed>) = 0 [pid 5305] <... mount resumed>) = 0 [pid 5307] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5305] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5311] <... openat resumed>) = 3 [pid 5305] chdir("./file1" [pid 5311] write(3, "1000", 4 [pid 5305] <... chdir resumed>) = 0 [pid 5311] <... write resumed>) = 4 [pid 5305] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] close(3) = 0 [pid 5311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5311] memfd_create("syzkaller", 0) = 3 [pid 5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5305] close(4 [pid 5306] <... mount resumed>) = 0 [pid 5305] <... close resumed>) = 0 [ 84.615418][ T5310] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.621290][ T5303] NILFS (loop2): repaired inode bitmap for reserved inodes [ 84.629132][ T5304] Remounting filesystem read-only [ 84.641683][ T5307] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.652250][ T5312] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5306] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5305] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5306] chdir("./file1") = 0 [pid 5306] ioctl(4, LOOP_CLR_FD) = 0 [pid 5306] close(4) = 0 [ 84.673488][ T5303] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.676087][ T5306] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.703819][ T5305] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5306] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5303] <... openat resumed>) = -1 EIO (Input/output error) [pid 5303] exit_group(0 [pid 5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5303] <... exit_group resumed>) = ? [pid 5303] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5303, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./24/binderfs") = 0 [ 84.708063][ T5304] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 84.728022][ T5307] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 84.738670][ T5305] Remounting filesystem read-only [ 84.761064][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5014] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5307] <... mount resumed>) = 0 [pid 5307] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5307] chdir("./file1") = 0 [pid 5307] ioctl(4, LOOP_CLR_FD) = 0 [pid 5307] close(4) = 0 [ 84.779089][ T5305] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 84.786275][ T5304] NILFS (loop1): repaired inode bitmap for reserved inodes [ 84.792431][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 84.798744][ T5306] Remounting filesystem read-only [ 84.802560][ T5313] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.818044][ T5305] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5307] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5311] <... write resumed>) = 2097152 [pid 5311] munmap(0x7f770c286000, 2097152) = 0 [pid 5311] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 84.818806][ T5307] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.826411][ T5305] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.851873][ T5311] loop4: detected capacity change from 0 to 4096 [ 84.859262][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5311] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5311] close(3) = 0 [pid 5311] mkdir("./file1", 0777) = 0 [pid 5311] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5305] <... openat resumed>) = -1 EIO (Input/output error) [ 84.863434][ T5304] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.878467][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 84.885245][ T5306] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 84.900872][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 84.904129][ T5311] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.909316][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5305] exit_group(0) = ? [pid 5305] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./24/binderfs") = 0 [pid 5015] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5304] <... openat resumed>) = -1 EIO (Input/output error) [pid 5304] exit_group(0) = ? [pid 5304] +++ exited with 0 +++ [ 84.919401][ T5307] Remounting filesystem read-only [ 84.932177][ T5306] NILFS (loop5): repaired inode bitmap for reserved inodes [ 84.949505][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 84.956910][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5304, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} --- [pid 5014] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... restart_syscall resumed>) = 0 [pid 5306] <... openat resumed>) = -1 EIO (Input/output error) [ 84.969857][ T5306] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 84.982688][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 84.986380][ T5311] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 84.992667][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 85.003460][ T5307] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 85.010234][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5014] newfstatat(AT_FDCWD, "./24/file1", [pid 5306] exit_group(0) = ? [pid 5306] +++ exited with 0 +++ [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5306, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5014] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 4 [pid 5013] <... openat resumed>) = 3 [pid 5017] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] newfstatat(4, "", [pid 5013] newfstatat(3, "", [pid 5017] <... openat resumed>) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] newfstatat(3, "", [pid 5013] getdents64(3, [pid 5014] getdents64(4, [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(3, [pid 5014] getdents64(4, [pid 5013] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] close(4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5017] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5014] rmdir("./24/file1" [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5017] unlink("./23/binderfs" [pid 5013] unlink("./22/binderfs" [pid 5014] getdents64(3, [pid 5017] <... unlink resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5017] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] close(3) = 0 [ 85.025378][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 85.028018][ T5307] NILFS (loop0): repaired inode bitmap for reserved inodes [ 85.051055][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 85.058440][ T5307] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.073954][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5014] rmdir("./24") = 0 [pid 5014] mkdir("./25", 0777 [pid 5311] <... mount resumed>) = 0 [pid 5311] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5311] chdir("./file1") = 0 [pid 5311] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] close(4) = 0 [pid 5311] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5307] <... openat resumed>) = -1 EIO (Input/output error) [pid 5307] exit_group(0) = ? [pid 5307] +++ exited with 0 +++ [ 85.078447][ T5311] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.093747][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 85.096447][ T5314] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.116091][ T5311] Remounting filesystem read-only [ 85.117076][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5015] <... umount2 resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5315 [pid 5012] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(AT_FDCWD, "./24/file1", ./strace-static-x86_64: Process 5315 attached [pid 5315] set_robust_list(0x555556b87660, 24) = 0 [pid 5012] newfstatat(3, "", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5315] chdir("./25") = 0 [pid 5315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5315] <... prctl resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5315] setpgid(0, 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./22/binderfs" [pid 5315] <... setpgid resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [ 85.125096][ T5311] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 85.137833][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 85.145664][ T5311] NILFS (loop4): repaired inode bitmap for reserved inodes [ 85.161195][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 85.161369][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5012] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5315] <... openat resumed>) = 3 [pid 5315] write(3, "1000", 4) = 4 [pid 5315] close(3) = 0 [pid 5315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5315] memfd_create("syzkaller", 0) = 3 [pid 5315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [ 85.168836][ T5311] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.183268][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 85.199965][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 85.201909][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 85.207857][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 85.222485][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5015] getdents64(4, [pid 5315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./24/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./24") = 0 [pid 5015] mkdir("./25", 0777 [pid 5311] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5311] exit_group(0) = ? [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5311] +++ exited with 0 +++ [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5316 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./25/binderfs") = 0 ./strace-static-x86_64: Process 5316 attached [pid 5016] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 85.222791][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 85.238045][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 85.245808][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 85.271155][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5316] set_robust_list(0x555556b87660, 24) = 0 [pid 5316] chdir("./25") = 0 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5316] setpgid(0, 0) = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5316] write(3, "1000", 4) = 4 [pid 5316] close(3) = 0 [pid 5316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5316] memfd_create("syzkaller", 0) = 3 [pid 5315] <... write resumed>) = 2097152 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5315] munmap(0x7f770c286000, 2097152 [pid 5316] <... mmap resumed>) = 0x7f770c286000 [pid 5315] <... munmap resumed>) = 0 [ 85.277903][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 85.277938][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 85.277954][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5315] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5315] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5315] close(3) = 0 [pid 5315] mkdir("./file1", 0777) = 0 [pid 5315] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./23/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./23") = 0 [pid 5017] mkdir("./24", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5317 [ 85.327918][ T5315] loop2: detected capacity change from 0 to 4096 [ 85.346585][ T5315] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5317 attached [pid 5317] set_robust_list(0x555556b87660, 24 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5317] <... set_robust_list resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./22/file1", [pid 5317] chdir("./24" [pid 5316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5317] <... chdir resumed>) = 0 [pid 5317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5013] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] setpgid(0, 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5317] <... setpgid resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] newfstatat(4, "", [pid 5317] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5317] write(3, "1000", 4 [pid 5013] getdents64(4, [pid 5317] <... write resumed>) = 4 [pid 5317] close(3 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5317] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5317] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5013] close(4 [pid 5012] <... umount2 resumed>) = 0 [pid 5317] memfd_create("syzkaller", 0 [pid 5013] <... close resumed>) = 0 [ 85.369957][ T5315] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5317] <... memfd_create resumed>) = 3 [pid 5013] rmdir("./22/file1" [pid 5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] newfstatat(AT_FDCWD, "./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] close(3) = 0 [pid 5012] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./22" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5315] <... mount resumed>) = 0 [pid 5315] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5315] chdir("./file1") = 0 [pid 5315] ioctl(4, LOOP_CLR_FD) = 0 [pid 5315] close(4) = 0 [pid 5315] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... rmdir resumed>) = 0 [ 85.411215][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 85.419429][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 85.429593][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 85.436971][ T5315] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.450975][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5012] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] mkdir("./23", 0777 [pid 5012] <... openat resumed>) = 4 [pid 5013] <... mkdir resumed>) = 0 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5012] close(4 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5012] <... close resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] rmdir("./22/file1" [pid 5013] close(3 [pid 5012] <... rmdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5012] getdents64(3, [pid 5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] close(3 [pid 5316] <... write resumed>) = 2097152 [pid 5012] <... close resumed>) = 0 [pid 5316] munmap(0x7f770c286000, 2097152 [pid 5012] rmdir("./22" [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5319 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] mkdir("./23", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5316] <... munmap resumed>) = 0 [ 85.453679][ T5318] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.460618][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5316] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5316] <... openat resumed>) = 4 [pid 5316] ioctl(4, LOOP_SET_FD, 3 [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5320 ./strace-static-x86_64: Process 5319 attached [pid 5319] set_robust_list(0x555556b87660, 24) = 0 [pid 5319] chdir("./23") = 0 [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5320 attached [pid 5319] setpgid(0, 0) = 0 [pid 5320] set_robust_list(0x555556b87660, 24) = 0 [pid 5320] chdir("./23" [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5320] <... chdir resumed>) = 0 [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5320] setpgid(0, 0 [pid 5319] <... openat resumed>) = 3 [pid 5320] <... setpgid resumed>) = 0 [pid 5319] write(3, "1000", 4 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5319] <... write resumed>) = 4 [pid 5320] <... openat resumed>) = 3 [pid 5319] close(3 [pid 5316] <... ioctl resumed>) = 0 [pid 5320] write(3, "1000", 4 [pid 5316] close(3 [pid 5320] <... write resumed>) = 4 [pid 5319] <... close resumed>) = 0 [pid 5316] <... close resumed>) = 0 [pid 5319] symlink("/dev/binderfs", "./binderfs" [pid 5320] close(3 [pid 5316] mkdir("./file1", 0777 [pid 5320] <... close resumed>) = 0 [pid 5320] symlink("/dev/binderfs", "./binderfs" [pid 5319] <... symlink resumed>) = 0 [pid 5316] <... mkdir resumed>) = 0 [pid 5320] <... symlink resumed>) = 0 [ 85.509276][ T5316] loop3: detected capacity change from 0 to 4096 [ 85.538429][ T5315] Remounting filesystem read-only [pid 5316] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5320] memfd_create("syzkaller", 0 [pid 5319] memfd_create("syzkaller", 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5320] <... memfd_create resumed>) = 3 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5319] <... memfd_create resumed>) = 3 [pid 5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5016] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./25/file1", [pid 5317] <... write resumed>) = 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] munmap(0x7f770c286000, 2097152 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5317] <... munmap resumed>) = 0 [pid 5016] getdents64(4, [pid 5317] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5317] <... openat resumed>) = 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [ 85.552569][ T5316] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.574362][ T5315] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5317] ioctl(4, LOOP_SET_FD, 3 [pid 5016] close(4) = 0 [pid 5016] rmdir("./25/file1" [pid 5319] <... write resumed>) = 2097152 [pid 5016] <... rmdir resumed>) = 0 [pid 5317] <... ioctl resumed>) = 0 [pid 5317] close(3) = 0 [pid 5317] mkdir("./file1", 0777) = 0 [pid 5317] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5319] munmap(0x7f770c286000, 2097152 [ 85.604440][ T5317] loop5: detected capacity change from 0 to 4096 [ 85.613634][ T5316] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 85.621921][ T5315] NILFS (loop2): repaired inode bitmap for reserved inodes [ 85.629887][ T5317] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.631623][ T5315] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] getdents64(3, [pid 5319] <... munmap resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3 [pid 5319] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] <... close resumed>) = 0 [pid 5319] <... openat resumed>) = 4 [pid 5016] rmdir("./25" [pid 5319] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./26", 0777 [pid 5320] <... write resumed>) = 2097152 [pid 5319] <... ioctl resumed>) = 0 [pid 5315] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5320] munmap(0x7f770c286000, 2097152 [pid 5319] close(3 [pid 5315] exit_group(0 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5315] <... exit_group resumed>) = ? [pid 5315] +++ exited with 0 +++ [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5323 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5319] <... close resumed>) = 0 [pid 5319] mkdir("./file1", 0777 [pid 5316] <... mount resumed>) = 0 [pid 5319] <... mkdir resumed>) = 0 [pid 5316] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5319] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5316] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5323 attached [pid 5316] chdir("./file1" [pid 5323] set_robust_list(0x555556b87660, 24 [pid 5316] <... chdir resumed>) = 0 [ 85.660489][ T5319] loop1: detected capacity change from 0 to 4096 [ 85.668105][ T5317] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 85.692141][ T5321] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5323] <... set_robust_list resumed>) = 0 [pid 5320] <... munmap resumed>) = 0 [pid 5316] ioctl(4, LOOP_CLR_FD) = 0 [pid 5316] close(4) = 0 [pid 5323] chdir("./26" [pid 5320] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5316] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] <... chdir resumed>) = 0 [pid 5320] <... openat resumed>) = 4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5323] prctl(PR_SET_PDEATHSIG, SIGKILL [ 85.705628][ T5319] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.715374][ T5322] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.727775][ T5319] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 85.727792][ T5316] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.744688][ T5320] loop0: detected capacity change from 0 to 4096 [pid 5320] ioctl(4, LOOP_SET_FD, 3 [pid 5014] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5323] <... prctl resumed>) = 0 [pid 5320] <... ioctl resumed>) = 0 [pid 5317] <... mount resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5323] setpgid(0, 0 [pid 5317] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] newfstatat(3, "", [pid 5323] <... setpgid resumed>) = 0 [pid 5317] <... openat resumed>) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] chdir("./file1" [pid 5014] getdents64(3, [pid 5323] <... openat resumed>) = 3 [pid 5320] close(3 [pid 5319] <... mount resumed>) = 0 [pid 5317] <... chdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./25/binderfs") = 0 [pid 5014] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] write(3, "1000", 4 [pid 5320] <... close resumed>) = 0 [pid 5319] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 85.754268][ T5316] Remounting filesystem read-only [ 85.774344][ T5316] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 85.777666][ T5324] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.793138][ T5316] NILFS (loop3): repaired inode bitmap for reserved inodes [ 85.793515][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5317] ioctl(4, LOOP_CLR_FD [pid 5323] <... write resumed>) = 4 [pid 5319] <... openat resumed>) = 3 [pid 5317] <... ioctl resumed>) = 0 [pid 5316] <... openat resumed>) = -1 EIO (Input/output error) [pid 5323] close(3 [pid 5319] chdir("./file1" [pid 5317] close(4 [pid 5323] <... close resumed>) = 0 [pid 5320] mkdir("./file1", 0777 [pid 5319] <... chdir resumed>) = 0 [pid 5317] <... close resumed>) = 0 [pid 5323] symlink("/dev/binderfs", "./binderfs" [pid 5319] ioctl(4, LOOP_CLR_FD [pid 5317] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5323] <... symlink resumed>) = 0 [pid 5319] <... ioctl resumed>) = 0 [pid 5323] memfd_create("syzkaller", 0 [pid 5319] close(4 [pid 5323] <... memfd_create resumed>) = 3 [pid 5319] <... close resumed>) = 0 [pid 5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5319] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5323] <... mmap resumed>) = 0x7f770c286000 [ 85.800540][ T5316] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.811650][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 85.830295][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 85.837912][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5320] <... mkdir resumed>) = 0 [pid 5316] exit_group(0 [pid 5320] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5316] <... exit_group resumed>) = ? [pid 5316] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5316, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5015] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./25/binderfs") = 0 [pid 5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 85.855619][ T5317] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.855976][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 85.870770][ T5319] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 85.897848][ T5320] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.915961][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 85.922802][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 85.931794][ T5319] Remounting filesystem read-only [ 85.937747][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 85.939146][ T5320] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 85.945014][ T5317] Remounting filesystem read-only [pid 5015] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] <... write resumed>) = 2097152 [pid 5323] munmap(0x7f770c286000, 2097152) = 0 [pid 5323] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 85.960229][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 85.968237][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 85.968965][ T5319] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 85.975913][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 85.993379][ T5317] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 85.998726][ T5323] loop4: detected capacity change from 0 to 4096 [pid 5323] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... umount2 resumed>) = 0 [pid 5323] <... ioctl resumed>) = 0 [pid 5323] close(3) = 0 [ 86.009971][ T5319] NILFS (loop1): repaired inode bitmap for reserved inodes [ 86.033581][ T5317] NILFS (loop5): repaired inode bitmap for reserved inodes [ 86.035780][ T5319] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.054885][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5323] mkdir("./file1", 0777 [pid 5014] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5320] <... mount resumed>) = 0 [pid 5320] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5320] chdir("./file1") = 0 [pid 5320] ioctl(4, LOOP_CLR_FD) = 0 [pid 5320] close(4) = 0 [pid 5320] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./25/file1", [pid 5323] <... mkdir resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5323] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 86.059229][ T5325] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.064001][ T5317] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.079276][ T5320] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, [pid 5319] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5319] exit_group(0 [pid 5014] rmdir("./25/file1" [pid 5319] <... exit_group resumed>) = ? [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./25") = 0 [pid 5014] mkdir("./26", 0777 [pid 5319] +++ exited with 0 +++ [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] close(3 [pid 5013] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5326 [pid 5013] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./23/binderfs") = 0 [ 86.109686][ T5323] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.122296][ T5323] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 86.142267][ T5320] Remounting filesystem read-only [ 86.150454][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5013] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5326 attached [pid 5323] <... mount resumed>) = 0 [pid 5323] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5323] chdir("./file1") = 0 [pid 5323] ioctl(4, LOOP_CLR_FD) = 0 [pid 5323] close(4) = 0 [pid 5323] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5326] set_robust_list(0x555556b87660, 24 [pid 5015] <... umount2 resumed>) = 0 [pid 5326] <... set_robust_list resumed>) = 0 [pid 5015] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] chdir("./26") = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5317] <... openat resumed>) = -1 EIO (Input/output error) [ 86.160993][ T5320] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 86.169108][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 86.177926][ T5323] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.194874][ T5327] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.206223][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5015] newfstatat(AT_FDCWD, "./25/file1", [pid 5326] <... prctl resumed>) = 0 [pid 5317] exit_group(0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5326] setpgid(0, 0 [pid 5317] <... exit_group resumed>) = ? [pid 5015] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] <... setpgid resumed>) = 0 [pid 5326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] +++ exited with 0 +++ [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5317, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5326] write(3, "1000", 4 [pid 5320] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5015] <... openat resumed>) = 4 [pid 5326] <... write resumed>) = 4 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5015] newfstatat(4, "", [pid 5326] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5326] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5326] symlink("/dev/binderfs", "./binderfs" [pid 5017] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5326] <... symlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(4, [pid 5326] memfd_create("syzkaller", 0 [pid 5017] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5326] <... memfd_create resumed>) = 3 [pid 5017] <... openat resumed>) = 3 [pid 5015] close(4 [pid 5326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] newfstatat(3, "", [pid 5015] <... close resumed>) = 0 [ 86.214017][ T5320] NILFS (loop0): repaired inode bitmap for reserved inodes [ 86.222184][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 86.230529][ T5320] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.246491][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 86.254502][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 86.262154][ T5323] Remounting filesystem read-only [pid 5326] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] rmdir("./25/file1" [pid 5017] getdents64(3, [pid 5015] <... rmdir resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] getdents64(3, [pid 5017] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(3 [pid 5017] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5015] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] rmdir("./25" [pid 5017] unlink("./24/binderfs" [pid 5015] <... rmdir resumed>) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5015] mkdir("./26", 0777 [pid 5017] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5323] <... openat resumed>) = -1 EIO (Input/output error) [ 86.268394][ T5323] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 86.285595][ T5323] NILFS (loop4): repaired inode bitmap for reserved inodes [ 86.293117][ T5323] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5320] exit_group(0 [pid 5015] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5323] exit_group(0 [pid 5320] <... exit_group resumed>) = ? [pid 5013] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] <... exit_group resumed>) = ? [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5320] +++ exited with 0 +++ [pid 5323] +++ exited with 0 +++ [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5323, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5328 ./strace-static-x86_64: Process 5328 attached [pid 5016] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] newfstatat(AT_FDCWD, "./23/file1", [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5320, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5328] set_robust_list(0x555556b87660, 24 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./26/binderfs" [pid 5328] <... set_robust_list resumed>) = 0 [pid 5016] <... unlink resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 86.319867][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 86.329104][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 86.337245][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 86.344740][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 86.352342][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 86.360312][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5016] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] chdir("./26" [pid 5013] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... chdir resumed>) = 0 [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... prctl resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5328] setpgid(0, 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5328] <... setpgid resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5012] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] newfstatat(4, "", [pid 5328] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5328] write(3, "1000", 4 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] newfstatat(3, "", [pid 5328] <... write resumed>) = 4 [pid 5013] getdents64(4, [pid 5328] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5328] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5328] symlink("/dev/binderfs", "./binderfs" [pid 5012] getdents64(3, [pid 5013] getdents64(4, [pid 5328] <... symlink resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5328] memfd_create("syzkaller", 0 [pid 5013] close(4 [pid 5012] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... memfd_create resumed>) = 3 [pid 5013] <... close resumed>) = 0 [pid 5328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] rmdir("./23/file1" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5328] <... mmap resumed>) = 0x7f770c286000 [pid 5326] <... write resumed>) = 2097152 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5326] munmap(0x7f770c286000, 2097152 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./23/binderfs" [pid 5013] getdents64(3, [pid 5012] <... unlink resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3) = 0 [pid 5013] rmdir("./23") = 0 [ 86.360315][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 86.360337][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5013] mkdir("./24", 0777) = 0 [pid 5326] <... munmap resumed>) = 0 [pid 5326] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5326] ioctl(4, LOOP_SET_FD, 3 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5326] <... ioctl resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5326] close(3) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5329 [pid 5326] mkdir("./file1", 0777 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... openat resumed>) = 4 [pid 5326] <... mkdir resumed>) = 0 [ 86.413812][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 86.420609][ T5326] loop2: detected capacity change from 0 to 4096 [ 86.429107][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5326] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5329 attached [pid 5329] set_robust_list(0x555556b87660, 24) = 0 [pid 5329] chdir("./24" [pid 5017] getdents64(4, [pid 5329] <... chdir resumed>) = 0 [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5329] setpgid(0, 0) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 86.456658][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 86.466430][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 86.474371][ T5326] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.484175][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 86.484212][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 86.498652][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5017] getdents64(4, [pid 5329] <... openat resumed>) = 3 [pid 5329] write(3, "1000", 4) = 4 [pid 5329] close(3) = 0 [pid 5329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5329] memfd_create("syzkaller", 0) = 3 [pid 5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5329] <... mmap resumed>) = 0x7f770c286000 [pid 5017] close(4 [pid 5328] <... write resumed>) = 2097152 [pid 5328] munmap(0x7f770c286000, 2097152 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./24/file1") = 0 [pid 5328] <... munmap resumed>) = 0 [pid 5017] getdents64(3, [pid 5328] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5328] <... openat resumed>) = 4 [pid 5017] close(3 [pid 5328] ioctl(4, LOOP_SET_FD, 3 [pid 5017] <... close resumed>) = 0 [pid 5328] <... ioctl resumed>) = 0 [pid 5017] rmdir("./24") = 0 [pid 5328] close(3 [pid 5017] mkdir("./25", 0777 [pid 5328] <... close resumed>) = 0 [pid 5328] mkdir("./file1", 0777 [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5328] <... mkdir resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5328] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5330 [ 86.507377][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 86.516153][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 86.530088][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 86.546310][ T5328] loop3: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5330 attached [pid 5330] set_robust_list(0x555556b87660, 24) = 0 [pid 5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... umount2 resumed>) = 0 [pid 5330] chdir("./25" [pid 5012] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5330] <... chdir resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] newfstatat(AT_FDCWD, "./23/file1", [pid 5330] <... prctl resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5330] setpgid(0, 0 [pid 5012] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5330] <... setpgid resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5330] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 4 [pid 5330] write(3, "1000", 4 [pid 5012] newfstatat(4, "", [pid 5330] <... write resumed>) = 4 [pid 5330] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5330] <... close resumed>) = 0 [pid 5330] symlink("/dev/binderfs", "./binderfs" [pid 5012] getdents64(4, [pid 5330] <... symlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5330] memfd_create("syzkaller", 0 [pid 5012] getdents64(4, [pid 5330] <... memfd_create resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] close(4 [pid 5330] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./23/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./23" [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] mkdir("./24", 0777 [pid 5016] newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5016] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... openat resumed>) = 3 [ 86.562667][ T5328] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.588138][ T5326] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] <... openat resumed>) = 4 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] newfstatat(4, "", [pid 5012] close(3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... close resumed>) = 0 [pid 5016] getdents64(4, [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5331 [pid 5016] close(4) = 0 ./strace-static-x86_64: Process 5331 attached [pid 5016] rmdir("./26/file1" [pid 5331] set_robust_list(0x555556b87660, 24) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5331] chdir("./24" [pid 5330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] getdents64(3, [pid 5331] <... chdir resumed>) = 0 [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5331] setpgid(0, 0) = 0 [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5331] write(3, "1000", 4) = 4 [pid 5331] close(3) = 0 [pid 5331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [ 86.647239][ T5328] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5331] memfd_create("syzkaller", 0 [pid 5016] close(3 [pid 5331] <... memfd_create resumed>) = 3 [pid 5326] <... mount resumed>) = 0 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5326] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5331] <... mmap resumed>) = 0x7f770c286000 [pid 5326] <... openat resumed>) = 3 [pid 5326] chdir("./file1") = 0 [pid 5326] ioctl(4, LOOP_CLR_FD) = 0 [pid 5326] close(4 [pid 5330] <... write resumed>) = 2097152 [pid 5329] <... write resumed>) = 2097152 [pid 5326] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5326] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5330] munmap(0x7f770c286000, 2097152 [pid 5329] munmap(0x7f770c286000, 2097152 [pid 5328] <... mount resumed>) = 0 [pid 5016] rmdir("./26" [pid 5330] <... munmap resumed>) = 0 [pid 5329] <... munmap resumed>) = 0 [pid 5328] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... rmdir resumed>) = 0 [pid 5330] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5329] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5328] <... openat resumed>) = 3 [pid 5016] mkdir("./27", 0777 [pid 5329] <... openat resumed>) = 4 [pid 5328] chdir("./file1") = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5330] <... openat resumed>) = 4 [pid 5328] ioctl(4, LOOP_CLR_FD [pid 5330] ioctl(4, LOOP_SET_FD, 3 [pid 5329] ioctl(4, LOOP_SET_FD, 3 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5328] <... ioctl resumed>) = 0 [ 86.697758][ T5332] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.716518][ T5333] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.718669][ T5326] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5328] close(4 [pid 5016] <... openat resumed>) = 3 [pid 5328] <... close resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5328] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5330] <... ioctl resumed>) = 0 [pid 5330] close(3) = 0 [pid 5330] mkdir("./file1", 0777) = 0 [ 86.752081][ T5330] loop5: detected capacity change from 0 to 4096 [ 86.753075][ T5326] Remounting filesystem read-only [ 86.759067][ T5329] loop1: detected capacity change from 0 to 4096 [ 86.766045][ T5326] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 86.779772][ T5328] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5330] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5331] <... write resumed>) = 2097152 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5334 ./strace-static-x86_64: Process 5334 attached [pid 5334] set_robust_list(0x555556b87660, 24 [pid 5329] <... ioctl resumed>) = 0 [pid 5334] <... set_robust_list resumed>) = 0 [pid 5334] chdir("./27") = 0 [pid 5329] close(3 [pid 5334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5329] <... close resumed>) = 0 [pid 5334] <... prctl resumed>) = 0 [pid 5329] mkdir("./file1", 0777 [pid 5334] setpgid(0, 0) = 0 [pid 5329] <... mkdir resumed>) = 0 [pid 5334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5331] munmap(0x7f770c286000, 2097152 [ 86.787787][ T5330] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5329] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5334] <... openat resumed>) = 3 [pid 5331] <... munmap resumed>) = 0 [pid 5334] write(3, "1000", 4 [ 86.825353][ T5329] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.836444][ T5328] Remounting filesystem read-only [ 86.842252][ T5326] NILFS (loop2): repaired inode bitmap for reserved inodes [ 86.850699][ T5329] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 86.850734][ T5328] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5331] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5334] <... write resumed>) = 4 [pid 5331] <... openat resumed>) = 4 [pid 5334] close(3 [pid 5331] ioctl(4, LOOP_SET_FD, 3 [pid 5334] <... close resumed>) = 0 [pid 5334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5334] memfd_create("syzkaller", 0) = 3 [pid 5334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5331] <... ioctl resumed>) = 0 [pid 5331] close(3) = 0 [pid 5331] mkdir("./file1", 0777) = 0 [ 86.860659][ T5330] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 86.880968][ T5331] loop0: detected capacity change from 0 to 4096 [ 86.893649][ T5326] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.913021][ T5328] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5331] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5326] <... openat resumed>) = -1 EIO (Input/output error) [pid 5329] <... mount resumed>) = 0 [pid 5326] exit_group(0 [pid 5329] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5326] <... exit_group resumed>) = ? [pid 5329] chdir("./file1") = 0 [pid 5329] ioctl(4, LOOP_CLR_FD) = 0 [pid 5326] +++ exited with 0 +++ [pid 5329] close(4 [pid 5334] <... write resumed>) = 2097152 [pid 5329] <... close resumed>) = 0 [pid 5328] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5326, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5329] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 86.916997][ T5335] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.922445][ T5328] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.946574][ T5331] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.963456][ T5331] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5334] munmap(0x7f770c286000, 2097152 [pid 5328] exit_group(0 [pid 5334] <... munmap resumed>) = 0 [pid 5328] <... exit_group resumed>) = ? [pid 5334] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5328] +++ exited with 0 +++ [pid 5334] <... openat resumed>) = 4 [pid 5334] ioctl(4, LOOP_SET_FD, 3 [pid 5330] <... mount resumed>) = 0 [pid 5014] newfstatat(3, "", [pid 5330] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5330] chdir("./file1") = 0 [pid 5330] ioctl(4, LOOP_CLR_FD) = 0 [pid 5330] close(4) = 0 [ 86.974241][ T5329] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 86.989847][ T5334] loop4: detected capacity change from 0 to 4096 [ 86.990254][ T5336] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.004007][ T5330] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5330] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5334] <... ioctl resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5328, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5334] close(3 [pid 5015] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(3, [pid 5334] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5334] mkdir("./file1", 0777 [pid 5015] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] <... mkdir resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5334] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] newfstatat(3, "", [pid 5014] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] getdents64(3, [pid 5014] unlink("./26/binderfs" [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... unlink resumed>) = 0 [pid 5015] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./26/binderfs") = 0 [pid 5015] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5331] <... mount resumed>) = 0 [ 87.027604][ T5334] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 87.029730][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 87.044515][ T5329] Remounting filesystem read-only [ 87.049660][ T5337] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.061083][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 87.065923][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5331] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5331] chdir("./file1") = 0 [ 87.069752][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 87.081243][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 87.084115][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 87.090892][ T5330] Remounting filesystem read-only [ 87.096944][ T5329] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 87.109428][ T5334] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 87.109850][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5331] ioctl(4, LOOP_CLR_FD) = 0 [pid 5331] close(4) = 0 [ 87.122294][ T5329] NILFS (loop1): repaired inode bitmap for reserved inodes [ 87.137979][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 87.147221][ T5329] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 87.147354][ T5331] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5331] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5329] <... openat resumed>) = -1 EIO (Input/output error) [pid 5329] exit_group(0) = ? [pid 5329] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./24/binderfs") = 0 [ 87.164337][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 87.178019][ T5330] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 87.187450][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 87.208388][ T5338] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.220541][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5013] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] <... mount resumed>) = 0 [pid 5334] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5334] chdir("./file1") = 0 [pid 5334] ioctl(4, LOOP_CLR_FD) = 0 [pid 5334] close(4) = 0 [ 87.222977][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 87.230132][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 87.242403][ T5334] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 87.242446][ T5330] NILFS (loop5): repaired inode bitmap for reserved inodes [ 87.263927][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5334] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./26/file1") = 0 [ 87.279691][ T5334] Remounting filesystem read-only [ 87.293428][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 87.306175][ T5334] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 87.314889][ T5331] Remounting filesystem read-only [ 87.316516][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./26") = 0 [pid 5015] mkdir("./27", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5339 ./strace-static-x86_64: Process 5339 attached [pid 5339] set_robust_list(0x555556b87660, 24) = 0 [pid 5339] chdir("./27") = 0 [pid 5339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5339] setpgid(0, 0) = 0 [pid 5339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5339] write(3, "1000", 4) = 4 [pid 5339] close(3) = 0 [pid 5339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5339] memfd_create("syzkaller", 0) = 3 [pid 5339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 87.341322][ T5331] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 87.355612][ T5334] NILFS (loop4): repaired inode bitmap for reserved inodes [ 87.364541][ T5330] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 87.376645][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5014] newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5331] <... openat resumed>) = -1 EIO (Input/output error) [pid 5330] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... openat resumed>) = 4 [pid 5330] exit_group(0 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5330] <... exit_group resumed>) = ? [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5330] +++ exited with 0 +++ [pid 5014] getdents64(4, [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5330, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5331] exit_group(0 [pid 5017] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] close(4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... close resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5017] newfstatat(3, "", [pid 5014] rmdir("./26/file1" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... rmdir resumed>) = 0 [pid 5017] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] getdents64(3, [pid 5017] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5331] <... exit_group resumed>) = ? [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] unlink("./25/binderfs") = 0 [pid 5339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 87.399641][ T5331] NILFS (loop0): repaired inode bitmap for reserved inodes [ 87.403167][ T5334] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 87.412699][ T5331] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 87.439916][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5017] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5331] +++ exited with 0 +++ [pid 5014] close(3) = 0 [pid 5014] rmdir("./26" [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5014] <... rmdir resumed>) = 0 [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5334] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] mkdir("./27", 0777 [pid 5013] <... umount2 resumed>) = 0 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5013] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5334] exit_group(0 [pid 5014] <... openat resumed>) = 3 [pid 5013] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] <... exit_group resumed>) = ? [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5012] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5334] +++ exited with 0 +++ [pid 5014] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5334, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./27/binderfs") = 0 [ 87.460982][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 87.481599][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 87.496822][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5016] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] newfstatat(3, "", [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... openat resumed>) = 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5339] <... write resumed>) = 2097152 [pid 5339] munmap(0x7f770c286000, 2097152 [pid 5013] newfstatat(4, "", [pid 5012] getdents64(3, [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5340 [pid 5012] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(4, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5339] <... munmap resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] close(4 [pid 5339] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5339] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5340 attached [pid 5013] <... close resumed>) = 0 [pid 5012] unlink("./24/binderfs" [ 87.504768][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 87.512439][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 87.518870][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 87.526613][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 87.528115][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 87.547752][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5340] set_robust_list(0x555556b87660, 24 [pid 5013] rmdir("./24/file1" [pid 5012] <... unlink resumed>) = 0 [pid 5340] <... set_robust_list resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] chdir("./27" [pid 5017] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(3, [pid 5340] <... chdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] newfstatat(AT_FDCWD, "./25/file1", [pid 5013] close(3 [pid 5339] <... ioctl resumed>) = 0 [pid 5339] close(3) = 0 [pid 5339] mkdir("./file1", 0777) = 0 [pid 5339] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... close resumed>) = 0 [ 87.555777][ T5339] loop3: detected capacity change from 0 to 4096 [ 87.568574][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 87.578646][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 87.586459][ T5339] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 87.587230][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 87.598266][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5340] <... prctl resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] rmdir("./24" [pid 5340] setpgid(0, 0 [pid 5017] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... rmdir resumed>) = 0 [pid 5340] <... setpgid resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] newfstatat(4, "", [pid 5013] mkdir("./25", 0777 [pid 5340] <... openat resumed>) = 3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5017] getdents64(4, [pid 5340] write(3, "1000", 4 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5340] <... write resumed>) = 4 [pid 5017] getdents64(4, [pid 5013] <... openat resumed>) = 3 [pid 5340] close(3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5340] <... close resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5340] symlink("/dev/binderfs", "./binderfs" [pid 5017] close(4 [pid 5013] close(3 [pid 5017] <... close resumed>) = 0 [pid 5340] <... symlink resumed>) = 0 [pid 5017] rmdir("./25/file1" [pid 5013] <... close resumed>) = 0 [pid 5340] memfd_create("syzkaller", 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5340] <... memfd_create resumed>) = 3 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] close(3 [pid 5340] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./25"./strace-static-x86_64: Process 5341 attached [pid 5341] set_robust_list(0x555556b87660, 24) = 0 [pid 5341] chdir("./25" [pid 5017] <... rmdir resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5341 [pid 5017] mkdir("./26", 0777) = 0 [pid 5341] <... chdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5341] setpgid(0, 0) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] <... openat resumed>) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5341] <... openat resumed>) = 3 [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5341] write(3, "1000", 4) = 4 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5342 [pid 5341] close(3) = 0 [pid 5341] symlink("/dev/binderfs", "./binderfs") = 0 [ 87.604954][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 87.618672][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 87.627825][ T5339] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 87.628580][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 87.648076][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5341] memfd_create("syzkaller", 0 [pid 5016] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5342 attached [pid 5341] <... memfd_create resumed>) = 3 [pid 5341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5342] set_robust_list(0x555556b87660, 24) = 0 [pid 5342] chdir("./26" [pid 5341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] <... chdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./27/file1", [pid 5342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5342] <... prctl resumed>) = 0 [pid 5016] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] setpgid(0, 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5342] <... setpgid resumed>) = 0 [pid 5339] <... mount resumed>) = 0 [pid 5339] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5339] chdir("./file1" [pid 5342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5339] <... chdir resumed>) = 0 [pid 5339] ioctl(4, LOOP_CLR_FD) = 0 [pid 5339] close(4) = 0 [ 87.703833][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 87.721143][ T5343] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5339] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5342] <... openat resumed>) = 3 [pid 5016] <... openat resumed>) = 4 [pid 5342] write(3, "1000", 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5342] <... write resumed>) = 4 [pid 5342] close(3 [pid 5016] getdents64(4, [pid 5342] <... close resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5016] getdents64(4, [pid 5342] memfd_create("syzkaller", 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5342] <... memfd_create resumed>) = 3 [pid 5016] close(4) = 0 [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] rmdir("./27/file1" [pid 5342] <... mmap resumed>) = 0x7f770c286000 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, [pid 5341] <... write resumed>) = 2097152 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./27") = 0 [pid 5016] mkdir("./28", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5344 [pid 5340] <... write resumed>) = 2097152 [ 87.745693][ T5339] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 ./strace-static-x86_64: Process 5344 attached [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5341] munmap(0x7f770c286000, 2097152 [pid 5340] munmap(0x7f770c286000, 2097152 [pid 5012] <... umount2 resumed>) = 0 [pid 5344] set_robust_list(0x555556b87660, 24 [pid 5012] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5340] <... munmap resumed>) = 0 [pid 5012] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5341] <... munmap resumed>) = 0 [pid 5012] <... openat resumed>) = 4 [pid 5344] <... set_robust_list resumed>) = 0 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5344] chdir("./28" [pid 5341] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5344] <... chdir resumed>) = 0 [pid 5012] close(4) = 0 [pid 5341] <... openat resumed>) = 4 [pid 5340] <... openat resumed>) = 4 [pid 5012] rmdir("./24/file1" [pid 5344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5341] ioctl(4, LOOP_SET_FD, 3 [pid 5340] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... rmdir resumed>) = 0 [pid 5344] <... prctl resumed>) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./24") = 0 [pid 5012] mkdir("./25", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5344] setpgid(0, 0 [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5344] <... setpgid resumed>) = 0 [pid 5344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5345 [pid 5344] <... openat resumed>) = 3 [pid 5344] write(3, "1000", 4) = 4 [pid 5344] close(3./strace-static-x86_64: Process 5345 attached [pid 5345] set_robust_list(0x555556b87660, 24 [pid 5344] <... close resumed>) = 0 [pid 5345] <... set_robust_list resumed>) = 0 [pid 5344] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5344] memfd_create("syzkaller", 0) = 3 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5345] chdir("./25" [pid 5344] <... mmap resumed>) = 0x7f770c286000 [pid 5345] <... chdir resumed>) = 0 [pid 5345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 87.819283][ T5339] Remounting filesystem read-only [ 87.830311][ T5339] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 87.843361][ T5340] loop2: detected capacity change from 0 to 4096 [ 87.850570][ T5341] loop1: detected capacity change from 0 to 4096 [pid 5345] setpgid(0, 0 [pid 5342] <... write resumed>) = 2097152 [pid 5341] <... ioctl resumed>) = 0 [pid 5340] <... ioctl resumed>) = 0 [pid 5345] <... setpgid resumed>) = 0 [pid 5345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5342] munmap(0x7f770c286000, 2097152 [pid 5341] close(3 [pid 5340] close(3 [pid 5345] write(3, "1000", 4) = 4 [pid 5345] close(3) = 0 [pid 5345] symlink("/dev/binderfs", "./binderfs" [pid 5341] <... close resumed>) = 0 [pid 5340] <... close resumed>) = 0 [pid 5345] <... symlink resumed>) = 0 [pid 5341] mkdir("./file1", 0777 [pid 5340] mkdir("./file1", 0777 [pid 5345] memfd_create("syzkaller", 0 [pid 5341] <... mkdir resumed>) = 0 [pid 5345] <... memfd_create resumed>) = 3 [pid 5345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5340] <... mkdir resumed>) = 0 [pid 5345] <... mmap resumed>) = 0x7f770c286000 [pid 5341] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5342] <... munmap resumed>) = 0 [ 87.873537][ T5339] NILFS (loop3): repaired inode bitmap for reserved inodes [ 87.895862][ T5339] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 87.912330][ T5341] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5340] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5344] <... write resumed>) = 2097152 [pid 5342] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5339] <... openat resumed>) = -1 EIO (Input/output error) [pid 5344] munmap(0x7f770c286000, 2097152 [pid 5342] <... openat resumed>) = 4 [pid 5344] <... munmap resumed>) = 0 [pid 5342] ioctl(4, LOOP_SET_FD, 3 [pid 5344] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5344] ioctl(4, LOOP_SET_FD, 3 [pid 5339] exit_group(0) = ? [pid 5339] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5339, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5015] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./27/binderfs") = 0 [ 87.922560][ T5340] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 87.935024][ T5342] loop5: detected capacity change from 0 to 4096 [ 87.935974][ T5340] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 87.944536][ T5344] loop4: detected capacity change from 0 to 4096 [ 87.951723][ T5341] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] <... ioctl resumed>) = 0 [pid 5342] close(3 [pid 5345] <... write resumed>) = 2097152 [pid 5345] munmap(0x7f770c286000, 2097152 [pid 5342] <... close resumed>) = 0 [pid 5342] mkdir("./file1", 0777 [pid 5345] <... munmap resumed>) = 0 [pid 5342] <... mkdir resumed>) = 0 [pid 5345] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5342] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5345] <... openat resumed>) = 4 [pid 5345] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5344] <... ioctl resumed>) = 0 [pid 5345] close(3 [ 87.972916][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 87.990298][ T5345] loop0: detected capacity change from 0 to 4096 [ 87.990378][ T5342] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 87.999195][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 88.015320][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5344] close(3 [pid 5345] <... close resumed>) = 0 [pid 5344] <... close resumed>) = 0 [pid 5340] <... mount resumed>) = 0 [pid 5340] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5340] chdir("./file1") = 0 [pid 5340] ioctl(4, LOOP_CLR_FD) = 0 [pid 5340] close(4 [pid 5345] mkdir("./file1", 0777 [pid 5344] mkdir("./file1", 0777 [pid 5340] <... close resumed>) = 0 [pid 5340] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5345] <... mkdir resumed>) = 0 [pid 5344] <... mkdir resumed>) = 0 [ 88.017996][ T5342] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 88.023989][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 88.041620][ T5340] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.052758][ T5347] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5345] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5344] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5341] <... mount resumed>) = 0 [pid 5341] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5341] chdir("./file1") = 0 [pid 5341] ioctl(4, LOOP_CLR_FD) = 0 [pid 5341] close(4) = 0 [ 88.058281][ T5346] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.072665][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 88.086991][ T5344] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.098156][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 88.112471][ T5345] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5341] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5342] <... mount resumed>) = 0 [pid 5342] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5342] chdir("./file1") = 0 [pid 5342] ioctl(4, LOOP_CLR_FD) = 0 [pid 5342] close(4) = 0 [ 88.121737][ T5340] Remounting filesystem read-only [ 88.122462][ T5341] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.144255][ T5344] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 88.161255][ T5348] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5342] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5344] <... mount resumed>) = 0 [pid 5344] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5344] chdir("./file1" [pid 5015] newfstatat(AT_FDCWD, "./27/file1", [pid 5344] <... chdir resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 88.169837][ T5342] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.186697][ T5345] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 88.189857][ T5340] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 88.196936][ T5341] Remounting filesystem read-only [ 88.210160][ T5349] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5344] ioctl(4, LOOP_CLR_FD [pid 5015] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] <... ioctl resumed>) = 0 [pid 5344] close(4) = 0 [pid 5344] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5345] <... mount resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5345] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5345] chdir("./file1") = 0 [pid 5345] ioctl(4, LOOP_CLR_FD) = 0 [pid 5345] close(4) = 0 [ 88.233734][ T5341] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 88.239037][ T5344] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.247023][ T5341] NILFS (loop1): repaired inode bitmap for reserved inodes [ 88.266940][ T5350] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5345] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... openat resumed>) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [ 88.275463][ T5345] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.277945][ T5341] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.295284][ T5340] NILFS (loop2): repaired inode bitmap for reserved inodes [ 88.315847][ T5344] Remounting filesystem read-only [ 88.321951][ T5344] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5015] getdents64(4, [pid 5344] <... openat resumed>) = -1 EIO (Input/output error) [pid 5341] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5344] exit_group(0 [pid 5341] exit_group(0 [pid 5015] close(4 [pid 5344] <... exit_group resumed>) = ? [pid 5341] <... exit_group resumed>) = ? [pid 5015] <... close resumed>) = 0 [pid 5344] +++ exited with 0 +++ [pid 5341] +++ exited with 0 +++ [pid 5015] rmdir("./27/file1") = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5344, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5015] getdents64(3, [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5016] <... restart_syscall resumed>) = 0 [pid 5015] close(3 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./27" [pid 5016] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... rmdir resumed>) = 0 [pid 5013] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] mkdir("./28", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] <... openat resumed>) = 3 [pid 5016] newfstatat(3, "", [pid 5015] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] getdents64(3, [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] close(3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... close resumed>) = 0 [pid 5013] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5013] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5351 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./28/binderfs" [pid 5013] unlink("./25/binderfs" [pid 5016] <... unlink resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5016] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 88.330936][ T5344] NILFS (loop4): repaired inode bitmap for reserved inodes [ 88.338884][ T5344] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.348347][ T5340] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.378364][ T5342] Remounting filesystem read-only [pid 5013] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5351 attached [pid 5351] set_robust_list(0x555556b87660, 24) = 0 [pid 5351] chdir("./28") = 0 [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5351] setpgid(0, 0) = 0 [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5351] write(3, "1000", 4) = 4 [pid 5351] close(3) = 0 [pid 5351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5351] memfd_create("syzkaller", 0) = 3 [pid 5351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 88.388736][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 88.396951][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 88.397692][ T5345] Remounting filesystem read-only [ 88.403761][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 88.416794][ T5342] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 88.426520][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 88.455041][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 88.461268][ T5342] NILFS (loop5): repaired inode bitmap for reserved inodes [ 88.470373][ T5342] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.474421][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 88.485817][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5342] <... openat resumed>) = -1 EIO (Input/output error) [pid 5340] <... openat resumed>) = -1 EIO (Input/output error) [pid 5351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5342] exit_group(0 [pid 5340] exit_group(0 [pid 5342] <... exit_group resumed>) = ? [pid 5340] <... exit_group resumed>) = ? [pid 5342] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5342, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5340] +++ exited with 0 +++ [pid 5017] <... restart_syscall resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5340, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5017] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5014] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 3 [pid 5017] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5014] newfstatat(3, "", [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] unlink("./26/binderfs" [pid 5014] getdents64(3, [pid 5017] <... unlink resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [ 88.499969][ T5345] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 88.509599][ T5345] NILFS (loop0): repaired inode bitmap for reserved inodes [ 88.521850][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 88.529954][ T5345] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.530284][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5017] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./27/binderfs") = 0 [pid 5014] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] <... openat resumed>) = -1 EIO (Input/output error) [pid 5345] exit_group(0) = ? [pid 5345] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5345, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5012] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./25/binderfs") = 0 [pid 5012] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] <... write resumed>) = 2097152 [pid 5351] munmap(0x7f770c286000, 2097152) = 0 [pid 5351] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 88.544890][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 88.560119][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 88.570586][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 88.575761][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 88.587848][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 88.595558][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5016] <... umount2 resumed>) = 0 [pid 5351] ioctl(4, LOOP_SET_FD, 3 [pid 5016] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 88.603920][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 88.611414][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 88.611947][ T5351] loop3: detected capacity change from 0 to 4096 [ 88.619995][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 88.626880][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 88.641417][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 88.644418][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5016] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] <... ioctl resumed>) = 0 [pid 5351] close(3) = 0 [pid 5351] mkdir("./file1", 0777) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 88.649324][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 88.656488][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 88.665050][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 88.677472][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 88.679431][ T5351] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.694709][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5351] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./25/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./25/file1") = 0 [pid 5013] getdents64(3, [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(4 [pid 5013] close(3) = 0 [pid 5013] rmdir("./25") = 0 [pid 5013] mkdir("./26", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./28/file1" [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... rmdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./28") = 0 [pid 5016] mkdir("./29", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5352 ./strace-static-x86_64: Process 5352 attached [pid 5352] set_robust_list(0x555556b87660, 24) = 0 [pid 5352] chdir("./26") = 0 [pid 5352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5352] setpgid(0, 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5353 [pid 5352] <... setpgid resumed>) = 0 [pid 5352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5352] write(3, "1000", 4) = 4 [pid 5352] close(3) = 0 [pid 5352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5352] memfd_create("syzkaller", 0) = 3 [ 88.710418][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 88.717919][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 88.744840][ T5351] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 ./strace-static-x86_64: Process 5353 attached [pid 5353] set_robust_list(0x555556b87660, 24) = 0 [pid 5353] chdir("./29" [pid 5014] <... umount2 resumed>) = 0 [pid 5353] <... chdir resumed>) = 0 [pid 5353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5353] setpgid(0, 0) = 0 [pid 5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5353] write(3, "1000", 4) = 4 [pid 5353] close(3) = 0 [pid 5353] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5353] memfd_create("syzkaller", 0 [pid 5017] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5353] <... memfd_create resumed>) = 3 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5017] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] rmdir("./26/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [ 88.804249][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 88.822701][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5351] <... mount resumed>) = 0 [pid 5017] rmdir("./26" [pid 5014] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... rmdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] <... openat resumed>) = 3 [pid 5017] mkdir("./27", 0777 [pid 5014] newfstatat(AT_FDCWD, "./27/file1", [pid 5351] chdir("./file1" [pid 5017] <... mkdir resumed>) = 0 [pid 5351] <... chdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5351] ioctl(4, LOOP_CLR_FD [pid 5017] <... openat resumed>) = 3 [pid 5014] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] <... ioctl resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5351] close(4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] <... close resumed>) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5351] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] close(3 [pid 5014] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... close resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5355 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./27/file1"./strace-static-x86_64: Process 5355 attached [pid 5355] set_robust_list(0x555556b87660, 24) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5355] chdir("./27") = 0 [pid 5014] getdents64(3, [pid 5355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5355] <... prctl resumed>) = 0 [pid 5014] close(3 [pid 5012] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5355] setpgid(0, 0 [pid 5014] <... close resumed>) = 0 [pid 5355] <... setpgid resumed>) = 0 [pid 5014] rmdir("./27" [pid 5355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5355] <... openat resumed>) = 3 [pid 5353] <... write resumed>) = 2097152 [pid 5014] <... rmdir resumed>) = 0 [pid 5355] write(3, "1000", 4 [pid 5353] munmap(0x7f770c286000, 2097152 [pid 5012] newfstatat(AT_FDCWD, "./25/file1", [pid 5355] <... write resumed>) = 4 [pid 5014] mkdir("./28", 0777 [pid 5355] close(3 [pid 5353] <... munmap resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5355] <... close resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5012] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5355] symlink("/dev/binderfs", "./binderfs" [pid 5353] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5355] <... symlink resumed>) = 0 [ 88.851088][ T5354] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.886301][ T5351] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5353] <... openat resumed>) = 4 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5355] memfd_create("syzkaller", 0 [pid 5014] <... openat resumed>) = 3 [pid 5355] <... memfd_create resumed>) = 3 [pid 5355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5353] ioctl(4, LOOP_SET_FD, 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5012] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5353] <... ioctl resumed>) = 0 [pid 5014] close(3 [pid 5012] <... openat resumed>) = 4 [pid 5352] <... write resumed>) = 2097152 [pid 5352] munmap(0x7f770c286000, 2097152 [pid 5014] <... close resumed>) = 0 [pid 5012] newfstatat(4, "", [pid 5352] <... munmap resumed>) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5352] ioctl(4, LOOP_SET_FD, 3 [ 88.934920][ T5351] Remounting filesystem read-only [ 88.941304][ T5351] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 88.950418][ T5353] loop4: detected capacity change from 0 to 4096 [ 88.957526][ T5351] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5356 attached [pid 5355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5353] close(3 [pid 5351] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] getdents64(4, [pid 5352] <... ioctl resumed>) = 0 [pid 5356] set_robust_list(0x555556b87660, 24 [pid 5353] <... close resumed>) = 0 [pid 5351] exit_group(0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5356 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5356] <... set_robust_list resumed>) = 0 [pid 5353] mkdir("./file1", 0777 [pid 5352] close(3 [pid 5351] <... exit_group resumed>) = ? [pid 5012] getdents64(4, [pid 5356] chdir("./28" [pid 5353] <... mkdir resumed>) = 0 [pid 5352] <... close resumed>) = 0 [pid 5356] <... chdir resumed>) = 0 [pid 5352] mkdir("./file1", 0777 [pid 5351] +++ exited with 0 +++ [pid 5353] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5352] <... mkdir resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5356] <... prctl resumed>) = 0 [pid 5352] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5012] close(4 [pid 5356] setpgid(0, 0 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5356] <... setpgid resumed>) = 0 [pid 5356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] write(3, "1000", 4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] <... write resumed>) = 4 [pid 5015] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5356] close(3 [pid 5015] <... openat resumed>) = 3 [pid 5356] <... close resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5356] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5356] <... symlink resumed>) = 0 [pid 5015] getdents64(3, [pid 5356] memfd_create("syzkaller", 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5355] <... write resumed>) = 2097152 [pid 5012] <... close resumed>) = 0 [pid 5356] <... memfd_create resumed>) = 3 [ 88.976886][ T5351] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 88.981930][ T5352] loop1: detected capacity change from 0 to 4096 [ 89.012687][ T5353] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.023718][ T5352] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5015] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] <... mmap resumed>) = 0x7f770c286000 [pid 5015] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5355] munmap(0x7f770c286000, 2097152 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] rmdir("./25/file1" [pid 5015] unlink("./28/binderfs" [pid 5355] <... munmap resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5355] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(3, [pid 5356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5355] <... openat resumed>) = 4 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [ 89.034360][ T5353] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 89.056322][ T5352] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 89.067417][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 89.068492][ T5357] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5355] ioctl(4, LOOP_SET_FD, 3 [pid 5353] <... mount resumed>) = 0 [pid 5012] close(3 [pid 5355] <... ioctl resumed>) = 0 [pid 5353] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5352] <... mount resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5356] <... write resumed>) = 2097152 [pid 5356] munmap(0x7f770c286000, 2097152 [pid 5355] close(3 [pid 5353] <... openat resumed>) = 3 [pid 5352] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] rmdir("./25" [pid 5355] <... close resumed>) = 0 [pid 5353] chdir("./file1" [pid 5352] <... openat resumed>) = 3 [pid 5012] <... rmdir resumed>) = 0 [pid 5355] mkdir("./file1", 0777 [pid 5353] <... chdir resumed>) = 0 [pid 5352] chdir("./file1" [pid 5012] mkdir("./26", 0777 [pid 5355] <... mkdir resumed>) = 0 [pid 5353] ioctl(4, LOOP_CLR_FD [pid 5352] <... chdir resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5355] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5353] <... ioctl resumed>) = 0 [pid 5352] ioctl(4, LOOP_CLR_FD [ 89.074133][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 89.093551][ T5355] loop5: detected capacity change from 0 to 4096 [ 89.094322][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 89.106810][ T5358] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.117415][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 89.124659][ T5355] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5353] close(4 [pid 5352] <... ioctl resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5353] <... close resumed>) = 0 [pid 5352] close(4 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5353] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5352] <... close resumed>) = 0 [pid 5356] <... munmap resumed>) = 0 [ 89.125829][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 89.146121][ T5353] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 89.161137][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 89.162275][ T5352] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5352] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5356] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5356] <... openat resumed>) = 4 [pid 5356] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5359 ./strace-static-x86_64: Process 5359 attached [pid 5359] set_robust_list(0x555556b87660, 24) = 0 [pid 5359] chdir("./26") = 0 [pid 5359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5359] setpgid(0, 0) = 0 [pid 5359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5359] write(3, "1000", 4) = 4 [pid 5359] close(3) = 0 [pid 5359] symlink("/dev/binderfs", "./binderfs" [pid 5356] <... ioctl resumed>) = 0 [pid 5359] <... symlink resumed>) = 0 [pid 5356] close(3) = 0 [pid 5356] mkdir("./file1", 0777 [pid 5359] memfd_create("syzkaller", 0) = 3 [pid 5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5356] <... mkdir resumed>) = 0 [ 89.184376][ T5355] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 89.197679][ T5356] loop2: detected capacity change from 0 to 4096 [ 89.215480][ T5356] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.224644][ T5353] Remounting filesystem read-only [pid 5356] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 89.232015][ T5356] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 89.252136][ T5352] Remounting filesystem read-only [ 89.258012][ T5353] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 89.276426][ T5352] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5015] newfstatat(AT_FDCWD, "./28/file1", [pid 5359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [ 89.280898][ T5353] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5015] close(4 [pid 5359] <... write resumed>) = 2097152 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./28/file1" [pid 5359] munmap(0x7f770c286000, 2097152 [pid 5353] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... rmdir resumed>) = 0 [pid 5359] <... munmap resumed>) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [ 89.308481][ T5360] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.315810][ T5361] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.324204][ T5352] NILFS (loop1): repaired inode bitmap for reserved inodes [ 89.331384][ T5353] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] rmdir("./28") = 0 [pid 5359] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5015] mkdir("./29", 0777 [pid 5359] <... openat resumed>) = 4 [pid 5015] <... mkdir resumed>) = 0 [pid 5359] ioctl(4, LOOP_SET_FD, 3 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5353] exit_group(0 [pid 5352] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... openat resumed>) = 3 [pid 5353] <... exit_group resumed>) = ? [pid 5353] +++ exited with 0 +++ [pid 5352] exit_group(0 [pid 5356] <... mount resumed>) = 0 [pid 5359] <... ioctl resumed>) = 0 [pid 5356] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5355] <... mount resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5353, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5352] <... exit_group resumed>) = ? [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5356] <... openat resumed>) = 3 [pid 5355] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5356] chdir("./file1" [pid 5355] <... openat resumed>) = 3 [pid 5015] close(3 [pid 5359] close(3) = 0 [pid 5015] <... close resumed>) = 0 [pid 5359] mkdir("./file1", 0777) = 0 [pid 5359] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5356] <... chdir resumed>) = 0 [pid 5355] chdir("./file1" [pid 5352] +++ exited with 0 +++ [pid 5016] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5356] ioctl(4, LOOP_CLR_FD [pid 5355] <... chdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5355] ioctl(4, LOOP_CLR_FD [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5352, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5356] <... ioctl resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5355] <... ioctl resumed>) = 0 [pid 5356] close(4 [pid 5355] close(4 [pid 5016] newfstatat(3, "", [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5362 [pid 5356] <... close resumed>) = 0 [pid 5355] <... close resumed>) = 0 [ 89.339209][ T5352] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 89.363531][ T5359] loop0: detected capacity change from 0 to 4096 [ 89.378914][ T5359] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5356] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5355] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] getdents64(3, [pid 5013] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5362 attached [pid 5362] set_robust_list(0x555556b87660, 24) = 0 [pid 5362] chdir("./29") = 0 [pid 5362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5362] setpgid(0, 0) = 0 [pid 5362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5362] write(3, "1000", 4) = 4 [pid 5362] close(3) = 0 [pid 5362] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5362] memfd_create("syzkaller", 0) = 3 [pid 5362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5013] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... openat resumed>) = 3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(3, "", [pid 5016] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] unlink("./29/binderfs" [pid 5013] getdents64(3, [pid 5016] <... unlink resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 89.397708][ T5356] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 89.413054][ T5355] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 89.431372][ T5356] Remounting filesystem read-only [ 89.437883][ T5359] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 89.438588][ T5356] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5013] unlink("./26/binderfs" [pid 5362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... unlink resumed>) = 0 [pid 5013] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] <... mount resumed>) = 0 [pid 5359] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5359] chdir("./file1") = 0 [pid 5359] ioctl(4, LOOP_CLR_FD) = 0 [pid 5359] close(4) = 0 [ 89.459572][ T5355] Remounting filesystem read-only [ 89.464208][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 89.468399][ T5355] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 89.481006][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 89.484210][ T5359] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 89.495555][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5359] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5362] <... write resumed>) = 2097152 [ 89.503223][ T5363] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.510515][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 89.521178][ T5355] NILFS (loop5): repaired inode bitmap for reserved inodes [ 89.537448][ T5356] NILFS (loop2): repaired inode bitmap for reserved inodes [ 89.547979][ T5359] Remounting filesystem read-only [ 89.548551][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5362] munmap(0x7f770c286000, 2097152) = 0 [ 89.553688][ T5356] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 89.565621][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 89.576686][ T5359] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 89.586974][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 89.600683][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5362] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5362] ioctl(4, LOOP_SET_FD, 3) = 0 [ 89.608891][ T5355] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 89.609592][ T57] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 89.624425][ T5359] NILFS (loop0): repaired inode bitmap for reserved inodes [ 89.631509][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 89.646136][ T5362] loop3: detected capacity change from 0 to 4096 [ 89.653652][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5362] close(3 [pid 5356] <... openat resumed>) = -1 EIO (Input/output error) [pid 5356] exit_group(0 [pid 5362] <... close resumed>) = 0 [pid 5362] mkdir("./file1", 0777 [pid 5356] <... exit_group resumed>) = ? [pid 5355] <... openat resumed>) = -1 EIO (Input/output error) [pid 5355] exit_group(0) = ? [pid 5356] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5356, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5355] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5355, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5017] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5362] <... mkdir resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5017] newfstatat(3, "", [pid 5362] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./27/binderfs") = 0 [ 89.661532][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 89.670133][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 89.682917][ T5362] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.690142][ T5359] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./28/binderfs") = 0 [ 89.707266][ T57] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 89.708267][ T5362] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 89.716135][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 89.744621][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5014] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] <... umount2 resumed>) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./26/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./26") = 0 [pid 5013] mkdir("./27", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5016] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5359] <... openat resumed>) = -1 EIO (Input/output error) [ 89.758238][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 89.772875][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 89.793941][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 89.802491][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5359] exit_group(0 [pid 5016] newfstatat(AT_FDCWD, "./29/file1", [pid 5359] <... exit_group resumed>) = ? [pid 5359] +++ exited with 0 +++ ./strace-static-x86_64: Process 5364 attached [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5364 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5359, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5364] set_robust_list(0x555556b87660, 24 [pid 5016] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5364] <... set_robust_list resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5364] chdir("./27" [pid 5016] <... openat resumed>) = 4 [pid 5364] <... chdir resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5364] <... prctl resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5364] setpgid(0, 0 [pid 5016] getdents64(4, [pid 5364] <... setpgid resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5016] getdents64(4, [pid 5014] <... umount2 resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5364] write(3, "1000", 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(3, "", [pid 5364] <... write resumed>) = 4 [pid 5016] close(4 [pid 5364] close(3 [pid 5016] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5364] <... close resumed>) = 0 [pid 5362] <... mount resumed>) = 0 [pid 5016] rmdir("./29/file1" [pid 5014] newfstatat(AT_FDCWD, "./28/file1", [pid 5012] getdents64(3, [pid 5016] <... rmdir resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5364] symlink("/dev/binderfs", "./binderfs" [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5364] <... symlink resumed>) = 0 [pid 5362] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5362] <... openat resumed>) = 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5362] chdir("./file1" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5364] memfd_create("syzkaller", 0 [pid 5014] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5364] <... memfd_create resumed>) = 3 [pid 5362] <... chdir resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5362] ioctl(4, LOOP_CLR_FD [pid 5014] newfstatat(4, "", [pid 5012] unlink("./26/binderfs" [pid 5364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5362] <... ioctl resumed>) = 0 [pid 5016] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5362] close(4 [pid 5014] getdents64(4, [pid 5012] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5362] <... close resumed>) = 0 [ 89.812760][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 89.826268][ T5365] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.833055][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 89.853973][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5364] <... mmap resumed>) = 0x7f770c286000 [pid 5362] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, [pid 5016] close(3 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./29" [pid 5014] close(4) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5014] rmdir("./28/file1") = 0 [pid 5016] mkdir("./30", 0777 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5014] close(3) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5014] rmdir("./28") = 0 [pid 5016] <... openat resumed>) = 3 [pid 5014] mkdir("./29", 0777 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5014] <... mkdir resumed>) = 0 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] close(3) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5366 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5367 ./strace-static-x86_64: Process 5367 attached ./strace-static-x86_64: Process 5366 attached [pid 5364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5367] set_robust_list(0x555556b87660, 24 [pid 5366] set_robust_list(0x555556b87660, 24 [pid 5367] <... set_robust_list resumed>) = 0 [pid 5366] <... set_robust_list resumed>) = 0 [pid 5367] chdir("./29" [ 89.861943][ T5362] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 89.896812][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 89.903746][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5366] chdir("./30" [pid 5367] <... chdir resumed>) = 0 [pid 5366] <... chdir resumed>) = 0 [pid 5367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5366] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5367] <... prctl resumed>) = 0 [pid 5366] <... prctl resumed>) = 0 [pid 5367] setpgid(0, 0 [pid 5366] setpgid(0, 0 [pid 5367] <... setpgid resumed>) = 0 [pid 5366] <... setpgid resumed>) = 0 [pid 5367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5367] <... openat resumed>) = 3 [pid 5366] <... openat resumed>) = 3 [pid 5364] <... write resumed>) = 2097152 [ 89.926147][ T5362] Remounting filesystem read-only [ 89.933065][ T5362] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 89.938623][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 89.951378][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 89.956426][ T5362] NILFS (loop3): repaired inode bitmap for reserved inodes [ 89.966008][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5367] write(3, "1000", 4 [pid 5366] write(3, "1000", 4 [pid 5364] munmap(0x7f770c286000, 2097152 [pid 5367] <... write resumed>) = 4 [pid 5366] <... write resumed>) = 4 [pid 5364] <... munmap resumed>) = 0 [pid 5367] close(3 [pid 5366] close(3 [pid 5367] <... close resumed>) = 0 [pid 5366] <... close resumed>) = 0 [pid 5367] symlink("/dev/binderfs", "./binderfs" [pid 5366] symlink("/dev/binderfs", "./binderfs" [pid 5367] <... symlink resumed>) = 0 [pid 5366] <... symlink resumed>) = 0 [pid 5366] memfd_create("syzkaller", 0 [pid 5367] memfd_create("syzkaller", 0 [pid 5366] <... memfd_create resumed>) = 3 [pid 5367] <... memfd_create resumed>) = 3 [pid 5366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5364] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5366] <... mmap resumed>) = 0x7f770c286000 [pid 5367] <... mmap resumed>) = 0x7f770c286000 [pid 5364] <... openat resumed>) = 4 [pid 5364] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5364] close(3) = 0 [pid 5364] mkdir("./file1", 0777) = 0 [ 89.966470][ T5362] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 89.998472][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 90.007350][ T5364] loop1: detected capacity change from 0 to 4096 [pid 5364] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./27/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./27") = 0 [pid 5017] mkdir("./28", 0777 [pid 5366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 90.030404][ T5364] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.035236][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5017] close(3 [pid 5362] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5368 ./strace-static-x86_64: Process 5368 attached [pid 5368] set_robust_list(0x555556b87660, 24) = 0 [pid 5368] chdir("./28") = 0 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5368] setpgid(0, 0) = 0 [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5368] write(3, "1000", 4) = 4 [pid 5368] close(3) = 0 [pid 5362] exit_group(0) = ? [pid 5368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] memfd_create("syzkaller", 0 [pid 5362] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5362, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5368] <... memfd_create resumed>) = 3 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5368] <... mmap resumed>) = 0x7f770c286000 [pid 5015] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./29/binderfs") = 0 [pid 5015] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5366] <... write resumed>) = 2097152 [pid 5367] <... write resumed>) = 2097152 [pid 5366] munmap(0x7f770c286000, 2097152 [pid 5367] munmap(0x7f770c286000, 2097152 [pid 5366] <... munmap resumed>) = 0 [ 90.086127][ T5364] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 90.114661][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 90.126276][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5367] <... munmap resumed>) = 0 [pid 5366] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5012] <... umount2 resumed>) = 0 [pid 5364] <... mount resumed>) = 0 [pid 5364] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5364] chdir("./file1") = 0 [pid 5364] ioctl(4, LOOP_CLR_FD) = 0 [pid 5364] close(4 [pid 5367] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5366] <... openat resumed>) = 4 [pid 5364] <... close resumed>) = 0 [pid 5012] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5364] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5367] <... openat resumed>) = 4 [ 90.133224][ T5369] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.153736][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 90.160939][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 90.179348][ T5366] loop4: detected capacity change from 0 to 4096 [pid 5366] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5367] ioctl(4, LOOP_SET_FD, 3 [pid 5012] newfstatat(AT_FDCWD, "./26/file1", [pid 5368] <... write resumed>) = 2097152 [pid 5366] <... ioctl resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5366] close(3 [pid 5012] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5366] <... close resumed>) = 0 [pid 5366] mkdir("./file1", 0777 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5368] munmap(0x7f770c286000, 2097152 [pid 5367] <... ioctl resumed>) = 0 [pid 5366] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5368] <... munmap resumed>) = 0 [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", [pid 5368] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5367] close(3 [pid 5366] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 90.179738][ T5364] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 90.186753][ T5367] loop2: detected capacity change from 0 to 4096 [ 90.215147][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 90.222217][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5368] <... openat resumed>) = 4 [pid 5367] <... close resumed>) = 0 [pid 5012] getdents64(4, [pid 5368] ioctl(4, LOOP_SET_FD, 3 [pid 5367] mkdir("./file1", 0777 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5368] <... ioctl resumed>) = 0 [pid 5367] <... mkdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [ 90.236379][ T5364] Remounting filesystem read-only [ 90.245799][ T5366] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.257214][ T5368] loop5: detected capacity change from 0 to 4096 [ 90.260651][ T5364] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 90.268310][ T5366] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5012] getdents64(4, [pid 5368] close(3 [pid 5367] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5368] <... close resumed>) = 0 [pid 5368] mkdir("./file1", 0777 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(4 [pid 5364] <... openat resumed>) = -1 EIO (Input/output error) [pid 5364] exit_group(0) = ? [pid 5364] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5364, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5013] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... close resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./29/file1", [pid 5013] unlink("./27/binderfs") = 0 [pid 5368] <... mkdir resumed>) = 0 [pid 5013] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] rmdir("./26/file1" [pid 5368] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... rmdir resumed>) = 0 [ 90.281525][ T5364] NILFS (loop1): repaired inode bitmap for reserved inodes [ 90.290583][ T5364] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 90.291759][ T5367] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.323336][ T5370] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] getdents64(3, [pid 5015] <... openat resumed>) = 4 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] newfstatat(4, "", [pid 5012] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5012] rmdir("./26" [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... rmdir resumed>) = 0 [pid 5015] getdents64(4, [pid 5012] mkdir("./27", 0777 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4 [pid 5012] <... mkdir resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./29/file1" [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5015] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, [pid 5012] <... openat resumed>) = 3 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5015] close(3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] <... close resumed>) = 0 [pid 5012] close(3 [pid 5015] rmdir("./29" [pid 5012] <... close resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] mkdir("./30", 0777) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5371 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5371 attached [pid 5366] <... mount resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5371] set_robust_list(0x555556b87660, 24 [pid 5366] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5373 [ 90.334710][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 90.335200][ T5368] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.351731][ T5367] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 90.370690][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 ./strace-static-x86_64: Process 5373 attached [pid 5371] <... set_robust_list resumed>) = 0 [pid 5366] <... openat resumed>) = 3 [pid 5373] set_robust_list(0x555556b87660, 24) = 0 [pid 5371] chdir("./27" [pid 5366] chdir("./file1" [pid 5373] chdir("./30") = 0 [pid 5371] <... chdir resumed>) = 0 [pid 5367] <... mount resumed>) = 0 [pid 5366] <... chdir resumed>) = 0 [pid 5373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5367] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5366] ioctl(4, LOOP_CLR_FD [pid 5373] <... prctl resumed>) = 0 [pid 5371] <... prctl resumed>) = 0 [pid 5367] <... openat resumed>) = 3 [pid 5366] <... ioctl resumed>) = 0 [pid 5373] setpgid(0, 0 [pid 5371] setpgid(0, 0 [pid 5367] chdir("./file1" [ 90.380652][ T5368] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 90.386227][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 90.398321][ T5372] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.407756][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 90.419738][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 90.427993][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5366] close(4 [pid 5373] <... setpgid resumed>) = 0 [pid 5371] <... setpgid resumed>) = 0 [pid 5367] <... chdir resumed>) = 0 [pid 5366] <... close resumed>) = 0 [pid 5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5367] ioctl(4, LOOP_CLR_FD [pid 5366] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5371] <... openat resumed>) = 3 [pid 5367] <... ioctl resumed>) = 0 [pid 5373] <... openat resumed>) = 3 [pid 5371] write(3, "1000", 4 [pid 5367] close(4 [pid 5373] write(3, "1000", 4 [pid 5371] <... write resumed>) = 4 [pid 5367] <... close resumed>) = 0 [pid 5373] <... write resumed>) = 4 [pid 5371] close(3 [ 90.430431][ T5366] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 90.463979][ T5374] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5367] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5373] close(3 [pid 5371] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5373] <... close resumed>) = 0 [pid 5013] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5373] symlink("/dev/binderfs", "./binderfs" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5373] <... symlink resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./27/file1", [pid 5373] memfd_create("syzkaller", 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5373] <... memfd_create resumed>) = 3 [pid 5013] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5373] <... mmap resumed>) = 0x7f770c286000 [pid 5013] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5371] symlink("/dev/binderfs", "./binderfs" [pid 5368] <... mount resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5371] <... symlink resumed>) = 0 [pid 5368] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] newfstatat(4, "", [pid 5371] memfd_create("syzkaller", 0 [pid 5368] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5371] <... memfd_create resumed>) = 3 [pid 5368] chdir("./file1" [pid 5013] getdents64(4, [pid 5371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5368] <... chdir resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5371] <... mmap resumed>) = 0x7f770c286000 [pid 5368] ioctl(4, LOOP_CLR_FD [pid 5013] getdents64(4, [pid 5368] <... ioctl resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5368] close(4 [pid 5013] close(4 [pid 5368] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [ 90.466293][ T5367] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 90.499242][ T5366] Remounting filesystem read-only [pid 5368] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] rmdir("./27/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./27") = 0 [pid 5013] mkdir("./28", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5375 ./strace-static-x86_64: Process 5375 attached [pid 5375] set_robust_list(0x555556b87660, 24) = 0 [pid 5375] chdir("./28") = 0 [pid 5375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5375] setpgid(0, 0) = 0 [pid 5375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5375] write(3, "1000", 4) = 4 [pid 5375] close(3) = 0 [pid 5375] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5375] memfd_create("syzkaller", 0) = 3 [pid 5375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 90.526991][ T5368] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 90.548242][ T5366] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 90.578126][ T5366] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5371] <... write resumed>) = 2097152 [ 90.591930][ T5366] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 90.626999][ T5368] Remounting filesystem read-only [pid 5371] munmap(0x7f770c286000, 2097152) = 0 [pid 5366] <... openat resumed>) = -1 EIO (Input/output error) [pid 5373] <... write resumed>) = 2097152 [pid 5371] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5366] exit_group(0 [pid 5373] munmap(0x7f770c286000, 2097152 [pid 5371] <... openat resumed>) = 4 [pid 5366] <... exit_group resumed>) = ? [pid 5373] <... munmap resumed>) = 0 [pid 5373] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5373] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5373] close(3 [pid 5371] ioctl(4, LOOP_SET_FD, 3 [pid 5366] +++ exited with 0 +++ [pid 5373] <... close resumed>) = 0 [ 90.647453][ T5368] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 90.657477][ T5368] NILFS (loop5): repaired inode bitmap for reserved inodes [ 90.665662][ T5367] Remounting filesystem read-only [ 90.671761][ T5368] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 90.686681][ T5373] loop3: detected capacity change from 0 to 4096 [pid 5373] mkdir("./file1", 0777 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5366, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5373] <... mkdir resumed>) = 0 [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5375] <... write resumed>) = 2097152 [pid 5373] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... restart_syscall resumed>) = 0 [pid 5016] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5375] munmap(0x7f770c286000, 2097152 [pid 5016] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5375] <... munmap resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, [pid 5375] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5375] <... openat resumed>) = 4 [pid 5371] <... ioctl resumed>) = 0 [pid 5016] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5375] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5371] close(3 [pid 5016] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./30/binderfs") = 0 [ 90.696416][ T5367] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 90.705565][ T5371] loop0: detected capacity change from 0 to 4096 [ 90.713166][ T5373] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.713236][ T5367] NILFS (loop2): repaired inode bitmap for reserved inodes [ 90.726887][ T5375] loop1: detected capacity change from 0 to 4096 [pid 5016] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] <... close resumed>) = 0 [pid 5375] <... ioctl resumed>) = 0 [pid 5371] mkdir("./file1", 0777 [pid 5368] <... openat resumed>) = -1 EIO (Input/output error) [pid 5367] <... openat resumed>) = -1 EIO (Input/output error) [pid 5375] close(3 [pid 5371] <... mkdir resumed>) = 0 [pid 5368] exit_group(0 [pid 5367] exit_group(0 [pid 5375] <... close resumed>) = 0 [pid 5371] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5368] <... exit_group resumed>) = ? [pid 5367] <... exit_group resumed>) = ? [pid 5375] mkdir("./file1", 0777) = 0 [pid 5375] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5368] +++ exited with 0 +++ [pid 5367] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5368, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5367, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5017] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 3 [pid 5017] newfstatat(3, "", [pid 5014] newfstatat(3, "", [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5014] getdents64(3, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5014] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 90.731179][ T5367] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 90.753483][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 90.754133][ T5373] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 90.762406][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 90.778432][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 90.788834][ T5371] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./28/binderfs" [pid 5014] unlink("./29/binderfs" [pid 5373] <... mount resumed>) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5017] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 90.799961][ T5375] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.801434][ T5376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.822018][ T5371] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 90.824490][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 90.839986][ T5375] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5373] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5373] chdir("./file1") = 0 [pid 5371] <... mount resumed>) = 0 [ 90.841659][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 90.858044][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 90.861337][ T5377] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.865012][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 90.879829][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 90.884974][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5373] ioctl(4, LOOP_CLR_FD [pid 5371] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5375] <... mount resumed>) = 0 [pid 5373] <... ioctl resumed>) = 0 [pid 5371] <... openat resumed>) = 3 [pid 5375] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5371] chdir("./file1" [pid 5375] <... openat resumed>) = 3 [pid 5373] close(4 [pid 5371] <... chdir resumed>) = 0 [pid 5375] chdir("./file1" [pid 5373] <... close resumed>) = 0 [ 90.890408][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 90.898092][ T5378] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.915605][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 90.924143][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 90.935837][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 90.944359][ T5373] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 90.948579][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 90.964568][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 90.974902][ T5371] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5371] ioctl(4, LOOP_CLR_FD [pid 5375] <... chdir resumed>) = 0 [pid 5373] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5375] ioctl(4, LOOP_CLR_FD [pid 5371] <... ioctl resumed>) = 0 [pid 5371] close(4 [pid 5375] <... ioctl resumed>) = 0 [pid 5375] close(4 [pid 5371] <... close resumed>) = 0 [pid 5375] <... close resumed>) = 0 [pid 5371] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5375] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./30/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./30") = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5016] mkdir("./31", 0777) = 0 [ 90.993033][ T5375] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 91.010988][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 91.020862][ T5371] Remounting filesystem read-only [ 91.028002][ T5371] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 91.038191][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] newfstatat(AT_FDCWD, "./29/file1", [pid 5016] close(3) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5379 [pid 5014] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./29/file1"./strace-static-x86_64: Process 5379 attached [pid 5379] set_robust_list(0x555556b87660, 24) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5379] chdir("./31" [pid 5014] rmdir("./29") = 0 [pid 5379] <... chdir resumed>) = 0 [ 91.051253][ T5371] NILFS (loop0): repaired inode bitmap for reserved inodes [ 91.055268][ T5373] Remounting filesystem read-only [ 91.059507][ T5375] Remounting filesystem read-only [ 91.065742][ T5373] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 91.079110][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] mkdir("./30", 0777 [pid 5379] setpgid(0, 0) = 0 [pid 5379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5379] write(3, "1000", 4) = 4 [pid 5379] close(3) = 0 [pid 5379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5379] memfd_create("syzkaller", 0) = 3 [pid 5379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 91.098253][ T5373] NILFS (loop3): repaired inode bitmap for reserved inodes [ 91.099070][ T5375] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 91.135769][ T5371] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5380 [ 91.149978][ T5373] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 91.162605][ T5375] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5380 attached [pid 5380] set_robust_list(0x555556b87660, 24) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5380] chdir("./30" [pid 5371] <... openat resumed>) = -1 EIO (Input/output error) [pid 5375] <... openat resumed>) = -1 EIO (Input/output error) [pid 5373] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] <... chdir resumed>) = 0 [pid 5375] exit_group(0 [pid 5373] exit_group(0 [pid 5371] exit_group(0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5375] <... exit_group resumed>) = ? [pid 5373] <... exit_group resumed>) = ? [pid 5371] <... exit_group resumed>) = ? [pid 5017] newfstatat(AT_FDCWD, "./28/file1", [pid 5380] <... prctl resumed>) = 0 [pid 5375] +++ exited with 0 +++ [pid 5373] +++ exited with 0 +++ [pid 5371] +++ exited with 0 +++ [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5375, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5380] setpgid(0, 0 [pid 5379] <... write resumed>) = 2097152 [pid 5017] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] <... setpgid resumed>) = 0 [pid 5379] munmap(0x7f770c286000, 2097152 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5373, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5371, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5012] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] <... openat resumed>) = 3 [pid 5379] <... munmap resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5380] write(3, "1000", 4 [pid 5017] newfstatat(4, "", [pid 5380] <... write resumed>) = 4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5380] close(3 [pid 5017] getdents64(4, [pid 5013] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5380] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 91.189735][ T5375] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(3, "", [pid 5380] symlink("/dev/binderfs", "./binderfs" [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5380] <... symlink resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5379] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5017] close(4 [pid 5013] newfstatat(3, "", [pid 5012] getdents64(3, [pid 5380] memfd_create("syzkaller", 0 [pid 5379] <... openat resumed>) = 4 [pid 5017] <... close resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5380] <... memfd_create resumed>) = 3 [pid 5379] ioctl(4, LOOP_SET_FD, 3 [pid 5017] rmdir("./28/file1" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] getdents64(3, [pid 5012] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] <... mmap resumed>) = 0x7f770c286000 [pid 5017] getdents64(3, [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5379] <... ioctl resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5379] close(3 [pid 5017] close(3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5379] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5013] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5379] mkdir("./file1", 0777 [pid 5017] rmdir("./28" [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./27/binderfs" [pid 5379] <... mkdir resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] unlink("./30/binderfs" [pid 5013] unlink("./28/binderfs" [pid 5379] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... unlink resumed>) = 0 [pid 5380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] mkdir("./29", 0777 [pid 5015] <... unlink resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5012] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... mkdir resumed>) = 0 [ 91.233582][ T5379] loop4: detected capacity change from 0 to 4096 [ 91.246207][ T5379] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.257075][ T5379] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 91.269600][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5382 [pid 5380] <... write resumed>) = 2097152 [pid 5379] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5382 attached [pid 5382] set_robust_list(0x555556b87660, 24) = 0 [pid 5382] chdir("./29") = 0 [pid 5382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5382] setpgid(0, 0) = 0 [pid 5382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 91.278924][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 91.279722][ T5381] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.291143][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 91.306348][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 91.307822][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 91.313049][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5382] write(3, "1000", 4 [pid 5380] munmap(0x7f770c286000, 2097152 [pid 5379] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5382] <... write resumed>) = 4 [pid 5382] close(3) = 0 [pid 5382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5382] memfd_create("syzkaller", 0) = 3 [pid 5382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5380] <... munmap resumed>) = 0 [pid 5380] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5379] <... openat resumed>) = 3 [ 91.325680][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 91.334427][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 91.337588][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 91.342334][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 91.349845][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 91.366889][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 91.369164][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5380] <... openat resumed>) = 4 [pid 5379] chdir("./file1" [pid 5380] ioctl(4, LOOP_SET_FD, 3 [pid 5379] <... chdir resumed>) = 0 [pid 5379] ioctl(4, LOOP_CLR_FD) = 0 [pid 5379] close(4) = 0 [pid 5379] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5380] <... ioctl resumed>) = 0 [pid 5380] close(3) = 0 [pid 5380] mkdir("./file1", 0777) = 0 [ 91.382087][ T5380] loop2: detected capacity change from 0 to 4096 [ 91.396503][ T5379] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 91.401076][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5380] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 91.425650][ T5380] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.430093][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 91.464145][ T5379] Remounting filesystem read-only [ 91.474863][ T5380] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5382] <... write resumed>) = 2097152 [pid 5382] munmap(0x7f770c286000, 2097152) = 0 [pid 5382] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5382] ioctl(4, LOOP_SET_FD, 3 [pid 5015] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5382] <... ioctl resumed>) = 0 [pid 5382] close(3) = 0 [pid 5382] mkdir("./file1", 0777) = 0 [ 91.477947][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 91.486591][ T5379] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 91.499229][ T5382] loop5: detected capacity change from 0 to 4096 [ 91.506740][ T5379] NILFS (loop4): repaired inode bitmap for reserved inodes [ 91.507492][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5382] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5379] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... openat resumed>) = 4 [pid 5379] exit_group(0 [pid 5015] newfstatat(4, "", [pid 5379] <... exit_group resumed>) = ? [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5379] +++ exited with 0 +++ [pid 5015] getdents64(4, [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5379, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, [pid 5380] <... mount resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] close(4 [pid 5380] <... openat resumed>) = 3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./30/file1" [pid 5380] chdir("./file1" [pid 5016] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5380] <... chdir resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5015] <... rmdir resumed>) = 0 [pid 5380] ioctl(4, LOOP_CLR_FD [pid 5016] newfstatat(3, "", [pid 5015] getdents64(3, [pid 5380] <... ioctl resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5380] close(4 [pid 5016] getdents64(3, [pid 5380] <... close resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] close(3 [pid 5380] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 91.516353][ T5379] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 91.527836][ T5382] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.537862][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 91.555340][ T5383] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] rmdir("./30" [pid 5012] <... umount2 resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5012] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, [pid 5013] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(4) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5015] <... rmdir resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] mkdir("./31", 0777 [pid 5012] rmdir("./27/file1" [pid 5016] unlink("./31/binderfs" [pid 5013] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... unlink resumed>) = 0 [pid 5016] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... mkdir resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5012] getdents64(3, [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(4 [pid 5012] close(3 [pid 5013] <... close resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5013] rmdir("./28/file1" [pid 5012] rmdir("./27" [pid 5013] <... rmdir resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, [pid 5012] mkdir("./28", 0777 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5013] close(3) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5013] rmdir("./28" [pid 5012] <... openat resumed>) = 3 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5013] mkdir("./29", 0777 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... mkdir resumed>) = 0 [pid 5012] close(3 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] <... close resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5015] <... openat resumed>) = 3 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5384 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5013] close(3 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5013] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5385 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5386 ./strace-static-x86_64: Process 5385 attached ./strace-static-x86_64: Process 5384 attached [pid 5384] set_robust_list(0x555556b87660, 24) = 0 [pid 5384] chdir("./28"./strace-static-x86_64: Process 5386 attached ) = 0 [pid 5386] set_robust_list(0x555556b87660, 24 [pid 5385] set_robust_list(0x555556b87660, 24 [pid 5384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5386] <... set_robust_list resumed>) = 0 [pid 5385] <... set_robust_list resumed>) = 0 [pid 5384] <... prctl resumed>) = 0 [pid 5386] chdir("./29" [pid 5384] setpgid(0, 0 [pid 5386] <... chdir resumed>) = 0 [pid 5384] <... setpgid resumed>) = 0 [pid 5386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5386] <... prctl resumed>) = 0 [pid 5385] chdir("./31" [pid 5384] <... openat resumed>) = 3 [pid 5386] setpgid(0, 0 [pid 5385] <... chdir resumed>) = 0 [ 91.586554][ T5380] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 91.607122][ T5382] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 91.618130][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 91.625450][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5386] <... setpgid resumed>) = 0 [pid 5385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5384] write(3, "1000", 4 [pid 5386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5384] <... write resumed>) = 4 [pid 5386] <... openat resumed>) = 3 [pid 5384] close(3 [pid 5386] write(3, "1000", 4 [pid 5384] <... close resumed>) = 0 [pid 5386] <... write resumed>) = 4 [pid 5384] symlink("/dev/binderfs", "./binderfs" [pid 5386] close(3 [pid 5385] <... prctl resumed>) = 0 [pid 5384] <... symlink resumed>) = 0 [pid 5386] <... close resumed>) = 0 [pid 5384] memfd_create("syzkaller", 0 [pid 5386] symlink("/dev/binderfs", "./binderfs" [pid 5384] <... memfd_create resumed>) = 3 [pid 5386] <... symlink resumed>) = 0 [pid 5384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5386] memfd_create("syzkaller", 0 [pid 5384] <... mmap resumed>) = 0x7f770c286000 [pid 5386] <... memfd_create resumed>) = 3 [pid 5385] setpgid(0, 0 [pid 5386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5385] <... setpgid resumed>) = 0 [pid 5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5385] write(3, "1000", 4) = 4 [pid 5385] close(3) = 0 [ 91.665857][ T5380] Remounting filesystem read-only [ 91.671793][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 91.681474][ T5380] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 91.701499][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5382] <... mount resumed>) = 0 [pid 5382] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5382] chdir("./file1") = 0 [pid 5382] ioctl(4, LOOP_CLR_FD) = 0 [pid 5382] close(4) = 0 [pid 5382] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5385] memfd_create("syzkaller", 0) = 3 [pid 5385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 91.702958][ T5387] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.710135][ T5380] NILFS (loop2): repaired inode bitmap for reserved inodes [ 91.725297][ T5382] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 91.741661][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 91.741684][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 91.751851][ T5382] Remounting filesystem read-only [pid 5384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 91.770579][ T5382] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 91.803647][ T5382] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5384] <... write resumed>) = 2097152 [pid 5384] munmap(0x7f770c286000, 2097152) = 0 [pid 5384] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 91.811666][ T5380] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 91.832628][ T5382] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5384] ioctl(4, LOOP_SET_FD, 3 [pid 5386] <... write resumed>) = 2097152 [pid 5385] <... write resumed>) = 2097152 [pid 5016] <... umount2 resumed>) = 0 [pid 5386] munmap(0x7f770c286000, 2097152 [pid 5385] munmap(0x7f770c286000, 2097152 [pid 5380] <... openat resumed>) = -1 EIO (Input/output error) [pid 5386] <... munmap resumed>) = 0 [pid 5386] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5016] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] exit_group(0 [pid 5386] ioctl(4, LOOP_SET_FD, 3 [pid 5385] <... munmap resumed>) = 0 [pid 5384] <... ioctl resumed>) = 0 [pid 5382] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5380] <... exit_group resumed>) = ? [pid 5380] +++ exited with 0 +++ [pid 5382] exit_group(0) = ? [pid 5386] <... ioctl resumed>) = 0 [pid 5385] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5384] close(3 [pid 5382] +++ exited with 0 +++ [pid 5016] newfstatat(AT_FDCWD, "./31/file1", [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5380, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5386] close(3 [pid 5385] <... openat resumed>) = 4 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5386] <... close resumed>) = 0 [pid 5385] ioctl(4, LOOP_SET_FD, 3 [pid 5384] <... close resumed>) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5382, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5016] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5386] mkdir("./file1", 0777 [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... restart_syscall resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5384] mkdir("./file1", 0777 [pid 5016] <... openat resumed>) = 4 [pid 5014] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] newfstatat(4, "", [pid 5014] <... openat resumed>) = 3 [pid 5385] <... ioctl resumed>) = 0 [pid 5017] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] newfstatat(3, "", [pid 5385] close(3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] getdents64(4, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5385] <... close resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(3, [pid 5385] mkdir("./file1", 0777 [pid 5384] <... mkdir resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5016] getdents64(4, [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5386] <... mkdir resumed>) = 0 [pid 5385] <... mkdir resumed>) = 0 [pid 5384] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] newfstatat(3, "", [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5385] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 91.883243][ T5384] loop0: detected capacity change from 0 to 4096 [ 91.908571][ T5386] loop1: detected capacity change from 0 to 4096 [ 91.919041][ T5385] loop3: detected capacity change from 0 to 4096 [pid 5016] close(4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5386] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] getdents64(3, [pid 5016] <... close resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5016] rmdir("./31/file1" [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... rmdir resumed>) = 0 [pid 5014] unlink("./30/binderfs" [pid 5016] getdents64(3, [pid 5014] <... unlink resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] close(3) = 0 [pid 5016] rmdir("./31") = 0 [pid 5016] mkdir("./32", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5017] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... close resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./29/binderfs") = 0 [ 91.944828][ T5384] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.945338][ T5385] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.966743][ T5386] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.977978][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5017] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5388 attached [pid 5388] set_robust_list(0x555556b87660, 24) = 0 [pid 5388] chdir("./32") = 0 [pid 5388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5388] setpgid(0, 0) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5388 [ 91.986109][ T5384] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 91.986481][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 91.995788][ T5386] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 92.000838][ T5385] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 92.014133][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 92.023978][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5386] <... mount resumed>) = 0 [pid 5388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5388] write(3, "1000", 4 [pid 5386] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5388] <... write resumed>) = 4 [pid 5386] <... openat resumed>) = 3 [pid 5388] close(3) = 0 [pid 5388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5388] memfd_create("syzkaller", 0 [pid 5386] chdir("./file1" [pid 5384] <... mount resumed>) = 0 [pid 5388] <... memfd_create resumed>) = 3 [pid 5388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5386] <... chdir resumed>) = 0 [pid 5384] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5386] ioctl(4, LOOP_CLR_FD [pid 5384] <... openat resumed>) = 3 [pid 5386] <... ioctl resumed>) = 0 [pid 5386] close(4 [ 92.039223][ T5389] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.046184][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 92.058015][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 92.066440][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 92.066786][ T5390] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.074537][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5384] chdir("./file1" [pid 5386] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5384] <... chdir resumed>) = 0 [pid 5386] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] ioctl(4, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5384] <... ioctl resumed>) = 0 [ 92.106443][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 92.113757][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 92.128684][ T5386] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 92.140313][ T5391] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5014] newfstatat(AT_FDCWD, "./30/file1", [pid 5384] close(4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5384] <... close resumed>) = 0 [pid 5384] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5385] <... mount resumed>) = 0 [pid 5014] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5385] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5385] chdir("./file1") = 0 [pid 5385] ioctl(4, LOOP_CLR_FD) = 0 [pid 5385] close(4) = 0 [pid 5388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5385] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 92.152308][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 92.166341][ T5384] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 92.182402][ T5385] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 92.198374][ T5386] Remounting filesystem read-only [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./30/file1" [pid 5388] <... write resumed>) = 2097152 [pid 5388] munmap(0x7f770c286000, 2097152) = 0 [pid 5388] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./30") = 0 [pid 5014] mkdir("./31", 0777) = 0 [ 92.204598][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 92.212872][ T5386] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 92.219757][ T5385] Remounting filesystem read-only [ 92.226252][ T5384] Remounting filesystem read-only [ 92.232486][ T5384] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5388] ioctl(4, LOOP_SET_FD, 3 [pid 5014] close(3) = 0 [ 92.251131][ T5386] NILFS (loop1): repaired inode bitmap for reserved inodes [ 92.264688][ T5384] NILFS (loop0): repaired inode bitmap for reserved inodes [ 92.271885][ T5388] loop4: detected capacity change from 0 to 4096 [ 92.278897][ T5386] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 92.296180][ T5385] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5388] <... ioctl resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5392 ./strace-static-x86_64: Process 5392 attached [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5392] set_robust_list(0x555556b87660, 24 [pid 5017] newfstatat(AT_FDCWD, "./29/file1", [pid 5392] <... set_robust_list resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5392] chdir("./31" [pid 5017] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5392] <... chdir resumed>) = 0 [pid 5386] <... openat resumed>) = -1 EIO (Input/output error) [pid 5384] <... openat resumed>) = -1 EIO (Input/output error) [pid 5392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5386] exit_group(0 [pid 5384] exit_group(0 [pid 5017] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5388] close(3) = 0 [pid 5388] mkdir("./file1", 0777) = 0 [ 92.306075][ T5384] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 92.333094][ T5385] NILFS (loop3): repaired inode bitmap for reserved inodes [ 92.341968][ T5385] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5388] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5392] <... prctl resumed>) = 0 [pid 5386] <... exit_group resumed>) = ? [pid 5385] <... openat resumed>) = -1 EIO (Input/output error) [pid 5384] <... exit_group resumed>) = ? [pid 5017] <... openat resumed>) = 4 [pid 5392] setpgid(0, 0 [pid 5386] +++ exited with 0 +++ [pid 5384] +++ exited with 0 +++ [pid 5017] newfstatat(4, "", [pid 5392] <... setpgid resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] getdents64(4, [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5386, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5384, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5392] <... openat resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5392] write(3, "1000", 4 [pid 5385] exit_group(0 [pid 5017] getdents64(4, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5392] <... write resumed>) = 4 [pid 5385] <... exit_group resumed>) = ? [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5392] close(3 [pid 5385] +++ exited with 0 +++ [pid 5017] close(4 [pid 5013] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5392] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5385, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5013] newfstatat(3, "", [pid 5012] newfstatat(3, "", [pid 5392] symlink("/dev/binderfs", "./binderfs" [pid 5017] rmdir("./29/file1" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5392] <... symlink resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, [pid 5012] getdents64(3, [pid 5392] memfd_create("syzkaller", 0 [pid 5017] getdents64(3, [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5392] <... memfd_create resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5392] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... close resumed>) = 0 [pid 5015] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5012] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5017] rmdir("./29" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] unlink("./29/binderfs" [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] mkdir("./30", 0777 [pid 5015] <... openat resumed>) = 3 [pid 5013] <... unlink resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5012] unlink("./28/binderfs" [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... unlink resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5015] getdents64(3, [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 92.354812][ T5388] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.368916][ T5388] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 92.397358][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5015] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] close(3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5388] <... mount resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5388] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5388] <... openat resumed>) = 3 [pid 5015] unlink("./31/binderfs" [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5394 [pid 5388] chdir("./file1" [pid 5015] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5394 attached [pid 5394] set_robust_list(0x555556b87660, 24 [pid 5388] <... chdir resumed>) = 0 [pid 5015] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5388] ioctl(4, LOOP_CLR_FD) = 0 [pid 5388] close(4) = 0 [pid 5388] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5394] <... set_robust_list resumed>) = 0 [ 92.398246][ T5393] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.404552][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 92.424110][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 92.434291][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 92.442911][ T5388] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5394] chdir("./30") = 0 [pid 5394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5394] setpgid(0, 0) = 0 [ 92.442983][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 92.465667][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 92.474206][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 92.482004][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 92.487652][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 92.490084][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5394] write(3, "1000", 4 [pid 5392] <... write resumed>) = 2097152 [pid 5392] munmap(0x7f770c286000, 2097152) = 0 [pid 5392] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5392] ioctl(4, LOOP_SET_FD, 3 [pid 5394] <... write resumed>) = 4 [pid 5394] close(3) = 0 [ 92.504719][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 92.513459][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 92.517754][ T5388] Remounting filesystem read-only [ 92.521204][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 92.534291][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 92.541747][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 92.542692][ T5392] loop2: detected capacity change from 0 to 4096 [pid 5394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5394] memfd_create("syzkaller", 0) = 3 [pid 5394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 92.550394][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 92.563884][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 92.564037][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 92.583326][ T5388] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 92.596265][ T5388] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5015] <... umount2 resumed>) = 0 [pid 5392] <... ioctl resumed>) = 0 [pid 5392] close(3) = 0 [pid 5392] mkdir("./file1", 0777) = 0 [pid 5392] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = 0 [pid 5394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./31/file1", [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] newfstatat(AT_FDCWD, "./28/file1", [pid 5015] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... openat resumed>) = 4 [pid 5012] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] newfstatat(4, "", [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] getdents64(4, [pid 5012] <... openat resumed>) = 4 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] newfstatat(4, "", [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] close(4) = 0 [pid 5012] getdents64(4, [pid 5015] rmdir("./31/file1") = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] getdents64(4, [pid 5015] close(3) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] rmdir("./31" [pid 5012] close(4 [pid 5015] <... rmdir resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5015] mkdir("./32", 0777 [pid 5012] rmdir("./28/file1" [pid 5015] <... mkdir resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5012] getdents64(3, [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5012] close(3 [pid 5015] <... close resumed>) = 0 [ 92.603886][ T5388] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 92.631848][ T5392] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... close resumed>) = 0 ./strace-static-x86_64: Process 5395 attached [pid 5012] rmdir("./28" [pid 5395] set_robust_list(0x555556b87660, 24 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5395 [pid 5395] <... set_robust_list resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5395] chdir("./32" [pid 5394] <... write resumed>) = 2097152 [pid 5388] <... openat resumed>) = -1 EIO (Input/output error) [pid 5395] <... chdir resumed>) = 0 [pid 5394] munmap(0x7f770c286000, 2097152 [pid 5388] exit_group(0 [pid 5012] mkdir("./29", 0777 [pid 5395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5394] <... munmap resumed>) = 0 [pid 5388] <... exit_group resumed>) = ? [pid 5012] <... mkdir resumed>) = 0 [pid 5395] setpgid(0, 0 [pid 5394] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5395] <... setpgid resumed>) = 0 [pid 5394] <... openat resumed>) = 4 [pid 5388] +++ exited with 0 +++ [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5394] ioctl(4, LOOP_SET_FD, 3 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5388, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5013] newfstatat(AT_FDCWD, "./29/file1", [pid 5012] <... openat resumed>) = 3 [pid 5395] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, [pid 5395] write(3, "1000", 4 [pid 5394] <... ioctl resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5395] <... write resumed>) = 4 [pid 5394] close(3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5395] close(3 [pid 5394] <... close resumed>) = 0 [pid 5013] getdents64(4, [ 92.691654][ T5392] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 92.718655][ T5394] loop5: detected capacity change from 0 to 4096 [pid 5012] close(3 [pid 5395] <... close resumed>) = 0 [pid 5394] mkdir("./file1", 0777 [pid 5012] <... close resumed>) = 0 [pid 5395] symlink("/dev/binderfs", "./binderfs" [pid 5394] <... mkdir resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5395] <... symlink resumed>) = 0 [pid 5394] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5395] memfd_create("syzkaller", 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5396 [pid 5395] <... memfd_create resumed>) = 3 [pid 5016] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... openat resumed>) = 3 [pid 5395] <... mmap resumed>) = 0x7f770c286000 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] close(4 [pid 5016] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5013] rmdir("./29/file1" [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./32/binderfs") = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5016] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(3, ./strace-static-x86_64: Process 5396 attached 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5396] set_robust_list(0x555556b87660, 24 [pid 5013] close(3 [pid 5396] <... set_robust_list resumed>) = 0 [pid 5392] <... mount resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5013] rmdir("./29" [pid 5396] chdir("./29" [pid 5392] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... rmdir resumed>) = 0 [pid 5396] <... chdir resumed>) = 0 [pid 5392] <... openat resumed>) = 3 [pid 5013] mkdir("./30", 0777 [pid 5396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5392] chdir("./file1" [pid 5013] <... mkdir resumed>) = 0 [pid 5396] <... prctl resumed>) = 0 [pid 5392] <... chdir resumed>) = 0 [pid 5396] setpgid(0, 0 [pid 5392] ioctl(4, LOOP_CLR_FD [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5396] <... setpgid resumed>) = 0 [pid 5392] <... ioctl resumed>) = 0 [pid 5396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5392] close(4 [pid 5013] <... openat resumed>) = 3 [ 92.733709][ T5394] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.749798][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 92.751546][ T5397] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.765843][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 92.775362][ T5394] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 92.781645][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5396] <... openat resumed>) = 3 [pid 5395] <... write resumed>) = 2097152 [pid 5392] <... close resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5396] write(3, "1000", 4 [pid 5392] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5395] munmap(0x7f770c286000, 2097152 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5396] <... write resumed>) = 4 [pid 5396] close(3 [pid 5395] <... munmap resumed>) = 0 [pid 5013] close(3 [pid 5394] <... mount resumed>) = 0 [pid 5394] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5394] chdir("./file1") = 0 [pid 5394] ioctl(4, LOOP_CLR_FD) = 0 [pid 5394] close(4) = 0 [pid 5396] <... close resumed>) = 0 [pid 5395] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 92.815182][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 92.823337][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 92.832991][ T5392] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 92.848111][ T5398] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5394] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... close resumed>) = 0 [pid 5396] symlink("/dev/binderfs", "./binderfs" [pid 5395] <... openat resumed>) = 4 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5396] <... symlink resumed>) = 0 [pid 5395] ioctl(4, LOOP_SET_FD, 3 [pid 5396] memfd_create("syzkaller", 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5399 [pid 5396] <... memfd_create resumed>) = 3 [pid 5396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5395] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5399 attached [pid 5395] close(3 [pid 5399] set_robust_list(0x555556b87660, 24 [pid 5395] <... close resumed>) = 0 [pid 5399] <... set_robust_list resumed>) = 0 [pid 5395] mkdir("./file1", 0777) = 0 [pid 5399] chdir("./30" [pid 5395] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5399] <... chdir resumed>) = 0 [ 92.848414][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 92.860591][ T5394] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 92.883188][ T5392] Remounting filesystem read-only [ 92.890579][ T5395] loop3: detected capacity change from 0 to 4096 [ 92.906581][ T5392] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5399] setpgid(0, 0) = 0 [pid 5399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 92.935581][ T5395] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.948359][ T5395] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 92.957147][ T5394] Remounting filesystem read-only [ 92.962973][ T5392] NILFS (loop2): repaired inode bitmap for reserved inodes [ 92.970976][ T5394] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5399] write(3, "1000", 4 [pid 5396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = 0 [pid 5394] <... openat resumed>) = -1 EIO (Input/output error) [pid 5394] exit_group(0) = ? [pid 5394] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5394, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5017] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./30/binderfs") = 0 [pid 5017] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] <... write resumed>) = 4 [pid 5016] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] close(3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] <... close resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5016] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] memfd_create("syzkaller", 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] <... memfd_create resumed>) = 3 [pid 5016] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... openat resumed>) = 4 [pid 5399] <... mmap resumed>) = 0x7f770c286000 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./32/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./32") = 0 [pid 5016] mkdir("./33", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [ 92.971013][ T5394] NILFS (loop5): repaired inode bitmap for reserved inodes [ 92.971047][ T5394] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.002932][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 93.021082][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5400 ./strace-static-x86_64: Process 5400 attached [pid 5396] <... write resumed>) = 2097152 [pid 5400] set_robust_list(0x555556b87660, 24) = 0 [pid 5400] chdir("./33") = 0 [pid 5400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5400] setpgid(0, 0) = 0 [pid 5396] munmap(0x7f770c286000, 2097152 [pid 5400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5400] write(3, "1000", 4) = 4 [pid 5400] close(3) = 0 [pid 5400] symlink("/dev/binderfs", "./binderfs" [pid 5395] <... mount resumed>) = 0 [pid 5395] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5395] chdir("./file1" [pid 5400] <... symlink resumed>) = 0 [pid 5395] <... chdir resumed>) = 0 [pid 5395] ioctl(4, LOOP_CLR_FD) = 0 [pid 5400] memfd_create("syzkaller", 0 [pid 5395] close(4) = 0 [pid 5400] <... memfd_create resumed>) = 3 [pid 5399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5396] <... munmap resumed>) = 0 [ 93.040756][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 93.071051][ T5401] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5395] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5396] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5400] <... mmap resumed>) = 0x7f770c286000 [pid 5399] <... write resumed>) = 2097152 [pid 5396] <... openat resumed>) = 4 [pid 5399] munmap(0x7f770c286000, 2097152 [pid 5396] ioctl(4, LOOP_SET_FD, 3 [pid 5399] <... munmap resumed>) = 0 [ 93.083507][ T5395] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.100508][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 93.106560][ T5392] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.109510][ T5395] Remounting filesystem read-only [ 93.129343][ T5396] loop0: detected capacity change from 0 to 4096 [ 93.129552][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5399] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5399] ioctl(4, LOOP_SET_FD, 3 [pid 5396] <... ioctl resumed>) = 0 [pid 5396] close(3) = 0 [pid 5396] mkdir("./file1", 0777) = 0 [pid 5396] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5392] <... openat resumed>) = -1 EIO (Input/output error) [pid 5392] exit_group(0) = ? [pid 5392] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5392, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5014] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 93.145604][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 93.154683][ T5395] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 93.156098][ T5399] loop1: detected capacity change from 0 to 4096 [ 93.165818][ T5395] NILFS (loop3): repaired inode bitmap for reserved inodes [ 93.182495][ T5396] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5399] <... ioctl resumed>) = 0 [pid 5014] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5399] close(3 [pid 5395] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] <... close resumed>) = 0 [pid 5395] exit_group(0 [pid 5017] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5399] mkdir("./file1", 0777 [pid 5395] <... exit_group resumed>) = ? [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5399] <... mkdir resumed>) = 0 [pid 5395] +++ exited with 0 +++ [pid 5017] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] unlink("./31/binderfs" [pid 5399] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... openat resumed>) = 4 [pid 5014] <... unlink resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5395, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 93.208653][ T5395] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.219606][ T5396] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5017] getdents64(4, [pid 5015] <... restart_syscall resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] close(4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... close resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] rmdir("./30/file1" [pid 5015] <... openat resumed>) = 3 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5017] getdents64(3, [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] getdents64(3, [pid 5017] close(3 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... close resumed>) = 0 [pid 5015] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] rmdir("./30" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... rmdir resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5017] mkdir("./31", 0777 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5015] unlink("./32/binderfs" [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] <... unlink resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [ 93.248878][ T5399] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 93.260147][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 93.267424][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 93.268172][ T5402] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.274119][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5015] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5400] <... write resumed>) = 2097152 [pid 5396] <... mount resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5400] munmap(0x7f770c286000, 2097152 [pid 5396] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5403 ./strace-static-x86_64: Process 5403 attached [pid 5403] set_robust_list(0x555556b87660, 24) = 0 [pid 5403] chdir("./31") = 0 [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5403] setpgid(0, 0) = 0 [pid 5400] <... munmap resumed>) = 0 [pid 5396] <... openat resumed>) = 3 [pid 5400] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5396] chdir("./file1" [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5400] <... openat resumed>) = 4 [pid 5396] <... chdir resumed>) = 0 [pid 5400] ioctl(4, LOOP_SET_FD, 3 [pid 5396] ioctl(4, LOOP_CLR_FD [pid 5403] <... openat resumed>) = 3 [pid 5403] write(3, "1000", 4) = 4 [pid 5403] close(3) = 0 [pid 5403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5403] memfd_create("syzkaller", 0) = 3 [pid 5403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5399] <... mount resumed>) = 0 [pid 5396] <... ioctl resumed>) = 0 [ 93.292699][ T5399] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 93.309572][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 93.323527][ T5400] loop4: detected capacity change from 0 to 4096 [ 93.330277][ T5404] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.331961][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5399] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5396] close(4 [pid 5400] <... ioctl resumed>) = 0 [pid 5399] <... openat resumed>) = 3 [pid 5396] <... close resumed>) = 0 [pid 5400] close(3 [pid 5399] chdir("./file1" [pid 5396] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5400] <... close resumed>) = 0 [pid 5399] <... chdir resumed>) = 0 [pid 5400] mkdir("./file1", 0777 [ 93.348935][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 93.356892][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 93.364713][ T5396] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.380038][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5399] ioctl(4, LOOP_CLR_FD [pid 5400] <... mkdir resumed>) = 0 [pid 5399] <... ioctl resumed>) = 0 [pid 5400] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5399] close(4) = 0 [pid 5399] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 93.392997][ T5400] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 93.403261][ T5396] Remounting filesystem read-only [ 93.408167][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 93.415758][ T5399] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.430948][ T5396] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 93.455605][ T5396] NILFS (loop0): repaired inode bitmap for reserved inodes [ 93.462957][ T5400] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 93.465878][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 93.474979][ T5396] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... umount2 resumed>) = 0 [pid 5403] <... write resumed>) = 2097152 [pid 5403] munmap(0x7f770c286000, 2097152) = 0 [pid 5403] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5403] ioctl(4, LOOP_SET_FD, 3 [pid 5014] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./31/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 93.505898][ T5399] Remounting filesystem read-only [ 93.512707][ T5399] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 93.533056][ T5403] loop5: detected capacity change from 0 to 4096 [ 93.534521][ T5399] NILFS (loop1): repaired inode bitmap for reserved inodes [ 93.541653][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5396] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] <... openat resumed>) = -1 EIO (Input/output error) [pid 5403] <... ioctl resumed>) = 0 [pid 5396] exit_group(0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5403] close(3) = 0 [pid 5399] exit_group(0 [pid 5396] <... exit_group resumed>) = ? [pid 5014] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5403] mkdir("./file1", 0777) = 0 [pid 5399] <... exit_group resumed>) = ? [pid 5403] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5396] +++ exited with 0 +++ [pid 5014] <... openat resumed>) = 4 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5396, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5012] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5399] +++ exited with 0 +++ [pid 5012] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5399, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 93.548159][ T5399] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.570767][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 93.586878][ T5403] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5014] newfstatat(4, "", [pid 5012] newfstatat(3, "", [pid 5400] <... mount resumed>) = 0 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5013] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5012] unlink("./29/binderfs" [pid 5013] newfstatat(3, "", [pid 5012] <... unlink resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./30/binderfs") = 0 [pid 5013] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5400] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5400] <... openat resumed>) = 3 [pid 5014] getdents64(4, [pid 5400] chdir("./file1" [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5400] <... chdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5400] ioctl(4, LOOP_CLR_FD [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5400] <... ioctl resumed>) = 0 [ 93.587532][ T5405] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.608858][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 93.616272][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 93.623500][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 93.623939][ T5403] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 93.641855][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5014] close(4 [pid 5403] <... mount resumed>) = 0 [pid 5400] close(4 [pid 5014] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5403] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5400] <... close resumed>) = 0 [pid 5014] rmdir("./31/file1" [pid 5403] <... openat resumed>) = 3 [ 93.651547][ T5406] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.661681][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 93.663200][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 93.679018][ T5400] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.684694][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5400] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5403] chdir("./file1" [pid 5014] <... rmdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./32/file1" [pid 5403] <... chdir resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5403] ioctl(4, LOOP_CLR_FD [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5403] <... ioctl resumed>) = 0 [pid 5015] close(3 [pid 5403] close(4 [pid 5015] <... close resumed>) = 0 [pid 5014] close(3 [pid 5403] <... close resumed>) = 0 [pid 5015] rmdir("./32") = 0 [pid 5403] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... close resumed>) = 0 [pid 5015] mkdir("./33", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] rmdir("./31" [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5407 ./strace-static-x86_64: Process 5407 attached [pid 5407] set_robust_list(0x555556b87660, 24) = 0 [pid 5407] chdir("./33") = 0 [pid 5407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5407] setpgid(0, 0) = 0 [pid 5407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./32", 0777) = 0 [pid 5407] <... openat resumed>) = 3 [pid 5407] write(3, "1000", 4) = 4 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5407] close(3) = 0 [ 93.701495][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 93.711761][ T5400] Remounting filesystem read-only [ 93.717762][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 93.725901][ T5403] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.746642][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5407] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... openat resumed>) = 3 [pid 5407] <... symlink resumed>) = 0 [pid 5407] memfd_create("syzkaller", 0 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5407] <... memfd_create resumed>) = 3 [pid 5407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5407] <... mmap resumed>) = 0x7f770c286000 [pid 5014] close(3) = 0 [ 93.754565][ T5400] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 93.776343][ T5403] Remounting filesystem read-only [ 93.776766][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 93.787903][ T5400] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5408 attached [pid 5012] <... umount2 resumed>) = 0 [pid 5408] set_robust_list(0x555556b87660, 24 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5408 [pid 5012] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5408] <... set_robust_list resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] chdir("./32" [pid 5012] newfstatat(AT_FDCWD, "./29/file1", [pid 5408] <... chdir resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5400] <... openat resumed>) = -1 EIO (Input/output error) [pid 5408] <... prctl resumed>) = 0 [pid 5400] exit_group(0 [pid 5403] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] setpgid(0, 0 [pid 5400] <... exit_group resumed>) = ? [pid 5012] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5403] exit_group(0 [pid 5400] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5400, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5012] <... openat resumed>) = 4 [pid 5408] <... setpgid resumed>) = 0 [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] newfstatat(4, "", [pid 5408] <... openat resumed>) = 3 [pid 5403] <... exit_group resumed>) = ? [pid 5016] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] write(3, "1000", 4 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5408] <... write resumed>) = 4 [pid 5403] +++ exited with 0 +++ [pid 5016] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5408] close(3 [pid 5016] <... openat resumed>) = 3 [pid 5012] getdents64(4, [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] newfstatat(3, "", [pid 5017] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5408] symlink("/dev/binderfs", "./binderfs" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] getdents64(3, [pid 5017] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] getdents64(4, [pid 5408] <... symlink resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5016] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5408] memfd_create("syzkaller", 0 [pid 5017] newfstatat(3, "", [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(4 [pid 5408] <... memfd_create resumed>) = 3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] newfstatat(AT_FDCWD, "./33/binderfs", [pid 5408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] getdents64(3, [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... close resumed>) = 0 [pid 5408] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [ 93.800698][ T5400] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 93.815867][ T5403] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 93.823735][ T5403] NILFS (loop5): repaired inode bitmap for reserved inodes [ 93.832042][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 93.832441][ T5403] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] unlink("./33/binderfs" [pid 5012] rmdir("./29/file1" [pid 5017] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... unlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5012] <... rmdir resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./31/binderfs") = 0 [pid 5012] getdents64(3, [pid 5017] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... umount2 resumed>) = 0 [pid 5012] rmdir("./29" [pid 5407] <... write resumed>) = 2097152 [ 93.891802][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 93.902325][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 93.910232][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 93.920705][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 93.928739][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5407] munmap(0x7f770c286000, 2097152 [pid 5408] <... write resumed>) = 2097152 [pid 5013] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 [pid 5407] <... munmap resumed>) = 0 [pid 5407] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5407] ioctl(4, LOOP_SET_FD, 3 [pid 5408] munmap(0x7f770c286000, 2097152 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 93.940032][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 93.947666][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 93.953867][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 93.958721][ T5407] loop3: detected capacity change from 0 to 4096 [ 93.963241][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 93.970253][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 93.979012][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5012] mkdir("./30", 0777 [pid 5408] <... munmap resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./30/file1", [pid 5012] <... mkdir resumed>) = 0 [pid 5408] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5408] <... openat resumed>) = 4 [pid 5013] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5408] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5407] <... ioctl resumed>) = 0 [pid 5407] close(3) = 0 [pid 5407] mkdir("./file1", 0777) = 0 [pid 5407] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... openat resumed>) = 4 [pid 5012] close(3 [pid 5013] newfstatat(4, "", [pid 5012] <... close resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5409 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./30/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./30") = 0 [pid 5013] mkdir("./31", 0777./strace-static-x86_64: Process 5409 attached ) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5408] <... ioctl resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5408] close(3 [pid 5013] <... close resumed>) = 0 [pid 5016] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] mkdir("./file1", 0777 [pid 5016] newfstatat(AT_FDCWD, "./33/file1", [pid 5409] set_robust_list(0x555556b87660, 24) = 0 [pid 5409] chdir("./30") = 0 [pid 5409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5409] setpgid(0, 0) = 0 [pid 5409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5408] <... mkdir resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5410 [pid 5408] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 93.984397][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 94.000200][ T5408] loop2: detected capacity change from 0 to 4096 [ 94.006607][ T5407] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.007200][ T5407] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5409] <... openat resumed>) = 3 [pid 5409] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5410 attached [pid 5409] close(3 [pid 5410] set_robust_list(0x555556b87660, 24 [pid 5409] <... close resumed>) = 0 [pid 5409] symlink("/dev/binderfs", "./binderfs" [pid 5410] <... set_robust_list resumed>) = 0 [pid 5409] <... symlink resumed>) = 0 [pid 5410] chdir("./31") = 0 [pid 5410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5410] setpgid(0, 0 [pid 5409] memfd_create("syzkaller", 0 [pid 5016] <... openat resumed>) = 4 [pid 5410] <... setpgid resumed>) = 0 [pid 5409] <... memfd_create resumed>) = 3 [pid 5016] newfstatat(4, "", [pid 5410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5410] <... openat resumed>) = 3 [pid 5409] <... mmap resumed>) = 0x7f770c286000 [pid 5016] getdents64(4, [pid 5410] write(3, "1000", 4 [pid 5017] <... umount2 resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5410] <... write resumed>) = 4 [pid 5410] close(3) = 0 [pid 5410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5017] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] getdents64(4, [pid 5410] memfd_create("syzkaller", 0 [pid 5407] <... mount resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5410] <... memfd_create resumed>) = 3 [pid 5410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5407] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] newfstatat(AT_FDCWD, "./31/file1", [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5407] <... openat resumed>) = 3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] close(4 [pid 5407] chdir("./file1" [pid 5017] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... close resumed>) = 0 [pid 5407] <... chdir resumed>) = 0 [pid 5407] ioctl(4, LOOP_CLR_FD [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] rmdir("./33/file1" [pid 5407] <... ioctl resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... rmdir resumed>) = 0 [pid 5407] close(4 [pid 5017] <... openat resumed>) = 4 [ 94.062199][ T5408] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.084190][ T5411] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.102838][ T5408] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] getdents64(3, [pid 5408] <... mount resumed>) = 0 [pid 5408] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5407] <... close resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5408] chdir("./file1" [pid 5407] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] close(3 [pid 5410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5408] <... chdir resumed>) = 0 [pid 5017] getdents64(4, [pid 5016] <... close resumed>) = 0 [pid 5408] ioctl(4, LOOP_CLR_FD) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] rmdir("./33" [pid 5408] close(4 [pid 5017] getdents64(4, [pid 5016] <... rmdir resumed>) = 0 [pid 5408] <... close resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [ 94.127397][ T5412] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.141739][ T5407] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] mkdir("./34", 0777 [pid 5408] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] close(4 [pid 5016] <... mkdir resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] rmdir("./31/file1" [pid 5016] <... openat resumed>) = 3 [pid 5017] <... rmdir resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5017] getdents64(3, [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3 [pid 5017] close(3 [pid 5016] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] rmdir("./31") = 0 [pid 5017] mkdir("./32", 0777 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5413 [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5414 ./strace-static-x86_64: Process 5413 attached [pid 5413] set_robust_list(0x555556b87660, 24) = 0 [pid 5413] chdir("./34") = 0 [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5414 attached ) = 0 [pid 5414] set_robust_list(0x555556b87660, 24 [pid 5413] setpgid(0, 0 [pid 5414] <... set_robust_list resumed>) = 0 [pid 5413] <... setpgid resumed>) = 0 [ 94.163095][ T5408] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 94.180811][ T5407] Remounting filesystem read-only [ 94.203533][ T5407] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5414] chdir("./32" [pid 5413] <... openat resumed>) = 3 [pid 5414] <... chdir resumed>) = 0 [pid 5414] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5413] write(3, "1000", 4 [pid 5414] <... prctl resumed>) = 0 [pid 5413] <... write resumed>) = 4 [pid 5414] setpgid(0, 0 [pid 5413] close(3 [pid 5414] <... setpgid resumed>) = 0 [pid 5413] <... close resumed>) = 0 [pid 5414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5413] symlink("/dev/binderfs", "./binderfs" [pid 5414] <... openat resumed>) = 3 [pid 5413] <... symlink resumed>) = 0 [pid 5414] write(3, "1000", 4 [pid 5413] memfd_create("syzkaller", 0 [pid 5414] <... write resumed>) = 4 [pid 5413] <... memfd_create resumed>) = 3 [pid 5414] close(3 [pid 5413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5414] <... close resumed>) = 0 [pid 5413] <... mmap resumed>) = 0x7f770c286000 [pid 5407] <... openat resumed>) = -1 EIO (Input/output error) [pid 5414] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5407] exit_group(0 [pid 5414] memfd_create("syzkaller", 0 [pid 5410] <... write resumed>) = 2097152 [pid 5409] <... write resumed>) = 2097152 [pid 5407] <... exit_group resumed>) = ? [pid 5414] <... memfd_create resumed>) = 3 [pid 5409] munmap(0x7f770c286000, 2097152 [pid 5414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5410] munmap(0x7f770c286000, 2097152 [pid 5407] +++ exited with 0 +++ [pid 5414] <... mmap resumed>) = 0x7f770c286000 [pid 5410] <... munmap resumed>) = 0 [pid 5409] <... munmap resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5407, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5410] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5015] <... restart_syscall resumed>) = 0 [pid 5410] <... openat resumed>) = 4 [ 94.237856][ T5408] Remounting filesystem read-only [ 94.239991][ T5407] NILFS (loop3): repaired inode bitmap for reserved inodes [ 94.264786][ T5408] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 94.268534][ T5407] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5410] ioctl(4, LOOP_SET_FD, 3 [pid 5413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5410] <... ioctl resumed>) = 0 [pid 5409] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5015] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5409] <... openat resumed>) = 4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5409] ioctl(4, LOOP_SET_FD, 3 [pid 5015] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5409] <... ioctl resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5409] close(3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5409] <... close resumed>) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./33/binderfs") = 0 [pid 5015] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5413] <... write resumed>) = 2097152 [pid 5410] close(3 [pid 5409] mkdir("./file1", 0777 [pid 5413] munmap(0x7f770c286000, 2097152 [pid 5410] <... close resumed>) = 0 [pid 5409] <... mkdir resumed>) = 0 [pid 5413] <... munmap resumed>) = 0 [pid 5413] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5410] mkdir("./file1", 0777 [ 94.315951][ T5410] loop1: detected capacity change from 0 to 4096 [ 94.325812][ T5409] loop0: detected capacity change from 0 to 4096 [ 94.326315][ T5408] NILFS (loop2): repaired inode bitmap for reserved inodes [ 94.353109][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5409] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5413] <... openat resumed>) = 4 [pid 5410] <... mkdir resumed>) = 0 [pid 5414] <... write resumed>) = 2097152 [pid 5413] ioctl(4, LOOP_SET_FD, 3 [pid 5410] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 94.365129][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 94.367266][ T5409] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.374487][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 94.390350][ T5409] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 94.392326][ T5408] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5414] munmap(0x7f770c286000, 2097152) = 0 [pid 5408] <... openat resumed>) = -1 EIO (Input/output error) [pid 5408] exit_group(0) = ? [pid 5408] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5408, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5414] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] <... restart_syscall resumed>) = 0 [pid 5414] <... openat resumed>) = 4 [pid 5414] ioctl(4, LOOP_SET_FD, 3 [pid 5014] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./32/binderfs") = 0 [pid 5014] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] <... ioctl resumed>) = 0 [pid 5414] close(3) = 0 [pid 5414] mkdir("./file1", 0777 [pid 5413] <... ioctl resumed>) = 0 [ 94.400242][ T5413] loop4: detected capacity change from 0 to 4096 [ 94.417394][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 94.430379][ T5410] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.441409][ T5410] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 94.451601][ T5414] loop5: detected capacity change from 0 to 4096 [ 94.453642][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5414] <... mkdir resumed>) = 0 [pid 5413] close(3 [pid 5410] <... mount resumed>) = 0 [pid 5414] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5413] <... close resumed>) = 0 [pid 5410] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5409] <... mount resumed>) = 0 [ 94.467524][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 94.474269][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 94.474712][ T5416] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.483342][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 94.493798][ T5415] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.501968][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5413] mkdir("./file1", 0777 [pid 5410] <... openat resumed>) = 3 [pid 5409] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5413] <... mkdir resumed>) = 0 [pid 5413] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5410] chdir("./file1") = 0 [pid 5409] <... openat resumed>) = 3 [pid 5410] ioctl(4, LOOP_CLR_FD [pid 5409] chdir("./file1" [pid 5410] <... ioctl resumed>) = 0 [pid 5414] <... mount resumed>) = 0 [pid 5410] close(4 [pid 5409] <... chdir resumed>) = 0 [pid 5414] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5410] <... close resumed>) = 0 [ 94.511615][ T5414] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.528736][ T5414] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 94.528986][ T5413] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.546464][ T5417] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5409] ioctl(4, LOOP_CLR_FD [pid 5414] <... openat resumed>) = 3 [pid 5414] chdir("./file1" [pid 5410] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5409] <... ioctl resumed>) = 0 [pid 5414] <... chdir resumed>) = 0 [pid 5414] ioctl(4, LOOP_CLR_FD [pid 5409] close(4 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, [pid 5409] <... close resumed>) = 0 [pid 5414] <... ioctl resumed>) = 0 [pid 5409] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5414] close(4) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./33/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [ 94.561512][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 94.577401][ T5410] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 94.594166][ T5409] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 94.606518][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5414] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] close(3) = 0 [pid 5015] rmdir("./33") = 0 [pid 5015] mkdir("./34", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5418 ./strace-static-x86_64: Process 5418 attached [pid 5418] set_robust_list(0x555556b87660, 24) = 0 [pid 5418] chdir("./34") = 0 [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5418] setpgid(0, 0) = 0 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 94.610847][ T5410] Remounting filesystem read-only [ 94.622655][ T5414] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 94.644060][ T5413] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 94.644141][ T5409] Remounting filesystem read-only [ 94.659859][ T5410] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5418] write(3, "1000", 4) = 4 [pid 5418] close(3) = 0 [pid 5418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5418] memfd_create("syzkaller", 0) = 3 [pid 5418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 94.668468][ T5414] Remounting filesystem read-only [ 94.673861][ T5410] NILFS (loop1): repaired inode bitmap for reserved inodes [ 94.675800][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 94.681929][ T5414] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 94.697584][ T5409] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 94.705921][ T5410] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 94.721440][ T5409] NILFS (loop0): repaired inode bitmap for reserved inodes [ 94.729763][ T5414] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5413] <... mount resumed>) = 0 [pid 5413] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5413] chdir("./file1") = 0 [pid 5413] ioctl(4, LOOP_CLR_FD) = 0 [pid 5413] close(4) = 0 [pid 5410] <... openat resumed>) = -1 EIO (Input/output error) [pid 5413] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 94.775676][ T5409] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 94.791186][ T5419] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.805975][ T5414] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] <... umount2 resumed>) = 0 [pid 5418] <... write resumed>) = 2097152 [pid 5414] <... openat resumed>) = -1 EIO (Input/output error) [pid 5410] exit_group(0 [pid 5409] <... openat resumed>) = -1 EIO (Input/output error) [pid 5418] munmap(0x7f770c286000, 2097152 [pid 5414] exit_group(0 [pid 5410] <... exit_group resumed>) = ? [pid 5409] exit_group(0 [pid 5418] <... munmap resumed>) = 0 [pid 5414] <... exit_group resumed>) = ? [pid 5410] +++ exited with 0 +++ [pid 5409] <... exit_group resumed>) = ? [pid 5014] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5418] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5414] +++ exited with 0 +++ [pid 5409] +++ exited with 0 +++ [pid 5418] <... openat resumed>) = 4 [pid 5418] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5409, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5414, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5418] <... ioctl resumed>) = 0 [pid 5418] close(3) = 0 [pid 5418] mkdir("./file1", 0777 [pid 5014] newfstatat(AT_FDCWD, "./32/file1", [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5410, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5418] <... mkdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5418] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... openat resumed>) = 4 [pid 5013] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] newfstatat(4, "", [pid 5012] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5017] <... openat resumed>) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] newfstatat(3, "", [pid 5017] newfstatat(3, "", [pid 5012] newfstatat(3, "", [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5017] getdents64(3, [pid 5012] getdents64(3, [pid 5013] getdents64(3, [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(4, [pid 5012] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(4 [pid 5013] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5017] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5014] <... close resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] rmdir("./32/file1" [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./32/binderfs" [pid 5013] unlink("./31/binderfs" [pid 5017] <... unlink resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [ 94.821614][ T5413] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 94.843419][ T5418] loop3: detected capacity change from 0 to 4096 [ 94.863677][ T5413] Remounting filesystem read-only [pid 5012] unlink("./30/binderfs" [pid 5017] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(3, [pid 5013] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... unlink resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] close(3) = 0 [pid 5014] rmdir("./32") = 0 [pid 5014] mkdir("./33", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5420 ./strace-static-x86_64: Process 5420 attached [pid 5413] <... openat resumed>) = -1 EIO (Input/output error) [ 94.864630][ T5418] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.870602][ T5413] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 94.886965][ T5413] NILFS (loop4): repaired inode bitmap for reserved inodes [ 94.894468][ T5413] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 94.900807][ T5418] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5420] set_robust_list(0x555556b87660, 24 [pid 5413] exit_group(0 [pid 5420] <... set_robust_list resumed>) = 0 [pid 5413] <... exit_group resumed>) = ? [pid 5420] chdir("./33" [pid 5413] +++ exited with 0 +++ [pid 5420] <... chdir resumed>) = 0 [pid 5420] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5420] <... prctl resumed>) = 0 [pid 5420] setpgid(0, 0) = 0 [pid 5016] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5420] <... openat resumed>) = 3 [pid 5016] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5420] write(3, "1000", 4 [pid 5016] <... openat resumed>) = 3 [pid 5420] <... write resumed>) = 4 [pid 5016] newfstatat(3, "", [pid 5420] close(3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5420] <... close resumed>) = 0 [pid 5016] getdents64(3, [pid 5420] symlink("/dev/binderfs", "./binderfs" [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5420] <... symlink resumed>) = 0 [pid 5016] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5420] memfd_create("syzkaller", 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5420] <... memfd_create resumed>) = 3 [pid 5016] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5420] <... mmap resumed>) = 0x7f770c286000 [pid 5016] unlink("./34/binderfs") = 0 [ 94.920324][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 94.928932][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 94.936122][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 94.942842][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 94.951206][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 94.952611][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 94.965794][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5016] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 94.968627][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 94.973646][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 94.980352][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 94.980372][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 94.980393][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 94.980408][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5418] <... mount resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5420] <... write resumed>) = 2097152 [pid 5418] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 94.988067][ T5421] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.002339][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 95.015573][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 95.042580][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 95.047516][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 95.056784][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 95.056820][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5013] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5420] munmap(0x7f770c286000, 2097152 [pid 5418] <... openat resumed>) = 3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5418] chdir("./file1" [pid 5013] newfstatat(AT_FDCWD, "./31/file1", [pid 5418] <... chdir resumed>) = 0 [pid 5418] ioctl(4, LOOP_CLR_FD [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5418] <... ioctl resumed>) = 0 [pid 5013] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5418] close(4) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5418] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5420] <... munmap resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5420] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] newfstatat(4, "", [pid 5420] <... openat resumed>) = 4 [pid 5420] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5420] <... ioctl resumed>) = 0 [pid 5420] close(3) = 0 [ 95.056837][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 95.063694][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 95.064925][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 95.099826][ T5418] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 95.116785][ T5420] loop2: detected capacity change from 0 to 4096 [pid 5420] mkdir("./file1", 0777) = 0 [pid 5013] getdents64(4, [pid 5012] <... umount2 resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] close(4 [pid 5012] newfstatat(AT_FDCWD, "./30/file1", [pid 5013] <... close resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] rmdir("./31/file1" [pid 5012] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5420] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(3, [pid 5012] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] newfstatat(AT_FDCWD, "./32/file1", [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 95.123515][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 95.133457][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 95.145456][ T5418] Remounting filesystem read-only [pid 5013] close(3 [pid 5012] <... openat resumed>) = 4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] newfstatat(AT_FDCWD, "./34/file1", [pid 5017] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... close resumed>) = 0 [pid 5012] newfstatat(4, "", [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./31" [pid 5017] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5016] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] newfstatat(4, "", [pid 5013] mkdir("./32", 0777 [pid 5012] getdents64(4, [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] newfstatat(4, "", [pid 5017] getdents64(4, [pid 5012] getdents64(4, [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, [pid 5012] close(4 [pid 5017] getdents64(4, [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... mkdir resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(4, [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] close(4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] rmdir("./30/file1" [pid 5013] <... openat resumed>) = 3 [pid 5017] <... close resumed>) = 0 [pid 5016] close(4 [pid 5017] rmdir("./32/file1" [pid 5016] <... close resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [ 95.169134][ T5420] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.180241][ T5418] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 95.191890][ T5418] NILFS (loop3): repaired inode bitmap for reserved inodes [ 95.201440][ T5420] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] rmdir("./34/file1" [pid 5017] <... rmdir resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5012] getdents64(3, [pid 5017] getdents64(3, [pid 5016] getdents64(3, [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5012] close(3 [pid 5017] close(3 [pid 5016] close(3 [pid 5013] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5017] rmdir("./32" [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] rmdir("./30" [pid 5016] rmdir("./34" [pid 5017] <... rmdir resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./35", 0777 [pid 5012] mkdir("./31", 0777 [pid 5017] mkdir("./33", 0777 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5422 [pid 5418] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... mkdir resumed>) = 0 [pid 5418] exit_group(0) = ? [pid 5012] <... mkdir resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... openat resumed>) = 3 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5017] <... openat resumed>) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5016] <... openat resumed>) = 3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5017] close(3 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5012] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] close(3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5423 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5424 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5425 ./strace-static-x86_64: Process 5422 attached [pid 5422] set_robust_list(0x555556b87660, 24./strace-static-x86_64: Process 5425 attached ) = 0 [pid 5425] set_robust_list(0x555556b87660, 24 [pid 5422] chdir("./32"./strace-static-x86_64: Process 5424 attached ./strace-static-x86_64: Process 5423 attached [pid 5425] <... set_robust_list resumed>) = 0 [pid 5422] <... chdir resumed>) = 0 [pid 5418] +++ exited with 0 +++ [pid 5425] chdir("./35" [pid 5423] set_robust_list(0x555556b87660, 24 [pid 5422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5418, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5425] <... chdir resumed>) = 0 [pid 5423] <... set_robust_list resumed>) = 0 [pid 5422] <... prctl resumed>) = 0 [pid 5425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5424] set_robust_list(0x555556b87660, 24 [pid 5423] chdir("./33" [pid 5422] setpgid(0, 0 [pid 5425] <... prctl resumed>) = 0 [pid 5424] <... set_robust_list resumed>) = 0 [pid 5423] <... chdir resumed>) = 0 [pid 5422] <... setpgid resumed>) = 0 [pid 5015] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5425] setpgid(0, 0 [pid 5423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5425] <... setpgid resumed>) = 0 [pid 5424] chdir("./31" [pid 5423] <... prctl resumed>) = 0 [pid 5422] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5423] setpgid(0, 0 [pid 5422] write(3, "1000", 4 [pid 5424] <... chdir resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5425] <... openat resumed>) = 3 [pid 5424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5423] <... setpgid resumed>) = 0 [pid 5422] <... write resumed>) = 4 [pid 5015] newfstatat(3, "", [pid 5425] write(3, "1000", 4 [pid 5424] <... prctl resumed>) = 0 [pid 5423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5422] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5425] <... write resumed>) = 4 [pid 5424] setpgid(0, 0 [pid 5423] <... openat resumed>) = 3 [pid 5422] <... close resumed>) = 0 [ 95.213182][ T5418] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] getdents64(3, [pid 5425] close(3 [pid 5424] <... setpgid resumed>) = 0 [pid 5423] write(3, "1000", 4 [pid 5422] symlink("/dev/binderfs", "./binderfs" [pid 5420] <... mount resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5425] <... close resumed>) = 0 [pid 5424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5423] <... write resumed>) = 4 [pid 5422] <... symlink resumed>) = 0 [pid 5420] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5425] symlink("/dev/binderfs", "./binderfs" [pid 5424] <... openat resumed>) = 3 [pid 5423] close(3 [pid 5422] memfd_create("syzkaller", 0 [pid 5420] <... openat resumed>) = 3 [pid 5425] <... symlink resumed>) = 0 [pid 5424] write(3, "1000", 4 [pid 5423] <... close resumed>) = 0 [pid 5422] <... memfd_create resumed>) = 3 [pid 5420] chdir("./file1" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5425] memfd_create("syzkaller", 0 [pid 5424] <... write resumed>) = 4 [pid 5423] symlink("/dev/binderfs", "./binderfs" [pid 5422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5420] <... chdir resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5425] <... memfd_create resumed>) = 3 [pid 5424] close(3 [pid 5423] <... symlink resumed>) = 0 [pid 5422] <... mmap resumed>) = 0x7f770c286000 [pid 5420] ioctl(4, LOOP_CLR_FD [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5424] <... close resumed>) = 0 [pid 5423] memfd_create("syzkaller", 0 [pid 5425] <... mmap resumed>) = 0x7f770c286000 [pid 5424] symlink("/dev/binderfs", "./binderfs" [pid 5423] <... memfd_create resumed>) = 3 [pid 5420] <... ioctl resumed>) = 0 [pid 5015] unlink("./34/binderfs" [pid 5424] <... symlink resumed>) = 0 [pid 5423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5420] close(4 [pid 5015] <... unlink resumed>) = 0 [pid 5424] memfd_create("syzkaller", 0 [pid 5423] <... mmap resumed>) = 0x7f770c286000 [pid 5424] <... memfd_create resumed>) = 3 [pid 5420] <... close resumed>) = 0 [ 95.267546][ T5426] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5420] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 95.327902][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 95.334737][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 95.342959][ T5420] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5422] <... write resumed>) = 2097152 [pid 5422] munmap(0x7f770c286000, 2097152) = 0 [pid 5422] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5422] ioctl(4, LOOP_SET_FD, 3 [pid 5423] <... write resumed>) = 2097152 [pid 5424] <... write resumed>) = 2097152 [ 95.391523][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 95.405817][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 95.408554][ T5420] Remounting filesystem read-only [ 95.413674][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 95.429513][ T5422] loop1: detected capacity change from 0 to 4096 [pid 5422] <... ioctl resumed>) = 0 [pid 5423] munmap(0x7f770c286000, 2097152) = 0 [pid 5423] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5425] <... write resumed>) = 2097152 [pid 5424] munmap(0x7f770c286000, 2097152 [pid 5423] ioctl(4, LOOP_SET_FD, 3 [pid 5422] close(3 [pid 5424] <... munmap resumed>) = 0 [pid 5422] <... close resumed>) = 0 [pid 5424] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5422] mkdir("./file1", 0777 [pid 5424] <... openat resumed>) = 4 [pid 5422] <... mkdir resumed>) = 0 [pid 5425] munmap(0x7f770c286000, 2097152 [pid 5424] ioctl(4, LOOP_SET_FD, 3 [pid 5422] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5425] <... munmap resumed>) = 0 [pid 5425] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 95.444605][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 95.455290][ T5423] loop5: detected capacity change from 0 to 4096 [ 95.463782][ T5420] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 95.475745][ T5424] loop0: detected capacity change from 0 to 4096 [ 95.477939][ T5425] loop4: detected capacity change from 0 to 4096 [pid 5425] ioctl(4, LOOP_SET_FD, 3 [pid 5424] <... ioctl resumed>) = 0 [pid 5423] <... ioctl resumed>) = 0 [pid 5423] close(3) = 0 [pid 5423] mkdir("./file1", 0777) = 0 [pid 5423] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5424] close(3 [pid 5015] <... umount2 resumed>) = 0 [pid 5424] <... close resumed>) = 0 [pid 5015] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5425] <... ioctl resumed>) = 0 [pid 5425] close(3) = 0 [pid 5425] mkdir("./file1", 0777) = 0 [pid 5425] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5424] mkdir("./file1", 0777 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 95.489300][ T5422] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.497321][ T5423] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.510065][ T5420] NILFS (loop2): repaired inode bitmap for reserved inodes [ 95.516349][ T5425] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.518647][ T5420] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5424] <... mkdir resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./34/file1", [pid 5424] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5420] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5420] exit_group(0 [pid 5015] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5420] <... exit_group resumed>) = ? [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5420] +++ exited with 0 +++ [pid 5015] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./34/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5420, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] close(3) = 0 [pid 5015] rmdir("./34") = 0 [pid 5015] mkdir("./35", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 95.544127][ T5422] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 95.545365][ T5423] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 95.566412][ T5424] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.577632][ T5425] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] close(3 [pid 5422] <... mount resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5428 [pid 5422] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5014] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5422] chdir("./file1" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5422] <... chdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5422] ioctl(4, LOOP_CLR_FD) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5422] close(4 [pid 5014] newfstatat(3, "", [pid 5422] <... close resumed>) = 0 [pid 5422] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5428 attached [pid 5428] set_robust_list(0x555556b87660, 24) = 0 [pid 5428] chdir("./35") = 0 [pid 5428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5428] setpgid(0, 0) = 0 [pid 5428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5428] write(3, "1000", 4) = 4 [pid 5428] close(3) = 0 [pid 5428] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5428] memfd_create("syzkaller", 0) = 3 [pid 5428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./33/binderfs") = 0 [ 95.588009][ T5424] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 95.599693][ T5427] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.621561][ T5422] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5425] <... mount resumed>) = 0 [pid 5425] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5424] <... mount resumed>) = 0 [ 95.650174][ T5422] Remounting filesystem read-only [ 95.651602][ T5430] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.657161][ T5431] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.677675][ T5429] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.679806][ T5422] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5425] chdir("./file1" [pid 5424] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5425] <... chdir resumed>) = 0 [pid 5424] <... openat resumed>) = 3 [pid 5423] <... mount resumed>) = 0 [pid 5423] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5423] chdir("./file1") = 0 [pid 5423] ioctl(4, LOOP_CLR_FD) = 0 [pid 5423] close(4 [pid 5425] ioctl(4, LOOP_CLR_FD [pid 5424] chdir("./file1" [pid 5423] <... close resumed>) = 0 [pid 5425] <... ioctl resumed>) = 0 [pid 5424] <... chdir resumed>) = 0 [pid 5423] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5425] close(4 [ 95.696510][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 95.703220][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 95.711998][ T5422] NILFS (loop1): repaired inode bitmap for reserved inodes [ 95.720874][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 95.729092][ T5422] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5424] ioctl(4, LOOP_CLR_FD [pid 5428] <... write resumed>) = 2097152 [pid 5425] <... close resumed>) = 0 [pid 5424] <... ioctl resumed>) = 0 [pid 5422] <... openat resumed>) = -1 EIO (Input/output error) [pid 5428] munmap(0x7f770c286000, 2097152 [pid 5425] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5424] close(4 [pid 5422] exit_group(0 [pid 5428] <... munmap resumed>) = 0 [pid 5424] <... close resumed>) = 0 [pid 5422] <... exit_group resumed>) = ? [pid 5422] +++ exited with 0 +++ [pid 5428] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5424] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5422, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5428] <... openat resumed>) = 4 [ 95.729250][ T5423] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 95.770125][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 95.780210][ T5425] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5428] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5428] close(3 [pid 5013] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5428] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5428] mkdir("./file1", 0777 [pid 5013] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 95.799370][ T5424] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 95.806294][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 95.822796][ T5428] loop3: detected capacity change from 0 to 4096 [ 95.823625][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 95.836673][ T5424] Remounting filesystem read-only [ 95.843239][ T5423] Remounting filesystem read-only [pid 5428] <... mkdir resumed>) = 0 [pid 5013] newfstatat(3, "", [pid 5428] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./32/binderfs") = 0 [ 95.851844][ T5425] Remounting filesystem read-only [ 95.862524][ T5428] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.863194][ T5424] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 95.885972][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 95.886320][ T5423] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5013] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 95.892876][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 95.892903][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 95.892919][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 95.902562][ T5425] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 95.926549][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 95.939557][ T5428] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] newfstatat(AT_FDCWD, "./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./33/file1") = 0 [pid 5428] <... mount resumed>) = 0 [pid 5014] getdents64(3, [pid 5428] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [ 95.955070][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 95.959637][ T5423] NILFS (loop5): repaired inode bitmap for reserved inodes [ 95.972252][ T5424] NILFS (loop0): repaired inode bitmap for reserved inodes [ 95.986984][ T5432] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5428] <... openat resumed>) = 3 [pid 5014] close(3 [pid 5428] chdir("./file1" [pid 5014] <... close resumed>) = 0 [pid 5428] <... chdir resumed>) = 0 [pid 5014] rmdir("./33" [pid 5428] ioctl(4, LOOP_CLR_FD) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5423] <... openat resumed>) = -1 EIO (Input/output error) [pid 5423] exit_group(0) = ? [pid 5428] close(4) = 0 [pid 5014] mkdir("./34", 0777 [pid 5013] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5428] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./32/file1", [pid 5423] +++ exited with 0 +++ [pid 5424] <... openat resumed>) = -1 EIO (Input/output error) [pid 5424] exit_group(0) = ? [pid 5424] +++ exited with 0 +++ [ 95.988442][ T5424] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 96.015252][ T5423] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 96.021097][ T5425] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5424, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5013] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... restart_syscall resumed>) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5423, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] <... openat resumed>) = 4 [pid 5014] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5017] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(3 [pid 5017] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... close resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] newfstatat(4, "", ./strace-static-x86_64: Process 5434 attached [pid 5017] getdents64(3, [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5434 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5434] set_robust_list(0x555556b87660, 24 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./33/binderfs") = 0 [pid 5017] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(4, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] getdents64(4, [pid 5434] <... set_robust_list resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5434] chdir("./34" [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] newfstatat(3, "", [pid 5013] close(4 [pid 5434] <... chdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] rmdir("./32/file1" [pid 5012] getdents64(3, [pid 5434] <... prctl resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5434] setpgid(0, 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] getdents64(3, [pid 5012] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5434] <... setpgid resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 96.047923][ T5428] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 96.054069][ T5425] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 96.079659][ T5428] Remounting filesystem read-only [ 96.087124][ T5428] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 96.096022][ T10] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5013] close(3 [pid 5434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5425] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... close resumed>) = 0 [pid 5434] <... openat resumed>) = 3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5434] write(3, "1000", 4 [pid 5013] rmdir("./32" [pid 5012] unlink("./31/binderfs" [pid 5434] <... write resumed>) = 4 [pid 5013] <... rmdir resumed>) = 0 [pid 5434] close(3 [pid 5013] mkdir("./33", 0777 [pid 5012] <... unlink resumed>) = 0 [pid 5434] <... close resumed>) = 0 [pid 5012] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5434] symlink("/dev/binderfs", "./binderfs" [pid 5013] <... mkdir resumed>) = 0 [pid 5434] <... symlink resumed>) = 0 [pid 5434] memfd_create("syzkaller", 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5434] <... memfd_create resumed>) = 3 [pid 5434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... openat resumed>) = 3 [pid 5434] <... mmap resumed>) = 0x7f770c286000 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5425] exit_group(0) = ? [pid 5425] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5425, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] <... openat resumed>) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./35/binderfs") = 0 [ 96.120953][ T10] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 96.146351][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 96.153460][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 96.153487][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5016] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 96.153511][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 96.153526][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 96.183216][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 96.190115][ T5428] NILFS (loop3): repaired inode bitmap for reserved inodes [ 96.190161][ T5428] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 96.197440][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5428] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] close(3 [pid 5428] exit_group(0 [pid 5013] <... close resumed>) = 0 [pid 5428] <... exit_group resumed>) = ? [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5428] +++ exited with 0 +++ [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5435 ./strace-static-x86_64: Process 5435 attached [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5428, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5435] set_robust_list(0x555556b87660, 24 [pid 5015] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] <... set_robust_list resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5435] chdir("./33" [pid 5015] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5435] <... chdir resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5435] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5435] <... prctl resumed>) = 0 [pid 5015] getdents64(3, [pid 5435] setpgid(0, 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5435] <... setpgid resumed>) = 0 [pid 5015] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./35/binderfs", [pid 5435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./35/binderfs" [pid 5435] <... openat resumed>) = 3 [pid 5015] <... unlink resumed>) = 0 [pid 5015] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] write(3, "1000", 4) = 4 [pid 5435] close(3 [pid 5434] <... write resumed>) = 2097152 [pid 5017] <... umount2 resumed>) = 0 [pid 5435] <... close resumed>) = 0 [pid 5434] munmap(0x7f770c286000, 2097152 [pid 5017] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5434] <... munmap resumed>) = 0 [pid 5435] symlink("/dev/binderfs", "./binderfs" [pid 5017] newfstatat(AT_FDCWD, "./33/file1", [ 96.214790][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 96.247586][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 96.254408][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 96.254842][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5434] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5435] <... symlink resumed>) = 0 [pid 5434] <... openat resumed>) = 4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5435] memfd_create("syzkaller", 0 [pid 5434] ioctl(4, LOOP_SET_FD, 3 [ 96.271642][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 96.273235][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 96.286024][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 96.288002][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 96.293705][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 96.301890][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 96.308574][ T5434] loop2: detected capacity change from 0 to 4096 [pid 5017] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] <... memfd_create resumed>) = 3 [pid 5434] <... ioctl resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5434] close(3 [pid 5017] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5435] <... mmap resumed>) = 0x7f770c286000 [pid 5434] <... close resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5434] mkdir("./file1", 0777 [pid 5017] newfstatat(4, "", [pid 5434] <... mkdir resumed>) = 0 [pid 5434] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./33/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./33") = 0 [pid 5017] mkdir("./34", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [ 96.315778][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 96.330847][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 96.341914][ T5434] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.342211][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 96.362002][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5436 ./strace-static-x86_64: Process 5436 attached [pid 5436] set_robust_list(0x555556b87660, 24) = 0 [pid 5436] chdir("./34") = 0 [pid 5436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5436] setpgid(0, 0 [pid 5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5436] <... setpgid resumed>) = 0 [pid 5436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5436] write(3, "1000", 4) = 4 [pid 5436] close(3) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5012] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5436] memfd_create("syzkaller", 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5436] <... memfd_create resumed>) = 3 [pid 5436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] newfstatat(AT_FDCWD, "./31/file1", [pid 5436] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./31/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./31") = 0 [pid 5012] mkdir("./32", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [ 96.380428][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 96.402151][ T5434] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5438 [pid 5434] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5438 attached [pid 5438] set_robust_list(0x555556b87660, 24) = 0 [pid 5438] chdir("./32") = 0 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5438] setpgid(0, 0) = 0 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5438] write(3, "1000", 4) = 4 [pid 5438] close(3) = 0 [pid 5438] symlink("/dev/binderfs", "./binderfs" [pid 5434] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5434] chdir("./file1" [pid 5438] <... symlink resumed>) = 0 [pid 5434] <... chdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5434] ioctl(4, LOOP_CLR_FD) = 0 [pid 5434] close(4 [pid 5438] memfd_create("syzkaller", 0 [pid 5435] <... write resumed>) = 2097152 [pid 5434] <... close resumed>) = 0 [pid 5434] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5438] <... memfd_create resumed>) = 3 [pid 5436] <... write resumed>) = 2097152 [pid 5438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 96.468014][ T5437] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5435] munmap(0x7f770c286000, 2097152 [pid 5016] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./35/file1", [pid 5435] <... munmap resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5435] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] <... openat resumed>) = 4 [pid 5436] munmap(0x7f770c286000, 2097152 [pid 5435] <... openat resumed>) = 4 [pid 5016] newfstatat(4, "", [pid 5435] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5436] <... munmap resumed>) = 0 [pid 5435] <... ioctl resumed>) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, [pid 5436] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5436] <... openat resumed>) = 4 [pid 5016] close(4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5436] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./35/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./35") = 0 [pid 5016] mkdir("./36", 0777 [pid 5015] newfstatat(AT_FDCWD, "./35/file1", [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5436] <... ioctl resumed>) = 0 [ 96.516541][ T5434] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 96.537394][ T5435] loop1: detected capacity change from 0 to 4096 [ 96.539561][ T5434] Remounting filesystem read-only [ 96.551298][ T5434] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 96.559598][ T5436] loop5: detected capacity change from 0 to 4096 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5015] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5440 [pid 5436] close(3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5436] <... close resumed>) = 0 [pid 5435] close(3 [pid 5438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5436] mkdir("./file1", 0777 [pid 5435] <... close resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5440 attached [pid 5435] mkdir("./file1", 0777 [pid 5440] set_robust_list(0x555556b87660, 24 [pid 5436] <... mkdir resumed>) = 0 [pid 5435] <... mkdir resumed>) = 0 [pid 5434] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... openat resumed>) = 4 [pid 5440] <... set_robust_list resumed>) = 0 [pid 5435] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5440] chdir("./36") = 0 [pid 5440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5440] setpgid(0, 0) = 0 [ 96.567722][ T5434] NILFS (loop2): repaired inode bitmap for reserved inodes [ 96.576503][ T5434] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 96.606640][ T5435] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5436] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5440] write(3, "1000", 4 [pid 5438] <... write resumed>) = 2097152 [pid 5434] exit_group(0 [pid 5015] newfstatat(4, "", [pid 5438] munmap(0x7f770c286000, 2097152 [pid 5434] <... exit_group resumed>) = ? [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5438] <... munmap resumed>) = 0 [pid 5434] +++ exited with 0 +++ [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5438] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5015] close(4 [pid 5438] <... openat resumed>) = 4 [pid 5015] <... close resumed>) = 0 [pid 5438] ioctl(4, LOOP_SET_FD, 3 [pid 5015] rmdir("./35/file1" [pid 5440] <... write resumed>) = 4 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./35") = 0 [pid 5015] mkdir("./36", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5440] close(3 [pid 5015] <... close resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5434, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5441 ./strace-static-x86_64: Process 5441 attached [pid 5441] set_robust_list(0x555556b87660, 24) = 0 [pid 5441] chdir("./36") = 0 [pid 5441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5441] setpgid(0, 0) = 0 [pid 5441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5441] write(3, "1000", 4) = 4 [pid 5441] close(3) = 0 [pid 5441] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5441] memfd_create("syzkaller", 0) = 3 [pid 5441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5440] <... close resumed>) = 0 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5440] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... restart_syscall resumed>) = 0 [pid 5440] <... symlink resumed>) = 0 [pid 5440] memfd_create("syzkaller", 0) = 3 [pid 5014] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5440] <... mmap resumed>) = 0x7f770c286000 [pid 5014] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5438] <... ioctl resumed>) = 0 [pid 5438] close(3) = 0 [pid 5438] mkdir("./file1", 0777) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5014] newfstatat(3, "", [pid 5438] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 96.620555][ T5436] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.626654][ T5438] loop0: detected capacity change from 0 to 4096 [ 96.637606][ T5436] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 96.648607][ T5435] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] getdents64(3, [pid 5440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5440] <... write resumed>) = 2097152 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5440] munmap(0x7f770c286000, 2097152 [pid 5435] <... mount resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5440] <... munmap resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./34/binderfs" [pid 5440] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5014] <... unlink resumed>) = 0 [pid 5440] <... openat resumed>) = 4 [ 96.687453][ T5438] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.703293][ T5438] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 96.713411][ T5443] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5014] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5440] ioctl(4, LOOP_SET_FD, 3 [pid 5438] <... mount resumed>) = 0 [pid 5436] <... mount resumed>) = 0 [pid 5435] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5441] <... write resumed>) = 2097152 [pid 5440] <... ioctl resumed>) = 0 [pid 5438] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5436] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5435] <... openat resumed>) = 3 [pid 5441] munmap(0x7f770c286000, 2097152 [pid 5440] close(3 [pid 5438] <... openat resumed>) = 3 [pid 5436] <... openat resumed>) = 3 [pid 5435] chdir("./file1" [pid 5441] <... munmap resumed>) = 0 [pid 5440] <... close resumed>) = 0 [pid 5438] chdir("./file1" [pid 5436] chdir("./file1" [pid 5435] <... chdir resumed>) = 0 [pid 5441] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5440] mkdir("./file1", 0777 [pid 5438] <... chdir resumed>) = 0 [pid 5436] <... chdir resumed>) = 0 [pid 5435] ioctl(4, LOOP_CLR_FD [pid 5441] <... openat resumed>) = 4 [pid 5440] <... mkdir resumed>) = 0 [pid 5438] ioctl(4, LOOP_CLR_FD [pid 5436] ioctl(4, LOOP_CLR_FD [pid 5435] <... ioctl resumed>) = 0 [ 96.730553][ T5442] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.738064][ T5440] loop4: detected capacity change from 0 to 4096 [ 96.743862][ T5444] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.758733][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 96.765451][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 96.774083][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 96.779305][ T5441] loop3: detected capacity change from 0 to 4096 [pid 5441] ioctl(4, LOOP_SET_FD, 3 [pid 5440] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5438] <... ioctl resumed>) = 0 [pid 5436] <... ioctl resumed>) = 0 [pid 5435] close(4 [pid 5441] <... ioctl resumed>) = 0 [pid 5438] close(4 [pid 5436] close(4 [pid 5435] <... close resumed>) = 0 [pid 5438] <... close resumed>) = 0 [pid 5436] <... close resumed>) = 0 [pid 5435] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5441] close(3 [ 96.782031][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 96.789149][ T5440] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.795235][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 96.812382][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 96.816245][ T5435] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5438] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5436] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5441] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 96.836226][ T5438] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 96.859982][ T5440] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 96.863224][ T5436] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./34/file1") = 0 [pid 5441] mkdir("./file1", 0777 [pid 5440] <... mount resumed>) = 0 [pid 5014] getdents64(3, [pid 5441] <... mkdir resumed>) = 0 [pid 5440] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5441] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5440] <... openat resumed>) = 3 [pid 5014] close(3) = 0 [pid 5014] rmdir("./34") = 0 [pid 5014] mkdir("./35", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5440] chdir("./file1" [pid 5014] <... openat resumed>) = 3 [pid 5440] <... chdir resumed>) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5440] ioctl(4, LOOP_CLR_FD [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 96.892725][ T5438] Remounting filesystem read-only [ 96.892875][ T5435] Remounting filesystem read-only [ 96.903970][ T5438] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 96.919170][ T5446] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.934156][ T5435] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5014] close(3) = 0 [pid 5440] <... ioctl resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5440] close(4 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5448 [pid 5440] <... close resumed>) = 0 [ 96.945935][ T5441] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.956740][ T5438] NILFS (loop0): repaired inode bitmap for reserved inodes [ 96.970449][ T5435] NILFS (loop1): repaired inode bitmap for reserved inodes [ 96.979018][ T5441] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) ./strace-static-x86_64: Process 5448 attached [pid 5440] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5438] <... openat resumed>) = -1 EIO (Input/output error) [pid 5438] exit_group(0) = ? [pid 5438] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5438, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, [pid 5448] set_robust_list(0x555556b87660, 24 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5448] <... set_robust_list resumed>) = 0 [pid 5012] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5448] chdir("./35" [pid 5012] unlink("./32/binderfs" [pid 5448] <... chdir resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5448] prctl(PR_SET_PDEATHSIG, SIGKILL [ 96.981805][ T5438] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 97.006409][ T5440] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 97.026391][ T5436] Remounting filesystem read-only [pid 5012] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5448] <... prctl resumed>) = 0 [pid 5448] setpgid(0, 0) = 0 [pid 5435] <... openat resumed>) = -1 EIO (Input/output error) [pid 5448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5435] exit_group(0 [pid 5448] <... openat resumed>) = 3 [pid 5435] <... exit_group resumed>) = ? [pid 5448] write(3, "1000", 4) = 4 [pid 5448] close(3) = 0 [pid 5448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5448] memfd_create("syzkaller", 0 [pid 5435] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5435, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5448] <... memfd_create resumed>) = 3 [ 97.034492][ T5435] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 97.050946][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 97.061437][ T5440] Remounting filesystem read-only [ 97.070452][ T5436] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 97.076543][ T5440] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 97.081168][ T5436] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5013] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5448] <... mmap resumed>) = 0x7f770c286000 [pid 5013] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./33/binderfs") = 0 [ 97.086604][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 97.102551][ T5440] NILFS (loop4): repaired inode bitmap for reserved inodes [ 97.106478][ T5436] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 97.126010][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 97.126200][ T5449] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5441] <... mount resumed>) = 0 [pid 5441] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5441] chdir("./file1") = 0 [pid 5441] ioctl(4, LOOP_CLR_FD) = 0 [pid 5441] close(4) = 0 [ 97.132708][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 97.143287][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 97.143305][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 97.143326][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 97.143341][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 97.150803][ T5440] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5441] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 97.205662][ T5441] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5436] <... openat resumed>) = -1 EIO (Input/output error) [pid 5448] <... write resumed>) = 2097152 [pid 5440] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] <... openat resumed>) = 4 [pid 5436] exit_group(0 [pid 5448] munmap(0x7f770c286000, 2097152) = 0 [pid 5440] exit_group(0 [pid 5012] newfstatat(4, "", [pid 5436] <... exit_group resumed>) = ? [pid 5440] <... exit_group resumed>) = ? [pid 5448] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5440] +++ exited with 0 +++ [pid 5436] +++ exited with 0 +++ [pid 5012] getdents64(4, [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5436, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5440, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5448] <... openat resumed>) = 4 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 97.256833][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 97.264378][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 97.275970][ T5441] Remounting filesystem read-only [ 97.277146][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 97.283751][ T5441] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 97.289280][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5448] ioctl(4, LOOP_SET_FD, 3 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(4) = 0 [pid 5017] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] rmdir("./32/file1" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... rmdir resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5017] <... openat resumed>) = 3 [pid 5016] newfstatat(3, "", [pid 5012] getdents64(3, [pid 5017] newfstatat(3, "", [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, [pid 5012] close(3 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... close resumed>) = 0 [pid 5017] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] rmdir("./32" [pid 5017] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] newfstatat(AT_FDCWD, "./36/binderfs", [pid 5012] <... rmdir resumed>) = 0 [pid 5017] unlink("./34/binderfs" [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5016] unlink("./36/binderfs" [pid 5012] mkdir("./33", 0777 [pid 5017] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... unlink resumed>) = 0 [pid 5448] <... ioctl resumed>) = 0 [pid 5016] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5448] close(3) = 0 [pid 5448] mkdir("./file1", 0777) = 0 [pid 5448] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5450 ./strace-static-x86_64: Process 5450 attached [ 97.297784][ T5448] loop2: detected capacity change from 0 to 4096 [ 97.311876][ T5441] NILFS (loop3): repaired inode bitmap for reserved inodes [ 97.336990][ T5441] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5450] set_robust_list(0x555556b87660, 24) = 0 [pid 5450] chdir("./33") = 0 [pid 5450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5450] setpgid(0, 0) = 0 [pid 5450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5450] write(3, "1000", 4) = 4 [pid 5450] close(3) = 0 [pid 5450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5450] memfd_create("syzkaller", 0) = 3 [pid 5450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5013] <... umount2 resumed>) = 0 [ 97.352763][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 97.361327][ T5448] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 97.365581][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 97.384292][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 97.395027][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5013] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./33/file1", [pid 5441] <... openat resumed>) = -1 EIO (Input/output error) [pid 5441] exit_group(0) = ? [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5441] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5441, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=11 /* 0.11 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./36/binderfs") = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 97.397598][ T5448] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 97.410200][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 97.415024][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 97.419522][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 97.433959][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 97.445203][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5013] close(4) = 0 [pid 5013] rmdir("./33/file1") = 0 [pid 5448] <... mount resumed>) = 0 [pid 5013] getdents64(3, [pid 5448] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5448] <... openat resumed>) = 3 [pid 5448] chdir("./file1" [pid 5013] close(3 [pid 5448] <... chdir resumed>) = 0 [pid 5448] ioctl(4, LOOP_CLR_FD [pid 5013] <... close resumed>) = 0 [pid 5448] <... ioctl resumed>) = 0 [pid 5013] rmdir("./33" [pid 5448] close(4) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5448] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] mkdir("./34", 0777 [ 97.455850][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 97.468102][ T5452] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.472202][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 97.493585][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5454 ./strace-static-x86_64: Process 5454 attached [pid 5454] set_robust_list(0x555556b87660, 24) = 0 [pid 5454] chdir("./34") = 0 [pid 5454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5454] setpgid(0, 0) = 0 [pid 5454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5454] write(3, "1000", 4) = 4 [pid 5454] close(3) = 0 [pid 5454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5454] memfd_create("syzkaller", 0) = 3 [pid 5454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 97.505016][ T5448] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 97.514784][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5450] <... write resumed>) = 2097152 [pid 5016] <... umount2 resumed>) = 0 [pid 5450] munmap(0x7f770c286000, 2097152 [pid 5016] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5450] <... munmap resumed>) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5450] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5450] ioctl(4, LOOP_SET_FD, 3 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 97.570380][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 97.570439][ T5448] Remounting filesystem read-only [ 97.593323][ T5450] loop0: detected capacity change from 0 to 4096 [ 97.596005][ T5448] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 97.604044][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5016] getdents64(4, [pid 5450] <... ioctl resumed>) = 0 [pid 5450] close(3) = 0 [pid 5450] mkdir("./file1", 0777) = 0 [pid 5450] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./36/file1" [pid 5448] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, [pid 5448] exit_group(0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3 [pid 5448] <... exit_group resumed>) = ? [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./36" [pid 5448] +++ exited with 0 +++ [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./37", 0777 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5448, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5016] <... mkdir resumed>) = 0 [pid 5014] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... openat resumed>) = 3 [pid 5014] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5014] <... openat resumed>) = 3 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] newfstatat(3, "", [pid 5016] close(3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... close resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./35/binderfs") = 0 [ 97.609248][ T5448] NILFS (loop2): repaired inode bitmap for reserved inodes [ 97.616484][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 97.623526][ T5448] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 97.651718][ T5450] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5014] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5455 ./strace-static-x86_64: Process 5455 attached [pid 5455] set_robust_list(0x555556b87660, 24) = 0 [pid 5455] chdir("./37") = 0 [pid 5455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5455] setpgid(0, 0) = 0 [pid 5455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5455] write(3, "1000", 4) = 4 [pid 5455] close(3) = 0 [pid 5455] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5455] memfd_create("syzkaller", 0) = 3 [pid 5455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 97.669108][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 97.685678][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 97.694523][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5454] <... write resumed>) = 2097152 [pid 5017] <... openat resumed>) = 4 [pid 5455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5454] munmap(0x7f770c286000, 2097152) = 0 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./34/file1" [pid 5454] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5017] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./34" [pid 5454] <... openat resumed>) = 4 [pid 5454] ioctl(4, LOOP_SET_FD, 3 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] mkdir("./35", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5454] <... ioctl resumed>) = 0 [pid 5454] close(3) = 0 [pid 5454] mkdir("./file1", 0777) = 0 [pid 5454] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5456 ./strace-static-x86_64: Process 5456 attached [ 97.714257][ T5450] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 97.726150][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 97.740760][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 97.743396][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 97.762600][ T5454] loop1: detected capacity change from 0 to 4096 [pid 5456] set_robust_list(0x555556b87660, 24) = 0 [pid 5456] chdir("./35") = 0 [pid 5456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5456] setpgid(0, 0) = 0 [pid 5456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5456] write(3, "1000", 4) = 4 [pid 5456] close(3) = 0 [pid 5456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5455] <... write resumed>) = 2097152 [pid 5456] memfd_create("syzkaller", 0 [pid 5455] munmap(0x7f770c286000, 2097152 [pid 5456] <... memfd_create resumed>) = 3 [pid 5455] <... munmap resumed>) = 0 [pid 5455] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5450] <... mount resumed>) = 0 [pid 5455] <... openat resumed>) = 4 [pid 5450] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5455] ioctl(4, LOOP_SET_FD, 3 [pid 5450] <... openat resumed>) = 3 [pid 5450] chdir("./file1") = 0 [pid 5456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5450] ioctl(4, LOOP_CLR_FD [pid 5456] <... mmap resumed>) = 0x7f770c286000 [pid 5450] <... ioctl resumed>) = 0 [ 97.781690][ T5454] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 97.802874][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 97.814693][ T5457] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5450] close(4) = 0 [pid 5450] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = 0 [pid 5455] <... ioctl resumed>) = 0 [pid 5455] close(3) = 0 [pid 5455] mkdir("./file1", 0777) = 0 [ 97.828530][ T5455] loop4: detected capacity change from 0 to 4096 [ 97.845590][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 97.853398][ T5450] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5455] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./36/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./36" [pid 5014] <... umount2 resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./37", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... openat resumed>) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(3) = 0 [pid 5014] newfstatat(AT_FDCWD, "./35/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [ 97.877771][ T5455] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 97.877880][ T5454] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 97.904450][ T5450] Remounting filesystem read-only [pid 5014] close(4 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./35/file1") = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5458 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 ./strace-static-x86_64: Process 5458 attached [pid 5014] rmdir("./35" [pid 5458] set_robust_list(0x555556b87660, 24 [pid 5014] <... rmdir resumed>) = 0 [pid 5458] <... set_robust_list resumed>) = 0 [pid 5458] chdir("./37" [pid 5014] mkdir("./36", 0777 [pid 5458] <... chdir resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5458] setpgid(0, 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5458] <... setpgid resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5454] <... mount resumed>) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5454] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5460 ./strace-static-x86_64: Process 5460 attached [pid 5460] set_robust_list(0x555556b87660, 24) = 0 [pid 5460] chdir("./36") = 0 [pid 5460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5460] setpgid(0, 0 [pid 5456] <... write resumed>) = 2097152 [pid 5460] <... setpgid resumed>) = 0 [pid 5460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5456] munmap(0x7f770c286000, 2097152 [pid 5460] <... openat resumed>) = 3 [pid 5460] write(3, "1000", 4) = 4 [pid 5460] close(3) = 0 [pid 5460] symlink("/dev/binderfs", "./binderfs" [pid 5458] <... openat resumed>) = 3 [pid 5460] <... symlink resumed>) = 0 [pid 5458] write(3, "1000", 4 [pid 5456] <... munmap resumed>) = 0 [pid 5454] <... openat resumed>) = 3 [ 97.935668][ T5455] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 97.950488][ T5450] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 97.969304][ T5459] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5460] memfd_create("syzkaller", 0 [pid 5458] <... write resumed>) = 4 [pid 5454] chdir("./file1" [pid 5460] <... memfd_create resumed>) = 3 [pid 5458] close(3 [pid 5456] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5454] <... chdir resumed>) = 0 [pid 5460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5458] <... close resumed>) = 0 [pid 5456] <... openat resumed>) = 4 [pid 5454] ioctl(4, LOOP_CLR_FD [pid 5458] symlink("/dev/binderfs", "./binderfs" [pid 5454] <... ioctl resumed>) = 0 [pid 5460] <... mmap resumed>) = 0x7f770c286000 [pid 5458] <... symlink resumed>) = 0 [pid 5456] ioctl(4, LOOP_SET_FD, 3 [pid 5454] close(4 [pid 5458] memfd_create("syzkaller", 0 [pid 5455] <... mount resumed>) = 0 [pid 5454] <... close resumed>) = 0 [pid 5456] <... ioctl resumed>) = 0 [pid 5456] close(3) = 0 [pid 5456] mkdir("./file1", 0777 [pid 5458] <... memfd_create resumed>) = 3 [pid 5458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5455] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5454] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5458] <... mmap resumed>) = 0x7f770c286000 [ 97.988791][ T5450] NILFS (loop0): repaired inode bitmap for reserved inodes [ 98.003756][ T5456] loop5: detected capacity change from 0 to 4096 [ 98.007267][ T5461] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.023215][ T5454] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5455] <... openat resumed>) = 3 [pid 5456] <... mkdir resumed>) = 0 [pid 5456] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5455] chdir("./file1") = 0 [pid 5455] ioctl(4, LOOP_CLR_FD) = 0 [pid 5455] close(4) = 0 [pid 5455] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 98.023659][ T5450] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 98.062895][ T5456] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.073353][ T5455] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5460] <... write resumed>) = 2097152 [ 98.092921][ T5456] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 98.111421][ T5454] Remounting filesystem read-only [ 98.131023][ T5455] Remounting filesystem read-only [pid 5460] munmap(0x7f770c286000, 2097152) = 0 [pid 5460] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5460] ioctl(4, LOOP_SET_FD, 3 [pid 5450] <... openat resumed>) = -1 EIO (Input/output error) [pid 5450] exit_group(0) = ? [pid 5450] +++ exited with 0 +++ [pid 5460] <... ioctl resumed>) = 0 [pid 5460] close(3) = 0 [pid 5460] mkdir("./file1", 0777) = 0 [pid 5460] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5456] <... mount resumed>) = 0 [pid 5456] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5450, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5456] <... openat resumed>) = 3 [pid 5456] chdir("./file1" [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5456] <... chdir resumed>) = 0 [pid 5456] ioctl(4, LOOP_CLR_FD [pid 5012] <... restart_syscall resumed>) = 0 [pid 5456] <... ioctl resumed>) = 0 [pid 5456] close(4) = 0 [ 98.139631][ T5454] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 98.147249][ T5460] loop2: detected capacity change from 0 to 4096 [ 98.167491][ T5462] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.169516][ T5455] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5456] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./33/binderfs") = 0 [pid 5012] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5458] <... write resumed>) = 2097152 [ 98.195591][ T5454] NILFS (loop1): repaired inode bitmap for reserved inodes [ 98.203654][ T5456] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 98.225468][ T5460] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.239809][ T5456] Remounting filesystem read-only [pid 5458] munmap(0x7f770c286000, 2097152 [pid 5454] <... openat resumed>) = -1 EIO (Input/output error) [pid 5458] <... munmap resumed>) = 0 [pid 5458] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 98.247008][ T5454] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 98.248979][ T5455] NILFS (loop4): repaired inode bitmap for reserved inodes [ 98.270538][ T5458] loop3: detected capacity change from 0 to 4096 [ 98.270767][ T5456] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 98.277584][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5458] ioctl(4, LOOP_SET_FD, 3 [pid 5454] exit_group(0) = ? [pid 5454] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5454, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5013] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./34/binderfs") = 0 [pid 5013] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5458] <... ioctl resumed>) = 0 [pid 5458] close(3) = 0 [pid 5458] mkdir("./file1", 0777) = 0 [ 98.284979][ T5460] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 98.302365][ T5456] NILFS (loop5): repaired inode bitmap for reserved inodes [ 98.310040][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 98.310429][ T5455] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 98.318910][ T5458] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5458] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5456] <... openat resumed>) = -1 EIO (Input/output error) [pid 5455] <... openat resumed>) = -1 EIO (Input/output error) [pid 5456] exit_group(0 [pid 5455] exit_group(0 [pid 5456] <... exit_group resumed>) = ? [pid 5455] <... exit_group resumed>) = ? [pid 5456] +++ exited with 0 +++ [pid 5455] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5456, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5455, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [ 98.331861][ T5456] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 98.333418][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 98.364931][ T5458] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 98.372330][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 98.383776][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5458] <... mount resumed>) = 0 [pid 5017] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... openat resumed>) = 3 [pid 5016] <... openat resumed>) = 3 [pid 5017] newfstatat(3, "", [pid 5016] newfstatat(3, "", [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5016] getdents64(3, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./35/binderfs", [pid 5016] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./35/binderfs" [pid 5016] unlink("./37/binderfs" [pid 5017] <... unlink resumed>) = 0 [pid 5016] <... unlink resumed>) = 0 [pid 5017] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5458] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5460] <... mount resumed>) = 0 [pid 5458] <... openat resumed>) = 3 [ 98.384894][ T5464] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.392964][ T5463] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.412812][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 98.412836][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 98.412858][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 98.412873][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5460] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5458] chdir("./file1" [pid 5460] <... openat resumed>) = 3 [pid 5458] <... chdir resumed>) = 0 [pid 5460] chdir("./file1" [pid 5458] ioctl(4, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5460] <... chdir resumed>) = 0 [pid 5458] <... ioctl resumed>) = 0 [pid 5460] ioctl(4, LOOP_CLR_FD [pid 5458] close(4 [pid 5460] <... ioctl resumed>) = 0 [pid 5460] close(4 [pid 5458] <... close resumed>) = 0 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./34/file1") = 0 [ 98.444572][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 98.447290][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 98.452590][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 98.466956][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 98.476531][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 98.483614][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5460] <... close resumed>) = 0 [pid 5458] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5460] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./34") = 0 [pid 5013] mkdir("./35", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5465 ./strace-static-x86_64: Process 5465 attached [pid 5465] set_robust_list(0x555556b87660, 24) = 0 [pid 5465] chdir("./35") = 0 [pid 5465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5465] setpgid(0, 0) = 0 [pid 5465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5465] write(3, "1000", 4) = 4 [pid 5465] close(3) = 0 [ 98.495160][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 98.503852][ T5458] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 98.520277][ T5460] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 98.529980][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5465] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5465] memfd_create("syzkaller", 0) = 3 [pid 5465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 98.550307][ T5460] Remounting filesystem read-only [ 98.551145][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 98.556779][ T5458] Remounting filesystem read-only [ 98.576903][ T5460] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 98.586423][ T5458] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5012] newfstatat(AT_FDCWD, "./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 98.594693][ T5458] NILFS (loop3): repaired inode bitmap for reserved inodes [ 98.602999][ T5460] NILFS (loop2): repaired inode bitmap for reserved inodes [ 98.609199][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 98.611219][ T5458] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 98.618657][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5012] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5458] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] newfstatat(4, "", [pid 5460] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5458] exit_group(0 [pid 5012] getdents64(4, [pid 5458] <... exit_group resumed>) = ? [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./33/file1") = 0 [pid 5012] getdents64(3, [pid 5460] exit_group(0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5460] <... exit_group resumed>) = ? [pid 5012] close(3) = 0 [pid 5012] rmdir("./33") = 0 [pid 5012] mkdir("./34", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 98.633371][ T5460] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5458] +++ exited with 0 +++ [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5458, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] <... restart_syscall resumed>) = 0 [pid 5012] close(3) = 0 [pid 5015] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5466 attached [pid 5460] +++ exited with 0 +++ [pid 5015] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... openat resumed>) = 3 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5460, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5466 [pid 5015] newfstatat(3, "", [pid 5466] set_robust_list(0x555556b87660, 24 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5466] <... set_robust_list resumed>) = 0 [pid 5015] getdents64(3, [pid 5014] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5466] chdir("./34" [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5466] <... chdir resumed>) = 0 [pid 5466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5466] <... prctl resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 3 [pid 5466] setpgid(0, 0 [pid 5015] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5014] newfstatat(3, "", [pid 5466] <... setpgid resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] unlink("./37/binderfs" [pid 5014] getdents64(3, [pid 5466] <... openat resumed>) = 3 [pid 5016] <... umount2 resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5466] write(3, "1000", 4 [pid 5016] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5466] <... write resumed>) = 4 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./36/binderfs", [pid 5466] close(3 [ 98.675348][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 98.684086][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 98.711458][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5016] newfstatat(AT_FDCWD, "./37/file1", [pid 5465] <... write resumed>) = 2097152 [pid 5465] munmap(0x7f770c286000, 2097152 [pid 5466] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5465] <... munmap resumed>) = 0 [pid 5465] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5465] ioctl(4, LOOP_SET_FD, 3 [pid 5466] symlink("/dev/binderfs", "./binderfs" [pid 5016] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] unlink("./36/binderfs" [pid 5465] <... ioctl resumed>) = 0 [pid 5465] close(3) = 0 [ 98.720292][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 98.736099][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 98.743468][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 98.750005][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 98.751822][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 98.763849][ T5465] loop1: detected capacity change from 0 to 4096 [pid 5465] mkdir("./file1", 0777) = 0 [pid 5465] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5466] <... symlink resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... unlink resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5466] memfd_create("syzkaller", 0) = 3 [pid 5016] <... openat resumed>) = 4 [pid 5466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5466] <... mmap resumed>) = 0x7f770c286000 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./37/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./37") = 0 [pid 5016] mkdir("./38", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [ 98.766399][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 98.781982][ T5465] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.782799][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 98.814170][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5467 ./strace-static-x86_64: Process 5467 attached [pid 5467] set_robust_list(0x555556b87660, 24 [pid 5466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5467] <... set_robust_list resumed>) = 0 [pid 5467] chdir("./38") = 0 [pid 5467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5467] setpgid(0, 0) = 0 [pid 5467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5467] write(3, "1000", 4 [pid 5015] <... umount2 resumed>) = 0 [ 98.827830][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 98.861255][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 98.861648][ T5465] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5017] <... umount2 resumed>) = 0 [pid 5467] <... write resumed>) = 4 [pid 5017] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] close(3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] <... close resumed>) = 0 [pid 5467] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./35/file1", [pid 5467] <... symlink resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./37/file1", [pid 5466] <... write resumed>) = 2097152 [pid 5467] memfd_create("syzkaller", 0 [pid 5466] munmap(0x7f770c286000, 2097152 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5467] <... memfd_create resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] getdents64(4, [pid 5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5466] <... munmap resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5467] <... mmap resumed>) = 0x7f770c286000 [pid 5466] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5017] rmdir("./35/file1" [pid 5015] <... openat resumed>) = 4 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, [pid 5466] <... openat resumed>) = 4 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] newfstatat(4, "", [pid 5466] ioctl(4, LOOP_SET_FD, 3 [pid 5017] close(3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./35") = 0 [pid 5017] mkdir("./36", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5468 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./37/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./37"./strace-static-x86_64: Process 5468 attached ) = 0 [pid 5015] mkdir("./38", 0777 [pid 5468] set_robust_list(0x555556b87660, 24 [pid 5015] <... mkdir resumed>) = 0 [pid 5468] <... set_robust_list resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5468] chdir("./36" [pid 5015] <... openat resumed>) = 3 [pid 5468] <... chdir resumed>) = 0 [pid 5467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5466] <... ioctl resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = 0 [pid 5468] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5466] close(3 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5468] <... prctl resumed>) = 0 [pid 5466] <... close resumed>) = 0 [ 98.876987][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 98.891479][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 98.903471][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 98.913866][ T5466] loop0: detected capacity change from 0 to 4096 [pid 5468] setpgid(0, 0 [pid 5466] mkdir("./file1", 0777 [pid 5015] close(3 [pid 5468] <... setpgid resumed>) = 0 [pid 5468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5466] <... mkdir resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5014] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5468] <... openat resumed>) = 3 [pid 5466] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5468] write(3, "1000", 4) = 4 [pid 5468] close(3) = 0 [pid 5468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5468] memfd_create("syzkaller", 0) = 3 [pid 5468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5469 [pid 5014] newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5469 attached [pid 5014] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5469] set_robust_list(0x555556b87660, 24 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5469] <... set_robust_list resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5469] chdir("./38") = 0 [pid 5467] <... write resumed>) = 2097152 [pid 5014] <... openat resumed>) = 4 [pid 5467] munmap(0x7f770c286000, 2097152 [pid 5014] newfstatat(4, "", [pid 5469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5469] setpgid(0, 0 [pid 5467] <... munmap resumed>) = 0 [ 98.970031][ T5466] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.995901][ T5466] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5469] <... setpgid resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5467] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5465] <... mount resumed>) = 0 [pid 5014] getdents64(4, [pid 5469] <... openat resumed>) = 3 [pid 5469] write(3, "1000", 4) = 4 [pid 5469] close(3) = 0 [pid 5469] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5469] memfd_create("syzkaller", 0) = 3 [pid 5469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5467] <... openat resumed>) = 4 [pid 5465] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5467] ioctl(4, LOOP_SET_FD, 3 [pid 5466] <... mount resumed>) = 0 [pid 5465] <... openat resumed>) = 3 [pid 5014] getdents64(4, [pid 5466] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5465] chdir("./file1" [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5466] <... openat resumed>) = 3 [pid 5465] <... chdir resumed>) = 0 [pid 5014] close(4 [pid 5467] <... ioctl resumed>) = 0 [pid 5466] chdir("./file1" [pid 5465] ioctl(4, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5467] close(3 [pid 5466] <... chdir resumed>) = 0 [pid 5465] <... ioctl resumed>) = 0 [pid 5014] rmdir("./36/file1" [pid 5467] <... close resumed>) = 0 [pid 5466] ioctl(4, LOOP_CLR_FD [pid 5465] close(4 [pid 5468] <... write resumed>) = 2097152 [pid 5467] mkdir("./file1", 0777 [pid 5466] <... ioctl resumed>) = 0 [pid 5465] <... close resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5468] munmap(0x7f770c286000, 2097152 [pid 5467] <... mkdir resumed>) = 0 [pid 5466] close(4 [pid 5465] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] getdents64(3, [pid 5468] <... munmap resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5466] <... close resumed>) = 0 [ 99.010466][ T5470] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.023035][ T5471] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.043477][ T5467] loop4: detected capacity change from 0 to 4096 [pid 5466] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] close(3) = 0 [pid 5014] rmdir("./36" [pid 5467] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... rmdir resumed>) = 0 [pid 5468] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 99.072406][ T5465] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 99.089199][ T5466] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 99.106229][ T5467] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.116978][ T5466] Remounting filesystem read-only [pid 5014] mkdir("./37", 0777 [pid 5468] <... openat resumed>) = 4 [pid 5014] <... mkdir resumed>) = 0 [pid 5468] ioctl(4, LOOP_SET_FD, 3 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5469] <... write resumed>) = 2097152 [pid 5468] <... ioctl resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5468] close(3 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5469] munmap(0x7f770c286000, 2097152 [pid 5468] <... close resumed>) = 0 [ 99.122428][ T5465] Remounting filesystem read-only [ 99.130163][ T5468] loop5: detected capacity change from 0 to 4096 [ 99.138816][ T5466] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 99.152124][ T5466] NILFS (loop0): repaired inode bitmap for reserved inodes [ 99.159871][ T5465] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5469] <... munmap resumed>) = 0 [pid 5468] mkdir("./file1", 0777./strace-static-x86_64: Process 5472 attached [pid 5472] set_robust_list(0x555556b87660, 24) = 0 [pid 5472] chdir("./37") = 0 [pid 5472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5472] setpgid(0, 0) = 0 [pid 5472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5472] write(3, "1000", 4) = 4 [pid 5472] close(3) = 0 [pid 5472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5472] memfd_create("syzkaller", 0 [pid 5469] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5468] <... mkdir resumed>) = 0 [pid 5469] <... openat resumed>) = 4 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5472 [pid 5472] <... memfd_create resumed>) = 3 [pid 5472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5468] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 99.169041][ T5465] NILFS (loop1): repaired inode bitmap for reserved inodes [ 99.176150][ T5467] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 99.180140][ T5466] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 99.203789][ T5465] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5469] ioctl(4, LOOP_SET_FD, 3 [pid 5466] <... openat resumed>) = -1 EIO (Input/output error) [pid 5466] exit_group(0) = ? [pid 5465] <... openat resumed>) = -1 EIO (Input/output error) [pid 5469] <... ioctl resumed>) = 0 [pid 5465] exit_group(0 [pid 5469] close(3 [pid 5465] <... exit_group resumed>) = ? [pid 5466] +++ exited with 0 +++ [pid 5469] <... close resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5466, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5467] <... mount resumed>) = 0 [pid 5467] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5469] mkdir("./file1", 0777 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5469] <... mkdir resumed>) = 0 [pid 5465] +++ exited with 0 +++ [pid 5012] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5469] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5465, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5467] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 3 [pid 5467] chdir("./file1") = 0 [pid 5012] newfstatat(3, "", [pid 5467] ioctl(4, LOOP_CLR_FD) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 99.220680][ T5469] loop3: detected capacity change from 0 to 4096 [ 99.227825][ T5468] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.240078][ T5468] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 99.256504][ T5469] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5467] close(4 [pid 5472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5467] <... close resumed>) = 0 [pid 5013] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(3, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5467] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... openat resumed>) = 3 [pid 5012] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(3, [pid 5012] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 99.273219][ T5469] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 99.289954][ T5473] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.303608][ T5467] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] unlink("./34/binderfs" [pid 5472] <... write resumed>) = 2097152 [pid 5468] <... mount resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./35/binderfs") = 0 [pid 5013] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... unlink resumed>) = 0 [pid 5012] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] munmap(0x7f770c286000, 2097152) = 0 [pid 5469] <... mount resumed>) = 0 [pid 5468] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5472] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 99.324261][ T5474] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.335916][ T5467] Remounting filesystem read-only [ 99.342178][ T5467] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 99.343065][ T5475] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.351691][ T5467] NILFS (loop4): repaired inode bitmap for reserved inodes [ 99.362581][ T5472] loop2: detected capacity change from 0 to 4096 [pid 5472] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5469] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5468] <... openat resumed>) = 3 [pid 5467] <... openat resumed>) = -1 EIO (Input/output error) [pid 5469] <... openat resumed>) = 3 [pid 5468] chdir("./file1" [pid 5467] exit_group(0 [pid 5469] chdir("./file1" [pid 5468] <... chdir resumed>) = 0 [pid 5467] <... exit_group resumed>) = ? [pid 5469] <... chdir resumed>) = 0 [pid 5468] ioctl(4, LOOP_CLR_FD [pid 5467] +++ exited with 0 +++ [pid 5469] ioctl(4, LOOP_CLR_FD [pid 5468] <... ioctl resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5467, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5469] <... ioctl resumed>) = 0 [pid 5468] close(4 [pid 5469] close(4 [pid 5468] <... close resumed>) = 0 [ 99.369982][ T5467] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 99.375156][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 99.397707][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 99.399982][ T5468] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5469] <... close resumed>) = 0 [pid 5468] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5469] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5472] close(3 [pid 5016] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5472] <... close resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5472] mkdir("./file1", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, [pid 5472] <... mkdir resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./38/binderfs") = 0 [ 99.404500][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 99.420173][ T5469] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 99.448918][ T5472] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.450850][ T5468] Remounting filesystem read-only [ 99.464460][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 99.468727][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 99.473117][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 99.486134][ T5472] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 99.491551][ T5469] Remounting filesystem read-only [ 99.505854][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 99.511905][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5016] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] <... mount resumed>) = 0 [ 99.513038][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 99.513073][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 99.513089][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 99.529528][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 99.547660][ T5476] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.559979][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 99.567721][ T5468] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5472] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5472] chdir("./file1") = 0 [pid 5472] ioctl(4, LOOP_CLR_FD) = 0 [pid 5472] close(4) = 0 [ 99.568502][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 99.575795][ T5469] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 99.593282][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 99.608887][ T5468] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5472] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./35/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [ 99.617634][ T5472] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 99.642243][ T5469] NILFS (loop3): repaired inode bitmap for reserved inodes [ 99.649648][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 99.649684][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5013] close(4) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5013] rmdir("./35/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5012] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] rmdir("./35" [pid 5012] newfstatat(AT_FDCWD, "./34/file1", [pid 5013] <... rmdir resumed>) = 0 [pid 5013] mkdir("./36", 0777 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... mkdir resumed>) = 0 [ 99.684513][ T5472] Remounting filesystem read-only [ 99.684880][ T5468] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 99.692669][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 99.716124][ T5472] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 99.725283][ T5472] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5012] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 3 [pid 5012] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5012] <... openat resumed>) = 4 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] newfstatat(4, "", [pid 5468] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] close(3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... close resumed>) = 0 [pid 5012] getdents64(4, [pid 5468] exit_group(0) = ? [pid 5468] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5468, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5017] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./36/binderfs") = 0 [pid 5017] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5469] <... openat resumed>) = -1 EIO (Input/output error) [pid 5469] exit_group(0) = ? [pid 5469] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5469, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [ 99.735815][ T5472] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 99.746601][ T5469] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 99.775805][ T57] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5472] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... restart_syscall resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5472] exit_group(0) = ? [pid 5472] +++ exited with 0 +++ [pid 5015] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5472, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] <... openat resumed>) = 3 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, [pid 5014] <... restart_syscall resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] newfstatat(AT_FDCWD, "./38/binderfs", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] unlink("./38/binderfs" [pid 5014] <... openat resumed>) = 3 [pid 5015] <... unlink resumed>) = 0 [pid 5014] newfstatat(3, "", [pid 5015] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./37/binderfs") = 0 [pid 5014] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(4, [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5477 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./34/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 ./strace-static-x86_64: Process 5477 attached [pid 5477] set_robust_list(0x555556b87660, 24) = 0 [pid 5012] rmdir("./34" [pid 5477] chdir("./36") = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] mkdir("./35", 0777 [pid 5477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5477] setpgid(0, 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5477] <... setpgid resumed>) = 0 [ 99.783873][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 99.790989][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 99.791013][ T57] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 99.807868][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 99.826978][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5016] <... umount2 resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5477] write(3, "1000", 4) = 4 [pid 5477] close(3) = 0 [pid 5477] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5477] memfd_create("syzkaller", 0) = 3 [pid 5477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5016] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] newfstatat(AT_FDCWD, "./38/file1", [pid 5012] close(3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... close resumed>) = 0 [pid 5016] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5478 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./38/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./38") = 0 [ 99.827142][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 99.833777][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 99.849945][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 99.858050][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 99.865116][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5016] mkdir("./39", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5479 ./strace-static-x86_64: Process 5478 attached [pid 5478] set_robust_list(0x555556b87660, 24) = 0 [pid 5478] chdir("./35") = 0 [pid 5478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5479 attached [pid 5478] setpgid(0, 0 [pid 5479] set_robust_list(0x555556b87660, 24) = 0 [pid 5478] <... setpgid resumed>) = 0 [pid 5478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5479] chdir("./39" [pid 5478] <... openat resumed>) = 3 [pid 5017] <... umount2 resumed>) = 0 [pid 5479] <... chdir resumed>) = 0 [pid 5478] write(3, "1000", 4 [pid 5479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 99.894632][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 99.909536][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5479] setpgid(0, 0 [pid 5478] <... write resumed>) = 4 [pid 5017] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5479] <... setpgid resumed>) = 0 [pid 5479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5479] write(3, "1000", 4) = 4 [pid 5479] close(3) = 0 [pid 5479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5479] memfd_create("syzkaller", 0) = 3 [pid 5479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5478] close(3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5478] <... close resumed>) = 0 [pid 5478] symlink("/dev/binderfs", "./binderfs" [pid 5017] newfstatat(AT_FDCWD, "./36/file1", [pid 5478] <... symlink resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5478] memfd_create("syzkaller", 0 [pid 5017] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5478] <... memfd_create resumed>) = 3 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] getdents64(4, [pid 5478] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5477] <... write resumed>) = 2097152 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./36/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./36" [pid 5477] munmap(0x7f770c286000, 2097152 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] mkdir("./37", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 99.936718][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 99.940345][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 99.952583][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 99.952883][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 99.971339][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5017] close(3 [pid 5477] <... munmap resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5477] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5477] ioctl(4, LOOP_SET_FD, 3 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5480 [pid 5479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5480 attached [pid 5480] set_robust_list(0x555556b87660, 24) = 0 [pid 5480] chdir("./37") = 0 [pid 5480] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5480] setpgid(0, 0) = 0 [pid 5480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5480] write(3, "1000", 4) = 4 [pid 5480] close(3) = 0 [pid 5480] symlink("/dev/binderfs", "./binderfs" [pid 5478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5014] <... umount2 resumed>) = 0 [pid 5480] <... symlink resumed>) = 0 [pid 5480] memfd_create("syzkaller", 0) = 3 [pid 5480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5477] <... ioctl resumed>) = 0 [pid 5477] close(3) = 0 [pid 5477] mkdir("./file1", 0777) = 0 [ 99.998069][ T5477] loop1: detected capacity change from 0 to 4096 [pid 5477] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... umount2 resumed>) = 0 [pid 5014] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./37/file1" [pid 5480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5478] <... write resumed>) = 2097152 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./37" [pid 5015] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./38", 0777 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] newfstatat(AT_FDCWD, "./38/file1", [pid 5014] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5481 [pid 5015] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", [pid 5479] <... write resumed>) = 2097152 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5479] munmap(0x7f770c286000, 2097152 [ 100.064738][ T5477] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5481 attached [pid 5478] munmap(0x7f770c286000, 2097152 [pid 5015] getdents64(4, [pid 5481] set_robust_list(0x555556b87660, 24 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5481] <... set_robust_list resumed>) = 0 [pid 5479] <... munmap resumed>) = 0 [pid 5015] close(4 [pid 5479] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5015] <... close resumed>) = 0 [pid 5481] chdir("./38" [pid 5479] ioctl(4, LOOP_SET_FD, 3 [pid 5481] <... chdir resumed>) = 0 [pid 5479] <... ioctl resumed>) = 0 [pid 5478] <... munmap resumed>) = 0 [pid 5015] rmdir("./38/file1" [pid 5481] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5478] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5479] close(3 [pid 5015] <... rmdir resumed>) = 0 [pid 5478] <... openat resumed>) = 4 [pid 5481] <... prctl resumed>) = 0 [pid 5481] setpgid(0, 0) = 0 [pid 5478] ioctl(4, LOOP_SET_FD, 3 [pid 5481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5479] <... close resumed>) = 0 [pid 5479] mkdir("./file1", 0777) = 0 [pid 5479] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5481] <... openat resumed>) = 3 [pid 5480] <... write resumed>) = 2097152 [pid 5478] <... ioctl resumed>) = 0 [pid 5015] getdents64(3, [pid 5481] write(3, "1000", 4 [pid 5478] close(3 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5481] <... write resumed>) = 4 [pid 5478] <... close resumed>) = 0 [pid 5481] close(3 [pid 5478] mkdir("./file1", 0777 [pid 5015] close(3 [pid 5481] <... close resumed>) = 0 [pid 5478] <... mkdir resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5481] symlink("/dev/binderfs", "./binderfs" [pid 5478] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] rmdir("./38" [pid 5481] <... symlink resumed>) = 0 [ 100.114214][ T5477] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 100.128961][ T5479] loop4: detected capacity change from 0 to 4096 [ 100.138955][ T5478] loop0: detected capacity change from 0 to 4096 [ 100.142585][ T5479] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5015] <... rmdir resumed>) = 0 [pid 5481] memfd_create("syzkaller", 0 [pid 5015] mkdir("./39", 0777 [pid 5481] <... memfd_create resumed>) = 3 [pid 5015] <... mkdir resumed>) = 0 [pid 5481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5481] <... mmap resumed>) = 0x7f770c286000 [pid 5480] munmap(0x7f770c286000, 2097152 [pid 5015] <... openat resumed>) = 3 [pid 5480] <... munmap resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5477] <... mount resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5480] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5480] <... openat resumed>) = 4 [pid 5477] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5480] ioctl(4, LOOP_SET_FD, 3 [pid 5477] <... openat resumed>) = 3 [ 100.162192][ T5479] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 100.173446][ T5478] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.184756][ T5482] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.197016][ T5478] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5483 [pid 5477] chdir("./file1") = 0 [pid 5477] ioctl(4, LOOP_CLR_FD) = 0 [pid 5477] close(4) = 0 ./strace-static-x86_64: Process 5483 attached [pid 5483] set_robust_list(0x555556b87660, 24) = 0 [pid 5483] chdir("./39") = 0 [pid 5483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5483] setpgid(0, 0 [pid 5477] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5483] <... setpgid resumed>) = 0 [pid 5483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5483] write(3, "1000", 4) = 4 [pid 5483] close(3) = 0 [pid 5483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5480] <... ioctl resumed>) = 0 [pid 5483] memfd_create("syzkaller", 0 [pid 5480] close(3 [pid 5483] <... memfd_create resumed>) = 3 [pid 5480] <... close resumed>) = 0 [pid 5483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5480] mkdir("./file1", 0777 [pid 5483] <... mmap resumed>) = 0x7f770c286000 [pid 5480] <... mkdir resumed>) = 0 [ 100.208729][ T5480] loop5: detected capacity change from 0 to 4096 [ 100.226811][ T5477] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 100.245983][ T5484] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5480] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5479] <... mount resumed>) = 0 [pid 5478] <... mount resumed>) = 0 [ 100.248283][ T5480] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.272428][ T5477] Remounting filesystem read-only [ 100.278158][ T5477] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 100.278786][ T5485] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.297461][ T5477] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5479] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5478] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5479] <... openat resumed>) = 3 [pid 5478] <... openat resumed>) = 3 [pid 5479] chdir("./file1" [pid 5478] chdir("./file1" [pid 5479] <... chdir resumed>) = 0 [pid 5478] <... chdir resumed>) = 0 [pid 5479] ioctl(4, LOOP_CLR_FD [pid 5478] ioctl(4, LOOP_CLR_FD [pid 5479] <... ioctl resumed>) = 0 [pid 5478] <... ioctl resumed>) = 0 [pid 5479] close(4 [pid 5478] close(4 [pid 5483] <... write resumed>) = 2097152 [pid 5481] <... write resumed>) = 2097152 [pid 5479] <... close resumed>) = 0 [pid 5478] <... close resumed>) = 0 [pid 5483] munmap(0x7f770c286000, 2097152 [pid 5481] munmap(0x7f770c286000, 2097152 [pid 5479] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5478] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5483] <... munmap resumed>) = 0 [pid 5481] <... munmap resumed>) = 0 [ 100.306507][ T5477] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 100.330016][ T5480] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 100.344811][ T5478] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5483] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5481] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5483] <... openat resumed>) = 4 [pid 5481] <... openat resumed>) = 4 [pid 5477] <... openat resumed>) = -1 EIO (Input/output error) [pid 5480] <... mount resumed>) = 0 [pid 5483] ioctl(4, LOOP_SET_FD, 3 [pid 5481] ioctl(4, LOOP_SET_FD, 3 [pid 5477] exit_group(0) = ? [pid 5477] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5477, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 100.360175][ T5479] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 100.384082][ T5479] Remounting filesystem read-only [ 100.384135][ T5478] Remounting filesystem read-only [ 100.390018][ T5486] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5480] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5483] <... ioctl resumed>) = 0 [pid 5481] <... ioctl resumed>) = 0 [pid 5480] <... openat resumed>) = 3 [pid 5013] unlink("./36/binderfs") = 0 [pid 5013] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5483] close(3 [pid 5481] close(3 [pid 5480] chdir("./file1" [pid 5479] <... openat resumed>) = -1 EIO (Input/output error) [pid 5483] <... close resumed>) = 0 [pid 5481] <... close resumed>) = 0 [pid 5480] <... chdir resumed>) = 0 [pid 5479] exit_group(0 [pid 5483] mkdir("./file1", 0777 [pid 5481] mkdir("./file1", 0777 [pid 5480] ioctl(4, LOOP_CLR_FD [pid 5479] <... exit_group resumed>) = ? [pid 5483] <... mkdir resumed>) = 0 [pid 5481] <... mkdir resumed>) = 0 [pid 5480] <... ioctl resumed>) = 0 [pid 5479] +++ exited with 0 +++ [ 100.408189][ T5479] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 100.416506][ T5483] loop3: detected capacity change from 0 to 4096 [ 100.424292][ T5481] loop2: detected capacity change from 0 to 4096 [ 100.431631][ T5479] NILFS (loop4): repaired inode bitmap for reserved inodes [ 100.439016][ T5479] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 100.454488][ T5478] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5483] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5481] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5480] close(4) = 0 [pid 5478] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5479, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 100.462096][ T5483] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.463896][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 100.473552][ T5481] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.488393][ T5478] NILFS (loop0): repaired inode bitmap for reserved inodes [ 100.488445][ T5478] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5480] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5478] exit_group(0 [pid 5016] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./39/binderfs") = 0 [pid 5016] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5478] <... exit_group resumed>) = ? [pid 5478] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5478, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 100.488623][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 100.497246][ T5480] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 100.533611][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 100.541458][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 100.543177][ T5483] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 100.549401][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 100.566960][ T5481] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 100.573652][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 100.579681][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 100.587886][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 100.594428][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5483] <... mount resumed>) = 0 [pid 5012] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5483] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5483] <... openat resumed>) = 3 [pid 5012] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5483] chdir("./file1" [pid 5012] <... openat resumed>) = 3 [pid 5483] <... chdir resumed>) = 0 [pid 5012] newfstatat(3, "", [pid 5483] ioctl(4, LOOP_CLR_FD [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5483] <... ioctl resumed>) = 0 [pid 5012] getdents64(3, [pid 5481] <... mount resumed>) = 0 [pid 5481] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5481] chdir("./file1") = 0 [pid 5481] ioctl(4, LOOP_CLR_FD) = 0 [pid 5481] close(4 [pid 5483] close(4 [pid 5481] <... close resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5483] <... close resumed>) = 0 [pid 5012] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5483] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 100.607130][ T5487] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.607203][ T5480] Remounting filesystem read-only [ 100.617792][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 100.635222][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 100.644447][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 100.644654][ T5488] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5481] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] newfstatat(AT_FDCWD, "./35/binderfs", [pid 5013] <... umount2 resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] unlink("./35/binderfs" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./36/file1", [pid 5012] <... unlink resumed>) = 0 [ 100.667376][ T5483] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 100.670059][ T5481] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 100.699139][ T5480] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 100.699209][ T5483] Remounting filesystem read-only [pid 5016] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5480] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] newfstatat(AT_FDCWD, "./39/file1", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5480] exit_group(0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 100.712011][ T5480] NILFS (loop5): repaired inode bitmap for reserved inodes [ 100.719700][ T5480] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 100.740732][ T5483] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 100.752863][ T5481] Remounting filesystem read-only [ 100.755709][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5013] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5480] <... exit_group resumed>) = ? [pid 5016] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... openat resumed>) = 4 [pid 5480] +++ exited with 0 +++ [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(4, "", [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5480, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5017] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5016] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./37/binderfs") = 0 [pid 5017] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... openat resumed>) = 4 [ 100.760630][ T5481] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 100.766659][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 100.775233][ T5483] NILFS (loop3): repaired inode bitmap for reserved inodes [ 100.785266][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 100.794817][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 100.798095][ T5481] NILFS (loop2): repaired inode bitmap for reserved inodes [ 100.802773][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5013] getdents64(4, [pid 5016] newfstatat(4, "", [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, [pid 5016] getdents64(4, [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] close(4 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... close resumed>) = 0 [pid 5016] close(4 [pid 5013] rmdir("./36/file1" [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./39/file1" [pid 5013] <... rmdir resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, [pid 5016] getdents64(3, [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5016] close(3 [pid 5013] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5013] rmdir("./36" [pid 5016] rmdir("./39" [pid 5013] <... rmdir resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./40", 0777 [pid 5013] mkdir("./37", 0777 [pid 5016] <... mkdir resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] <... openat resumed>) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5013] <... openat resumed>) = 3 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5016] close(3 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] <... close resumed>) = 0 [ 100.811732][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 100.817160][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 100.824541][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5489 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5490 ./strace-static-x86_64: Process 5489 attached [pid 5489] set_robust_list(0x555556b87660, 24) = 0 [pid 5489] chdir("./40") = 0 [pid 5489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5489] setpgid(0, 0) = 0 [ 100.858198][ T5483] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] <... umount2 resumed>) = 0 [pid 5489] <... openat resumed>) = 3 [pid 5489] write(3, "1000", 4 [pid 5012] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5489] <... write resumed>) = 4 [pid 5489] close(3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5489] <... close resumed>) = 0 [pid 5489] symlink("/dev/binderfs", "./binderfs" [pid 5012] newfstatat(AT_FDCWD, "./35/file1", ./strace-static-x86_64: Process 5490 attached [pid 5489] <... symlink resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5489] memfd_create("syzkaller", 0 [pid 5012] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5489] <... memfd_create resumed>) = 3 [pid 5489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5489] <... mmap resumed>) = 0x7f770c286000 [pid 5490] set_robust_list(0x555556b87660, 24) = 0 [pid 5490] chdir("./37") = 0 [pid 5490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5490] setpgid(0, 0) = 0 [pid 5490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5490] write(3, "1000", 4 [pid 5012] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5490] <... write resumed>) = 4 [pid 5490] close(3) = 0 [pid 5490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5490] memfd_create("syzkaller", 0) = 3 [pid 5490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", [pid 5490] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, [pid 5483] <... openat resumed>) = -1 EIO (Input/output error) [pid 5483] exit_group(0) = ? [ 100.889287][ T5481] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 100.912027][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5483] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5483, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4 [pid 5015] newfstatat(3, "", [pid 5012] <... close resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] rmdir("./35/file1" [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 [pid 5012] getdents64(3, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5012] close(3) = 0 [pid 5012] rmdir("./35" [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] unlink("./39/binderfs" [pid 5012] <... rmdir resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5015] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5481] <... openat resumed>) = -1 EIO (Input/output error) [pid 5481] exit_group(0) = ? [pid 5481] +++ exited with 0 +++ [pid 5490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] mkdir("./36", 0777 [pid 5489] <... write resumed>) = 2097152 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5481, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5012] <... mkdir resumed>) = 0 [pid 5489] munmap(0x7f770c286000, 2097152 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5014] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5489] <... munmap resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 5489] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5489] <... openat resumed>) = 4 [pid 5014] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5489] ioctl(4, LOOP_SET_FD, 3 [pid 5012] close(3 [pid 5014] <... openat resumed>) = 3 [ 100.936550][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 100.950673][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 100.966521][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 100.973265][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 100.974576][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./38/binderfs") = 0 [pid 5014] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5491 [pid 5489] <... ioctl resumed>) = 0 [pid 5489] close(3) = 0 [pid 5489] mkdir("./file1", 0777) = 0 [pid 5489] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5491 attached [pid 5491] set_robust_list(0x555556b87660, 24) = 0 [pid 5491] chdir("./36") = 0 [pid 5491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5491] setpgid(0, 0) = 0 [pid 5491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5491] write(3, "1000", 4) = 4 [pid 5491] close(3) = 0 [ 100.991732][ T5489] loop4: detected capacity change from 0 to 4096 [ 101.005852][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 101.018446][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 101.029372][ T5489] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5491] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5491] memfd_create("syzkaller", 0) = 3 [pid 5491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5490] <... write resumed>) = 2097152 [pid 5490] munmap(0x7f770c286000, 2097152) = 0 [pid 5490] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 101.041916][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 101.061849][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 101.074100][ T5489] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5490] ioctl(4, LOOP_SET_FD, 3 [pid 5017] <... umount2 resumed>) = 0 [ 101.086468][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 101.088522][ T5490] loop1: detected capacity change from 0 to 4096 [ 101.097687][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 101.104617][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 101.109247][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 101.122195][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 101.122221][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5017] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5489] <... mount resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5489] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] newfstatat(AT_FDCWD, "./37/file1", [pid 5489] <... openat resumed>) = 3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5489] chdir("./file1" [pid 5017] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5489] <... chdir resumed>) = 0 [pid 5489] ioctl(4, LOOP_CLR_FD [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5489] <... ioctl resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5489] close(4) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5489] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./37/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./37") = 0 [pid 5017] mkdir("./38", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5490] <... ioctl resumed>) = 0 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5493 [pid 5490] close(3) = 0 [pid 5490] mkdir("./file1", 0777) = 0 ./strace-static-x86_64: Process 5493 attached [pid 5490] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5493] set_robust_list(0x555556b87660, 24) = 0 [ 101.134720][ T5492] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.156423][ T5489] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5493] chdir("./38" [pid 5015] <... umount2 resumed>) = 0 [pid 5493] <... chdir resumed>) = 0 [pid 5493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5493] setpgid(0, 0) = 0 [pid 5493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5493] write(3, "1000", 4) = 4 [pid 5493] close(3) = 0 [pid 5493] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5015] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5493] memfd_create("syzkaller", 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5493] <... memfd_create resumed>) = 3 [pid 5493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] newfstatat(AT_FDCWD, "./39/file1", [pid 5493] <... mmap resumed>) = 0x7f770c286000 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5491] <... write resumed>) = 2097152 [pid 5491] munmap(0x7f770c286000, 2097152 [pid 5015] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [ 101.209627][ T5490] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.222282][ T5489] Remounting filesystem read-only [pid 5015] rmdir("./39/file1") = 0 [pid 5491] <... munmap resumed>) = 0 [pid 5491] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5491] ioctl(4, LOOP_SET_FD, 3 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./39" [pid 5493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./40", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5491] <... ioctl resumed>) = 0 [pid 5491] close(3) = 0 [pid 5491] mkdir("./file1", 0777 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5491] <... mkdir resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5494 [pid 5014] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5494 attached [pid 5014] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5491] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] newfstatat(AT_FDCWD, "./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5494] set_robust_list(0x555556b87660, 24 [ 101.253244][ T5489] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 101.260056][ T5491] loop0: detected capacity change from 0 to 4096 [ 101.274847][ T5490] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 101.279849][ T5489] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5014] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5494] <... set_robust_list resumed>) = 0 [pid 5493] <... write resumed>) = 2097152 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./38/file1" [pid 5494] chdir("./40" [pid 5493] munmap(0x7f770c286000, 2097152 [pid 5489] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... rmdir resumed>) = 0 [pid 5494] <... chdir resumed>) = 0 [pid 5493] <... munmap resumed>) = 0 [pid 5489] exit_group(0 [pid 5494] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5493] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5489] <... exit_group resumed>) = ? [pid 5494] <... prctl resumed>) = 0 [pid 5493] <... openat resumed>) = 4 [pid 5489] +++ exited with 0 +++ [pid 5494] setpgid(0, 0 [pid 5493] ioctl(4, LOOP_SET_FD, 3 [pid 5494] <... setpgid resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./38") = 0 [pid 5014] mkdir("./39", 0777 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5489, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5014] <... mkdir resumed>) = 0 [pid 5494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5493] <... ioctl resumed>) = 0 [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5494] <... openat resumed>) = 3 [pid 5493] close(3 [pid 5016] <... restart_syscall resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5494] write(3, "1000", 4 [pid 5493] <... close resumed>) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [ 101.319204][ T5491] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.329850][ T5489] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 101.347416][ T5491] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 101.354979][ T5493] loop5: detected capacity change from 0 to 4096 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5496 ./strace-static-x86_64: Process 5496 attached [pid 5496] set_robust_list(0x555556b87660, 24) = 0 [pid 5496] chdir("./39") = 0 [pid 5496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5494] <... write resumed>) = 4 [pid 5496] setpgid(0, 0) = 0 [pid 5496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5496] write(3, "1000", 4) = 4 [pid 5494] close(3 [pid 5016] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5493] mkdir("./file1", 0777 [pid 5491] <... mount resumed>) = 0 [pid 5490] <... mount resumed>) = 0 [pid 5496] close(3 [pid 5494] <... close resumed>) = 0 [pid 5493] <... mkdir resumed>) = 0 [pid 5491] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] <... close resumed>) = 0 [pid 5496] symlink("/dev/binderfs", "./binderfs" [pid 5494] symlink("/dev/binderfs", "./binderfs" [pid 5493] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5491] <... openat resumed>) = 3 [pid 5016] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5496] <... symlink resumed>) = 0 [pid 5494] <... symlink resumed>) = 0 [pid 5491] chdir("./file1" [pid 5016] <... openat resumed>) = 3 [pid 5490] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5491] <... chdir resumed>) = 0 [pid 5496] memfd_create("syzkaller", 0 [pid 5494] memfd_create("syzkaller", 0 [pid 5491] ioctl(4, LOOP_CLR_FD [pid 5016] newfstatat(3, "", [pid 5494] <... memfd_create resumed>) = 3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 101.366936][ T5495] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.394610][ T5497] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5016] getdents64(3, [pid 5494] <... mmap resumed>) = 0x7f770c286000 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5496] <... memfd_create resumed>) = 3 [pid 5491] <... ioctl resumed>) = 0 [pid 5016] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./40/binderfs") = 0 [pid 5016] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5491] close(4 [pid 5490] <... openat resumed>) = 3 [pid 5496] <... mmap resumed>) = 0x7f770c286000 [pid 5491] <... close resumed>) = 0 [pid 5490] chdir("./file1" [pid 5491] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5490] <... chdir resumed>) = 0 [pid 5490] ioctl(4, LOOP_CLR_FD) = 0 [pid 5490] close(4 [ 101.412682][ T5493] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.423008][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 101.433342][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 101.442405][ T5491] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 101.451443][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5490] <... close resumed>) = 0 [pid 5490] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 101.464196][ T5493] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 101.479034][ T5490] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 101.498246][ T5491] Remounting filesystem read-only [ 101.505740][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5493] <... mount resumed>) = 0 [pid 5494] <... write resumed>) = 2097152 [pid 5494] munmap(0x7f770c286000, 2097152) = 0 [pid 5494] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5494] ioctl(4, LOOP_SET_FD, 3 [pid 5496] munmap(0x7f770c286000, 2097152 [ 101.526286][ T5491] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 101.535438][ T5490] Remounting filesystem read-only [ 101.539569][ T5498] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.546969][ T5490] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 101.559206][ T5494] loop3: detected capacity change from 0 to 4096 [ 101.561114][ T5490] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5493] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5496] <... munmap resumed>) = 0 [pid 5493] <... openat resumed>) = 3 [pid 5496] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5494] <... ioctl resumed>) = 0 [pid 5493] chdir("./file1" [pid 5490] <... openat resumed>) = -1 EIO (Input/output error) [pid 5496] <... openat resumed>) = 4 [pid 5494] close(3 [pid 5493] <... chdir resumed>) = 0 [pid 5491] <... openat resumed>) = -1 EIO (Input/output error) [ 101.566436][ T5491] NILFS (loop0): repaired inode bitmap for reserved inodes [ 101.576141][ T5490] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 101.581245][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 101.596780][ T5491] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 101.603120][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5490] exit_group(0 [pid 5496] ioctl(4, LOOP_SET_FD, 3 [pid 5494] <... close resumed>) = 0 [pid 5493] ioctl(4, LOOP_CLR_FD [pid 5490] <... exit_group resumed>) = ? [pid 5494] mkdir("./file1", 0777 [pid 5493] <... ioctl resumed>) = 0 [pid 5490] +++ exited with 0 +++ [pid 5494] <... mkdir resumed>) = 0 [pid 5493] close(4 [pid 5494] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5493] <... close resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5490, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5493] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5491] exit_group(0 [pid 5496] <... ioctl resumed>) = 0 [pid 5013] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] close(3 [pid 5491] <... exit_group resumed>) = ? [pid 5016] <... umount2 resumed>) = 0 [pid 5496] <... close resumed>) = 0 [pid 5491] +++ exited with 0 +++ [pid 5016] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] mkdir("./file1", 0777 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] <... mkdir resumed>) = 0 [ 101.622828][ T5496] loop2: detected capacity change from 0 to 4096 [ 101.637642][ T5494] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.652515][ T5493] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] newfstatat(AT_FDCWD, "./40/file1", [pid 5496] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5491, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5013] newfstatat(3, "", [pid 5012] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(3, [pid 5012] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... openat resumed>) = 3 [pid 5013] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(3, "", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5012] getdents64(3, [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] unlink("./37/binderfs" [pid 5012] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... unlink resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./36/binderfs" [pid 5016] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... unlink resumed>) = 0 [pid 5012] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 101.669851][ T5494] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 101.677488][ T5496] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.690342][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 101.699765][ T5493] Remounting filesystem read-only [ 101.707665][ T5496] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 101.707956][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5496] <... mount resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5496] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5496] <... openat resumed>) = 3 [ 101.726786][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 101.727757][ T5499] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.736154][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 101.755896][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 101.757237][ T5493] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5016] getdents64(4, [pid 5496] chdir("./file1" [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5496] <... chdir resumed>) = 0 [pid 5016] getdents64(4, [pid 5496] ioctl(4, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5496] <... ioctl resumed>) = 0 [pid 5016] close(4 [pid 5496] close(4 [pid 5016] <... close resumed>) = 0 [pid 5496] <... close resumed>) = 0 [pid 5016] rmdir("./40/file1" [ 101.763951][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 101.772849][ T5493] NILFS (loop5): repaired inode bitmap for reserved inodes [ 101.779716][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 101.787556][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 101.794628][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 101.801902][ T5500] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5496] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5494] <... mount resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5494] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] getdents64(3, [pid 5494] <... openat resumed>) = 3 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5494] chdir("./file1" [pid 5016] close(3 [pid 5493] <... openat resumed>) = -1 EIO (Input/output error) [pid 5494] <... chdir resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5494] ioctl(4, LOOP_CLR_FD [pid 5016] rmdir("./40" [pid 5494] <... ioctl resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5494] close(4) = 0 [pid 5016] mkdir("./41", 0777 [pid 5494] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5493] exit_group(0) = ? [pid 5016] <... mkdir resumed>) = 0 [ 101.821566][ T5493] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 101.823156][ T5496] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 101.837665][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5013] <... umount2 resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5501 ./strace-static-x86_64: Process 5501 attached [pid 5501] set_robust_list(0x555556b87660, 24) = 0 [pid 5501] chdir("./41") = 0 [pid 5501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5501] setpgid(0, 0) = 0 [pid 5493] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5493, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5501] <... openat resumed>) = 3 [pid 5017] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] write(3, "1000", 4 [pid 5017] <... openat resumed>) = 3 [pid 5017] newfstatat(3, "", [pid 5501] <... write resumed>) = 4 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] getdents64(3, [pid 5501] close(3 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] newfstatat(AT_FDCWD, "./37/file1", [pid 5017] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5501] <... close resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./38/binderfs", [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5501] symlink("/dev/binderfs", "./binderfs" [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5501] <... symlink resumed>) = 0 [pid 5017] unlink("./38/binderfs" [pid 5013] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] memfd_create("syzkaller", 0 [pid 5017] <... unlink resumed>) = 0 [ 101.864771][ T5494] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] <... memfd_create resumed>) = 3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5501] <... mmap resumed>) = 0x7f770c286000 [pid 5013] <... openat resumed>) = 4 [ 101.917012][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 101.923763][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 101.927800][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 101.940294][ T5496] Remounting filesystem read-only [ 101.955748][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./37/file1" [pid 5501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [ 101.957392][ T5496] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 101.963810][ T5494] Remounting filesystem read-only [ 101.980668][ T5494] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 101.983498][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 101.989837][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 102.004368][ T5496] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5013] rmdir("./37" [pid 5501] <... write resumed>) = 2097152 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] mkdir("./38", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5501] munmap(0x7f770c286000, 2097152 [pid 5013] <... openat resumed>) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [ 102.013400][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 102.021759][ T5494] NILFS (loop3): repaired inode bitmap for reserved inodes [ 102.022019][ T5496] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 102.029802][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5501] <... munmap resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5501] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5496] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] <... umount2 resumed>) = 0 [pid 5501] <... openat resumed>) = 4 [pid 5501] ioctl(4, LOOP_SET_FD, 3 [pid 5496] exit_group(0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5502 [pid 5012] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] <... exit_group resumed>) = ? [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] +++ exited with 0 +++ [pid 5012] newfstatat(AT_FDCWD, "./36/file1", [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5496, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] <... openat resumed>) = 4 [pid 5501] <... ioctl resumed>) = 0 [pid 5014] newfstatat(3, "", [pid 5012] newfstatat(4, "", [pid 5501] close(3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5501] <... close resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5501] mkdir("./file1", 0777 [pid 5012] getdents64(4, [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] getdents64(4, [pid 5014] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] close(4 [pid 5014] unlink("./39/binderfs" [pid 5012] <... close resumed>) = 0 [pid 5501] <... mkdir resumed>) = 0 [pid 5501] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... unlink resumed>) = 0 [pid 5012] rmdir("./36/file1" [pid 5014] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5502 attached [pid 5502] set_robust_list(0x555556b87660, 24) = 0 [pid 5502] chdir("./38" [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./36" [pid 5502] <... chdir resumed>) = 0 [pid 5502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5502] setpgid(0, 0) = 0 [ 102.054188][ T5494] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 102.081899][ T5501] loop4: detected capacity change from 0 to 4096 [ 102.100332][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] mkdir("./37", 0777 [pid 5502] write(3, "1000", 4 [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5502] <... write resumed>) = 4 [pid 5502] close(3) = 0 [pid 5502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5502] memfd_create("syzkaller", 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5503 [pid 5502] <... memfd_create resumed>) = 3 [pid 5502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 ./strace-static-x86_64: Process 5503 attached [pid 5017] <... umount2 resumed>) = 0 [pid 5503] set_robust_list(0x555556b87660, 24 [pid 5017] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5503] <... set_robust_list resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5503] chdir("./37" [pid 5017] newfstatat(AT_FDCWD, "./38/file1", [pid 5503] <... chdir resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5503] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5494] <... openat resumed>) = -1 EIO (Input/output error) [pid 5494] exit_group(0) = ? [pid 5494] +++ exited with 0 +++ [ 102.109002][ T5501] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.135376][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 102.144141][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 102.152929][ T5501] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5503] <... prctl resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5503] setpgid(0, 0 [pid 5017] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5503] <... setpgid resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5494, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] newfstatat(4, "", [pid 5503] <... openat resumed>) = 3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5503] write(3, "1000", 4) = 4 [pid 5017] getdents64(4, [pid 5503] close(3 [pid 5015] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5503] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5503] symlink("/dev/binderfs", "./binderfs" [pid 5017] getdents64(4, [pid 5015] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5503] <... symlink resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5503] memfd_create("syzkaller", 0 [pid 5017] close(4 [pid 5015] newfstatat(3, "", [pid 5503] <... memfd_create resumed>) = 3 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./38/file1" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] getdents64(3, [pid 5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5503] <... mmap resumed>) = 0x7f770c286000 [pid 5017] close(3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5501] <... mount resumed>) = 0 [pid 5501] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5501] chdir("./file1") = 0 [pid 5501] ioctl(4, LOOP_CLR_FD) = 0 [pid 5501] close(4 [pid 5017] <... close resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5017] rmdir("./38" [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5501] <... close resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] unlink("./40/binderfs" [pid 5017] mkdir("./39", 0777 [pid 5015] <... unlink resumed>) = 0 [pid 5501] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... mkdir resumed>) = 0 [pid 5015] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [ 102.163692][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 102.177283][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 102.184799][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 102.209265][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 102.210009][ T5501] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 102.230744][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 102.230781][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 102.230797][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 102.230815][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5505 ./strace-static-x86_64: Process 5505 attached [pid 5505] set_robust_list(0x555556b87660, 24) = 0 [pid 5505] chdir("./39") = 0 [pid 5505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5505] setpgid(0, 0) = 0 [pid 5505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5503] <... write resumed>) = 2097152 [pid 5502] <... write resumed>) = 2097152 [ 102.230830][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 102.245816][ T5504] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5505] write(3, "1000", 4 [pid 5503] munmap(0x7f770c286000, 2097152 [pid 5015] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5505] <... write resumed>) = 4 [pid 5503] <... munmap resumed>) = 0 [pid 5015] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5505] close(3 [pid 5503] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5014] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5505] <... close resumed>) = 0 [pid 5503] <... openat resumed>) = 4 [pid 5015] newfstatat(AT_FDCWD, "./40/file1", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5505] symlink("/dev/binderfs", "./binderfs" [pid 5503] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] newfstatat(AT_FDCWD, "./39/file1", [pid 5505] <... symlink resumed>) = 0 [pid 5505] memfd_create("syzkaller", 0 [pid 5015] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5505] <... memfd_create resumed>) = 3 [pid 5505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5503] <... ioctl resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5501] <... openat resumed>) = -1 EIO (Input/output error) [pid 5502] munmap(0x7f770c286000, 2097152 [pid 5014] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5505] <... mmap resumed>) = 0x7f770c286000 [pid 5503] close(3 [pid 5015] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5501] exit_group(0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5503] <... close resumed>) = 0 [pid 5501] <... exit_group resumed>) = ? [pid 5503] mkdir("./file1", 0777 [pid 5015] <... openat resumed>) = 4 [pid 5014] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5501] +++ exited with 0 +++ [pid 5503] <... mkdir resumed>) = 0 [pid 5015] newfstatat(4, "", [pid 5014] <... openat resumed>) = 4 [pid 5503] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5502] <... munmap resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5501, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 102.322439][ T5501] Remounting filesystem read-only [ 102.330408][ T5501] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 102.339379][ T5501] NILFS (loop4): repaired inode bitmap for reserved inodes [ 102.340304][ T5503] loop0: detected capacity change from 0 to 4096 [ 102.355802][ T5501] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] newfstatat(4, "", [pid 5505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5502] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5016] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5502] <... openat resumed>) = 4 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, [pid 5502] ioctl(4, LOOP_SET_FD, 3 [pid 5016] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] getdents64(4, [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5502] <... ioctl resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] getdents64(4, [pid 5502] close(3 [pid 5015] close(4 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5502] <... close resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5014] close(4 [pid 5502] mkdir("./file1", 0777 [pid 5015] rmdir("./40/file1" [pid 5014] <... close resumed>) = 0 [pid 5502] <... mkdir resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5014] rmdir("./39/file1" [pid 5502] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] getdents64(3, [pid 5014] <... rmdir resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] getdents64(3, [pid 5015] close(3 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] <... close resumed>) = 0 [pid 5014] close(3 [pid 5015] rmdir("./40" [pid 5014] <... close resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5015] <... rmdir resumed>) = 0 [ 102.392528][ T5503] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.407363][ T5502] loop1: detected capacity change from 0 to 4096 [ 102.414357][ T5503] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 102.426876][ T5502] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5014] rmdir("./39" [pid 5503] <... mount resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5015] mkdir("./41", 0777 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5014] mkdir("./40", 0777 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... mkdir resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] <... openat resumed>) = 3 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5015] close(3 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] <... close resumed>) = 0 [pid 5014] close(3 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5507 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5508 ./strace-static-x86_64: Process 5507 attached [pid 5507] set_robust_list(0x555556b87660, 24) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5507] chdir("./41") = 0 [pid 5507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5507] setpgid(0, 0) = 0 [pid 5507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5507] write(3, "1000", 4 [pid 5503] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] getdents64(3, [pid 5507] <... write resumed>) = 4 [pid 5503] <... openat resumed>) = 3 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5507] close(3) = 0 [pid 5507] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5503] chdir("./file1" [pid 5016] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5507] memfd_create("syzkaller", 0 [pid 5503] <... chdir resumed>) = 0 [pid 5507] <... memfd_create resumed>) = 3 [pid 5505] <... write resumed>) = 2097152 [pid 5503] ioctl(4, LOOP_CLR_FD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 ./strace-static-x86_64: Process 5508 attached [pid 5503] <... ioctl resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5508] set_robust_list(0x555556b87660, 24 [pid 5503] close(4 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5508] <... set_robust_list resumed>) = 0 [pid 5503] <... close resumed>) = 0 [pid 5508] chdir("./40") = 0 [pid 5503] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] unlink("./41/binderfs" [pid 5508] prctl(PR_SET_PDEATHSIG, SIGKILL [ 102.434739][ T5506] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5505] munmap(0x7f770c286000, 2097152 [pid 5508] <... prctl resumed>) = 0 [pid 5016] <... unlink resumed>) = 0 [pid 5505] <... munmap resumed>) = 0 [pid 5505] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5505] ioctl(4, LOOP_SET_FD, 3 [pid 5508] setpgid(0, 0 [ 102.478096][ T5502] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 102.490840][ T5503] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 102.494647][ T5505] loop5: detected capacity change from 0 to 4096 [ 102.512126][ T5503] Remounting filesystem read-only [ 102.512543][ T5503] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5016] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] <... setpgid resumed>) = 0 [pid 5508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5508] write(3, "1000", 4) = 4 [pid 5508] close(3 [pid 5507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5508] <... close resumed>) = 0 [pid 5508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5508] memfd_create("syzkaller", 0) = 3 [pid 5508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 102.527229][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 102.534578][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 102.543261][ T5503] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5505] <... ioctl resumed>) = 0 [pid 5505] close(3) = 0 [pid 5505] mkdir("./file1", 0777 [pid 5502] <... mount resumed>) = 0 [pid 5502] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5502] chdir("./file1" [pid 5505] <... mkdir resumed>) = 0 [pid 5502] <... chdir resumed>) = 0 [pid 5505] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5502] ioctl(4, LOOP_CLR_FD) = 0 [ 102.582844][ T5509] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.609608][ T5505] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5502] close(4) = 0 [pid 5507] <... write resumed>) = 2097152 [pid 5502] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5507] munmap(0x7f770c286000, 2097152) = 0 [pid 5508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5507] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5503] <... openat resumed>) = -1 EIO (Input/output error) [pid 5507] <... openat resumed>) = 4 [ 102.610487][ T5503] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 102.624982][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 102.642366][ T5502] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 102.642796][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 102.660033][ T5502] Remounting filesystem read-only [ 102.665050][ T5505] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5503] exit_group(0 [pid 5507] ioctl(4, LOOP_SET_FD, 3 [pid 5503] <... exit_group resumed>) = ? [pid 5503] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5503, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./37/binderfs") = 0 [pid 5012] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5507] <... ioctl resumed>) = 0 [ 102.671885][ T5502] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 102.689573][ T5502] NILFS (loop1): repaired inode bitmap for reserved inodes [ 102.690757][ T5507] loop3: detected capacity change from 0 to 4096 [ 102.703055][ T5502] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 102.704223][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 102.727117][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5508] <... write resumed>) = 2097152 [pid 5507] close(3 [pid 5508] munmap(0x7f770c286000, 2097152 [pid 5507] <... close resumed>) = 0 [pid 5508] <... munmap resumed>) = 0 [pid 5507] mkdir("./file1", 0777) = 0 [pid 5508] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5507] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5508] <... openat resumed>) = 4 [pid 5508] ioctl(4, LOOP_SET_FD, 3 [pid 5502] <... openat resumed>) = -1 EIO (Input/output error) [pid 5502] exit_group(0) = ? [ 102.733944][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 102.734316][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 102.754757][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 102.763286][ T5508] loop2: detected capacity change from 0 to 4096 [ 102.770764][ T5507] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5508] <... ioctl resumed>) = 0 [pid 5502] +++ exited with 0 +++ [pid 5016] <... umount2 resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5502, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5013] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./38/binderfs") = 0 [pid 5013] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] close(3 [pid 5016] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5505] <... mount resumed>) = 0 [pid 5505] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5505] chdir("./file1") = 0 [pid 5505] ioctl(4, LOOP_CLR_FD) = 0 [pid 5505] close(4) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 102.776638][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 102.792398][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 102.801505][ T5510] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.812365][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 102.812478][ T5507] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5505] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5508] <... close resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./41/file1", [pid 5508] mkdir("./file1", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5508] <... mkdir resumed>) = 0 [pid 5016] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", [pid 5508] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [ 102.820529][ T5505] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 102.841254][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 102.859004][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 102.860265][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./41/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./41") = 0 [pid 5016] mkdir("./42", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5507] <... mount resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5507] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5507] chdir("./file1") = 0 [pid 5507] ioctl(4, LOOP_CLR_FD [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5507] <... ioctl resumed>) = 0 [pid 5016] close(3 [pid 5507] close(4) = 0 [pid 5016] <... close resumed>) = 0 [ 102.882868][ T5508] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.893057][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 102.908130][ T5511] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.921297][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5507] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5512 attached [pid 5512] set_robust_list(0x555556b87660, 24) = 0 [pid 5512] chdir("./42") = 0 [pid 5512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5512] setpgid(0, 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5512 [pid 5512] <... setpgid resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5512] <... openat resumed>) = 3 [pid 5012] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", [pid 5512] write(3, "1000", 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5512] <... write resumed>) = 4 [pid 5012] getdents64(4, [pid 5512] close(3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5512] <... close resumed>) = 0 [ 102.929340][ T5508] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 102.941194][ T5507] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 102.958284][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 102.968861][ T5505] Remounting filesystem read-only [ 102.976571][ T5507] Remounting filesystem read-only [pid 5512] symlink("/dev/binderfs", "./binderfs" [pid 5012] getdents64(4, [pid 5512] <... symlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5512] memfd_create("syzkaller", 0 [pid 5012] close(4 [pid 5512] <... memfd_create resumed>) = 3 [pid 5512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] <... close resumed>) = 0 [pid 5512] <... mmap resumed>) = 0x7f770c286000 [pid 5012] rmdir("./37/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [ 102.984358][ T5507] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 102.984473][ T5505] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 102.994058][ T5507] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5012] rmdir("./37" [pid 5512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... rmdir resumed>) = 0 [pid 5508] <... mount resumed>) = 0 [pid 5012] mkdir("./38", 0777 [pid 5508] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5012] <... mkdir resumed>) = 0 [pid 5508] chdir("./file1") = 0 [pid 5508] ioctl(4, LOOP_CLR_FD [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5508] <... ioctl resumed>) = 0 [pid 5508] close(4 [pid 5012] <... openat resumed>) = 3 [pid 5508] <... close resumed>) = 0 [pid 5508] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... close resumed>) = 0 [pid 5012] close(3 [pid 5013] rmdir("./38/file1" [pid 5012] <... close resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [ 103.030251][ T5513] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.056182][ T5508] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 103.059128][ T5505] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5013] close(3) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5514 [pid 5013] rmdir("./38"./strace-static-x86_64: Process 5514 attached ) = 0 [pid 5514] set_robust_list(0x555556b87660, 24 [pid 5013] mkdir("./39", 0777 [pid 5514] <... set_robust_list resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5514] chdir("./38" [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5514] <... chdir resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5514] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5514] <... prctl resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5514] setpgid(0, 0 [pid 5013] close(3 [pid 5514] <... setpgid resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5515 [pid 5514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5514] write(3, "1000", 4./strace-static-x86_64: Process 5515 attached ) = 4 [pid 5515] set_robust_list(0x555556b87660, 24 [pid 5514] close(3 [pid 5515] <... set_robust_list resumed>) = 0 [pid 5514] <... close resumed>) = 0 [pid 5515] chdir("./39" [pid 5514] symlink("/dev/binderfs", "./binderfs" [pid 5515] <... chdir resumed>) = 0 [pid 5514] <... symlink resumed>) = 0 [pid 5512] <... write resumed>) = 2097152 [pid 5515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5514] memfd_create("syzkaller", 0 [pid 5515] setpgid(0, 0 [pid 5514] <... memfd_create resumed>) = 3 [pid 5515] <... setpgid resumed>) = 0 [pid 5514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5514] <... mmap resumed>) = 0x7f770c286000 [pid 5515] <... openat resumed>) = 3 [pid 5512] munmap(0x7f770c286000, 2097152 [pid 5515] write(3, "1000", 4) = 4 [pid 5515] close(3) = 0 [pid 5515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5515] memfd_create("syzkaller", 0) = 3 [ 103.085038][ T5507] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 103.122409][ T5508] Remounting filesystem read-only [pid 5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5512] <... munmap resumed>) = 0 [pid 5512] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5507] <... openat resumed>) = -1 EIO (Input/output error) [pid 5507] exit_group(0) = ? [pid 5507] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5507, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5512] <... openat resumed>) = 4 [pid 5015] newfstatat(3, "", [pid 5512] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5512] <... ioctl resumed>) = 0 [ 103.142877][ T5508] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 103.156526][ T5505] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 103.176064][ T5512] loop4: detected capacity change from 0 to 4096 [ 103.177705][ T5508] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5015] unlink("./41/binderfs" [pid 5515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5512] close(3 [pid 5505] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... unlink resumed>) = 0 [pid 5015] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5512] <... close resumed>) = 0 [pid 5505] exit_group(0 [pid 5512] mkdir("./file1", 0777) = 0 [pid 5505] <... exit_group resumed>) = ? [pid 5505] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5505, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5512] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5514] <... write resumed>) = 2097152 [pid 5508] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./39/binderfs") = 0 [ 103.193002][ T5508] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 103.208824][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 103.223228][ T5512] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.232300][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5017] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5514] munmap(0x7f770c286000, 2097152 [pid 5508] exit_group(0 [pid 5514] <... munmap resumed>) = 0 [pid 5508] <... exit_group resumed>) = ? [pid 5514] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5508] +++ exited with 0 +++ [pid 5514] <... openat resumed>) = 4 [pid 5514] ioctl(4, LOOP_SET_FD, 3 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5508, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [ 103.240960][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 103.241213][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 103.251356][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 103.257070][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 103.272227][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 103.275076][ T5512] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5515] <... write resumed>) = 2097152 [pid 5515] munmap(0x7f770c286000, 2097152 [pid 5014] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5515] <... munmap resumed>) = 0 [pid 5515] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5515] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5514] <... ioctl resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5514] close(3) = 0 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5514] mkdir("./file1", 0777 [pid 5014] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5514] <... mkdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5514] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./40/binderfs") = 0 [pid 5515] <... ioctl resumed>) = 0 [pid 5515] close(3) = 0 [pid 5515] mkdir("./file1", 0777) = 0 [ 103.279898][ T5514] loop0: detected capacity change from 0 to 4096 [ 103.296849][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 103.298950][ T5515] loop1: detected capacity change from 0 to 4096 [ 103.312602][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 103.322019][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 103.333675][ T5514] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5014] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5515] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5512] <... mount resumed>) = 0 [pid 5512] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5512] chdir("./file1") = 0 [pid 5512] ioctl(4, LOOP_CLR_FD) = 0 [pid 5512] close(4) = 0 [ 103.347089][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 103.351043][ T5515] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.353841][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 103.353882][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 103.353898][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5512] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 103.368384][ T5512] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 103.400348][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 103.401376][ T5516] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.408753][ T5514] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 103.418793][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 103.435072][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5015] newfstatat(AT_FDCWD, "./41/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./41/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./41" [pid 5514] <... mount resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5514] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] mkdir("./42", 0777 [pid 5514] <... openat resumed>) = 3 [pid 5017] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./39/file1", [pid 5015] <... mkdir resumed>) = 0 [pid 5514] chdir("./file1" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5514] <... chdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5514] ioctl(4, LOOP_CLR_FD [pid 5015] <... openat resumed>) = 3 [pid 5514] <... ioctl resumed>) = 0 [pid 5514] close(4 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5017] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5514] <... close resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./39/file1") = 0 [ 103.441069][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 103.456230][ T5515] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 103.470207][ T5512] Remounting filesystem read-only [ 103.487190][ T5517] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5017] getdents64(3, [pid 5514] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./39") = 0 [pid 5017] mkdir("./40", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5520 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5519 ./strace-static-x86_64: Process 5520 attached [pid 5520] set_robust_list(0x555556b87660, 24./strace-static-x86_64: Process 5519 attached ) = 0 [pid 5519] set_robust_list(0x555556b87660, 24 [pid 5515] <... mount resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5519] <... set_robust_list resumed>) = 0 [pid 5515] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5519] chdir("./40" [pid 5515] <... openat resumed>) = 3 [pid 5519] <... chdir resumed>) = 0 [pid 5515] chdir("./file1" [pid 5520] chdir("./42" [pid 5519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5515] <... chdir resumed>) = 0 [pid 5519] <... prctl resumed>) = 0 [pid 5515] ioctl(4, LOOP_CLR_FD [pid 5014] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5520] <... chdir resumed>) = 0 [pid 5519] setpgid(0, 0 [pid 5515] <... ioctl resumed>) = 0 [ 103.522912][ T5514] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 103.544610][ T5512] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 103.547174][ T5518] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.566468][ T5514] Remounting filesystem read-only [pid 5520] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5519] <... setpgid resumed>) = 0 [pid 5515] close(4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5515] <... close resumed>) = 0 [pid 5519] <... openat resumed>) = 3 [pid 5515] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5519] write(3, "1000", 4) = 4 [pid 5519] close(3) = 0 [pid 5519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5519] memfd_create("syzkaller", 0) = 3 [pid 5519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5520] <... prctl resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./40/file1", [pid 5520] setpgid(0, 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5520] <... setpgid resumed>) = 0 [pid 5014] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5520] <... openat resumed>) = 3 [pid 5014] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5520] write(3, "1000", 4 [pid 5014] <... openat resumed>) = 4 [ 103.575239][ T5512] NILFS (loop4): repaired inode bitmap for reserved inodes [ 103.583158][ T5515] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 103.593941][ T5514] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 103.607791][ T5512] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5520] <... write resumed>) = 4 [pid 5014] newfstatat(4, "", [pid 5520] close(3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5520] <... close resumed>) = 0 [pid 5014] getdents64(4, [pid 5520] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5512] <... openat resumed>) = -1 EIO (Input/output error) [pid 5520] <... symlink resumed>) = 0 [pid 5512] exit_group(0 [pid 5014] getdents64(4, [pid 5520] memfd_create("syzkaller", 0 [pid 5514] <... openat resumed>) = -1 EIO (Input/output error) [pid 5512] <... exit_group resumed>) = ? [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5520] <... memfd_create resumed>) = 3 [pid 5520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5514] exit_group(0 [pid 5512] +++ exited with 0 +++ [pid 5014] close(4 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5512, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5520] <... mmap resumed>) = 0x7f770c286000 [pid 5514] <... exit_group resumed>) = ? [pid 5514] +++ exited with 0 +++ [pid 5016] <... restart_syscall resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./40/file1" [pid 5016] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5514, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, [pid 5014] getdents64(3, [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [ 103.627522][ T5514] NILFS (loop0): repaired inode bitmap for reserved inodes [ 103.637910][ T5514] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 103.644370][ T5515] Remounting filesystem read-only [pid 5016] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./42/binderfs" [pid 5014] close(3 [pid 5012] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... unlink resumed>) = 0 [pid 5016] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 103.676120][ T5515] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 103.684161][ T5515] NILFS (loop1): repaired inode bitmap for reserved inodes [ 103.694620][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 103.705899][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 103.708887][ T5515] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5520] <... write resumed>) = 2097152 [pid 5014] rmdir("./40" [pid 5012] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5519] <... write resumed>) = 2097152 [pid 5519] munmap(0x7f770c286000, 2097152) = 0 [pid 5519] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5519] ioctl(4, LOOP_SET_FD, 3 [pid 5520] munmap(0x7f770c286000, 2097152 [pid 5515] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5520] <... munmap resumed>) = 0 [pid 5520] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5520] ioctl(4, LOOP_SET_FD, 3 [pid 5515] exit_group(0 [pid 5014] mkdir("./41", 0777 [pid 5012] newfstatat(3, "", [pid 5520] <... ioctl resumed>) = 0 [pid 5520] close(3) = 0 [pid 5520] mkdir("./file1", 0777) = 0 [pid 5520] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... mkdir resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5519] <... ioctl resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5515] <... exit_group resumed>) = ? [pid 5012] getdents64(3, [pid 5014] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5012] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(3 [pid 5012] newfstatat(AT_FDCWD, "./38/binderfs", [pid 5014] <... close resumed>) = 0 [pid 5519] close(3) = 0 [pid 5519] mkdir("./file1", 0777) = 0 [ 103.717986][ T5519] loop5: detected capacity change from 0 to 4096 [ 103.729948][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 103.740454][ T5520] loop3: detected capacity change from 0 to 4096 [ 103.742179][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 103.755067][ T5520] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.756493][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5519] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5515] +++ exited with 0 +++ [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5521 attached [pid 5012] unlink("./38/binderfs" [pid 5521] set_robust_list(0x555556b87660, 24 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5521 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5515, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5521] <... set_robust_list resumed>) = 0 [pid 5013] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... unlink resumed>) = 0 [pid 5521] chdir("./41" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5521] <... chdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] <... openat resumed>) = 3 [pid 5521] <... prctl resumed>) = 0 [pid 5013] newfstatat(3, "", [pid 5521] setpgid(0, 0) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] getdents64(3, [pid 5521] <... openat resumed>) = 3 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5521] write(3, "1000", 4 [pid 5013] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5521] <... write resumed>) = 4 [pid 5013] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5521] close(3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5521] <... close resumed>) = 0 [pid 5013] unlink("./39/binderfs" [pid 5521] symlink("/dev/binderfs", "./binderfs" [pid 5013] <... unlink resumed>) = 0 [pid 5521] <... symlink resumed>) = 0 [pid 5013] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 103.779245][ T5519] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.783344][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 103.797772][ T5520] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 103.810994][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5521] memfd_create("syzkaller", 0) = 3 [pid 5521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = 0 [ 103.824830][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 103.845928][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 103.846917][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 103.854927][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 103.868332][ T5519] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5521] <... write resumed>) = 2097152 [pid 5016] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./42/file1", [pid 5521] munmap(0x7f770c286000, 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5521] <... munmap resumed>) = 0 [pid 5016] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5521] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5521] <... openat resumed>) = 4 [ 103.871962][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 103.880722][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 103.893232][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 103.900578][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 103.909082][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 103.918750][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5016] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5521] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... openat resumed>) = 4 [pid 5521] <... ioctl resumed>) = 0 [pid 5520] <... mount resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5521] close(3 [pid 5520] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5521] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5520] <... openat resumed>) = 3 [pid 5521] mkdir("./file1", 0777 [pid 5520] chdir("./file1" [pid 5016] getdents64(4, [pid 5521] <... mkdir resumed>) = 0 [pid 5520] <... chdir resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5521] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5520] ioctl(4, LOOP_CLR_FD [pid 5016] getdents64(4, [pid 5520] <... ioctl resumed>) = 0 [pid 5519] <... mount resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5520] close(4 [pid 5519] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] close(4 [pid 5519] <... openat resumed>) = 3 [pid 5519] chdir("./file1") = 0 [pid 5519] ioctl(4, LOOP_CLR_FD) = 0 [pid 5519] close(4) = 0 [ 103.926750][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 103.934642][ T5521] loop2: detected capacity change from 0 to 4096 [ 103.936254][ T5522] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.960714][ T5523] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5519] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5520] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5520] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] rmdir("./42/file1" [pid 5013] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... rmdir resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(3, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3 [pid 5013] newfstatat(AT_FDCWD, "./39/file1", [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./42" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] getdents64(4, [pid 5016] <... rmdir resumed>) = 0 [pid 5013] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] mkdir("./43", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... openat resumed>) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5013] <... openat resumed>) = 4 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] newfstatat(4, "", [pid 5016] close(3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] getdents64(4, [pid 5012] close(4) = 0 [pid 5012] rmdir("./38/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./38") = 0 [pid 5012] mkdir("./39", 0777) = 0 [ 103.963425][ T5521] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.984507][ T5519] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 104.001694][ T5520] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5524 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./39/file1") = 0 [pid 5012] close(3./strace-static-x86_64: Process 5524 attached [pid 5013] getdents64(3, [pid 5524] set_robust_list(0x555556b87660, 24) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5524] chdir("./43" [pid 5013] close(3 [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5525 [pid 5524] <... chdir resumed>) = 0 [pid 5524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] <... close resumed>) = 0 [pid 5524] <... prctl resumed>) = 0 [pid 5013] rmdir("./39" [pid 5524] setpgid(0, 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5524] <... setpgid resumed>) = 0 [pid 5013] mkdir("./40", 0777 [pid 5524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] <... mkdir resumed>) = 0 [pid 5524] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5524] write(3, "1000", 4) = 4 [pid 5013] <... openat resumed>) = 3 [pid 5524] close(3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5524] <... close resumed>) = 0 [pid 5524] symlink("/dev/binderfs", "./binderfs" [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5524] <... symlink resumed>) = 0 [pid 5013] close(3 [pid 5524] memfd_create("syzkaller", 0 [pid 5013] <... close resumed>) = 0 [pid 5524] <... memfd_create resumed>) = 3 [pid 5524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5524] <... mmap resumed>) = 0x7f770c286000 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5526 ./strace-static-x86_64: Process 5526 attached [pid 5526] set_robust_list(0x555556b87660, 24) = 0 [pid 5526] chdir("./40"./strace-static-x86_64: Process 5525 attached [pid 5525] set_robust_list(0x555556b87660, 24) = 0 [pid 5526] <... chdir resumed>) = 0 [ 104.023312][ T5521] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 104.038063][ T5519] Remounting filesystem read-only [ 104.048922][ T5520] Remounting filesystem read-only [ 104.069441][ T5519] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [pid 5525] chdir("./39" [pid 5526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5525] <... chdir resumed>) = 0 [pid 5526] <... prctl resumed>) = 0 [pid 5525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5521] <... mount resumed>) = 0 [pid 5526] setpgid(0, 0 [pid 5525] <... prctl resumed>) = 0 [pid 5521] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5526] <... setpgid resumed>) = 0 [pid 5525] setpgid(0, 0 [pid 5526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5525] <... setpgid resumed>) = 0 [pid 5526] <... openat resumed>) = 3 [pid 5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5526] write(3, "1000", 4 [pid 5525] <... openat resumed>) = 3 [pid 5524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5521] <... openat resumed>) = 3 [pid 5525] write(3, "1000", 4) = 4 [pid 5525] close(3) = 0 [pid 5525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5525] memfd_create("syzkaller", 0 [pid 5526] <... write resumed>) = 4 [pid 5525] <... memfd_create resumed>) = 3 [pid 5521] chdir("./file1" [pid 5526] close(3 [pid 5525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5521] <... chdir resumed>) = 0 [pid 5526] <... close resumed>) = 0 [pid 5525] <... mmap resumed>) = 0x7f770c286000 [pid 5521] ioctl(4, LOOP_CLR_FD [pid 5526] symlink("/dev/binderfs", "./binderfs" [pid 5521] <... ioctl resumed>) = 0 [pid 5526] <... symlink resumed>) = 0 [pid 5521] close(4 [pid 5526] memfd_create("syzkaller", 0 [pid 5521] <... close resumed>) = 0 [ 104.091908][ T5520] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 104.091965][ T5527] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.121178][ T5520] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5526] <... memfd_create resumed>) = 3 [pid 5521] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5526] <... mmap resumed>) = 0x7f770c286000 [pid 5525] <... write resumed>) = 2097152 [ 104.139790][ T5519] NILFS (loop5): repaired inode bitmap for reserved inodes [ 104.147782][ T5520] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 104.157280][ T5519] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 104.163544][ T5521] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5525] munmap(0x7f770c286000, 2097152) = 0 [pid 5519] <... openat resumed>) = -1 EIO (Input/output error) [pid 5519] exit_group(0 [pid 5524] <... write resumed>) = 2097152 [pid 5524] munmap(0x7f770c286000, 2097152 [pid 5519] <... exit_group resumed>) = ? [pid 5525] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5524] <... munmap resumed>) = 0 [pid 5519] +++ exited with 0 +++ [pid 5525] <... openat resumed>) = 4 [pid 5524] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5519, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5525] ioctl(4, LOOP_SET_FD, 3 [pid 5524] <... openat resumed>) = 4 [pid 5520] <... openat resumed>) = -1 EIO (Input/output error) [pid 5524] ioctl(4, LOOP_SET_FD, 3 [pid 5520] exit_group(0 [pid 5524] <... ioctl resumed>) = 0 [pid 5520] <... exit_group resumed>) = ? [pid 5017] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5524] close(3 [pid 5520] +++ exited with 0 +++ [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5524] <... close resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5524] mkdir("./file1", 0777 [pid 5017] <... openat resumed>) = 3 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5520, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5524] <... mkdir resumed>) = 0 [pid 5017] newfstatat(3, "", [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5524] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5015] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5017] unlink("./40/binderfs" [pid 5015] newfstatat(3, "", [pid 5017] <... unlink resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./42/binderfs") = 0 [pid 5015] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5526] <... write resumed>) = 2097152 [ 104.242250][ T5521] Remounting filesystem read-only [ 104.256871][ T5524] loop4: detected capacity change from 0 to 4096 [ 104.258125][ T5525] loop0: detected capacity change from 0 to 4096 [ 104.271180][ T5524] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.276085][ T5521] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5526] munmap(0x7f770c286000, 2097152 [pid 5525] <... ioctl resumed>) = 0 [pid 5526] <... munmap resumed>) = 0 [pid 5526] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5525] close(3 [pid 5521] <... openat resumed>) = -1 EIO (Input/output error) [pid 5526] ioctl(4, LOOP_SET_FD, 3 [pid 5525] <... close resumed>) = 0 [ 104.289611][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 104.290622][ T5521] NILFS (loop2): repaired inode bitmap for reserved inodes [ 104.297238][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 104.304123][ T5521] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 104.313445][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 104.335214][ T5526] loop1: detected capacity change from 0 to 4096 [pid 5525] mkdir("./file1", 0777 [pid 5521] exit_group(0 [pid 5525] <... mkdir resumed>) = 0 [pid 5521] <... exit_group resumed>) = ? [pid 5525] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5526] <... ioctl resumed>) = 0 [pid 5526] close(3) = 0 [pid 5526] mkdir("./file1", 0777 [pid 5521] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5521, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5014] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./41/binderfs") = 0 [pid 5014] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5526] <... mkdir resumed>) = 0 [ 104.336707][ T5524] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 104.343031][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 104.363700][ T5525] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.366919][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 104.381446][ T5526] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5526] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5524] <... mount resumed>) = 0 [pid 5524] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5524] chdir("./file1") = 0 [pid 5524] ioctl(4, LOOP_CLR_FD [pid 5525] <... mount resumed>) = 0 [pid 5524] <... ioctl resumed>) = 0 [ 104.382962][ T5525] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 104.391570][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 104.402138][ T5528] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.408148][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 104.427835][ T5529] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5525] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5524] close(4 [pid 5525] <... openat resumed>) = 3 [pid 5524] <... close resumed>) = 0 [pid 5525] chdir("./file1" [pid 5524] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5525] <... chdir resumed>) = 0 [ 104.438850][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 104.439234][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 104.447773][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 104.454345][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 104.469632][ T5526] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5525] ioctl(4, LOOP_CLR_FD) = 0 [pid 5525] close(4) = 0 [ 104.479292][ T5524] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 104.481660][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 104.501059][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 104.501097][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 104.501113][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 104.514593][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 104.525786][ T5524] Remounting filesystem read-only [ 104.531371][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5525] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5526] <... mount resumed>) = 0 [pid 5526] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5526] chdir("./file1") = 0 [pid 5526] ioctl(4, LOOP_CLR_FD) = 0 [pid 5526] close(4) = 0 [ 104.548939][ T5525] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 104.556151][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 104.571640][ T5524] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 104.580925][ T5525] Remounting filesystem read-only [ 104.581594][ T5530] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.596434][ T5525] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 104.596898][ T5526] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 104.605129][ T5525] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5526] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... umount2 resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./42/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./42/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./42") = 0 [pid 5015] mkdir("./43", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 104.647693][ T5524] NILFS (loop4): repaired inode bitmap for reserved inodes [ 104.671481][ T5524] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5531 attached [pid 5525] <... openat resumed>) = -1 EIO (Input/output error) [pid 5524] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5531] set_robust_list(0x555556b87660, 24 [pid 5525] exit_group(0 [pid 5524] exit_group(0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5531 [pid 5014] newfstatat(AT_FDCWD, "./41/file1", [pid 5531] <... set_robust_list resumed>) = 0 [pid 5525] <... exit_group resumed>) = ? [pid 5524] <... exit_group resumed>) = ? [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5531] chdir("./43" [pid 5525] +++ exited with 0 +++ [pid 5524] +++ exited with 0 +++ [pid 5014] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5531] <... chdir resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5524, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5525, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5531] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5531] <... prctl resumed>) = 0 [pid 5531] setpgid(0, 0 [pid 5014] <... openat resumed>) = 4 [pid 5531] <... setpgid resumed>) = 0 [pid 5014] newfstatat(4, "", [pid 5531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5531] <... openat resumed>) = 3 [pid 5012] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5531] write(3, "1000", 4 [pid 5016] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] getdents64(4, [pid 5531] <... write resumed>) = 4 [pid 5016] <... openat resumed>) = 3 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... openat resumed>) = 3 [pid 5017] <... umount2 resumed>) = 0 [pid 5531] close(3 [pid 5017] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(3, "", [pid 5014] getdents64(4, [pid 5012] newfstatat(3, "", [pid 5531] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5531] symlink("/dev/binderfs", "./binderfs" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./40/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 104.688680][ T5525] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 104.696538][ T5526] Remounting filesystem read-only [ 104.737139][ T5526] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./40/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5016] getdents64(3, [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./40" [pid 5531] <... symlink resumed>) = 0 [pid 5014] close(4 [pid 5012] getdents64(3, [pid 5014] <... close resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] rmdir("./41/file1" [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... rmdir resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5016] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5531] memfd_create("syzkaller", 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./43/binderfs", [pid 5014] getdents64(3, [pid 5012] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5531] <... memfd_create resumed>) = 3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] mkdir("./41", 0777 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] unlink("./43/binderfs" [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] unlink("./39/binderfs" [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5531] <... mmap resumed>) = 0x7f770c286000 [pid 5526] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... close resumed>) = 0 [pid 5016] <... unlink resumed>) = 0 [pid 5014] close(3 [pid 5012] <... unlink resumed>) = 0 [pid 5526] exit_group(0) = ? [pid 5526] +++ exited with 0 +++ [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5532 ./strace-static-x86_64: Process 5532 attached [pid 5532] set_robust_list(0x555556b87660, 24) = 0 [pid 5016] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5526, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5012] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] rmdir("./41" [pid 5532] chdir("./41" [pid 5014] <... rmdir resumed>) = 0 [pid 5532] <... chdir resumed>) = 0 [pid 5013] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5532] setpgid(0, 0) = 0 [pid 5532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5532] write(3, "1000", 4) = 4 [pid 5532] close(3) = 0 [pid 5532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5532] memfd_create("syzkaller", 0) = 3 [pid 5532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 104.745811][ T5526] NILFS (loop1): repaired inode bitmap for reserved inodes [ 104.758439][ T5526] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 104.788989][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5013] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] mkdir("./42", 0777 [pid 5013] <... openat resumed>) = 3 [pid 5014] <... mkdir resumed>) = 0 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] getdents64(3, [pid 5014] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5533 [pid 5013] unlink("./40/binderfs"./strace-static-x86_64: Process 5533 attached [pid 5533] set_robust_list(0x555556b87660, 24 [pid 5013] <... unlink resumed>) = 0 [pid 5013] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5533] <... set_robust_list resumed>) = 0 [pid 5533] chdir("./42") = 0 [pid 5533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5533] setpgid(0, 0) = 0 [pid 5533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5533] write(3, "1000", 4) = 4 [pid 5533] close(3) = 0 [pid 5533] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5533] memfd_create("syzkaller", 0) = 3 [pid 5533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 104.797036][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 104.814038][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 104.822324][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 104.832524][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 104.842431][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5531] <... write resumed>) = 2097152 [ 104.852047][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 104.859204][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 104.873197][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 104.881872][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 104.889730][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5531] munmap(0x7f770c286000, 2097152 [pid 5533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5531] <... munmap resumed>) = 0 [pid 5531] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5532] <... write resumed>) = 2097152 [pid 5531] <... openat resumed>) = 4 [pid 5532] munmap(0x7f770c286000, 2097152) = 0 [ 104.903622][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 104.911713][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 104.921038][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 104.928489][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 104.936002][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 104.943962][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5532] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5531] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... umount2 resumed>) = 0 [pid 5532] <... openat resumed>) = 4 [pid 5532] ioctl(4, LOOP_SET_FD, 3 [pid 5531] <... ioctl resumed>) = 0 [pid 5531] close(3) = 0 [pid 5012] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5531] mkdir("./file1", 0777 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5531] <... mkdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./39/file1", [ 104.963990][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 104.969633][ T5532] loop5: detected capacity change from 0 to 4096 [ 104.973115][ T5531] loop3: detected capacity change from 0 to 4096 [pid 5531] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... umount2 resumed>) = 0 [pid 5012] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] newfstatat(AT_FDCWD, "./43/file1", [pid 5533] <... write resumed>) = 2097152 [pid 5533] munmap(0x7f770c286000, 2097152) = 0 [pid 5532] <... ioctl resumed>) = 0 [pid 5532] close(3 [pid 5012] <... openat resumed>) = 4 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5016] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(4, "", [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5532] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5532] mkdir("./file1", 0777 [pid 5016] <... openat resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5533] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5532] <... mkdir resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5012] getdents64(4, [pid 5533] <... openat resumed>) = 4 [pid 5532] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 105.006293][ T5531] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.026180][ T5531] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] newfstatat(AT_FDCWD, "./40/file1", [pid 5533] ioctl(4, LOOP_SET_FD, 3 [pid 5531] <... mount resumed>) = 0 [pid 5016] getdents64(4, [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5531] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] getdents64(4, [pid 5531] <... openat resumed>) = 3 [pid 5533] <... ioctl resumed>) = 0 [pid 5533] close(3) = 0 [pid 5533] mkdir("./file1", 0777) = 0 [pid 5533] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4 [pid 5013] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(4 [pid 5531] chdir("./file1" [pid 5013] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... close resumed>) = 0 [pid 5531] <... chdir resumed>) = 0 [pid 5531] ioctl(4, LOOP_CLR_FD [pid 5016] rmdir("./43/file1" [pid 5013] <... openat resumed>) = 4 [pid 5012] rmdir("./39/file1" [pid 5531] <... ioctl resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5013] newfstatat(4, "", [pid 5531] close(4 [pid 5016] getdents64(3, [pid 5012] <... rmdir resumed>) = 0 [pid 5531] <... close resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./43") = 0 [pid 5016] mkdir("./44", 0777) = 0 [ 105.053148][ T5532] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.053796][ T5534] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.064043][ T5533] loop2: detected capacity change from 0 to 4096 [ 105.081384][ T5532] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5531] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] getdents64(4, [pid 5012] getdents64(3, [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5535 ./strace-static-x86_64: Process 5535 attached [pid 5535] set_robust_list(0x555556b87660, 24) = 0 [pid 5535] chdir("./44") = 0 [pid 5535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5535] setpgid(0, 0) = 0 [pid 5535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5535] write(3, "1000", 4) = 4 [pid 5535] close(3) = 0 [pid 5535] symlink("/dev/binderfs", "./binderfs" [pid 5013] getdents64(4, [pid 5012] close(3 [pid 5535] <... symlink resumed>) = 0 [pid 5535] memfd_create("syzkaller", 0) = 3 [pid 5535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5532] <... mount resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... close resumed>) = 0 [pid 5532] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5532] chdir("./file1") = 0 [ 105.101368][ T5533] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.112505][ T5531] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 105.129468][ T5536] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.141524][ T5531] Remounting filesystem read-only [pid 5532] ioctl(4, LOOP_CLR_FD) = 0 [pid 5532] close(4) = 0 [pid 5013] close(4 [pid 5012] rmdir("./39" [pid 5532] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... close resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5013] rmdir("./40/file1") = 0 [pid 5013] getdents64(3, [pid 5012] mkdir("./40", 0777 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5013] rmdir("./40" [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5013] <... rmdir resumed>) = 0 [pid 5013] mkdir("./41", 0777 [pid 5012] <... openat resumed>) = 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [ 105.148876][ T5533] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 105.160111][ T5531] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 105.166280][ T5532] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 105.180237][ T5531] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5538 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5533] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5538 attached [pid 5538] set_robust_list(0x555556b87660, 24) = 0 [pid 5538] chdir("./41") = 0 [pid 5538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5538] setpgid(0, 0) = 0 [pid 5538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5538] write(3, "1000", 4 [pid 5535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5538] <... write resumed>) = 4 [pid 5533] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5538] close(3) = 0 [pid 5533] <... openat resumed>) = 3 [pid 5012] close(3 [pid 5538] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5538] memfd_create("syzkaller", 0) = 3 [pid 5538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5533] chdir("./file1" [pid 5531] <... openat resumed>) = -1 EIO (Input/output error) [pid 5012] <... close resumed>) = 0 [ 105.200607][ T5537] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.212507][ T5531] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 105.229098][ T5532] Remounting filesystem read-only [ 105.235357][ T5532] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 105.244619][ T5532] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5533] <... chdir resumed>) = 0 [pid 5532] <... openat resumed>) = -1 EIO (Input/output error) [pid 5531] exit_group(0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5533] ioctl(4, LOOP_CLR_FD [pid 5532] exit_group(0 [pid 5531] <... exit_group resumed>) = ? [pid 5533] <... ioctl resumed>) = 0 [pid 5532] <... exit_group resumed>) = ? [pid 5531] +++ exited with 0 +++ [pid 5533] close(4 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5531, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5532] +++ exited with 0 +++ [pid 5015] <... restart_syscall resumed>) = 0 [pid 5533] <... close resumed>) = 0 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5532, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5539 [pid 5533] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... openat resumed>) = 3 [pid 5017] <... openat resumed>) = 3 [pid 5015] newfstatat(3, "", [pid 5017] newfstatat(3, "", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5539 attached [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, [pid 5539] set_robust_list(0x555556b87660, 24 [pid 5017] getdents64(3, [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5539] <... set_robust_list resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5539] chdir("./40" [pid 5017] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5539] <... chdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./43/binderfs", [pid 5539] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5535] <... write resumed>) = 2097152 [pid 5017] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5539] <... prctl resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./43/binderfs" [pid 5539] setpgid(0, 0 [pid 5535] munmap(0x7f770c286000, 2097152 [pid 5017] unlink("./41/binderfs" [pid 5015] <... unlink resumed>) = 0 [pid 5539] <... setpgid resumed>) = 0 [pid 5538] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... unlink resumed>) = 0 [pid 5015] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5535] <... munmap resumed>) = 0 [ 105.251991][ T5532] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 105.286551][ T5533] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5539] <... openat resumed>) = 3 [pid 5539] write(3, "1000", 4 [pid 5538] <... write resumed>) = 2097152 [pid 5535] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5539] <... write resumed>) = 4 [pid 5539] close(3) = 0 [pid 5539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5539] memfd_create("syzkaller", 0) = 3 [pid 5539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 105.315112][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 105.322631][ T5533] Remounting filesystem read-only [ 105.322753][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 105.334008][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 105.334435][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 105.342027][ T5533] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 105.358660][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5538] munmap(0x7f770c286000, 2097152 [pid 5535] <... openat resumed>) = 4 [pid 5538] <... munmap resumed>) = 0 [pid 5535] ioctl(4, LOOP_SET_FD, 3 [pid 5538] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5535] <... ioctl resumed>) = 0 [pid 5538] ioctl(4, LOOP_SET_FD, 3 [pid 5535] close(3 [pid 5539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5535] <... close resumed>) = 0 [ 105.368264][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 105.375924][ T5535] loop4: detected capacity change from 0 to 4096 [ 105.386293][ T5533] NILFS (loop2): repaired inode bitmap for reserved inodes [ 105.394080][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 105.401614][ T5538] loop1: detected capacity change from 0 to 4096 [pid 5535] mkdir("./file1", 0777 [pid 5538] <... ioctl resumed>) = 0 [pid 5538] close(3 [pid 5535] <... mkdir resumed>) = 0 [pid 5538] <... close resumed>) = 0 [pid 5535] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5538] mkdir("./file1", 0777 [pid 5533] <... openat resumed>) = -1 EIO (Input/output error) [pid 5538] <... mkdir resumed>) = 0 [pid 5538] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 105.409384][ T5533] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 105.424847][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 105.437978][ T5535] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.445041][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 105.458269][ T5538] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5533] exit_group(0) = ? [pid 5533] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5533, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=15 /* 0.15 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./42/binderfs") = 0 [pid 5539] <... write resumed>) = 2097152 [ 105.464388][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 105.475425][ T5535] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5014] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./43/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5539] munmap(0x7f770c286000, 2097152 [pid 5015] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 105.512024][ T5538] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 105.512262][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 105.536841][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 105.542547][ T5540] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.543556][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5538] <... mount resumed>) = 0 [pid 5535] <... mount resumed>) = 0 [pid 5539] <... munmap resumed>) = 0 [pid 5539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5539] ioctl(4, LOOP_SET_FD, 3 [pid 5538] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5535] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] getdents64(4, [pid 5538] <... openat resumed>) = 3 [pid 5535] <... openat resumed>) = 3 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5538] chdir("./file1" [pid 5535] chdir("./file1" [pid 5015] getdents64(4, [pid 5538] <... chdir resumed>) = 0 [pid 5535] <... chdir resumed>) = 0 [pid 5538] ioctl(4, LOOP_CLR_FD [pid 5535] ioctl(4, LOOP_CLR_FD [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5538] <... ioctl resumed>) = 0 [pid 5535] <... ioctl resumed>) = 0 [pid 5015] close(4 [pid 5538] close(4 [pid 5535] close(4 [pid 5015] <... close resumed>) = 0 [pid 5538] <... close resumed>) = 0 [pid 5535] <... close resumed>) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5015] rmdir("./43/file1" [pid 5538] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5535] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... rmdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 105.557456][ T5541] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.573435][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 105.574197][ T5539] loop0: detected capacity change from 0 to 4096 [ 105.595119][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 105.602555][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5017] newfstatat(AT_FDCWD, "./41/file1", [pid 5539] <... ioctl resumed>) = 0 [pid 5539] close(3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] getdents64(3, [pid 5539] <... close resumed>) = 0 [pid 5539] mkdir("./file1", 0777) = 0 [pid 5539] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 105.612443][ T5538] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 105.627931][ T5535] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 105.643774][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 105.652667][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5017] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] close(3 [pid 5017] <... openat resumed>) = 4 [pid 5015] <... close resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5015] rmdir("./43" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] mkdir("./44", 0777 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... mkdir resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [ 105.660358][ T5538] Remounting filesystem read-only [ 105.666822][ T5535] Remounting filesystem read-only [ 105.673102][ T5535] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 105.678692][ T5539] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.692263][ T5538] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 105.701344][ T5535] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5017] close(4 [pid 5015] <... openat resumed>) = 3 [pid 5017] <... close resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5017] rmdir("./41/file1" [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] <... rmdir resumed>) = 0 [pid 5015] close(3 [pid 5538] <... openat resumed>) = -1 EIO (Input/output error) [pid 5535] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] getdents64(3, [pid 5015] <... close resumed>) = 0 [pid 5538] exit_group(0 [pid 5535] exit_group(0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5538] <... exit_group resumed>) = ? [pid 5535] <... exit_group resumed>) = ? [pid 5017] close(3) = 0 [ 105.710618][ T5538] NILFS (loop1): repaired inode bitmap for reserved inodes [ 105.712185][ T5539] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 105.718563][ T5535] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 105.743350][ T5538] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5539] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5543 attached [pid 5017] rmdir("./41" [pid 5538] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5538, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5535] +++ exited with 0 +++ [pid 5013] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] <... rmdir resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5535, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5543 [pid 5013] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5539] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] mkdir("./42", 0777 [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5539] <... openat resumed>) = 3 [pid 5017] <... mkdir resumed>) = 0 [pid 5016] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] newfstatat(3, "", [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5539] chdir("./file1" [pid 5017] <... openat resumed>) = 3 [pid 5014] newfstatat(AT_FDCWD, "./42/file1", [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5539] <... chdir resumed>) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] getdents64(3, [pid 5539] ioctl(4, LOOP_CLR_FD [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5543] set_robust_list(0x555556b87660, 24 [pid 5539] <... ioctl resumed>) = 0 [pid 5017] close(3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5539] close(4 [pid 5017] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5539] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... openat resumed>) = 3 [pid 5013] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5539] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] newfstatat(3, "", [pid 5014] <... openat resumed>) = 4 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5543] <... set_robust_list resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] newfstatat(4, "", [pid 5013] unlink("./41/binderfs" [pid 5543] chdir("./44" [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5544 [pid 5016] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5543] <... chdir resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] getdents64(4, [ 105.768770][ T5542] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.794953][ T5539] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5013] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5544 attached [pid 5543] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5544] set_robust_list(0x555556b87660, 24 [pid 5543] <... prctl resumed>) = 0 [pid 5014] getdents64(4, [pid 5544] <... set_robust_list resumed>) = 0 [pid 5543] setpgid(0, 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5544] chdir("./42" [pid 5543] <... setpgid resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(4 [pid 5544] <... chdir resumed>) = 0 [pid 5543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... close resumed>) = 0 [pid 5544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5543] <... openat resumed>) = 3 [pid 5014] rmdir("./42/file1" [pid 5544] <... prctl resumed>) = 0 [pid 5543] write(3, "1000", 4 [pid 5014] <... rmdir resumed>) = 0 [pid 5544] setpgid(0, 0 [pid 5543] <... write resumed>) = 4 [pid 5014] getdents64(3, [pid 5544] <... setpgid resumed>) = 0 [pid 5543] close(3 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5543] <... close resumed>) = 0 [pid 5014] close(3 [pid 5544] <... openat resumed>) = 3 [pid 5543] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... close resumed>) = 0 [pid 5544] write(3, "1000", 4 [pid 5543] <... symlink resumed>) = 0 [pid 5014] rmdir("./42" [pid 5544] <... write resumed>) = 4 [pid 5543] memfd_create("syzkaller", 0 [pid 5016] newfstatat(AT_FDCWD, "./44/binderfs", [pid 5014] <... rmdir resumed>) = 0 [pid 5544] close(3 [pid 5543] <... memfd_create resumed>) = 3 [pid 5014] mkdir("./43", 0777 [pid 5544] <... close resumed>) = 0 [pid 5543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5544] symlink("/dev/binderfs", "./binderfs" [pid 5543] <... mmap resumed>) = 0x7f770c286000 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5544] <... symlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5544] memfd_create("syzkaller", 0 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5544] <... memfd_create resumed>) = 3 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 105.815159][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 105.823989][ T5539] Remounting filesystem read-only [ 105.824294][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 105.837935][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 105.846263][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 105.853701][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 105.861753][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5014] close(3 [pid 5544] <... mmap resumed>) = 0x7f770c286000 [pid 5543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] unlink("./44/binderfs" [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... umount2 resumed>) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5545 ./strace-static-x86_64: Process 5545 attached [pid 5545] set_robust_list(0x555556b87660, 24) = 0 [pid 5545] chdir("./43") = 0 [pid 5544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... unlink resumed>) = 0 [pid 5013] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5545] <... prctl resumed>) = 0 [ 105.861899][ T5539] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 105.879222][ T5539] NILFS (loop0): repaired inode bitmap for reserved inodes [ 105.896978][ T5539] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5545] setpgid(0, 0 [pid 5013] newfstatat(AT_FDCWD, "./41/file1", [pid 5545] <... setpgid resumed>) = 0 [pid 5545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5545] write(3, "1000", 4) = 4 [pid 5545] close(3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5545] <... close resumed>) = 0 [pid 5545] symlink("/dev/binderfs", "./binderfs" [pid 5013] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5545] <... symlink resumed>) = 0 [pid 5545] memfd_create("syzkaller", 0) = 3 [pid 5545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5543] <... write resumed>) = 2097152 [pid 5539] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5543] munmap(0x7f770c286000, 2097152 [pid 5539] exit_group(0 [pid 5013] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5543] <... munmap resumed>) = 0 [pid 5539] <... exit_group resumed>) = ? [pid 5013] <... openat resumed>) = 4 [pid 5013] newfstatat(4, "", [pid 5543] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5539] +++ exited with 0 +++ [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5539, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5012] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./40/binderfs") = 0 [pid 5013] getdents64(4, [pid 5012] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5543] <... openat resumed>) = 4 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 105.929019][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 105.938486][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 105.949120][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 105.961210][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 105.970402][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5543] ioctl(4, LOOP_SET_FD, 3 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./41/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./41") = 0 [pid 5013] mkdir("./42", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5543] <... ioctl resumed>) = 0 [pid 5543] close(3 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5543] <... close resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5546 [pid 5543] mkdir("./file1", 0777) = 0 [ 105.977087][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 105.978218][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 105.989400][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 105.992645][ T5543] loop3: detected capacity change from 0 to 4096 [pid 5543] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5546 attached [pid 5546] set_robust_list(0x555556b87660, 24) = 0 [pid 5546] chdir("./42") = 0 [pid 5546] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5545] <... write resumed>) = 2097152 [pid 5016] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] <... write resumed>) = 2097152 [pid 5544] munmap(0x7f770c286000, 2097152 [pid 5546] setpgid(0, 0 [pid 5545] munmap(0x7f770c286000, 2097152 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] <... munmap resumed>) = 0 [pid 5544] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 106.037123][ T5543] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.038284][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 106.062631][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 106.070393][ T5543] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 106.071239][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5544] ioctl(4, LOOP_SET_FD, 3 [pid 5546] <... setpgid resumed>) = 0 [pid 5545] <... munmap resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./44/file1", [pid 5546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5544] <... ioctl resumed>) = 0 [pid 5545] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5544] close(3 [pid 5545] <... openat resumed>) = 4 [pid 5016] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] <... close resumed>) = 0 [pid 5545] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5546] <... openat resumed>) = 3 [pid 5544] mkdir("./file1", 0777) = 0 [pid 5544] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5546] write(3, "1000", 4 [pid 5545] <... ioctl resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5546] <... write resumed>) = 4 [pid 5545] close(3 [pid 5016] <... openat resumed>) = 4 [pid 5546] close(3 [pid 5545] <... close resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5012] <... umount2 resumed>) = 0 [pid 5546] <... close resumed>) = 0 [pid 5545] mkdir("./file1", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5546] symlink("/dev/binderfs", "./binderfs" [pid 5545] <... mkdir resumed>) = 0 [pid 5016] getdents64(4, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5546] <... symlink resumed>) = 0 [ 106.085773][ T5544] loop5: detected capacity change from 0 to 4096 [ 106.089958][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 106.103690][ T5545] loop2: detected capacity change from 0 to 4096 [ 106.114724][ T5544] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5545] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] newfstatat(AT_FDCWD, "./40/file1", [pid 5546] memfd_create("syzkaller", 0 [pid 5543] <... mount resumed>) = 0 [pid 5016] getdents64(4, [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5546] <... memfd_create resumed>) = 3 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] close(4 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5546] <... mmap resumed>) = 0x7f770c286000 [pid 5016] <... close resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5543] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] rmdir("./44/file1" [pid 5012] <... openat resumed>) = 4 [pid 5016] <... rmdir resumed>) = 0 [pid 5012] newfstatat(4, "", [pid 5016] getdents64(3, [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] getdents64(4, [pid 5016] close(3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] <... close resumed>) = 0 [pid 5012] getdents64(4, [pid 5016] rmdir("./44" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5543] <... openat resumed>) = 3 [pid 5016] <... rmdir resumed>) = 0 [pid 5012] close(4 [pid 5543] chdir("./file1" [pid 5016] mkdir("./45", 0777 [pid 5012] <... close resumed>) = 0 [pid 5543] <... chdir resumed>) = 0 [pid 5016] <... mkdir resumed>) = 0 [ 106.138594][ T5545] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.149398][ T5547] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.161756][ T5544] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 106.178438][ T5545] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5012] rmdir("./40/file1" [pid 5544] <... mount resumed>) = 0 [pid 5543] ioctl(4, LOOP_CLR_FD [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5012] <... rmdir resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5012] getdents64(3, [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5016] close(3 [pid 5012] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5012] rmdir("./40" [pid 5544] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5543] <... ioctl resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... rmdir resumed>) = 0 [pid 5544] <... openat resumed>) = 3 [pid 5543] close(4 [pid 5012] mkdir("./41", 0777 [pid 5544] chdir("./file1" [pid 5543] <... close resumed>) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5549 [pid 5012] <... mkdir resumed>) = 0 [pid 5544] <... chdir resumed>) = 0 [pid 5543] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5544] ioctl(4, LOOP_CLR_FD [pid 5012] <... openat resumed>) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5549 attached ) = -1 ENXIO (No such device or address) [pid 5549] set_robust_list(0x555556b87660, 24 [pid 5012] close(3 [pid 5549] <... set_robust_list resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5549] chdir("./45" [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5549] <... chdir resumed>) = 0 [pid 5549] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5550 [pid 5549] <... prctl resumed>) = 0 [pid 5546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5549] setpgid(0, 0) = 0 [pid 5549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5549] write(3, "1000", 4) = 4 [pid 5549] close(3./strace-static-x86_64: Process 5550 attached ) = 0 [pid 5544] <... ioctl resumed>) = 0 [pid 5550] set_robust_list(0x555556b87660, 24 [pid 5549] symlink("/dev/binderfs", "./binderfs" [pid 5544] close(4 [pid 5549] <... symlink resumed>) = 0 [pid 5549] memfd_create("syzkaller", 0) = 3 [pid 5549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5550] <... set_robust_list resumed>) = 0 [pid 5544] <... close resumed>) = 0 [pid 5544] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 106.182815][ T5548] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.206401][ T5543] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5550] chdir("./41") = 0 [pid 5550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5550] setpgid(0, 0) = 0 [pid 5550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5550] write(3, "1000", 4 [pid 5549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5550] <... write resumed>) = 4 [ 106.236867][ T5544] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.262020][ T5543] Remounting filesystem read-only [ 106.276565][ T5543] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5550] close(3 [pid 5546] <... write resumed>) = 2097152 [pid 5546] munmap(0x7f770c286000, 2097152) = 0 [pid 5545] <... mount resumed>) = 0 [pid 5545] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5550] <... close resumed>) = 0 [pid 5545] chdir("./file1" [pid 5546] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5545] <... chdir resumed>) = 0 [pid 5546] <... openat resumed>) = 4 [pid 5545] ioctl(4, LOOP_CLR_FD [pid 5546] ioctl(4, LOOP_SET_FD, 3 [pid 5545] <... ioctl resumed>) = 0 [pid 5550] symlink("/dev/binderfs", "./binderfs" [pid 5545] close(4) = 0 [pid 5550] <... symlink resumed>) = 0 [ 106.277816][ T5551] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.285141][ T5544] Remounting filesystem read-only [ 106.301102][ T5543] NILFS (loop3): repaired inode bitmap for reserved inodes [ 106.315621][ T5543] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.319790][ T5546] loop1: detected capacity change from 0 to 4096 [pid 5545] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5550] memfd_create("syzkaller", 0) = 3 [pid 5550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5549] <... write resumed>) = 2097152 [pid 5549] munmap(0x7f770c286000, 2097152) = 0 [pid 5543] <... openat resumed>) = -1 EIO (Input/output error) [pid 5549] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5543] exit_group(0) = ? [pid 5549] <... openat resumed>) = 4 [ 106.341202][ T5545] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.356190][ T5544] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 106.364709][ T5544] NILFS (loop5): repaired inode bitmap for reserved inodes [ 106.386281][ T5545] Remounting filesystem read-only [pid 5549] ioctl(4, LOOP_SET_FD, 3 [pid 5546] <... ioctl resumed>) = 0 [pid 5543] +++ exited with 0 +++ [pid 5550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5546] close(3) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5543, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5546] mkdir("./file1", 0777 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5546] <... mkdir resumed>) = 0 [pid 5015] <... restart_syscall resumed>) = 0 [ 106.407108][ T5545] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 106.415056][ T5545] NILFS (loop2): repaired inode bitmap for reserved inodes [ 106.415136][ T5544] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.424273][ T5549] loop4: detected capacity change from 0 to 4096 [pid 5546] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./44/binderfs") = 0 [pid 5015] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5550] <... write resumed>) = 2097152 [pid 5544] <... openat resumed>) = -1 EIO (Input/output error) [pid 5550] munmap(0x7f770c286000, 2097152 [pid 5549] <... ioctl resumed>) = 0 [pid 5545] <... openat resumed>) = -1 EIO (Input/output error) [ 106.452392][ T5546] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.474075][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 106.477421][ T5545] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.482651][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [pid 5544] exit_group(0 [pid 5550] <... munmap resumed>) = 0 [pid 5549] close(3 [pid 5545] exit_group(0 [pid 5544] <... exit_group resumed>) = ? [pid 5550] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5549] <... close resumed>) = 0 [pid 5545] <... exit_group resumed>) = ? [pid 5544] +++ exited with 0 +++ [pid 5550] <... openat resumed>) = 4 [pid 5549] mkdir("./file1", 0777 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5544, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5545] +++ exited with 0 +++ [pid 5017] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5550] ioctl(4, LOOP_SET_FD, 3 [pid 5549] <... mkdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./42/binderfs") = 0 [ 106.506049][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 106.506867][ T5546] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 106.514862][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 106.534032][ T5550] loop0: detected capacity change from 0 to 4096 [ 106.540950][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 106.540975][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5017] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5550] <... ioctl resumed>) = 0 [pid 5549] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... umount2 resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5545, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./43/binderfs") = 0 [pid 5014] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5550] close(3) = 0 [pid 5550] mkdir("./file1", 0777) = 0 [pid 5546] <... mount resumed>) = 0 [pid 5546] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5550] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5546] <... openat resumed>) = 3 [pid 5546] chdir("./file1") = 0 [pid 5546] ioctl(4, LOOP_CLR_FD) = 0 [ 106.565904][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 106.572664][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 106.581030][ T5549] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.581087][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 106.598438][ T5552] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5546] close(4 [pid 5015] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5546] <... close resumed>) = 0 [pid 5546] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 106.602363][ T5550] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.610084][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 106.626884][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 106.627294][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 106.633835][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 106.649528][ T5549] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 106.654399][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5017] <... umount2 resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./44/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 106.668397][ T5546] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.688234][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 106.696066][ T5550] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 106.700346][ T5546] Remounting filesystem read-only [ 106.709211][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5015] newfstatat(4, "", [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5549] <... mount resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./42/file1", [pid 5015] getdents64(4, [pid 5549] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5549] <... openat resumed>) = 3 [pid 5015] getdents64(4, [pid 5017] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5549] chdir("./file1" [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5549] <... chdir resumed>) = 0 [ 106.713771][ T5546] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 106.719480][ T5553] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.729029][ T5546] NILFS (loop1): repaired inode bitmap for reserved inodes [ 106.740390][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 106.753839][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5549] ioctl(4, LOOP_CLR_FD [pid 5017] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... close resumed>) = 0 [pid 5549] <... ioctl resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5015] rmdir("./44/file1" [pid 5549] close(4 [pid 5017] newfstatat(4, "", [pid 5015] <... rmdir resumed>) = 0 [pid 5549] <... close resumed>) = 0 [pid 5546] <... openat resumed>) = -1 EIO (Input/output error) [pid 5546] exit_group(0) = ? [pid 5546] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5546, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./42/binderfs") = 0 [pid 5013] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5550] <... mount resumed>) = 0 [pid 5549] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 106.758201][ T5546] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.786049][ T5554] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.800113][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 106.808909][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5015] getdents64(3, [pid 5550] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] getdents64(4, [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5550] <... openat resumed>) = 3 [pid 5550] chdir("./file1" [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] close(3 [pid 5550] <... chdir resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] <... close resumed>) = 0 [pid 5550] ioctl(4, LOOP_CLR_FD [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] rmdir("./44" [pid 5550] <... ioctl resumed>) = 0 [pid 5017] close(4 [pid 5550] close(4 [pid 5017] <... close resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5550] <... close resumed>) = 0 [pid 5017] rmdir("./42/file1" [pid 5015] mkdir("./45", 0777 [ 106.809137][ T5549] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.817429][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 106.841172][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 106.847193][ T5549] Remounting filesystem read-only [ 106.849625][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5014] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5550] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./43/file1", [pid 5017] getdents64(3, [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5015] <... openat resumed>) = 3 [pid 5014] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5017] rmdir("./42" [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] <... openat resumed>) = 4 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] close(3 [ 106.862553][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 106.863591][ T5550] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.885743][ T5549] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 106.893608][ T5549] NILFS (loop4): repaired inode bitmap for reserved inodes [ 106.901917][ T5550] Remounting filesystem read-only [ 106.908563][ T5550] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5014] newfstatat(4, "", [pid 5017] mkdir("./43", 0777 [pid 5015] <... close resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./42/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] getdents64(4, [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5555 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5014] close(4 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] rmdir("./43/file1" [pid 5013] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./42/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./42") = 0 [pid 5013] mkdir("./43", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5556 ./strace-static-x86_64: Process 5556 attached [pid 5556] set_robust_list(0x555556b87660, 24) = 0 [pid 5556] chdir("./43") = 0 [pid 5556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5556] setpgid(0, 0) = 0 [pid 5556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5556] write(3, "1000", 4) = 4 [pid 5556] close(3 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, [pid 5017] close(3 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5556] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5014] close(3 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... close resumed>) = 0 [pid 5556] symlink("/dev/binderfs", "./binderfs" [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5557 [pid 5014] rmdir("./43" [pid 5556] <... symlink resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5556] memfd_create("syzkaller", 0 [pid 5014] mkdir("./44", 0777 [pid 5556] <... memfd_create resumed>) = 3 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5555 attached [pid 5550] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5555] set_robust_list(0x555556b87660, 24 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5555] <... set_robust_list resumed>) = 0 [pid 5014] close(3) = 0 ./strace-static-x86_64: Process 5557 attached [pid 5556] <... mmap resumed>) = 0x7f770c286000 [pid 5555] chdir("./45" [pid 5550] exit_group(0 [pid 5549] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5557] set_robust_list(0x555556b87660, 24 [pid 5555] <... chdir resumed>) = 0 [pid 5550] <... exit_group resumed>) = ? [pid 5549] exit_group(0 [pid 5557] <... set_robust_list resumed>) = 0 [ 106.921232][ T5549] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 106.935649][ T5550] NILFS (loop0): repaired inode bitmap for reserved inodes [ 106.955638][ T5550] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5555] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5550] +++ exited with 0 +++ [pid 5549] <... exit_group resumed>) = ? [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5558 ./strace-static-x86_64: Process 5558 attached [pid 5557] chdir("./43" [pid 5555] <... prctl resumed>) = 0 [pid 5549] +++ exited with 0 +++ [pid 5558] set_robust_list(0x555556b87660, 24 [pid 5557] <... chdir resumed>) = 0 [pid 5555] setpgid(0, 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5549, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5550, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5558] <... set_robust_list resumed>) = 0 [pid 5557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5555] <... setpgid resumed>) = 0 [pid 5558] chdir("./44" [pid 5557] <... prctl resumed>) = 0 [pid 5555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5558] <... chdir resumed>) = 0 [pid 5557] setpgid(0, 0 [pid 5555] <... openat resumed>) = 3 [pid 5558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5557] <... setpgid resumed>) = 0 [pid 5555] write(3, "1000", 4 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5558] <... prctl resumed>) = 0 [pid 5557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5555] <... write resumed>) = 4 [pid 5558] setpgid(0, 0 [pid 5557] <... openat resumed>) = 3 [pid 5555] close(3 [pid 5016] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5557] write(3, "1000", 4 [pid 5555] <... close resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5557] <... write resumed>) = 4 [pid 5555] symlink("/dev/binderfs", "./binderfs" [pid 5016] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5557] close(3 [pid 5555] <... symlink resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5557] <... close resumed>) = 0 [pid 5555] memfd_create("syzkaller", 0 [pid 5016] newfstatat(3, "", [pid 5558] <... setpgid resumed>) = 0 [pid 5557] symlink("/dev/binderfs", "./binderfs" [pid 5555] <... memfd_create resumed>) = 3 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5557] <... symlink resumed>) = 0 [pid 5555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] getdents64(3, [pid 5012] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] <... openat resumed>) = 3 [pid 5557] memfd_create("syzkaller", 0 [pid 5555] <... mmap resumed>) = 0x7f770c286000 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5558] write(3, "1000", 4 [pid 5557] <... memfd_create resumed>) = 3 [pid 5016] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5558] <... write resumed>) = 4 [pid 5557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] <... openat resumed>) = 3 [pid 5558] close(3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(3, "", [pid 5558] <... close resumed>) = 0 [pid 5557] <... mmap resumed>) = 0x7f770c286000 [pid 5016] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5558] symlink("/dev/binderfs", "./binderfs" [pid 5012] getdents64(3, [pid 5558] <... symlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5558] memfd_create("syzkaller", 0 [pid 5012] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] <... memfd_create resumed>) = 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5558] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./41/binderfs" [pid 5016] unlink("./45/binderfs" [pid 5012] <... unlink resumed>) = 0 [pid 5012] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... unlink resumed>) = 0 [pid 5557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 107.058008][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 107.065097][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 107.075240][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 107.077913][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 107.094668][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5556] <... write resumed>) = 2097152 [pid 5556] munmap(0x7f770c286000, 2097152 [pid 5558] <... write resumed>) = 2097152 [pid 5558] munmap(0x7f770c286000, 2097152 [pid 5556] <... munmap resumed>) = 0 [pid 5557] <... write resumed>) = 2097152 [pid 5556] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5558] <... munmap resumed>) = 0 [pid 5558] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 107.117599][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 107.124775][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 107.143894][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 107.152536][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 107.154708][ T5558] loop2: detected capacity change from 0 to 4096 [pid 5558] ioctl(4, LOOP_SET_FD, 3 [pid 5557] munmap(0x7f770c286000, 2097152 [pid 5556] <... openat resumed>) = 4 [pid 5555] <... write resumed>) = 2097152 [pid 5555] munmap(0x7f770c286000, 2097152) = 0 [pid 5557] <... munmap resumed>) = 0 [pid 5556] ioctl(4, LOOP_SET_FD, 3 [pid 5557] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5555] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5555] ioctl(4, LOOP_SET_FD, 3 [pid 5557] <... openat resumed>) = 4 [pid 5556] <... ioctl resumed>) = 0 [pid 5558] <... ioctl resumed>) = 0 [pid 5557] ioctl(4, LOOP_SET_FD, 3 [pid 5556] close(3 [pid 5016] <... umount2 resumed>) = 0 [pid 5558] close(3 [pid 5555] <... ioctl resumed>) = 0 [pid 5555] close(3) = 0 [pid 5555] mkdir("./file1", 0777) = 0 [pid 5555] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5558] <... close resumed>) = 0 [pid 5557] <... ioctl resumed>) = 0 [pid 5556] <... close resumed>) = 0 [pid 5016] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5556] mkdir("./file1", 0777 [pid 5558] mkdir("./file1", 0777 [pid 5557] close(3 [pid 5556] <... mkdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5558] <... mkdir resumed>) = 0 [pid 5557] <... close resumed>) = 0 [pid 5556] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 107.160261][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 107.169996][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 107.181746][ T5556] loop1: detected capacity change from 0 to 4096 [ 107.182454][ T5555] loop3: detected capacity change from 0 to 4096 [ 107.199702][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 107.207697][ T5557] loop5: detected capacity change from 0 to 4096 [pid 5016] newfstatat(AT_FDCWD, "./45/file1", [pid 5558] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5557] mkdir("./file1", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5557] <... mkdir resumed>) = 0 [pid 5016] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5557] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] newfstatat(AT_FDCWD, "./41/file1", [pid 5016] <... openat resumed>) = 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] newfstatat(4, "", [ 107.235973][ T5555] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.244960][ T5556] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.257448][ T5556] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 107.266864][ T5558] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5012] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] getdents64(4, [pid 5012] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... openat resumed>) = 4 [pid 5016] getdents64(4, [pid 5012] newfstatat(4, "", [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] close(4 [pid 5012] getdents64(4, [pid 5016] <... close resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] rmdir("./45/file1" [pid 5012] getdents64(4, [pid 5016] <... rmdir resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(3, [pid 5012] close(4 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] <... close resumed>) = 0 [pid 5016] close(3 [pid 5012] rmdir("./41/file1" [pid 5016] <... close resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5016] rmdir("./45" [pid 5012] getdents64(3, [pid 5016] <... rmdir resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] mkdir("./46", 0777 [pid 5012] close(3 [pid 5016] <... mkdir resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5012] rmdir("./41" [pid 5016] <... openat resumed>) = 3 [pid 5012] <... rmdir resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5012] mkdir("./42", 0777 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... mkdir resumed>) = 0 [pid 5016] close(3 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5556] <... mount resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5556] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5556] <... openat resumed>) = 3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5556] chdir("./file1" [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5560 [pid 5012] close(3 [pid 5556] <... chdir resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5556] ioctl(4, LOOP_CLR_FD [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5556] <... ioctl resumed>) = 0 [pid 5556] close(4 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5561 [ 107.278738][ T5555] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 107.278870][ T5557] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.304596][ T5558] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 107.314409][ T5559] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5556] <... close resumed>) = 0 [pid 5556] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 5560 attached [pid 5560] set_robust_list(0x555556b87660, 24) = 0 [pid 5560] chdir("./46") = 0 ./strace-static-x86_64: Process 5561 attached [pid 5560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5561] set_robust_list(0x555556b87660, 24 [pid 5560] <... prctl resumed>) = 0 [pid 5561] <... set_robust_list resumed>) = 0 [pid 5560] setpgid(0, 0 [pid 5561] chdir("./42" [pid 5560] <... setpgid resumed>) = 0 [pid 5561] <... chdir resumed>) = 0 [pid 5560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5561] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5560] <... openat resumed>) = 3 [pid 5561] <... prctl resumed>) = 0 [pid 5560] write(3, "1000", 4 [pid 5561] setpgid(0, 0 [pid 5560] <... write resumed>) = 4 [pid 5561] <... setpgid resumed>) = 0 [pid 5560] close(3 [pid 5561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5560] <... close resumed>) = 0 [pid 5561] <... openat resumed>) = 3 [pid 5560] symlink("/dev/binderfs", "./binderfs" [pid 5561] write(3, "1000", 4) = 4 [pid 5560] <... symlink resumed>) = 0 [pid 5561] close(3) = 0 [pid 5560] memfd_create("syzkaller", 0 [pid 5561] symlink("/dev/binderfs", "./binderfs" [pid 5560] <... memfd_create resumed>) = 3 [pid 5561] <... symlink resumed>) = 0 [pid 5561] memfd_create("syzkaller", 0) = 3 [pid 5561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5555] <... mount resumed>) = 0 [pid 5560] <... mmap resumed>) = 0x7f770c286000 [pid 5555] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5555] chdir("./file1") = 0 [pid 5555] ioctl(4, LOOP_CLR_FD) = 0 [ 107.325585][ T5556] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.326156][ T5556] Remounting filesystem read-only [ 107.326727][ T5556] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 107.374986][ T5562] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5555] close(4) = 0 [pid 5555] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5558] <... mount resumed>) = 0 [pid 5558] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5558] chdir("./file1") = 0 [pid 5558] ioctl(4, LOOP_CLR_FD) = 0 [pid 5558] close(4) = 0 [pid 5561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 107.393338][ T5555] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.413327][ T5557] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 107.414471][ T5563] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5558] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5560] <... write resumed>) = 2097152 [pid 5560] munmap(0x7f770c286000, 2097152) = 0 [pid 5560] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 107.452661][ T5558] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.469671][ T5556] NILFS (loop1): repaired inode bitmap for reserved inodes [ 107.479124][ T5555] Remounting filesystem read-only [pid 5560] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5561] <... write resumed>) = 2097152 [ 107.507810][ T5560] loop4: detected capacity change from 0 to 4096 [ 107.508633][ T5556] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.529129][ T5558] Remounting filesystem read-only [ 107.529572][ T5558] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 107.544778][ T5555] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5560] close(3) = 0 [pid 5560] mkdir("./file1", 0777) = 0 [pid 5560] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5561] munmap(0x7f770c286000, 2097152) = 0 [pid 5561] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5561] ioctl(4, LOOP_SET_FD, 3 [pid 5557] <... mount resumed>) = 0 [pid 5557] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5557] chdir("./file1") = 0 [pid 5557] ioctl(4, LOOP_CLR_FD) = 0 [pid 5557] close(4) = 0 [ 107.555890][ T5560] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.565946][ T5561] loop0: detected capacity change from 0 to 4096 [ 107.566266][ T5564] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.573530][ T5555] NILFS (loop3): repaired inode bitmap for reserved inodes [ 107.594919][ T5558] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5557] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5561] <... ioctl resumed>) = 0 [pid 5561] close(3) = 0 [pid 5561] mkdir("./file1", 0777) = 0 [pid 5561] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5556] <... openat resumed>) = -1 EIO (Input/output error) [pid 5556] exit_group(0) = ? [pid 5556] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5556, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [ 107.598281][ T5557] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.619968][ T5560] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 107.627393][ T5561] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5558] <... openat resumed>) = -1 EIO (Input/output error) [pid 5555] <... openat resumed>) = -1 EIO (Input/output error) [ 107.649985][ T5555] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.653019][ T5558] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.688665][ T5557] Remounting filesystem read-only [ 107.690450][ T5561] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] newfstatat(AT_FDCWD, "./43/binderfs", [pid 5558] exit_group(0 [pid 5555] exit_group(0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5558] <... exit_group resumed>) = ? [pid 5555] <... exit_group resumed>) = ? [pid 5013] unlink("./43/binderfs" [pid 5558] +++ exited with 0 +++ [pid 5555] +++ exited with 0 +++ [pid 5013] <... unlink resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5558, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5013] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5555, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", [pid 5014] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(3, [pid 5014] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... openat resumed>) = 3 [pid 5015] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(3, "", [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5014] getdents64(3, [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] unlink("./45/binderfs" [pid 5014] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... unlink resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./44/binderfs") = 0 [pid 5014] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5560] <... mount resumed>) = 0 [pid 5557] <... openat resumed>) = -1 EIO (Input/output error) [pid 5557] exit_group(0) = ? [pid 5557] +++ exited with 0 +++ [pid 5560] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 107.696276][ T5557] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 107.711526][ T5565] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.722536][ T5557] NILFS (loop5): repaired inode bitmap for reserved inodes [ 107.723588][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 107.729886][ T5557] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5560] chdir("./file1" [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5557, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5560] <... chdir resumed>) = 0 [pid 5560] ioctl(4, LOOP_CLR_FD) = 0 [pid 5560] close(4) = 0 [pid 5560] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 107.753233][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 107.754328][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 107.763801][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 107.774756][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 107.782249][ T5560] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.793935][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5017] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 107.804913][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 107.813156][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 107.813620][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 107.821358][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 107.829214][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 107.836830][ T5566] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.843835][ T5560] Remounting filesystem read-only [pid 5017] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5561] <... mount resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./43/binderfs", [pid 5561] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./43/binderfs" [pid 5561] <... openat resumed>) = 3 [pid 5017] <... unlink resumed>) = 0 [pid 5561] chdir("./file1" [pid 5017] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5561] <... chdir resumed>) = 0 [pid 5561] ioctl(4, LOOP_CLR_FD) = 0 [pid 5561] close(4) = 0 [ 107.853607][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 107.859723][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 107.866191][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 107.880771][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 107.881219][ T5560] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 107.906214][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 107.914705][ T5561] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.914864][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 107.947334][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5561] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] <... umount2 resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5014] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... openat resumed>) = 4 [pid 5014] newfstatat(AT_FDCWD, "./44/file1", [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./45/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [ 107.957515][ T5560] NILFS (loop4): repaired inode bitmap for reserved inodes [ 107.962257][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 107.966837][ T5560] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 107.973645][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 107.994816][ T5561] Remounting filesystem read-only [pid 5015] close(3) = 0 [pid 5015] rmdir("./45") = 0 [pid 5015] mkdir("./46", 0777) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... openat resumed>) = 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] <... openat resumed>) = 4 [pid 5015] close(3 [pid 5014] newfstatat(4, "", [pid 5015] <... close resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5567 ./strace-static-x86_64: Process 5567 attached [pid 5014] getdents64(4, [pid 5567] set_robust_list(0x555556b87660, 24) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5567] chdir("./46") = 0 [pid 5567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5567] setpgid(0, 0) = 0 [pid 5567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] close(4 [pid 5013] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5567] <... openat resumed>) = 3 [pid 5567] write(3, "1000", 4) = 4 [pid 5567] close(3) = 0 [pid 5567] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5567] memfd_create("syzkaller", 0) = 3 [pid 5567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 108.005106][ T5561] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 108.025600][ T5561] NILFS (loop0): repaired inode bitmap for reserved inodes [ 108.038117][ T5561] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./44/file1" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... rmdir resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./43/file1", [pid 5014] getdents64(3, [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5013] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] rmdir("./44" [pid 5013] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5014] mkdir("./45", 0777 [pid 5561] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] newfstatat(4, "", [pid 5014] <... mkdir resumed>) = 0 [pid 5561] exit_group(0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5561] <... exit_group resumed>) = ? [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] getdents64(4, [pid 5560] <... openat resumed>) = -1 EIO (Input/output error) [pid 5560] exit_group(0) = ? [pid 5561] +++ exited with 0 +++ [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... openat resumed>) = 3 [pid 5013] getdents64(4, [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5561, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5013] close(4 [pid 5014] close(3 [pid 5013] <... close resumed>) = 0 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] rmdir("./43/file1" [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... rmdir resumed>) = 0 [pid 5012] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5568 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] close(3 [pid 5012] <... openat resumed>) = 3 [pid 5013] <... close resumed>) = 0 [pid 5013] rmdir("./43" [pid 5012] newfstatat(3, "", [pid 5013] <... rmdir resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] mkdir("./44", 0777./strace-static-x86_64: Process 5568 attached [pid 5560] +++ exited with 0 +++ [pid 5013] <... mkdir resumed>) = 0 [pid 5012] getdents64(3, [pid 5568] set_robust_list(0x555556b87660, 24 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5568] <... set_robust_list resumed>) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5560, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5013] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5568] chdir("./45" [pid 5017] <... umount2 resumed>) = 0 [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5012] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5568] <... chdir resumed>) = 0 [pid 5017] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... restart_syscall resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5568] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5568] <... prctl resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./43/file1", [pid 5013] close(3 [pid 5568] setpgid(0, 0 [pid 5016] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] newfstatat(AT_FDCWD, "./42/binderfs", [pid 5568] <... setpgid resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] unlink("./42/binderfs" [pid 5568] <... openat resumed>) = 3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5012] <... unlink resumed>) = 0 [pid 5568] write(3, "1000", 4 [pid 5017] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(3, "", [pid 5012] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5568] <... write resumed>) = 4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5569 [pid 5568] close(3 [pid 5017] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] getdents64(3, [pid 5568] <... close resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5568] symlink("/dev/binderfs", "./binderfs" [pid 5016] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 108.054320][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 108.063734][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 108.073176][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 108.082917][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5017] newfstatat(4, "", [pid 5568] <... symlink resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5568] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5569 attached [pid 5017] getdents64(4, [pid 5016] newfstatat(AT_FDCWD, "./46/binderfs", [pid 5569] set_robust_list(0x555556b87660, 24 [pid 5568] <... memfd_create resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5569] <... set_robust_list resumed>) = 0 [pid 5568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] getdents64(4, [pid 5016] unlink("./46/binderfs" [pid 5569] chdir("./44" [pid 5568] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4 [pid 5016] <... unlink resumed>) = 0 [pid 5569] <... chdir resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5016] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] rmdir("./43/file1" [pid 5569] <... prctl resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5569] setpgid(0, 0 [pid 5017] getdents64(3, [pid 5567] <... write resumed>) = 2097152 [pid 5567] munmap(0x7f770c286000, 2097152 [pid 5569] <... setpgid resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] close(3 [pid 5567] <... munmap resumed>) = 0 [pid 5567] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5567] ioctl(4, LOOP_SET_FD, 3 [pid 5569] <... openat resumed>) = 3 [pid 5568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... close resumed>) = 0 [ 108.152113][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 108.161847][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 108.171493][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 108.178658][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 108.186788][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 108.189900][ T5567] loop3: detected capacity change from 0 to 4096 [pid 5569] write(3, "1000", 4) = 4 [pid 5017] rmdir("./43" [pid 5569] close(3 [pid 5567] <... ioctl resumed>) = 0 [pid 5567] close(3 [pid 5017] <... rmdir resumed>) = 0 [pid 5569] <... close resumed>) = 0 [pid 5017] mkdir("./44", 0777 [pid 5569] symlink("/dev/binderfs", "./binderfs" [pid 5567] <... close resumed>) = 0 [pid 5567] mkdir("./file1", 0777 [pid 5017] <... mkdir resumed>) = 0 [pid 5569] <... symlink resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5569] memfd_create("syzkaller", 0) = 3 [pid 5017] <... openat resumed>) = 3 [pid 5569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5569] <... mmap resumed>) = 0x7f770c286000 [pid 5568] <... write resumed>) = 2097152 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5567] <... mkdir resumed>) = 0 [pid 5567] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 108.195467][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 108.202181][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 108.221000][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 108.227237][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 108.232715][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5017] close(3) = 0 [pid 5568] munmap(0x7f770c286000, 2097152 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5568] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5570 attached [pid 5570] set_robust_list(0x555556b87660, 24) = 0 [pid 5570] chdir("./44") = 0 [pid 5570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5570] setpgid(0, 0) = 0 [pid 5570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5570] write(3, "1000", 4) = 4 [pid 5568] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5570 [pid 5570] close(3 [pid 5568] <... openat resumed>) = 4 [pid 5568] ioctl(4, LOOP_SET_FD, 3 [pid 5570] <... close resumed>) = 0 [pid 5570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5570] memfd_create("syzkaller", 0) = 3 [pid 5570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5569] <... write resumed>) = 2097152 [pid 5568] <... ioctl resumed>) = 0 [pid 5568] close(3) = 0 [pid 5568] mkdir("./file1", 0777) = 0 [pid 5569] munmap(0x7f770c286000, 2097152 [ 108.246833][ T5567] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.254327][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 108.274532][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 108.282744][ T5568] loop2: detected capacity change from 0 to 4096 [ 108.292529][ T5567] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5568] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5569] <... munmap resumed>) = 0 [pid 5569] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5569] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... umount2 resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./42/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./42/file1") = 0 [pid 5016] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] <... ioctl resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] getdents64(3, [pid 5569] close(3 [pid 5016] newfstatat(AT_FDCWD, "./46/file1", [pid 5569] <... close resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5569] mkdir("./file1", 0777 [pid 5016] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(3 [pid 5569] <... mkdir resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5569] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 108.309289][ T5568] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.334256][ T5568] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 108.349239][ T5569] loop1: detected capacity change from 0 to 4096 [pid 5016] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... openat resumed>) = 4 [pid 5012] rmdir("./42") = 0 [pid 5012] mkdir("./43", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5568] <... mount resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5572 ./strace-static-x86_64: Process 5572 attached [pid 5572] set_robust_list(0x555556b87660, 24) = 0 [pid 5572] chdir("./43") = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5568] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5572] setpgid(0, 0) = 0 [pid 5572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] getdents64(4, [pid 5568] <... openat resumed>) = 3 [pid 5572] <... openat resumed>) = 3 [pid 5568] chdir("./file1" [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5572] write(3, "1000", 4) = 4 [pid 5572] close(3) = 0 [pid 5572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5572] memfd_create("syzkaller", 0) = 3 [pid 5572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 108.378833][ T5569] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.391661][ T5571] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.404383][ T5569] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5568] <... chdir resumed>) = 0 [pid 5016] getdents64(4, [pid 5568] ioctl(4, LOOP_CLR_FD [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5568] <... ioctl resumed>) = 0 [pid 5567] <... mount resumed>) = 0 [pid 5016] close(4 [pid 5568] close(4 [pid 5567] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... close resumed>) = 0 [pid 5568] <... close resumed>) = 0 [pid 5567] <... openat resumed>) = 3 [pid 5016] rmdir("./46/file1" [pid 5568] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5567] chdir("./file1") = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5567] ioctl(4, LOOP_CLR_FD) = 0 [pid 5567] close(4) = 0 [ 108.419772][ T5573] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.448920][ T5568] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 108.464009][ T5574] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5567] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5569] <... mount resumed>) = 0 [pid 5016] getdents64(3, [pid 5569] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5569] <... openat resumed>) = 3 [pid 5016] close(3 [pid 5572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5569] chdir("./file1" [pid 5016] <... close resumed>) = 0 [pid 5569] <... chdir resumed>) = 0 [pid 5016] rmdir("./46" [pid 5569] ioctl(4, LOOP_CLR_FD [pid 5016] <... rmdir resumed>) = 0 [pid 5569] <... ioctl resumed>) = 0 [pid 5016] mkdir("./47", 0777 [pid 5569] close(4) = 0 [pid 5016] <... mkdir resumed>) = 0 [pid 5569] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5570] <... write resumed>) = 2097152 [pid 5570] munmap(0x7f770c286000, 2097152) = 0 [pid 5570] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5570] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... openat resumed>) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5575 ./strace-static-x86_64: Process 5575 attached [pid 5575] set_robust_list(0x555556b87660, 24) = 0 [pid 5575] chdir("./47") = 0 [pid 5575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 108.474694][ T5567] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 108.496430][ T5569] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 108.510548][ T5570] loop5: detected capacity change from 0 to 4096 [pid 5575] setpgid(0, 0) = 0 [pid 5570] <... ioctl resumed>) = 0 [pid 5570] close(3) = 0 [pid 5570] mkdir("./file1", 0777 [pid 5575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5575] write(3, "1000", 4) = 4 [pid 5575] close(3) = 0 [pid 5575] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5570] <... mkdir resumed>) = 0 [pid 5575] memfd_create("syzkaller", 0) = 3 [pid 5575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 108.542649][ T5568] Remounting filesystem read-only [ 108.549384][ T5567] Remounting filesystem read-only [ 108.566631][ T5569] Remounting filesystem read-only [ 108.572884][ T5569] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5570] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5572] <... write resumed>) = 2097152 [pid 5575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5572] munmap(0x7f770c286000, 2097152) = 0 [ 108.589965][ T5568] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 108.598480][ T5567] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 108.605784][ T5569] NILFS (loop1): repaired inode bitmap for reserved inodes [ 108.616417][ T5570] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.623295][ T5569] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5572] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5575] <... write resumed>) = 2097152 [pid 5572] ioctl(4, LOOP_SET_FD, 3 [pid 5575] munmap(0x7f770c286000, 2097152 [pid 5569] <... openat resumed>) = -1 EIO (Input/output error) [pid 5575] <... munmap resumed>) = 0 [pid 5569] exit_group(0 [pid 5575] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5569] <... exit_group resumed>) = ? [pid 5575] <... openat resumed>) = 4 [ 108.632020][ T5568] NILFS (loop2): repaired inode bitmap for reserved inodes [ 108.654164][ T5567] NILFS (loop3): repaired inode bitmap for reserved inodes [ 108.664315][ T5570] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 108.665830][ T5572] loop0: detected capacity change from 0 to 4096 [pid 5575] ioctl(4, LOOP_SET_FD, 3 [pid 5570] <... mount resumed>) = 0 [pid 5569] +++ exited with 0 +++ [pid 5572] <... ioctl resumed>) = 0 [pid 5572] close(3) = 0 [pid 5572] mkdir("./file1", 0777) = 0 [pid 5572] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5567] <... openat resumed>) = -1 EIO (Input/output error) [pid 5567] exit_group(0) = ? [pid 5567] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5567, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5575] <... ioctl resumed>) = 0 [pid 5570] <... openat resumed>) = 3 [pid 5568] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5575] close(3 [pid 5570] chdir("./file1" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5569, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5575] <... close resumed>) = 0 [pid 5570] <... chdir resumed>) = 0 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5575] mkdir("./file1", 0777 [pid 5570] ioctl(4, LOOP_CLR_FD [pid 5013] <... restart_syscall resumed>) = 0 [pid 5575] <... mkdir resumed>) = 0 [pid 5570] <... ioctl resumed>) = 0 [pid 5575] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5570] close(4 [pid 5015] <... openat resumed>) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 108.682788][ T5567] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 108.686611][ T5576] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.704588][ T5568] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 108.708409][ T5575] loop4: detected capacity change from 0 to 4096 [ 108.731395][ T5572] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5015] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./46/binderfs") = 0 [pid 5015] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5568] exit_group(0) = ? [pid 5568] +++ exited with 0 +++ [pid 5570] <... close resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5568, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5013] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5570] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 3 [pid 5014] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] newfstatat(3, "", [pid 5014] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] newfstatat(3, "", [pid 5013] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] getdents64(3, [pid 5013] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] newfstatat(AT_FDCWD, "./44/binderfs", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5013] unlink("./44/binderfs" [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5014] unlink("./45/binderfs" [ 108.736352][ T5575] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.754692][ T5572] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 108.765231][ T5570] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 108.765646][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5013] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... unlink resumed>) = 0 [ 108.789617][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 108.795422][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 108.797865][ T5575] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 108.804724][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 108.814690][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 108.821393][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 108.828089][ T5570] Remounting filesystem read-only [pid 5014] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] <... mount resumed>) = 0 [pid 5572] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 108.836639][ T5577] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.840812][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 108.851295][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 108.860261][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 108.866305][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 108.875171][ T5570] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 108.887076][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [pid 5572] chdir("./file1") = 0 [pid 5572] ioctl(4, LOOP_CLR_FD) = 0 [pid 5572] close(4) = 0 [pid 5572] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5575] <... mount resumed>) = 0 [pid 5575] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5575] chdir("./file1") = 0 [pid 5575] ioctl(4, LOOP_CLR_FD) = 0 [pid 5575] close(4) = 0 [ 108.887115][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 108.887132][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 108.924401][ T5572] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 108.929104][ T5575] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 108.951576][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 108.955443][ T5578] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.976711][ T5575] Remounting filesystem read-only [ 108.982616][ T5570] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5575] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = 0 [ 108.989253][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 108.991424][ T5570] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.004600][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 109.016555][ T5575] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 109.021123][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 109.034270][ T5572] Remounting filesystem read-only [pid 5015] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5570] <... openat resumed>) = -1 EIO (Input/output error) [pid 5570] exit_group(0) = ? [pid 5570] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5570, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5575] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... restart_syscall resumed>) = 0 [pid 5017] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./44/binderfs") = 0 [pid 5015] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 109.039464][ T5575] NILFS (loop4): repaired inode bitmap for reserved inodes [ 109.039506][ T5575] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.062777][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 109.076583][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 109.083526][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5015] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] <... umount2 resumed>) = 0 [pid 5575] exit_group(0) = ? [pid 5575] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5575, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5016] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, [pid 5015] newfstatat(4, "", [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./47/binderfs", [pid 5015] getdents64(4, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./47/binderfs") = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] newfstatat(AT_FDCWD, "./44/file1", [pid 5016] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 109.091560][ T5572] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 109.106494][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 109.125728][ T5572] NILFS (loop0): repaired inode bitmap for reserved inodes [ 109.125938][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] close(4 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... close resumed>) = 0 [pid 5014] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] rmdir("./46/file1" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 4 [ 109.133527][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 109.150272][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 109.154938][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 109.159641][ T5572] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.171551][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 109.182864][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [pid 5015] <... rmdir resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./45/file1", [pid 5013] newfstatat(4, "", [pid 5015] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] close(3 [pid 5014] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(4, [pid 5015] rmdir("./46" [pid 5014] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... openat resumed>) = 4 [pid 5013] getdents64(4, [pid 5015] <... rmdir resumed>) = 0 [pid 5014] newfstatat(4, "", [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] mkdir("./47", 0777 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] close(4 [pid 5015] <... mkdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5014] getdents64(4, [pid 5013] rmdir("./44/file1" [pid 5572] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... rmdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(3, [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] getdents64(4, [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5572] exit_group(0 [pid 5015] <... openat resumed>) = 3 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5014] close(4 [pid 5013] rmdir("./44" [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5572] <... exit_group resumed>) = ? [pid 5014] <... close resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5014] rmdir("./45/file1" [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] mkdir("./45", 0777 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] close(3 [pid 5013] <... mkdir resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5014] getdents64(3, [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5572] +++ exited with 0 +++ [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5014] close(3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5572, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5579 [pid 5014] <... close resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] rmdir("./45" [pid 5013] close(3 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./46", 0777 [pid 5012] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... close resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5580 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5012] getdents64(3, [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] close(3 [pid 5012] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] unlink("./43/binderfs" [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... unlink resumed>) = 0 [pid 5012] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5581 ./strace-static-x86_64: Process 5579 attached [pid 5579] set_robust_list(0x555556b87660, 24./strace-static-x86_64: Process 5580 attached [ 109.187374][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 109.196034][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 109.212720][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5580] set_robust_list(0x555556b87660, 24 [pid 5579] <... set_robust_list resumed>) = 0 [pid 5579] chdir("./47" [pid 5580] <... set_robust_list resumed>) = 0 [pid 5580] chdir("./45" [pid 5579] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5581 attached [pid 5580] <... chdir resumed>) = 0 [pid 5579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5580] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5579] setpgid(0, 0 [pid 5580] <... prctl resumed>) = 0 [pid 5580] setpgid(0, 0 [pid 5579] <... setpgid resumed>) = 0 [pid 5579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5580] <... setpgid resumed>) = 0 [pid 5580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5581] set_robust_list(0x555556b87660, 24 [pid 5579] <... openat resumed>) = 3 [pid 5581] <... set_robust_list resumed>) = 0 [pid 5581] chdir("./46") = 0 [pid 5580] <... openat resumed>) = 3 [pid 5579] write(3, "1000", 4 [pid 5580] write(3, "1000", 4 [pid 5579] <... write resumed>) = 4 [pid 5580] <... write resumed>) = 4 [pid 5579] close(3 [pid 5580] close(3 [pid 5579] <... close resumed>) = 0 [pid 5580] <... close resumed>) = 0 [pid 5579] symlink("/dev/binderfs", "./binderfs" [pid 5580] symlink("/dev/binderfs", "./binderfs" [pid 5579] <... symlink resumed>) = 0 [pid 5580] <... symlink resumed>) = 0 [pid 5579] memfd_create("syzkaller", 0 [pid 5581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5580] memfd_create("syzkaller", 0 [pid 5579] <... memfd_create resumed>) = 3 [pid 5581] setpgid(0, 0 [pid 5580] <... memfd_create resumed>) = 3 [pid 5579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5581] <... setpgid resumed>) = 0 [ 109.243506][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 109.263937][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5579] <... mmap resumed>) = 0x7f770c286000 [pid 5016] <... umount2 resumed>) = 0 [pid 5581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5580] <... mmap resumed>) = 0x7f770c286000 [pid 5581] <... openat resumed>) = 3 [pid 5017] <... umount2 resumed>) = 0 [pid 5016] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./47/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5581] write(3, "1000", 4 [pid 5017] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5581] <... write resumed>) = 4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5581] close(3 [pid 5017] newfstatat(AT_FDCWD, "./44/file1", [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./47/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./47") = 0 [pid 5581] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] mkdir("./48", 0777) = 0 [pid 5581] symlink("/dev/binderfs", "./binderfs" [pid 5017] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5581] <... symlink resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5581] memfd_create("syzkaller", 0 [pid 5017] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5581] <... memfd_create resumed>) = 3 [pid 5581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... openat resumed>) = 4 [pid 5016] <... openat resumed>) = 3 [pid 5581] <... mmap resumed>) = 0x7f770c286000 [pid 5017] newfstatat(4, "", [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5582 ./strace-static-x86_64: Process 5582 attached [pid 5582] set_robust_list(0x555556b87660, 24) = 0 [pid 5582] chdir("./48") = 0 [pid 5582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./44/file1" [pid 5582] <... prctl resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./44" [pid 5582] setpgid(0, 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5582] <... setpgid resumed>) = 0 [pid 5582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5017] mkdir("./45", 0777 [pid 5582] write(3, "1000", 4) = 4 [pid 5017] <... mkdir resumed>) = 0 [pid 5582] close(3 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5582] <... close resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5582] symlink("/dev/binderfs", "./binderfs" [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5582] <... symlink resumed>) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5582] memfd_create("syzkaller", 0 [pid 5017] <... close resumed>) = 0 [ 109.287252][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 109.294250][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 109.303388][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 109.311155][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5582] <... memfd_create resumed>) = 3 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5582] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5583 ./strace-static-x86_64: Process 5583 attached [pid 5579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... umount2 resumed>) = 0 [pid 5583] set_robust_list(0x555556b87660, 24 [pid 5012] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] <... set_robust_list resumed>) = 0 [pid 5581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5583] chdir("./45" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./43/file1", [pid 5583] <... chdir resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] <... prctl resumed>) = 0 [pid 5583] setpgid(0, 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5583] <... setpgid resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] <... openat resumed>) = 4 [pid 5583] <... openat resumed>) = 3 [pid 5012] newfstatat(4, "", [pid 5583] write(3, "1000", 4) = 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5583] close(3) = 0 [pid 5012] getdents64(4, [pid 5583] symlink("/dev/binderfs", "./binderfs" [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5583] <... symlink resumed>) = 0 [pid 5012] getdents64(4, [pid 5583] memfd_create("syzkaller", 0) = 3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] close(4 [pid 5583] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./43/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./43") = 0 [pid 5012] mkdir("./44", 0777 [pid 5579] <... write resumed>) = 2097152 [pid 5583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5581] <... write resumed>) = 2097152 [pid 5580] <... write resumed>) = 2097152 [pid 5579] munmap(0x7f770c286000, 2097152 [pid 5012] <... mkdir resumed>) = 0 [pid 5581] munmap(0x7f770c286000, 2097152 [pid 5580] munmap(0x7f770c286000, 2097152 [pid 5579] <... munmap resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5581] <... munmap resumed>) = 0 [pid 5580] <... munmap resumed>) = 0 [pid 5579] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5012] <... openat resumed>) = 3 [pid 5581] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5580] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5579] <... openat resumed>) = 4 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5581] <... openat resumed>) = 4 [pid 5580] <... openat resumed>) = 4 [pid 5579] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5581] ioctl(4, LOOP_SET_FD, 3 [pid 5580] ioctl(4, LOOP_SET_FD, 3 [pid 5012] close(3 [pid 5581] <... ioctl resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5581] close(3 [pid 5579] <... ioctl resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5581] <... close resumed>) = 0 [pid 5579] close(3 [pid 5581] mkdir("./file1", 0777 [pid 5579] <... close resumed>) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5584 [pid 5581] <... mkdir resumed>) = 0 [pid 5579] mkdir("./file1", 0777 [pid 5581] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5579] <... mkdir resumed>) = 0 [pid 5583] <... write resumed>) = 2097152 [pid 5579] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5584 attached [pid 5583] munmap(0x7f770c286000, 2097152 [pid 5582] <... write resumed>) = 2097152 [pid 5580] <... ioctl resumed>) = 0 [pid 5584] set_robust_list(0x555556b87660, 24 [pid 5583] <... munmap resumed>) = 0 [pid 5582] munmap(0x7f770c286000, 2097152 [pid 5580] close(3 [pid 5584] <... set_robust_list resumed>) = 0 [pid 5580] <... close resumed>) = 0 [pid 5583] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5582] <... munmap resumed>) = 0 [pid 5580] mkdir("./file1", 0777 [pid 5584] chdir("./44" [pid 5583] <... openat resumed>) = 4 [pid 5583] ioctl(4, LOOP_SET_FD, 3 [pid 5580] <... mkdir resumed>) = 0 [ 109.468492][ T5579] loop3: detected capacity change from 0 to 4096 [ 109.475782][ T5581] loop2: detected capacity change from 0 to 4096 [ 109.482494][ T5580] loop1: detected capacity change from 0 to 4096 [ 109.497333][ T5581] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.508778][ T5579] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5584] <... chdir resumed>) = 0 [pid 5582] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5580] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5583] <... ioctl resumed>) = 0 [pid 5583] close(3) = 0 [pid 5583] mkdir("./file1", 0777) = 0 [pid 5583] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5584] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5582] <... openat resumed>) = 4 [pid 5584] <... prctl resumed>) = 0 [pid 5582] ioctl(4, LOOP_SET_FD, 3 [pid 5584] setpgid(0, 0) = 0 [pid 5584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5584] write(3, "1000", 4) = 4 [pid 5584] close(3) = 0 [pid 5584] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5584] memfd_create("syzkaller", 0) = 3 [ 109.524996][ T5583] loop5: detected capacity change from 0 to 4096 [ 109.525797][ T5579] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 109.542395][ T5581] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 109.543712][ T5580] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.561914][ T5582] loop4: detected capacity change from 0 to 4096 [pid 5584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5582] <... ioctl resumed>) = 0 [pid 5582] close(3) = 0 [pid 5582] mkdir("./file1", 0777 [pid 5581] <... mount resumed>) = 0 [pid 5581] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5582] <... mkdir resumed>) = 0 [pid 5581] <... openat resumed>) = 3 [pid 5582] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 109.569184][ T5583] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.579676][ T5580] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 109.591330][ T5583] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 109.601938][ T5585] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5581] chdir("./file1" [pid 5584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5581] <... chdir resumed>) = 0 [pid 5581] ioctl(4, LOOP_CLR_FD) = 0 [pid 5581] close(4) = 0 [pid 5581] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5579] <... mount resumed>) = 0 [pid 5579] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5579] chdir("./file1") = 0 [pid 5579] ioctl(4, LOOP_CLR_FD) = 0 [pid 5579] close(4) = 0 [pid 5580] <... mount resumed>) = 0 [ 109.622439][ T5582] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.632762][ T5586] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.643607][ T5581] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.657616][ T5587] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5579] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5580] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5583] <... mount resumed>) = 0 [pid 5580] <... openat resumed>) = 3 [pid 5583] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5580] chdir("./file1" [pid 5583] <... openat resumed>) = 3 [pid 5580] <... chdir resumed>) = 0 [pid 5583] chdir("./file1" [pid 5580] ioctl(4, LOOP_CLR_FD [pid 5583] <... chdir resumed>) = 0 [pid 5580] <... ioctl resumed>) = 0 [pid 5583] ioctl(4, LOOP_CLR_FD [pid 5580] close(4 [pid 5582] <... mount resumed>) = 0 [ 109.672497][ T5579] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.688472][ T5588] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.700657][ T5582] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 109.712988][ T5581] Remounting filesystem read-only [pid 5583] <... ioctl resumed>) = 0 [pid 5580] <... close resumed>) = 0 [pid 5583] close(4 [pid 5582] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5583] <... close resumed>) = 0 [pid 5582] <... openat resumed>) = 3 [pid 5580] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5583] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5582] chdir("./file1" [pid 5584] <... write resumed>) = 2097152 [ 109.721771][ T5589] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.733914][ T5579] Remounting filesystem read-only [ 109.740992][ T5579] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 109.750277][ T5580] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.766013][ T5581] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5584] munmap(0x7f770c286000, 2097152) = 0 [pid 5582] <... chdir resumed>) = 0 [pid 5584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5584] ioctl(4, LOOP_SET_FD, 3 [pid 5582] ioctl(4, LOOP_CLR_FD) = 0 [pid 5582] close(4) = 0 [ 109.766757][ T5583] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.773857][ T5581] NILFS (loop2): repaired inode bitmap for reserved inodes [ 109.797622][ T5580] Remounting filesystem read-only [ 109.803917][ T5584] loop0: detected capacity change from 0 to 4096 [ 109.817906][ T5580] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5582] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5584] <... ioctl resumed>) = 0 [pid 5584] close(3) = 0 [pid 5584] mkdir("./file1", 0777) = 0 [ 109.823855][ T5579] NILFS (loop3): repaired inode bitmap for reserved inodes [ 109.826798][ T5582] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.855950][ T5580] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5584] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5580] <... openat resumed>) = -1 EIO (Input/output error) [ 109.863851][ T5580] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.874561][ T5584] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.879568][ T5583] Remounting filesystem read-only [ 109.888757][ T5579] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.894169][ T5581] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5580] exit_group(0) = ? [pid 5579] <... openat resumed>) = -1 EIO (Input/output error) [pid 5580] +++ exited with 0 +++ [pid 5579] exit_group(0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5580, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=10 /* 0.10 s */} --- [pid 5013] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./45/binderfs") = 0 [pid 5013] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] <... exit_group resumed>) = ? [ 109.924252][ T5582] Remounting filesystem read-only [ 109.925159][ T5584] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 109.929595][ T5583] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 109.950166][ T5582] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 109.959176][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 109.959342][ T5582] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5579] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5579, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./47/binderfs") = 0 [ 109.966741][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 109.975025][ T5583] NILFS (loop5): repaired inode bitmap for reserved inodes [ 109.981122][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 109.990167][ T5582] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 109.995364][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 110.018964][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5015] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5581] <... openat resumed>) = -1 EIO (Input/output error) [pid 5581] exit_group(0) = ? [pid 5581] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5581, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./46/binderfs") = 0 [pid 5014] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = 0 [ 110.019081][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 110.025988][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 110.052508][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5013] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... openat resumed>) = -1 EIO (Input/output error) [pid 5582] exit_group(0) = ? [pid 5582] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5582, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5016] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./45/file1", [pid 5016] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./48/binderfs") = 0 [ 110.063463][ T5583] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.064449][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 110.086406][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 110.093915][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 110.103204][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 110.111525][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 110.118474][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5016] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5583] exit_group(0 [pid 5015] <... umount2 resumed>) = 0 [pid 5013] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] <... exit_group resumed>) = ? [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5583] +++ exited with 0 +++ [pid 5013] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5583, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5013] <... openat resumed>) = 4 [pid 5584] <... mount resumed>) = 0 [pid 5013] newfstatat(4, "", [pid 5584] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5584] chdir("./file1") = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5584] ioctl(4, LOOP_CLR_FD) = 0 [pid 5584] close(4 [pid 5013] getdents64(4, [pid 5584] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5584] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [ 110.118497][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 110.136360][ T5590] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.148148][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 110.162035][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5013] getdents64(4, [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] close(4 [pid 5017] <... openat resumed>) = 3 [pid 5015] newfstatat(AT_FDCWD, "./47/file1", [pid 5013] <... close resumed>) = 0 [pid 5017] newfstatat(3, "", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] rmdir("./45/file1" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] getdents64(3, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... rmdir resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 110.169806][ T5584] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.170127][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 110.187707][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 110.202733][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 110.211153][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 110.211404][ T5584] Remounting filesystem read-only [pid 5013] getdents64(3, [pid 5017] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... openat resumed>) = 4 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(4, "", [pid 5013] close(3 [pid 5017] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... close resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] getdents64(4, [pid 5013] rmdir("./45" [pid 5017] unlink("./45/binderfs" [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... rmdir resumed>) = 0 [ 110.220647][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 110.225162][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 110.238549][ T5584] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 110.248950][ T5584] NILFS (loop0): repaired inode bitmap for reserved inodes [ 110.257863][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5017] <... unlink resumed>) = 0 [pid 5015] getdents64(4, [pid 5014] <... umount2 resumed>) = 0 [pid 5013] mkdir("./46", 0777 [pid 5017] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./47/file1") = 0 [pid 5015] getdents64(3, [pid 5014] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 3 [pid 5014] newfstatat(AT_FDCWD, "./46/file1", [pid 5015] close(3) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5015] rmdir("./47" [pid 5014] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] <... rmdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] close(3 [pid 5015] mkdir("./48", 0777 [pid 5014] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... mkdir resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5013] <... close resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] newfstatat(4, "", [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... openat resumed>) = 3 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5014] getdents64(4, [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5591 [pid 5015] <... close resumed>) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./46/file1" [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5592 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./46") = 0 [pid 5014] mkdir("./47", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5593 [ 110.262694][ T5584] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.283058][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 110.290432][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 110.300339][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 110.310714][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 110.318597][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 ./strace-static-x86_64: Process 5593 attached ./strace-static-x86_64: Process 5591 attached [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5592 attached [pid 5592] set_robust_list(0x555556b87660, 24) = 0 [pid 5592] chdir("./48" [pid 5016] newfstatat(AT_FDCWD, "./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5591] set_robust_list(0x555556b87660, 24 [pid 5593] set_robust_list(0x555556b87660, 24 [pid 5591] <... set_robust_list resumed>) = 0 [pid 5593] <... set_robust_list resumed>) = 0 [pid 5016] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5592] <... chdir resumed>) = 0 [pid 5591] chdir("./46" [pid 5593] chdir("./47" [pid 5584] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5592] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5592] <... prctl resumed>) = 0 [pid 5016] <... openat resumed>) = 4 [pid 5592] setpgid(0, 0 [pid 5016] newfstatat(4, "", [pid 5592] <... setpgid resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] getdents64(4, [pid 5592] <... openat resumed>) = 3 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5592] write(3, "1000", 4 [pid 5016] getdents64(4, [pid 5592] <... write resumed>) = 4 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5592] close(3 [pid 5016] close(4 [pid 5592] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5592] symlink("/dev/binderfs", "./binderfs" [pid 5016] rmdir("./48/file1" [pid 5592] <... symlink resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5592] memfd_create("syzkaller", 0 [pid 5016] getdents64(3, [pid 5592] <... memfd_create resumed>) = 3 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] close(3 [pid 5592] <... mmap resumed>) = 0x7f770c286000 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./48") = 0 [pid 5591] <... chdir resumed>) = 0 [pid 5016] mkdir("./49", 0777 [pid 5593] <... chdir resumed>) = 0 [pid 5591] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5584] exit_group(0 [pid 5016] <... mkdir resumed>) = 0 [pid 5593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5591] <... prctl resumed>) = 0 [pid 5584] <... exit_group resumed>) = ? [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5593] <... prctl resumed>) = 0 [pid 5591] setpgid(0, 0 [pid 5016] <... openat resumed>) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5593] setpgid(0, 0 [pid 5591] <... setpgid resumed>) = 0 [pid 5584] +++ exited with 0 +++ [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5584, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5593] <... setpgid resumed>) = 0 [pid 5591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] <... restart_syscall resumed>) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5594 [pid 5593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5591] <... openat resumed>) = 3 [pid 5017] <... umount2 resumed>) = 0 [pid 5012] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5593] write(3, "1000", 4 [pid 5591] write(3, "1000", 4 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(3, "", [pid 5593] <... write resumed>) = 4 [pid 5591] <... write resumed>) = 4 [pid 5017] newfstatat(AT_FDCWD, "./45/file1", [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5594 attached [pid 5593] close(3 [pid 5591] close(3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] getdents64(3, [pid 5594] set_robust_list(0x555556b87660, 24 [pid 5593] <... close resumed>) = 0 [pid 5591] <... close resumed>) = 0 [pid 5017] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5594] <... set_robust_list resumed>) = 0 [pid 5593] symlink("/dev/binderfs", "./binderfs" [pid 5591] symlink("/dev/binderfs", "./binderfs" [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5594] chdir("./49" [pid 5593] <... symlink resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5594] <... chdir resumed>) = 0 [pid 5593] memfd_create("syzkaller", 0 [pid 5591] <... symlink resumed>) = 0 [pid 5017] <... openat resumed>) = 4 [pid 5012] newfstatat(AT_FDCWD, "./44/binderfs", [pid 5594] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5593] <... memfd_create resumed>) = 3 [pid 5591] memfd_create("syzkaller", 0 [pid 5017] newfstatat(4, "", [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5594] <... prctl resumed>) = 0 [ 110.345732][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5591] <... memfd_create resumed>) = 3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] unlink("./44/binderfs" [pid 5594] setpgid(0, 0 [pid 5593] <... mmap resumed>) = 0x7f770c286000 [pid 5591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] getdents64(4, [pid 5012] <... unlink resumed>) = 0 [pid 5594] <... setpgid resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5591] <... mmap resumed>) = 0x7f770c286000 [pid 5017] getdents64(4, [pid 5594] <... openat resumed>) = 3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5594] write(3, "1000", 4 [pid 5017] close(4 [pid 5594] <... write resumed>) = 4 [pid 5017] <... close resumed>) = 0 [pid 5594] close(3 [pid 5017] rmdir("./45/file1" [pid 5594] <... close resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5594] symlink("/dev/binderfs", "./binderfs" [pid 5017] getdents64(3, [pid 5594] <... symlink resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5594] memfd_create("syzkaller", 0 [pid 5017] close(3 [pid 5594] <... memfd_create resumed>) = 3 [pid 5017] <... close resumed>) = 0 [pid 5594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] rmdir("./45" [pid 5594] <... mmap resumed>) = 0x7f770c286000 [pid 5593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] <... rmdir resumed>) = 0 [pid 5591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] mkdir("./46", 0777) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5595 ./strace-static-x86_64: Process 5595 attached [pid 5595] set_robust_list(0x555556b87660, 24) = 0 [pid 5595] chdir("./46") = 0 [pid 5595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5595] setpgid(0, 0) = 0 [pid 5595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5595] write(3, "1000", 4) = 4 [pid 5595] close(3) = 0 [pid 5595] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5595] memfd_create("syzkaller", 0) = 3 [pid 5595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 110.410681][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 110.426345][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 110.433932][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5595] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5593] <... write resumed>) = 2097152 [pid 5592] <... write resumed>) = 2097152 [pid 5591] <... write resumed>) = 2097152 [pid 5594] <... write resumed>) = 2097152 [pid 5594] munmap(0x7f770c286000, 2097152) = 0 [pid 5594] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5594] ioctl(4, LOOP_SET_FD, 3 [pid 5593] munmap(0x7f770c286000, 2097152 [pid 5592] munmap(0x7f770c286000, 2097152 [pid 5591] munmap(0x7f770c286000, 2097152 [pid 5594] <... ioctl resumed>) = 0 [pid 5594] close(3) = 0 [pid 5594] mkdir("./file1", 0777 [pid 5593] <... munmap resumed>) = 0 [pid 5594] <... mkdir resumed>) = 0 [pid 5594] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5592] <... munmap resumed>) = 0 [pid 5591] <... munmap resumed>) = 0 [ 110.507481][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 110.514940][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 110.531172][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 110.541619][ T5594] loop4: detected capacity change from 0 to 4096 [pid 5593] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5592] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5591] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5592] <... openat resumed>) = 4 [pid 5591] <... openat resumed>) = 4 [pid 5593] <... openat resumed>) = 4 [pid 5593] ioctl(4, LOOP_SET_FD, 3 [pid 5592] ioctl(4, LOOP_SET_FD, 3 [pid 5591] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5593] <... ioctl resumed>) = 0 [pid 5593] close(3 [pid 5591] close(3 [pid 5593] <... close resumed>) = 0 [pid 5591] <... close resumed>) = 0 [pid 5593] mkdir("./file1", 0777 [pid 5591] mkdir("./file1", 0777 [pid 5594] <... mount resumed>) = 0 [pid 5594] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5591] <... mkdir resumed>) = 0 [pid 5593] <... mkdir resumed>) = 0 [pid 5591] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5594] chdir("./file1") = 0 [pid 5594] ioctl(4, LOOP_CLR_FD) = 0 [pid 5593] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 110.553694][ T5594] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.566649][ T5591] loop1: detected capacity change from 0 to 4096 [ 110.567889][ T5594] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 110.573481][ T5592] loop3: detected capacity change from 0 to 4096 [ 110.589484][ T5593] loop2: detected capacity change from 0 to 4096 [pid 5594] close(4) = 0 [pid 5594] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5595] <... write resumed>) = 2097152 [pid 5592] <... ioctl resumed>) = 0 [ 110.608173][ T5594] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.627863][ T5591] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.635921][ T5596] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.638325][ T5593] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5595] munmap(0x7f770c286000, 2097152) = 0 [pid 5592] close(3 [pid 5595] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5592] <... close resumed>) = 0 [pid 5595] <... openat resumed>) = 4 [pid 5592] mkdir("./file1", 0777 [pid 5595] ioctl(4, LOOP_SET_FD, 3 [pid 5592] <... mkdir resumed>) = 0 [pid 5595] <... ioctl resumed>) = 0 [pid 5592] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = 0 [ 110.657031][ T5594] Remounting filesystem read-only [ 110.673032][ T5595] loop5: detected capacity change from 0 to 4096 [ 110.673038][ T5594] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 110.673069][ T5594] NILFS (loop4): repaired inode bitmap for reserved inodes [ 110.688109][ T5591] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5595] close(3 [pid 5012] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5595] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5595] mkdir("./file1", 0777 [pid 5012] newfstatat(AT_FDCWD, "./44/file1", [pid 5595] <... mkdir resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5595] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, [pid 5594] <... openat resumed>) = -1 EIO (Input/output error) [pid 5594] exit_group(0) = ? [pid 5594] +++ exited with 0 +++ [pid 5593] <... mount resumed>) = 0 [pid 5593] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5593] chdir("./file1") = 0 [pid 5593] ioctl(4, LOOP_CLR_FD) = 0 [ 110.695434][ T5594] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.706386][ T5592] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.729586][ T5593] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 110.748074][ T5595] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5593] close(4) = 0 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5594, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, [pid 5593] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(4 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] rmdir("./44/file1" [pid 5016] <... openat resumed>) = 3 [pid 5012] <... rmdir resumed>) = 0 [pid 5016] newfstatat(3, "", [pid 5012] getdents64(3, [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] getdents64(3, [pid 5012] close(3 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] <... close resumed>) = 0 [pid 5016] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] rmdir("./44" [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... rmdir resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5012] mkdir("./45", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5016] unlink("./49/binderfs" [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5016] <... unlink resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [ 110.759552][ T5597] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.771854][ T5595] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 110.774693][ T5593] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.781555][ T5592] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5016] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5595] <... mount resumed>) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5600 ./strace-static-x86_64: Process 5600 attached [pid 5600] set_robust_list(0x555556b87660, 24) = 0 [pid 5600] chdir("./45" [pid 5595] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5592] <... mount resumed>) = 0 [pid 5591] <... mount resumed>) = 0 [pid 5600] <... chdir resumed>) = 0 [ 110.813320][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 110.828006][ T5599] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.832480][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 110.846650][ T5598] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5600] setpgid(0, 0) = 0 [pid 5600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5600] write(3, "1000", 4 [pid 5595] <... openat resumed>) = 3 [pid 5592] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5591] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5600] <... write resumed>) = 4 [pid 5600] close(3) = 0 [pid 5600] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5600] memfd_create("syzkaller", 0) = 3 [pid 5595] chdir("./file1" [pid 5592] <... openat resumed>) = 3 [pid 5591] <... openat resumed>) = 3 [pid 5600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5595] <... chdir resumed>) = 0 [pid 5592] chdir("./file1" [pid 5591] chdir("./file1" [pid 5600] <... mmap resumed>) = 0x7f770c286000 [pid 5595] ioctl(4, LOOP_CLR_FD [pid 5592] <... chdir resumed>) = 0 [pid 5591] <... chdir resumed>) = 0 [pid 5592] ioctl(4, LOOP_CLR_FD [pid 5591] ioctl(4, LOOP_CLR_FD [pid 5595] <... ioctl resumed>) = 0 [pid 5592] <... ioctl resumed>) = 0 [pid 5591] <... ioctl resumed>) = 0 [pid 5595] close(4 [pid 5592] close(4 [pid 5591] close(4 [pid 5595] <... close resumed>) = 0 [ 110.849341][ T5601] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.876589][ T5593] Remounting filesystem read-only [ 110.884190][ T5593] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 110.893181][ T5593] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5595] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5593] <... openat resumed>) = -1 EIO (Input/output error) [pid 5592] <... close resumed>) = 0 [pid 5591] <... close resumed>) = 0 [pid 5593] exit_group(0 [pid 5592] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5591] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5593] <... exit_group resumed>) = ? [ 110.901255][ T5593] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.913948][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 110.926740][ T5595] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.929711][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5600] <... write resumed>) = 2097152 [pid 5593] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5593, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./47/binderfs") = 0 [ 110.950596][ T5592] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.965635][ T5591] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 110.987703][ T5595] Remounting filesystem read-only [ 110.990718][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 110.994292][ T5595] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 111.001188][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5014] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] munmap(0x7f770c286000, 2097152) = 0 [pid 5600] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5600] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5600] close(3) = 0 [pid 5600] mkdir("./file1", 0777) = 0 [ 111.011660][ T5592] Remounting filesystem read-only [ 111.025403][ T5600] loop0: detected capacity change from 0 to 4096 [ 111.031979][ T5595] NILFS (loop5): repaired inode bitmap for reserved inodes [ 111.041059][ T5595] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5600] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5595] <... openat resumed>) = -1 EIO (Input/output error) [ 111.042415][ T5592] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 111.049295][ T5591] Remounting filesystem read-only [ 111.071838][ T5592] NILFS (loop3): repaired inode bitmap for reserved inodes [ 111.079702][ T5600] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.089739][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 111.097959][ T5591] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 111.098479][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5595] exit_group(0) = ? [pid 5595] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5595, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5017] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./46/binderfs") = 0 [pid 5017] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5591] <... openat resumed>) = -1 EIO (Input/output error) [pid 5591] exit_group(0) = ? [ 111.111869][ T5591] NILFS (loop1): repaired inode bitmap for reserved inodes [ 111.114287][ T5592] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 111.122108][ T5591] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 111.137261][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5591] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5591, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./46/binderfs") = 0 [pid 5013] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5592] <... openat resumed>) = -1 EIO (Input/output error) [pid 5592] exit_group(0) = ? [pid 5592] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5592, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./48/binderfs") = 0 [ 111.157696][ T5600] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 111.169271][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 111.177295][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 111.184094][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 111.186268][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 111.202780][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5015] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = 0 [ 111.210941][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 111.218783][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 111.219279][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 111.230542][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 111.236837][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 111.247574][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 111.251582][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5016] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 111.255706][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 111.267701][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 111.270356][ T5602] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.277417][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 111.288247][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 111.295402][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 111.301844][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5016] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] <... mount resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5600] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5600] <... openat resumed>) = 3 [pid 5016] <... openat resumed>) = 4 [pid 5600] chdir("./file1" [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5600] <... chdir resumed>) = 0 [pid 5600] ioctl(4, LOOP_CLR_FD [pid 5016] getdents64(4, [pid 5600] <... ioctl resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5600] close(4) = 0 [pid 5016] getdents64(4, [ 111.309575][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 111.324036][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 111.355392][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [pid 5600] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./49/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./49") = 0 [pid 5016] mkdir("./50", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./46/file1", [pid 5016] close(3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5603 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./46/file1"./strace-static-x86_64: Process 5603 attached [pid 5603] set_robust_list(0x555556b87660, 24 [pid 5013] <... rmdir resumed>) = 0 [pid 5603] <... set_robust_list resumed>) = 0 [pid 5603] chdir("./50") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./46" [pid 5603] setpgid(0, 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5603] <... setpgid resumed>) = 0 [pid 5603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] <... umount2 resumed>) = 0 [pid 5013] mkdir("./47", 0777 [pid 5603] write(3, "1000", 4 [pid 5014] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... mkdir resumed>) = 0 [ 111.364087][ T5600] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5603] <... write resumed>) = 4 [pid 5017] <... umount2 resumed>) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5603] close(3 [pid 5017] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] newfstatat(AT_FDCWD, "./47/file1", [pid 5013] <... openat resumed>) = 3 [pid 5603] <... close resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5603] symlink("/dev/binderfs", "./binderfs" [pid 5017] newfstatat(AT_FDCWD, "./46/file1", [pid 5015] newfstatat(AT_FDCWD, "./48/file1", [pid 5014] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5603] <... symlink resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] close(3 [pid 5603] memfd_create("syzkaller", 0 [pid 5017] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 111.416299][ T5600] Remounting filesystem read-only [ 111.422391][ T5600] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 111.439246][ T5600] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5014] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... close resumed>) = 0 [pid 5603] <... memfd_create resumed>) = 3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 4 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] newfstatat(4, "", [pid 5603] <... mmap resumed>) = 0x7f770c286000 [pid 5017] <... openat resumed>) = 4 [pid 5015] <... openat resumed>) = 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5604 ./strace-static-x86_64: Process 5604 attached [pid 5600] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] newfstatat(4, "", [pid 5015] newfstatat(4, "", [pid 5014] getdents64(4, [pid 5604] set_robust_list(0x555556b87660, 24 [pid 5600] exit_group(0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5604] <... set_robust_list resumed>) = 0 [pid 5600] <... exit_group resumed>) = ? [pid 5017] getdents64(4, [pid 5015] getdents64(4, [pid 5014] getdents64(4, [pid 5604] chdir("./47" [pid 5600] +++ exited with 0 +++ [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5604] <... chdir resumed>) = 0 [pid 5017] getdents64(4, [pid 5015] getdents64(4, [pid 5014] close(4 [pid 5604] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5600, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5604] <... prctl resumed>) = 0 [pid 5017] close(4 [pid 5015] close(4 [pid 5014] rmdir("./47/file1" [pid 5012] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5604] setpgid(0, 0 [pid 5017] <... close resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] <... setpgid resumed>) = 0 [pid 5017] rmdir("./46/file1" [pid 5015] rmdir("./48/file1" [pid 5014] <... rmdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] <... rmdir resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5604] <... openat resumed>) = 3 [pid 5017] getdents64(3, [pid 5015] <... rmdir resumed>) = 0 [pid 5014] getdents64(3, [pid 5012] newfstatat(3, "", [pid 5604] write(3, "1000", 4 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] getdents64(3, [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5604] <... write resumed>) = 4 [pid 5017] close(3 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] getdents64(3, [pid 5604] close(3 [pid 5017] <... close resumed>) = 0 [pid 5015] close(3 [pid 5014] <... close resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5604] <... close resumed>) = 0 [pid 5017] rmdir("./46" [pid 5015] <... close resumed>) = 0 [pid 5014] rmdir("./47" [pid 5012] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5604] symlink("/dev/binderfs", "./binderfs" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] <... symlink resumed>) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5015] rmdir("./48" [pid 5014] <... rmdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5604] memfd_create("syzkaller", 0 [pid 5017] mkdir("./47", 0777 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5604] <... memfd_create resumed>) = 3 [pid 5015] <... rmdir resumed>) = 0 [pid 5014] mkdir("./48", 0777 [pid 5012] unlink("./45/binderfs" [pid 5604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5015] mkdir("./49", 0777 [pid 5014] <... mkdir resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [ 111.464179][ T5600] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5604] <... mmap resumed>) = 0x7f770c286000 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5603] <... write resumed>) = 2097152 [pid 5017] <... openat resumed>) = 3 [pid 5015] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5603] munmap(0x7f770c286000, 2097152 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... openat resumed>) = 3 [pid 5604] <... write resumed>) = 2097152 [pid 5603] <... munmap resumed>) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5603] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5017] close(3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5603] <... openat resumed>) = 4 [pid 5017] <... close resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5603] ioctl(4, LOOP_SET_FD, 3 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] close(3 [pid 5014] <... close resumed>) = 0 ./strace-static-x86_64: Process 5605 attached [pid 5603] <... ioctl resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5605 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5606 [pid 5604] munmap(0x7f770c286000, 2097152 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5607 [pid 5605] set_robust_list(0x555556b87660, 24 [pid 5603] close(3) = 0 [pid 5603] mkdir("./file1", 0777 [pid 5604] <... munmap resumed>) = 0 [pid 5605] <... set_robust_list resumed>) = 0 [pid 5603] <... mkdir resumed>) = 0 [pid 5605] chdir("./47") = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5605] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5603] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5605] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5607 attached ./strace-static-x86_64: Process 5606 attached [pid 5605] setpgid(0, 0 [ 111.526491][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 111.533254][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 111.542572][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 111.550580][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 111.558413][ T5603] loop4: detected capacity change from 0 to 4096 [ 111.565191][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [pid 5604] ioctl(4, LOOP_SET_FD, 3 [pid 5607] set_robust_list(0x555556b87660, 24 [pid 5606] set_robust_list(0x555556b87660, 24 [pid 5605] <... setpgid resumed>) = 0 [pid 5607] <... set_robust_list resumed>) = 0 [pid 5606] <... set_robust_list resumed>) = 0 [pid 5607] chdir("./49" [pid 5606] chdir("./48" [pid 5605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5606] <... chdir resumed>) = 0 [pid 5607] <... chdir resumed>) = 0 [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5605] <... openat resumed>) = 3 [pid 5606] <... prctl resumed>) = 0 [pid 5607] <... prctl resumed>) = 0 [pid 5606] setpgid(0, 0 [pid 5605] write(3, "1000", 4 [pid 5606] <... setpgid resumed>) = 0 [pid 5607] setpgid(0, 0 [pid 5606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5605] <... write resumed>) = 4 [pid 5607] <... setpgid resumed>) = 0 [pid 5606] <... openat resumed>) = 3 [pid 5605] close(3 [pid 5606] write(3, "1000", 4 [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5606] <... write resumed>) = 4 [pid 5605] <... close resumed>) = 0 [pid 5606] close(3 [pid 5605] symlink("/dev/binderfs", "./binderfs" [pid 5607] <... openat resumed>) = 3 [pid 5606] <... close resumed>) = 0 [pid 5606] symlink("/dev/binderfs", "./binderfs" [pid 5607] write(3, "1000", 4 [pid 5606] <... symlink resumed>) = 0 [pid 5605] <... symlink resumed>) = 0 [pid 5607] <... write resumed>) = 4 [pid 5606] memfd_create("syzkaller", 0 [pid 5605] memfd_create("syzkaller", 0 [pid 5607] close(3 [pid 5606] <... memfd_create resumed>) = 3 [pid 5605] <... memfd_create resumed>) = 3 [pid 5607] <... close resumed>) = 0 [pid 5605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5604] <... ioctl resumed>) = 0 [pid 5607] symlink("/dev/binderfs", "./binderfs" [pid 5606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5605] <... mmap resumed>) = 0x7f770c286000 [pid 5607] <... symlink resumed>) = 0 [pid 5606] <... mmap resumed>) = 0x7f770c286000 [pid 5607] memfd_create("syzkaller", 0) = 3 [pid 5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5604] close(3 [pid 5607] <... mmap resumed>) = 0x7f770c286000 [pid 5604] <... close resumed>) = 0 [pid 5604] mkdir("./file1", 0777) = 0 [ 111.589576][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 111.589607][ T5604] loop1: detected capacity change from 0 to 4096 [ 111.605291][ T5603] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5604] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 111.643688][ T5604] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.654331][ T5603] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] <... mount resumed>) = 0 [pid 5603] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] newfstatat(AT_FDCWD, "./45/file1", [pid 5603] <... openat resumed>) = 3 [pid 5603] chdir("./file1" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5603] <... chdir resumed>) = 0 [pid 5603] ioctl(4, LOOP_CLR_FD [pid 5012] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5603] <... ioctl resumed>) = 0 [pid 5603] close(4 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5603] <... close resumed>) = 0 [pid 5603] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 111.689527][ T5604] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 111.726260][ T5608] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5012] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4 [pid 5607] <... write resumed>) = 2097152 [pid 5012] <... close resumed>) = 0 [pid 5605] <... write resumed>) = 2097152 [pid 5012] rmdir("./45/file1") = 0 [pid 5605] munmap(0x7f770c286000, 2097152 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./45") = 0 [pid 5012] mkdir("./46", 0777) = 0 [ 111.745956][ T5603] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 111.769875][ T5603] Remounting filesystem read-only [ 111.782364][ T5609] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5607] munmap(0x7f770c286000, 2097152 [pid 5606] <... write resumed>) = 2097152 [pid 5605] <... munmap resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5604] <... mount resumed>) = 0 [pid 5604] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5604] chdir("./file1") = 0 [pid 5604] ioctl(4, LOOP_CLR_FD) = 0 [pid 5604] close(4) = 0 [pid 5604] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5607] <... munmap resumed>) = 0 [pid 5606] munmap(0x7f770c286000, 2097152 [pid 5605] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... openat resumed>) = 3 [pid 5607] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5606] <... munmap resumed>) = 0 [pid 5605] <... openat resumed>) = 4 [pid 5607] <... openat resumed>) = 4 [ 111.787887][ T5603] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 111.802453][ T5604] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 111.803803][ T5603] NILFS (loop4): repaired inode bitmap for reserved inodes [ 111.827963][ T5603] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5605] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5607] ioctl(4, LOOP_SET_FD, 3 [pid 5606] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] close(3 [pid 5603] <... openat resumed>) = -1 EIO (Input/output error) [pid 5603] exit_group(0) = ? [pid 5603] +++ exited with 0 +++ [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5603, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5607] <... ioctl resumed>) = 0 [pid 5606] <... openat resumed>) = 4 [pid 5605] <... ioctl resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5606] ioctl(4, LOOP_SET_FD, 3 [pid 5605] close(3 [pid 5016] <... restart_syscall resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5605] <... close resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./50/binderfs") = 0 [pid 5016] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5610 attached [pid 5610] set_robust_list(0x555556b87660, 24) = 0 [pid 5610] chdir("./46") = 0 [pid 5610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5610] setpgid(0, 0) = 0 [ 111.833841][ T5604] Remounting filesystem read-only [ 111.843283][ T5605] loop5: detected capacity change from 0 to 4096 [ 111.850271][ T5604] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 111.854817][ T5607] loop3: detected capacity change from 0 to 4096 [ 111.868884][ T5604] NILFS (loop1): repaired inode bitmap for reserved inodes [ 111.879395][ T5606] loop2: detected capacity change from 0 to 4096 [ 111.887009][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [pid 5607] close(3 [pid 5606] <... ioctl resumed>) = 0 [pid 5605] mkdir("./file1", 0777 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5610 [pid 5610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5610] write(3, "1000", 4) = 4 [pid 5610] close(3) = 0 [pid 5610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5607] <... close resumed>) = 0 [pid 5606] close(3 [pid 5610] memfd_create("syzkaller", 0 [pid 5605] <... mkdir resumed>) = 0 [pid 5606] <... close resumed>) = 0 [pid 5607] mkdir("./file1", 0777 [pid 5606] mkdir("./file1", 0777 [pid 5607] <... mkdir resumed>) = 0 [pid 5610] <... memfd_create resumed>) = 3 [pid 5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5606] <... mkdir resumed>) = 0 [pid 5607] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5606] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 111.893733][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 111.896951][ T5604] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 111.923627][ T5605] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.923778][ T5606] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5605] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5604] <... openat resumed>) = -1 EIO (Input/output error) [pid 5604] exit_group(0) = ? [pid 5604] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5604, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5013] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./47/binderfs") = 0 [ 111.934155][ T5607] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.953158][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 111.960462][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 111.968034][ T5606] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 111.984066][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5013] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = 0 [pid 5606] <... mount resumed>) = 0 [ 111.991762][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 112.001041][ T5611] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.005119][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 112.027587][ T5607] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 112.032205][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5606] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] <... openat resumed>) = 3 [pid 5016] newfstatat(AT_FDCWD, "./50/file1", [pid 5606] chdir("./file1" [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5606] <... chdir resumed>) = 0 [pid 5016] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5606] ioctl(4, LOOP_CLR_FD [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] <... ioctl resumed>) = 0 [pid 5016] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5606] close(4 [pid 5016] <... openat resumed>) = 4 [pid 5606] <... close resumed>) = 0 [pid 5606] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./50/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./50") = 0 [pid 5016] mkdir("./51", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 112.038693][ T5605] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 112.054574][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 112.076078][ T5606] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] close(3 [pid 5607] <... mount resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5610] <... write resumed>) = 2097152 [pid 5607] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5607] <... openat resumed>) = 3 [pid 5607] chdir("./file1") = 0 [pid 5607] ioctl(4, LOOP_CLR_FD) = 0 [pid 5607] close(4) = 0 [ 112.104680][ T5612] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.126366][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 112.130977][ T5607] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5607] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5610] munmap(0x7f770c286000, 2097152 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5613 [pid 5610] <... munmap resumed>) = 0 [pid 5605] <... mount resumed>) = 0 [pid 5605] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5613 attached ) = 3 [pid 5613] set_robust_list(0x555556b87660, 24 [pid 5605] chdir("./file1" [pid 5613] <... set_robust_list resumed>) = 0 [pid 5605] <... chdir resumed>) = 0 [pid 5613] chdir("./51" [pid 5605] ioctl(4, LOOP_CLR_FD [pid 5613] <... chdir resumed>) = 0 [pid 5605] <... ioctl resumed>) = 0 [pid 5613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5605] close(4 [pid 5613] <... prctl resumed>) = 0 [pid 5605] <... close resumed>) = 0 [pid 5613] setpgid(0, 0 [pid 5605] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5613] <... setpgid resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5613] write(3, "1000", 4) = 4 [pid 5613] close(3) = 0 [pid 5613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5613] memfd_create("syzkaller", 0) = 3 [pid 5613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5610] <... openat resumed>) = 4 [pid 5610] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5610] close(3) = 0 [pid 5610] mkdir("./file1", 0777) = 0 [ 112.135259][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 112.158087][ T5614] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.165921][ T5605] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 112.170161][ T5606] Remounting filesystem read-only [ 112.197273][ T5610] loop0: detected capacity change from 0 to 4096 [pid 5610] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 112.208838][ T5607] Remounting filesystem read-only [ 112.215365][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 112.223453][ T5610] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.229785][ T5607] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 112.246983][ T5605] Remounting filesystem read-only [ 112.256415][ T5606] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 112.268581][ T5610] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 112.273566][ T5605] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 112.296148][ T5607] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5613] munmap(0x7f770c286000, 2097152) = 0 [pid 5613] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5613] ioctl(4, LOOP_SET_FD, 3 [pid 5606] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... umount2 resumed>) = 0 [ 112.307022][ T5606] NILFS (loop2): repaired inode bitmap for reserved inodes [ 112.316156][ T5613] loop4: detected capacity change from 0 to 4096 [ 112.322512][ T5606] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 112.324452][ T5605] NILFS (loop5): repaired inode bitmap for reserved inodes [ 112.339444][ T5607] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5606] exit_group(0 [pid 5013] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5607] <... openat resumed>) = -1 EIO (Input/output error) [pid 5607] exit_group(0) = ? [pid 5613] <... ioctl resumed>) = 0 [pid 5613] close(3) = 0 [pid 5613] mkdir("./file1", 0777) = 0 [pid 5613] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5607] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5606] <... exit_group resumed>) = ? [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] unlink("./49/binderfs") = 0 [pid 5015] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] newfstatat(AT_FDCWD, "./47/file1", [pid 5606] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5606, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5610] <... mount resumed>) = 0 [pid 5605] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... restart_syscall resumed>) = 0 [pid 5013] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5610] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5610] chdir("./file1" [pid 5014] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5610] <... chdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] ioctl(4, LOOP_CLR_FD [pid 5014] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... ioctl resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5610] close(4 [pid 5014] newfstatat(3, "", [pid 5610] <... close resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 112.348251][ T5605] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 112.380181][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 112.380533][ T5615] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5610] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] getdents64(3, [pid 5605] exit_group(0 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./48/binderfs") = 0 [pid 5014] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5605] <... exit_group resumed>) = ? [pid 5013] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5605] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5605, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...> [pid 5013] <... openat resumed>) = 4 [pid 5017] <... restart_syscall resumed>) = 0 [pid 5013] newfstatat(4, "", [pid 5017] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./47/binderfs") = 0 [ 112.391800][ T5610] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 112.410380][ T5613] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.415883][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 112.429788][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 112.439216][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 112.439414][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5017] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 112.451462][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 112.454608][ T5613] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 112.462034][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 112.470793][ T5610] Remounting filesystem read-only [ 112.478123][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 112.484876][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 112.490535][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [ 112.498870][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 112.514135][ T5610] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 112.514776][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 112.522613][ T5610] NILFS (loop0): repaired inode bitmap for reserved inodes [ 112.534462][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 112.544870][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5610] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... umount2 resumed>) = 0 [pid 5013] rmdir("./47/file1" [pid 5610] exit_group(0 [pid 5015] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5610] <... exit_group resumed>) = ? [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... rmdir resumed>) = 0 [pid 5610] +++ exited with 0 +++ [pid 5015] newfstatat(AT_FDCWD, "./49/file1", [pid 5013] getdents64(3, [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5610, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5015] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3 [pid 5012] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] rmdir("./47" [pid 5015] <... openat resumed>) = 4 [pid 5013] <... rmdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] newfstatat(4, "", [pid 5013] mkdir("./48", 0777 [pid 5012] <... openat resumed>) = 3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5015] getdents64(4, [pid 5012] newfstatat(3, "", [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] getdents64(3, [pid 5015] getdents64(4, [pid 5013] <... openat resumed>) = 3 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] close(4 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5015] <... close resumed>) = 0 [ 112.552267][ T5610] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 112.557060][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 112.575869][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 112.585802][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 112.592991][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [pid 5012] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] rmdir("./49/file1" [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5613] <... mount resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5013] close(3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... umount2 resumed>) = 0 [pid 5613] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(3, [pid 5013] <... close resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./46/binderfs", [pid 5613] <... openat resumed>) = 3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] newfstatat(AT_FDCWD, "./47/file1", [pid 5613] chdir("./file1" [pid 5015] close(3 [pid 5012] unlink("./46/binderfs" [pid 5613] <... chdir resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... close resumed>) = 0 [pid 5613] ioctl(4, LOOP_CLR_FD [pid 5017] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] rmdir("./49" [pid 5012] <... unlink resumed>) = 0 [pid 5613] <... ioctl resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... rmdir resumed>) = 0 [pid 5613] close(4 [pid 5017] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5613] <... close resumed>) = 0 [pid 5015] mkdir("./50", 0777 [pid 5017] <... openat resumed>) = 4 [pid 5613] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5617 attached [pid 5617] set_robust_list(0x555556b87660, 24) = 0 [pid 5617] chdir("./48") = 0 [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5617] setpgid(0, 0) = 0 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5617] write(3, "1000", 4) = 4 [pid 5617] close(3) = 0 [pid 5617] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5617] memfd_create("syzkaller", 0) = 3 [pid 5617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... mkdir resumed>) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5617 [pid 5017] close(4 [ 112.610759][ T5616] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.638985][ T5613] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5017] <... close resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5017] rmdir("./47/file1" [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5017] <... rmdir resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5017] close(3 [pid 5015] <... close resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./47" [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... rmdir resumed>) = 0 [pid 5017] mkdir("./48", 0777 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5618 [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5618 attached [pid 5618] set_robust_list(0x555556b87660, 24) = 0 [pid 5618] chdir("./50" [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5619 [pid 5618] <... chdir resumed>) = 0 [pid 5618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5618] setpgid(0, 0) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5618] <... openat resumed>) = 3 [pid 5014] newfstatat(AT_FDCWD, "./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5618] write(3, "1000", 4) = 4 [pid 5014] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5618] close(3 [pid 5014] <... openat resumed>) = 4 [pid 5618] <... close resumed>) = 0 [pid 5618] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4 [pid 5618] memfd_create("syzkaller", 0 [pid 5014] <... close resumed>) = 0 ./strace-static-x86_64: Process 5619 attached [ 112.661723][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 112.690763][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 112.700460][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5618] <... memfd_create resumed>) = 3 [pid 5617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5619] set_robust_list(0x555556b87660, 24 [pid 5014] rmdir("./48/file1" [pid 5619] <... set_robust_list resumed>) = 0 [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5619] chdir("./48" [pid 5618] <... mmap resumed>) = 0x7f770c286000 [pid 5014] getdents64(3, [pid 5619] <... chdir resumed>) = 0 [pid 5619] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./48" [pid 5619] <... prctl resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./49", 0777 [pid 5619] setpgid(0, 0) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5619] <... openat resumed>) = 3 [ 112.708404][ T5613] Remounting filesystem read-only [ 112.721323][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5619] write(3, "1000", 4 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5620 [pid 5619] <... write resumed>) = 4 [pid 5619] close(3) = 0 ./strace-static-x86_64: Process 5620 attached [pid 5620] set_robust_list(0x555556b87660, 24 [pid 5619] symlink("/dev/binderfs", "./binderfs" [pid 5620] <... set_robust_list resumed>) = 0 [pid 5619] <... symlink resumed>) = 0 [pid 5620] chdir("./49" [pid 5619] memfd_create("syzkaller", 0) = 3 [pid 5620] <... chdir resumed>) = 0 [pid 5619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5619] <... mmap resumed>) = 0x7f770c286000 [pid 5620] <... prctl resumed>) = 0 [pid 5620] setpgid(0, 0) = 0 [pid 5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "1000", 4) = 4 [pid 5620] close(3) = 0 [pid 5620] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5620] memfd_create("syzkaller", 0) = 3 [pid 5620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5617] <... write resumed>) = 2097152 [pid 5617] munmap(0x7f770c286000, 2097152 [ 112.754429][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 112.763261][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 112.764165][ T5613] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5617] <... munmap resumed>) = 0 [pid 5617] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5617] ioctl(4, LOOP_SET_FD, 3 [pid 5619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5617] <... ioctl resumed>) = 0 [pid 5617] close(3) = 0 [pid 5617] mkdir("./file1", 0777 [pid 5012] <... openat resumed>) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, [pid 5617] <... mkdir resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./46/file1" [pid 5617] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... rmdir resumed>) = 0 [ 112.816934][ T5617] loop1: detected capacity change from 0 to 4096 [ 112.833445][ T5613] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5619] <... write resumed>) = 2097152 [pid 5012] getdents64(3, [pid 5618] <... write resumed>) = 2097152 [pid 5618] munmap(0x7f770c286000, 2097152) = 0 [pid 5618] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3 [pid 5619] munmap(0x7f770c286000, 2097152 [pid 5012] <... close resumed>) = 0 [pid 5613] <... openat resumed>) = -1 EIO (Input/output error) [pid 5618] ioctl(4, LOOP_SET_FD, 3 [pid 5619] <... munmap resumed>) = 0 [pid 5613] exit_group(0 [pid 5012] rmdir("./46" [pid 5619] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5613] <... exit_group resumed>) = ? [pid 5012] <... rmdir resumed>) = 0 [pid 5620] <... write resumed>) = 2097152 [pid 5619] <... openat resumed>) = 4 [pid 5618] <... ioctl resumed>) = 0 [pid 5613] +++ exited with 0 +++ [pid 5012] mkdir("./47", 0777 [pid 5620] munmap(0x7f770c286000, 2097152 [ 112.860232][ T5617] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.868567][ T5613] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 112.887312][ T5618] loop3: detected capacity change from 0 to 4096 [ 112.896561][ T5617] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5619] ioctl(4, LOOP_SET_FD, 3 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5613, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5012] <... mkdir resumed>) = 0 [pid 5620] <... munmap resumed>) = 0 [pid 5619] <... ioctl resumed>) = 0 [pid 5617] <... mount resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5620] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] <... openat resumed>) = 3 [pid 5620] <... openat resumed>) = 4 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5620] ioctl(4, LOOP_SET_FD, 3 [pid 5618] close(3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5620] <... ioctl resumed>) = 0 [pid 5619] close(3 [pid 5617] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] close(3 [pid 5620] close(3 [pid 5619] <... close resumed>) = 0 [pid 5618] <... close resumed>) = 0 [pid 5617] <... openat resumed>) = 3 [pid 5016] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... close resumed>) = 0 [pid 5620] <... close resumed>) = 0 [pid 5619] mkdir("./file1", 0777 [pid 5617] chdir("./file1" [pid 5620] mkdir("./file1", 0777 [pid 5619] <... mkdir resumed>) = 0 [pid 5617] <... chdir resumed>) = 0 [pid 5620] <... mkdir resumed>) = 0 [pid 5619] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5617] ioctl(4, LOOP_CLR_FD [pid 5620] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5618] mkdir("./file1", 0777 [pid 5617] <... ioctl resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5618] <... mkdir resumed>) = 0 [pid 5617] close(4) = 0 [ 112.907879][ T5619] loop5: detected capacity change from 0 to 4096 [ 112.915203][ T5621] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.919751][ T5620] loop2: detected capacity change from 0 to 4096 [ 112.938109][ T5619] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.950083][ T5620] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5617] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5618] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... openat resumed>) = 3 [pid 5016] newfstatat(3, "", [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5622 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./51/binderfs") = 0 [pid 5016] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5622 attached [pid 5622] set_robust_list(0x555556b87660, 24) = 0 [ 112.961617][ T5617] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 112.977575][ T5619] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 112.989037][ T5620] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 112.989399][ T5617] Remounting filesystem read-only [pid 5622] chdir("./47") = 0 [pid 5622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5622] setpgid(0, 0) = 0 [pid 5622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5622] write(3, "1000", 4) = 4 [pid 5622] close(3) = 0 [pid 5622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5622] memfd_create("syzkaller", 0) = 3 [pid 5622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5619] <... mount resumed>) = 0 [ 112.999670][ T5618] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.003993][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 113.025887][ T5618] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 113.042434][ T5624] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.042540][ T5617] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5619] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5620] <... mount resumed>) = 0 [pid 5619] chdir("./file1" [pid 5620] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5619] <... chdir resumed>) = 0 [pid 5618] <... mount resumed>) = 0 [pid 5620] <... openat resumed>) = 3 [pid 5619] ioctl(4, LOOP_CLR_FD [ 113.060427][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 113.069956][ T5623] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.079024][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 113.082227][ T5625] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.089291][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [pid 5618] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5620] chdir("./file1" [pid 5619] <... ioctl resumed>) = 0 [pid 5618] <... openat resumed>) = 3 [pid 5620] <... chdir resumed>) = 0 [pid 5619] close(4 [pid 5618] chdir("./file1" [pid 5620] ioctl(4, LOOP_CLR_FD [pid 5619] <... close resumed>) = 0 [pid 5618] <... chdir resumed>) = 0 [pid 5620] <... ioctl resumed>) = 0 [pid 5618] ioctl(4, LOOP_CLR_FD [pid 5620] close(4 [pid 5619] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5620] <... close resumed>) = 0 [pid 5618] <... ioctl resumed>) = 0 [pid 5622] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5620] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 113.106605][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 113.114590][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 113.130398][ T5619] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.134765][ T5617] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5618] close(4) = 0 [pid 5618] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5622] <... write resumed>) = 2097152 [pid 5622] munmap(0x7f770c286000, 2097152) = 0 [pid 5622] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 113.154355][ T5620] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.170524][ T5618] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.200979][ T5622] loop0: detected capacity change from 0 to 4096 [pid 5622] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... umount2 resumed>) = 0 [pid 5622] <... ioctl resumed>) = 0 [pid 5622] close(3) = 0 [pid 5622] mkdir("./file1", 0777) = 0 [pid 5622] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5617] <... openat resumed>) = -1 EIO (Input/output error) [ 113.208779][ T5617] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.224322][ T5618] Remounting filesystem read-only [ 113.231150][ T5620] Remounting filesystem read-only [ 113.232323][ T5619] Remounting filesystem read-only [ 113.243509][ T5618] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 113.252866][ T5620] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5016] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./51/file1" [pid 5617] exit_group(0) = ? [pid 5617] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, [pid 5016] <... rmdir resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] getdents64(3, [pid 5013] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] close(3 [ 113.253053][ T5619] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 113.269554][ T5622] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.293757][ T5618] NILFS (loop3): repaired inode bitmap for reserved inodes [ 113.302654][ T5620] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5013] newfstatat(AT_FDCWD, "./48/binderfs", [pid 5016] <... close resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] rmdir("./51" [pid 5013] unlink("./48/binderfs" [pid 5016] <... rmdir resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5016] mkdir("./52", 0777 [pid 5013] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... mkdir resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5626 ./strace-static-x86_64: Process 5626 attached [pid 5626] set_robust_list(0x555556b87660, 24) = 0 [pid 5626] chdir("./52") = 0 [pid 5626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5626] setpgid(0, 0) = 0 [ 113.325740][ T5618] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.345740][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 113.352754][ T5622] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] <... openat resumed>) = -1 EIO (Input/output error) [pid 5618] <... openat resumed>) = -1 EIO (Input/output error) [pid 5626] write(3, "1000", 4) = 4 [pid 5626] close(3) = 0 [pid 5626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5626] memfd_create("syzkaller", 0) = 3 [pid 5626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5620] exit_group(0 [pid 5618] exit_group(0 [pid 5626] <... mmap resumed>) = 0x7f770c286000 [pid 5620] <... exit_group resumed>) = ? [pid 5618] <... exit_group resumed>) = ? [pid 5620] +++ exited with 0 +++ [pid 5618] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5620, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5618, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5014] <... restart_syscall resumed>) = 0 [pid 5015] <... restart_syscall resumed>) = 0 [ 113.352987][ T5620] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.367784][ T5619] NILFS (loop5): repaired inode bitmap for reserved inodes [ 113.378720][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 113.393502][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 113.404318][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 113.413190][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5014] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 3 [pid 5622] <... mount resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5014] newfstatat(3, "", [pid 5626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5622] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, [pid 5014] getdents64(3, [pid 5622] <... openat resumed>) = 3 [pid 5622] chdir("./file1" [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5622] <... chdir resumed>) = 0 [pid 5015] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5622] ioctl(4, LOOP_CLR_FD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5622] <... ioctl resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./50/binderfs", [pid 5014] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5622] close(4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5622] <... close resumed>) = 0 [pid 5622] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] unlink("./50/binderfs" [pid 5014] unlink("./49/binderfs") = 0 [pid 5015] <... unlink resumed>) = 0 [ 113.417232][ T5619] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.421016][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 113.446789][ T5627] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5619] <... openat resumed>) = -1 EIO (Input/output error) [pid 5619] exit_group(0) = ? [pid 5619] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5017] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./48/binderfs", [pid 5626] <... write resumed>) = 2097152 [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./48/binderfs") = 0 [pid 5017] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5626] munmap(0x7f770c286000, 2097152) = 0 [pid 5626] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 113.466651][ T5622] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.487022][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 113.494189][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 113.502482][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 113.514016][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5626] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... umount2 resumed>) = 0 [pid 5626] <... ioctl resumed>) = 0 [pid 5626] close(3) = 0 [ 113.520691][ T5626] loop4: detected capacity change from 0 to 4096 [ 113.535796][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 113.542218][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 113.542505][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 113.550100][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5626] mkdir("./file1", 0777) = 0 [pid 5626] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 113.572038][ T5622] Remounting filesystem read-only [ 113.580040][ T5622] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 113.583775][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 113.589896][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 113.597407][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 113.602964][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 113.610206][ T5626] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5013] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 113.617541][ T5622] NILFS (loop0): repaired inode bitmap for reserved inodes [ 113.629607][ T5626] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 113.634957][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 113.651927][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 113.659461][ T5622] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5622] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5622] exit_group(0 [pid 5013] close(4 [pid 5622] <... exit_group resumed>) = ? [pid 5013] <... close resumed>) = 0 [pid 5013] rmdir("./48/file1") = 0 [pid 5626] <... mount resumed>) = 0 [pid 5626] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5626] chdir("./file1") = 0 [pid 5626] ioctl(4, LOOP_CLR_FD) = 0 [pid 5626] close(4) = 0 [ 113.674636][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 113.682109][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 113.689961][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 113.695210][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 113.707644][ T5628] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5626] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5622] +++ exited with 0 +++ [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5622, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5013] close(3) = 0 [pid 5012] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./48" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... rmdir resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5012] newfstatat(3, "", [pid 5013] mkdir("./49", 0777 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] <... mkdir resumed>) = 0 [pid 5012] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] newfstatat(AT_FDCWD, "./47/binderfs", [pid 5013] <... openat resumed>) = 3 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5012] unlink("./47/binderfs" [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... unlink resumed>) = 0 [pid 5012] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5629 ./strace-static-x86_64: Process 5629 attached [pid 5629] set_robust_list(0x555556b87660, 24) = 0 [pid 5629] chdir("./49") = 0 [pid 5629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5629] setpgid(0, 0) = 0 [pid 5629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5629] write(3, "1000", 4) = 4 [pid 5629] close(3) = 0 [pid 5629] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5629] memfd_create("syzkaller", 0) = 3 [pid 5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 113.715093][ T5626] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.747646][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 113.757816][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5017] <... umount2 resumed>) = 0 [pid 5014] <... umount2 resumed>) = 0 [pid 5017] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] newfstatat(AT_FDCWD, "./48/file1", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] newfstatat(AT_FDCWD, "./49/file1", [pid 5017] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] newfstatat(4, "", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] getdents64(4, [pid 5015] <... umount2 resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] newfstatat(4, "", [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] close(4) = 0 [pid 5014] getdents64(4, [pid 5017] rmdir("./48/file1" [pid 5015] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] <... rmdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5014] close(4 [pid 5017] <... close resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./50/file1", [pid 5017] rmdir("./48" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... close resumed>) = 0 [pid 5015] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] <... rmdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] rmdir("./49/file1" [pid 5017] mkdir("./49", 0777 [pid 5015] <... openat resumed>) = 4 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, [pid 5015] getdents64(4, [pid 5017] <... mkdir resumed>) = 0 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5015] getdents64(4, [pid 5014] close(3 [pid 5017] <... openat resumed>) = 3 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5015] close(4 [pid 5014] <... close resumed>) = 0 [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] <... close resumed>) = 0 [pid 5014] rmdir("./49" [pid 5017] close(3 [pid 5015] rmdir("./50/file1" [pid 5017] <... close resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] mkdir("./50", 0777 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5630 [pid 5015] close(3) = 0 [ 113.794226][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 113.832039][ T5626] Remounting filesystem read-only [pid 5015] rmdir("./50") = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5015] mkdir("./51", 0777 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5630 attached [pid 5015] <... mkdir resumed>) = 0 [pid 5630] set_robust_list(0x555556b87660, 24 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... openat resumed>) = 3 [pid 5630] <... set_robust_list resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5630] chdir("./49" [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5630] <... chdir resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5630] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] close(3 [pid 5014] close(3 [pid 5630] <... prctl resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5630] setpgid(0, 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... close resumed>) = 0 [pid 5630] <... setpgid resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5631 ./strace-static-x86_64: Process 5632 attached ./strace-static-x86_64: Process 5631 attached [pid 5630] <... openat resumed>) = 3 [pid 5629] <... write resumed>) = 2097152 [pid 5632] set_robust_list(0x555556b87660, 24 [pid 5631] set_robust_list(0x555556b87660, 24 [pid 5630] write(3, "1000", 4 [pid 5629] munmap(0x7f770c286000, 2097152 [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5632 [pid 5632] <... set_robust_list resumed>) = 0 [pid 5631] <... set_robust_list resumed>) = 0 [pid 5630] <... write resumed>) = 4 [pid 5629] <... munmap resumed>) = 0 [pid 5632] chdir("./50" [pid 5631] chdir("./51" [pid 5630] close(3 [ 113.854492][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 113.871256][ T5626] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 113.881799][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 113.891615][ T5626] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5629] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5632] <... chdir resumed>) = 0 [pid 5631] <... chdir resumed>) = 0 [pid 5630] <... close resumed>) = 0 [pid 5629] <... openat resumed>) = 4 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5630] symlink("/dev/binderfs", "./binderfs" [pid 5629] ioctl(4, LOOP_SET_FD, 3 [pid 5632] <... prctl resumed>) = 0 [pid 5630] <... symlink resumed>) = 0 [pid 5631] <... prctl resumed>) = 0 [pid 5632] setpgid(0, 0) = 0 [pid 5631] setpgid(0, 0) = 0 [pid 5630] memfd_create("syzkaller", 0 [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] <... openat resumed>) = 3 [pid 5631] write(3, "1000", 4 [pid 5632] write(3, "1000", 4 [pid 5631] <... write resumed>) = 4 [pid 5630] <... memfd_create resumed>) = 3 [pid 5629] <... ioctl resumed>) = 0 [pid 5626] <... openat resumed>) = -1 EIO (Input/output error) [pid 5632] <... write resumed>) = 4 [pid 5631] close(3 [pid 5630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5629] close(3 [pid 5626] exit_group(0 [pid 5632] close(3 [pid 5631] <... close resumed>) = 0 [pid 5630] <... mmap resumed>) = 0x7f770c286000 [pid 5629] <... close resumed>) = 0 [pid 5626] <... exit_group resumed>) = ? [pid 5632] <... close resumed>) = 0 [pid 5631] symlink("/dev/binderfs", "./binderfs" [pid 5629] mkdir("./file1", 0777 [pid 5632] symlink("/dev/binderfs", "./binderfs" [pid 5631] <... symlink resumed>) = 0 [pid 5629] <... mkdir resumed>) = 0 [pid 5629] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5626] +++ exited with 0 +++ [ 113.900703][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 113.906086][ T5626] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 113.924168][ T5629] loop1: detected capacity change from 0 to 4096 [pid 5632] <... symlink resumed>) = 0 [pid 5631] memfd_create("syzkaller", 0 [pid 5630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5626, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5632] memfd_create("syzkaller", 0 [pid 5631] <... memfd_create resumed>) = 3 [pid 5632] <... memfd_create resumed>) = 3 [pid 5631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5631] <... mmap resumed>) = 0x7f770c286000 [pid 5016] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] <... mmap resumed>) = 0x7f770c286000 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./52/binderfs") = 0 [ 113.950718][ T5629] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.980221][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 113.990093][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5016] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./47/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./47/file1") = 0 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./47") = 0 [pid 5012] mkdir("./48", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5630] <... write resumed>) = 2097152 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5630] munmap(0x7f770c286000, 2097152 [pid 5631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5630] <... munmap resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5630] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5630] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5633 [ 113.998965][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 114.006280][ T5629] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) ./strace-static-x86_64: Process 5633 attached [pid 5633] set_robust_list(0x555556b87660, 24) = 0 [pid 5633] chdir("./48") = 0 [pid 5633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5633] setpgid(0, 0 [pid 5632] <... write resumed>) = 2097152 [pid 5631] <... write resumed>) = 2097152 [pid 5630] <... ioctl resumed>) = 0 [pid 5629] <... mount resumed>) = 0 [pid 5633] <... setpgid resumed>) = 0 [pid 5631] munmap(0x7f770c286000, 2097152 [pid 5630] close(3 [pid 5633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5631] <... munmap resumed>) = 0 [pid 5630] <... close resumed>) = 0 [pid 5633] <... openat resumed>) = 3 [pid 5630] mkdir("./file1", 0777 [pid 5633] write(3, "1000", 4 [pid 5630] <... mkdir resumed>) = 0 [pid 5633] <... write resumed>) = 4 [pid 5630] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5633] close(3 [pid 5632] munmap(0x7f770c286000, 2097152 [pid 5629] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5633] <... close resumed>) = 0 [pid 5631] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5633] symlink("/dev/binderfs", "./binderfs" [pid 5631] <... openat resumed>) = 4 [ 114.058551][ T5630] loop5: detected capacity change from 0 to 4096 [ 114.067777][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 114.080502][ T5634] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.085133][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 114.098810][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [pid 5633] <... symlink resumed>) = 0 [pid 5631] ioctl(4, LOOP_SET_FD, 3 [pid 5633] memfd_create("syzkaller", 0 [pid 5632] <... munmap resumed>) = 0 [pid 5629] <... openat resumed>) = 3 [pid 5016] <... umount2 resumed>) = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5629] chdir("./file1" [pid 5632] <... openat resumed>) = 4 [pid 5629] <... chdir resumed>) = 0 [pid 5632] ioctl(4, LOOP_SET_FD, 3 [pid 5629] ioctl(4, LOOP_CLR_FD [pid 5633] <... memfd_create resumed>) = 3 [pid 5629] <... ioctl resumed>) = 0 [pid 5633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5631] <... ioctl resumed>) = 0 [pid 5629] close(4 [pid 5633] <... mmap resumed>) = 0x7f770c286000 [pid 5629] <... close resumed>) = 0 [pid 5629] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5631] close(3) = 0 [pid 5632] <... ioctl resumed>) = 0 [pid 5631] mkdir("./file1", 0777 [pid 5632] close(3 [pid 5631] <... mkdir resumed>) = 0 [ 114.101930][ T5631] loop3: detected capacity change from 0 to 4096 [ 114.113126][ T5630] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.127545][ T5632] loop2: detected capacity change from 0 to 4096 [ 114.138182][ T5629] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5016] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./52/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5632] <... close resumed>) = 0 [pid 5631] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... openat resumed>) = 4 [pid 5632] mkdir("./file1", 0777 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./52/file1") = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./52" [pid 5632] <... mkdir resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5632] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] mkdir("./53", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5635 ./strace-static-x86_64: Process 5635 attached [pid 5635] set_robust_list(0x555556b87660, 24) = 0 [pid 5635] chdir("./53") = 0 [pid 5635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5635] setpgid(0, 0) = 0 [pid 5635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5635] write(3, "1000", 4) = 4 [pid 5635] close(3) = 0 [pid 5635] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5635] memfd_create("syzkaller", 0) = 3 [ 114.161474][ T5630] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 114.173215][ T5631] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.188596][ T5632] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.200513][ T5629] Remounting filesystem read-only [pid 5635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5633] <... write resumed>) = 2097152 [pid 5633] munmap(0x7f770c286000, 2097152) = 0 [pid 5633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 114.222700][ T5631] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 114.235340][ T5629] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 114.247962][ T5632] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 114.255639][ T5629] NILFS (loop1): repaired inode bitmap for reserved inodes [pid 5635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5633] ioctl(4, LOOP_SET_FD, 3 [pid 5630] <... mount resumed>) = 0 [pid 5631] <... mount resumed>) = 0 [pid 5630] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5631] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5630] <... openat resumed>) = 3 [pid 5631] <... openat resumed>) = 3 [pid 5630] chdir("./file1" [pid 5631] chdir("./file1" [pid 5630] <... chdir resumed>) = 0 [pid 5631] <... chdir resumed>) = 0 [pid 5630] ioctl(4, LOOP_CLR_FD [pid 5631] ioctl(4, LOOP_CLR_FD [pid 5630] <... ioctl resumed>) = 0 [pid 5631] <... ioctl resumed>) = 0 [pid 5630] close(4 [pid 5635] <... write resumed>) = 2097152 [ 114.273103][ T5636] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.283232][ T5629] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.288461][ T5633] loop0: detected capacity change from 0 to 4096 [ 114.299586][ T5637] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5633] <... ioctl resumed>) = 0 [pid 5631] close(4 [pid 5630] <... close resumed>) = 0 [pid 5629] <... openat resumed>) = -1 EIO (Input/output error) [pid 5635] munmap(0x7f770c286000, 2097152 [pid 5633] close(3 [pid 5632] <... mount resumed>) = 0 [pid 5631] <... close resumed>) = 0 [pid 5630] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5629] exit_group(0 [pid 5635] <... munmap resumed>) = 0 [pid 5633] <... close resumed>) = 0 [pid 5632] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5631] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5629] <... exit_group resumed>) = ? [pid 5635] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5633] mkdir("./file1", 0777 [pid 5629] +++ exited with 0 +++ [pid 5635] <... openat resumed>) = 4 [pid 5633] <... mkdir resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5629, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5635] ioctl(4, LOOP_SET_FD, 3 [pid 5633] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5635] <... ioctl resumed>) = 0 [pid 5632] <... openat resumed>) = 3 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5013] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 114.325916][ T5638] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.344375][ T5630] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.355920][ T5635] loop4: detected capacity change from 0 to 4096 [pid 5013] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./49/binderfs") = 0 [pid 5013] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] chdir("./file1") = 0 [pid 5632] ioctl(4, LOOP_CLR_FD [pid 5635] close(3) = 0 [pid 5635] mkdir("./file1", 0777 [pid 5632] <... ioctl resumed>) = 0 [ 114.366280][ T5631] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.381699][ T5633] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.392121][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 114.399622][ T5633] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 114.400458][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 114.410862][ T5630] Remounting filesystem read-only [pid 5635] <... mkdir resumed>) = 0 [pid 5635] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5632] close(4) = 0 [ 114.422302][ T5631] Remounting filesystem read-only [ 114.428106][ T5631] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 114.434828][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 114.446674][ T5635] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.451505][ T5630] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 114.464916][ T5632] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.474943][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 114.484658][ T5630] NILFS (loop5): repaired inode bitmap for reserved inodes [ 114.496208][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 114.498799][ T5631] NILFS (loop3): repaired inode bitmap for reserved inodes [ 114.504501][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 114.518521][ T5635] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 114.528323][ T5630] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.545788][ T5632] Remounting filesystem read-only [ 114.551970][ T5632] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 114.560478][ T5631] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5632] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5633] <... mount resumed>) = 0 [pid 5633] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5631] <... openat resumed>) = -1 EIO (Input/output error) [pid 5630] <... openat resumed>) = -1 EIO (Input/output error) [pid 5635] <... mount resumed>) = 0 [pid 5633] <... openat resumed>) = 3 [pid 5630] exit_group(0 [pid 5635] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5633] chdir("./file1" [pid 5632] <... openat resumed>) = -1 EIO (Input/output error) [pid 5631] exit_group(0 [pid 5630] <... exit_group resumed>) = ? [pid 5013] <... umount2 resumed>) = 0 [pid 5635] <... openat resumed>) = 3 [pid 5633] <... chdir resumed>) = 0 [pid 5632] exit_group(0 [pid 5631] <... exit_group resumed>) = ? [pid 5630] +++ exited with 0 +++ [pid 5635] chdir("./file1" [pid 5633] ioctl(4, LOOP_CLR_FD [pid 5632] <... exit_group resumed>) = ? [pid 5631] +++ exited with 0 +++ [pid 5013] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5635] <... chdir resumed>) = 0 [pid 5633] <... ioctl resumed>) = 0 [pid 5632] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5630, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5631, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5633] close(4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5633] <... close resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./49/file1", [pid 5633] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 114.561129][ T5639] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.576843][ T5632] NILFS (loop2): repaired inode bitmap for reserved inodes [ 114.593767][ T5632] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.609040][ T5640] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5015] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5635] ioctl(4, LOOP_CLR_FD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5013] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] newfstatat(3, "", [pid 5013] <... openat resumed>) = 4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] newfstatat(4, "", [pid 5015] getdents64(3, [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] getdents64(4, [pid 5015] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(4, [pid 5015] newfstatat(AT_FDCWD, "./51/binderfs", [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] close(4 [pid 5015] unlink("./51/binderfs" [pid 5013] <... close resumed>) = 0 [pid 5635] <... ioctl resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5013] rmdir("./49/file1" [pid 5635] close(4 [pid 5015] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... rmdir resumed>) = 0 [pid 5635] <... close resumed>) = 0 [pid 5014] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(3, [pid 5635] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] close(3) = 0 [pid 5013] rmdir("./49" [pid 5017] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... rmdir resumed>) = 0 [pid 5013] mkdir("./50", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5641 ./strace-static-x86_64: Process 5641 attached [pid 5641] set_robust_list(0x555556b87660, 24) = 0 [pid 5641] chdir("./50") = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] setpgid(0, 0) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5641] write(3, "1000", 4) = 4 [pid 5641] close(3) = 0 [pid 5641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5641] memfd_create("syzkaller", 0) = 3 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 3 [pid 5017] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] newfstatat(3, "", [pid 5017] <... openat resumed>) = 3 [pid 5017] newfstatat(3, "", [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 114.636556][ T5633] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.659093][ T5635] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.676124][ T5633] Remounting filesystem read-only [pid 5017] getdents64(3, [pid 5014] getdents64(3, [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./49/binderfs") = 0 [pid 5014] unlink("./50/binderfs" [pid 5017] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... unlink resumed>) = 0 [ 114.681878][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 114.691174][ T5633] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 114.701676][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 114.706967][ T5635] Remounting filesystem read-only [ 114.716097][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 114.720508][ T5633] NILFS (loop0): repaired inode bitmap for reserved inodes [pid 5014] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 114.732748][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 114.733126][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 114.748031][ T5635] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 114.750509][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 114.766170][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [pid 5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [ 114.768159][ T5633] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.772962][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 114.772995][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 114.795653][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 114.810024][ T5635] NILFS (loop4): repaired inode bitmap for reserved inodes [ 114.821043][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5641] munmap(0x7f770c286000, 2097152) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5641] ioctl(4, LOOP_SET_FD, 3 [pid 5635] <... openat resumed>) = -1 EIO (Input/output error) [pid 5633] <... openat resumed>) = -1 EIO (Input/output error) [pid 5633] exit_group(0) = ? [pid 5633] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5633, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5635] exit_group(0 [pid 5012] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5635] <... exit_group resumed>) = ? [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5641] <... ioctl resumed>) = 0 [pid 5641] close(3) = 0 [ 114.829264][ T5635] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 114.831360][ T5641] loop1: detected capacity change from 0 to 4096 [ 114.844576][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 114.851612][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 114.858895][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 114.875886][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [pid 5641] mkdir("./file1", 0777) = 0 [pid 5641] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5635] +++ exited with 0 +++ [pid 5012] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5635, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5016] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./53/binderfs") = 0 [pid 5016] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", [pid 5012] newfstatat(AT_FDCWD, "./48/binderfs", [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] close(4) = 0 [pid 5012] unlink("./48/binderfs" [ 114.889862][ T5641] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.896485][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 114.907842][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 114.918761][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 114.926722][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5015] rmdir("./51/file1" [pid 5012] <... unlink resumed>) = 0 [pid 5012] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... rmdir resumed>) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./51") = 0 [pid 5015] mkdir("./52", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5642 ./strace-static-x86_64: Process 5642 attached [pid 5642] set_robust_list(0x555556b87660, 24) = 0 [pid 5642] chdir("./52") = 0 [pid 5642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5642] setpgid(0, 0) = 0 [pid 5642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5642] write(3, "1000", 4) = 4 [pid 5642] close(3) = 0 [pid 5642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5642] memfd_create("syzkaller", 0) = 3 [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 114.943602][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 114.945394][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 114.955577][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 114.966950][ T5641] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 114.986802][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./49/file1") = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./49") = 0 [ 114.995866][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 115.004761][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 115.026851][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 115.034428][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5017] mkdir("./50", 0777) = 0 [pid 5642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5641] <... mount resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5641] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5641] chdir("./file1") = 0 [pid 5641] ioctl(4, LOOP_CLR_FD) = 0 [pid 5641] close(4) = 0 [pid 5641] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... openat resumed>) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5644 ./strace-static-x86_64: Process 5644 attached [pid 5644] set_robust_list(0x555556b87660, 24) = 0 [pid 5644] chdir("./50") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] <... umount2 resumed>) = 0 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5644] memfd_create("syzkaller", 0) = 3 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 115.038360][ T5643] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.046233][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 115.066011][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 115.066043][ T5641] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5642] <... write resumed>) = 2097152 [pid 5016] <... umount2 resumed>) = 0 [pid 5642] munmap(0x7f770c286000, 2097152 [pid 5016] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./53/file1", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5642] <... munmap resumed>) = 0 [pid 5014] newfstatat(AT_FDCWD, "./50/file1", [pid 5642] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5642] <... openat resumed>) = 4 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(4, [pid 5016] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5642] ioctl(4, LOOP_SET_FD, 3 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./50/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./50" [pid 5642] <... ioctl resumed>) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./51", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5645 [ 115.149727][ T5641] Remounting filesystem read-only [ 115.157152][ T5641] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 115.165027][ T5641] NILFS (loop1): repaired inode bitmap for reserved inodes [ 115.168475][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 115.180503][ T5642] loop3: detected capacity change from 0 to 4096 [pid 5642] close(3 [pid 5016] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5642] <... close resumed>) = 0 [pid 5016] newfstatat(4, "", [pid 5642] mkdir("./file1", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5642] <... mkdir resumed>) = 0 [pid 5016] getdents64(4, [pid 5642] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] close(4./strace-static-x86_64: Process 5645 attached [pid 5641] <... openat resumed>) = -1 EIO (Input/output error) [pid 5016] <... close resumed>) = 0 [pid 5645] set_robust_list(0x555556b87660, 24) = 0 [pid 5016] rmdir("./53/file1") = 0 [pid 5645] chdir("./51" [pid 5644] <... write resumed>) = 2097152 [pid 5641] exit_group(0 [pid 5016] getdents64(3, [pid 5645] <... chdir resumed>) = 0 [pid 5641] <... exit_group resumed>) = ? [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5641] +++ exited with 0 +++ [pid 5016] close(3 [pid 5645] <... prctl resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5645] setpgid(0, 0 [pid 5016] rmdir("./53" [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5641, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5645] <... setpgid resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] mkdir("./54", 0777 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5645] <... openat resumed>) = 3 [pid 5016] <... mkdir resumed>) = 0 [pid 5645] write(3, "1000", 4 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5645] <... write resumed>) = 4 [pid 5016] <... openat resumed>) = 3 [pid 5013] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] close(3 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] <... close resumed>) = 0 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5645] symlink("/dev/binderfs", "./binderfs" [pid 5016] close(3 [pid 5013] <... openat resumed>) = 3 [pid 5645] <... symlink resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5013] newfstatat(3, "", [pid 5645] memfd_create("syzkaller", 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5645] <... memfd_create resumed>) = 3 [pid 5013] getdents64(3, [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5647 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5645] <... mmap resumed>) = 0x7f770c286000 [pid 5013] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5644] munmap(0x7f770c286000, 2097152 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = 0 [pid 5644] <... munmap resumed>) = 0 [pid 5013] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./50/binderfs") = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 115.187826][ T5641] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 115.209836][ T5642] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.220739][ T5642] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5644] <... openat resumed>) = 4 [pid 5644] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5647 attached [pid 5647] set_robust_list(0x555556b87660, 24) = 0 [pid 5647] chdir("./54") = 0 [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5642] <... mount resumed>) = 0 [pid 5012] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5642] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5642] chdir("./file1") = 0 [pid 5642] ioctl(4, LOOP_CLR_FD) = 0 [pid 5642] close(4 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5642] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5642] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5647] <... prctl resumed>) = 0 [ 115.280580][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 115.288048][ T5646] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.290225][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 115.311448][ T5644] loop5: detected capacity change from 0 to 4096 [ 115.318532][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5012] newfstatat(AT_FDCWD, "./48/file1", [pid 5647] setpgid(0, 0 [pid 5645] <... write resumed>) = 2097152 [pid 5644] <... ioctl resumed>) = 0 [pid 5644] close(3) = 0 [pid 5644] mkdir("./file1", 0777) = 0 [pid 5644] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5647] <... setpgid resumed>) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5645] munmap(0x7f770c286000, 2097152 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5647] <... openat resumed>) = 3 [pid 5645] <... munmap resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5647] write(3, "1000", 4 [pid 5645] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5647] <... write resumed>) = 4 [pid 5645] <... openat resumed>) = 4 [pid 5012] <... openat resumed>) = 4 [ 115.334819][ T5642] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 115.343947][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 115.357917][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 115.367936][ T5644] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.372863][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5647] close(3 [pid 5645] ioctl(4, LOOP_SET_FD, 3 [pid 5012] newfstatat(4, "", [pid 5647] <... close resumed>) = 0 [pid 5647] symlink("/dev/binderfs", "./binderfs" [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5647] <... symlink resumed>) = 0 [pid 5645] <... ioctl resumed>) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5012] getdents64(4, [pid 5647] memfd_create("syzkaller", 0 [pid 5645] close(3 [pid 5013] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5647] <... memfd_create resumed>) = 3 [pid 5645] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] getdents64(4, [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5645] mkdir("./file1", 0777 [pid 5013] newfstatat(AT_FDCWD, "./50/file1", [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [ 115.379369][ T5642] Remounting filesystem read-only [ 115.391326][ T5645] loop2: detected capacity change from 0 to 4096 [ 115.406773][ T5642] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 115.411396][ T5644] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 115.414633][ T5642] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5647] <... mmap resumed>) = 0x7f770c286000 [pid 5645] <... mkdir resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] close(4 [pid 5645] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] rmdir("./48/file1" [pid 5013] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... rmdir resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5012] getdents64(3, [pid 5013] newfstatat(4, "", [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] close(3 [pid 5013] getdents64(4, [pid 5012] <... close resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] rmdir("./48" [pid 5013] getdents64(4, [pid 5012] <... rmdir resumed>) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] mkdir("./49", 0777 [pid 5644] <... mount resumed>) = 0 [pid 5642] <... openat resumed>) = -1 EIO (Input/output error) [pid 5013] close(4 [pid 5012] <... mkdir resumed>) = 0 [pid 5644] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5642] exit_group(0 [pid 5013] <... close resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5644] <... openat resumed>) = 3 [pid 5642] <... exit_group resumed>) = ? [pid 5013] rmdir("./50/file1" [pid 5012] <... openat resumed>) = 3 [pid 5647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5644] chdir("./file1" [pid 5013] <... rmdir resumed>) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5644] <... chdir resumed>) = 0 [pid 5642] +++ exited with 0 +++ [pid 5013] getdents64(3, [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5644] ioctl(4, LOOP_CLR_FD [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3 [pid 5644] <... ioctl resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5642, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5013] close(3 [pid 5012] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] rmdir("./50") = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5649 [pid 5644] close(4 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5013] mkdir("./51", 0777 [pid 5644] <... close resumed>) = 0 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5644] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 115.442725][ T5642] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 115.459093][ T5645] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.459180][ T5648] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5649 attached [pid 5013] close(3 [pid 5649] set_robust_list(0x555556b87660, 24 [pid 5013] <... close resumed>) = 0 [pid 5649] <... set_robust_list resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5649] chdir("./49") = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5650 [pid 5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5649] setpgid(0, 0) = 0 [pid 5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5649] write(3, "1000", 4) = 4 [pid 5649] close(3) = 0 [pid 5649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5015] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5649] memfd_create("syzkaller", 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5650 attached [pid 5649] <... memfd_create resumed>) = 3 [pid 5650] set_robust_list(0x555556b87660, 24 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5650] <... set_robust_list resumed>) = 0 [pid 5649] <... mmap resumed>) = 0x7f770c286000 [pid 5650] chdir("./51") = 0 [pid 5015] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... openat resumed>) = 3 [pid 5650] <... prctl resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5650] setpgid(0, 0) = 0 [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5650] write(3, "1000", 4) = 4 [pid 5650] close(3) = 0 [pid 5650] symlink("/dev/binderfs", "./binderfs" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5650] <... symlink resumed>) = 0 [pid 5015] getdents64(3, [pid 5650] memfd_create("syzkaller", 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5650] <... memfd_create resumed>) = 3 [pid 5015] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5650] <... mmap resumed>) = 0x7f770c286000 [pid 5015] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./52/binderfs") = 0 [ 115.499601][ T5644] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 115.516892][ T5645] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5647] <... write resumed>) = 2097152 [pid 5647] munmap(0x7f770c286000, 2097152) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5647] <... openat resumed>) = 4 [pid 5647] ioctl(4, LOOP_SET_FD, 3) = 0 [ 115.559782][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 115.569643][ T5644] Remounting filesystem read-only [ 115.574972][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 115.587708][ T5644] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 115.598071][ T5647] loop4: detected capacity change from 0 to 4096 [pid 5645] <... mount resumed>) = 0 [pid 5645] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5647] close(3 [pid 5645] chdir("./file1") = 0 [pid 5647] <... close resumed>) = 0 [pid 5645] ioctl(4, LOOP_CLR_FD [pid 5647] mkdir("./file1", 0777 [pid 5645] <... ioctl resumed>) = 0 [pid 5649] <... write resumed>) = 2097152 [pid 5647] <... mkdir resumed>) = 0 [pid 5645] close(4) = 0 [ 115.612323][ T5651] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.623057][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 115.635045][ T5644] NILFS (loop5): repaired inode bitmap for reserved inodes [ 115.646980][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 115.655199][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [pid 5645] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5649] munmap(0x7f770c286000, 2097152 [pid 5650] <... write resumed>) = 2097152 [pid 5649] <... munmap resumed>) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5649] ioctl(4, LOOP_SET_FD, 3 [pid 5647] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5650] munmap(0x7f770c286000, 2097152) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 115.666809][ T5645] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 115.678766][ T5649] loop0: detected capacity change from 0 to 4096 [ 115.691345][ T5647] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5650] ioctl(4, LOOP_SET_FD, 3 [pid 5649] <... ioctl resumed>) = 0 [pid 5649] close(3) = 0 [pid 5649] mkdir("./file1", 0777) = 0 [pid 5649] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5650] <... ioctl resumed>) = 0 [pid 5650] close(3) = 0 [pid 5650] mkdir("./file1", 0777) = 0 [ 115.703817][ T5644] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 115.709245][ T5650] loop1: detected capacity change from 0 to 4096 [ 115.718629][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 115.733699][ T5645] Remounting filesystem read-only [ 115.739713][ T5647] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 115.749564][ T5649] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.750052][ T5645] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5650] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5644] <... openat resumed>) = -1 EIO (Input/output error) [pid 5644] exit_group(0) = ? [pid 5644] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5017] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5647] <... mount resumed>) = 0 [pid 5017] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./50/binderfs" [pid 5647] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5017] <... unlink resumed>) = 0 [pid 5647] <... openat resumed>) = 3 [pid 5017] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5647] chdir("./file1") = 0 [ 115.768158][ T5650] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.793536][ T5652] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.804750][ T5645] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5647] ioctl(4, LOOP_CLR_FD) = 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5647] close(4) = 0 [pid 5645] <... openat resumed>) = -1 EIO (Input/output error) [ 115.815064][ T5649] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 115.820706][ T5645] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 115.840365][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 115.848775][ T5650] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5647] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5645] exit_group(0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] <... exit_group resumed>) = ? [pid 5015] newfstatat(AT_FDCWD, "./52/file1", [pid 5649] <... mount resumed>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5649] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5645] +++ exited with 0 +++ [pid 5649] <... openat resumed>) = 3 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5645, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5649] chdir("./file1") = 0 [pid 5649] ioctl(4, LOOP_CLR_FD) = 0 [pid 5649] close(4) = 0 [pid 5649] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5014] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 115.851157][ T5653] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.870353][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 115.883544][ T5647] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 115.899043][ T5649] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./51/binderfs" [pid 5015] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... unlink resumed>) = 0 [pid 5014] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... openat resumed>) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./52/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./52") = 0 [pid 5015] mkdir("./53", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [ 115.899149][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 115.921942][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 115.925651][ T2828] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 115.929711][ T5647] Remounting filesystem read-only [ 115.949673][ T5647] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 115.952937][ T2828] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5650] <... mount resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5655 [pid 5650] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5650] chdir("./file1") = 0 [pid 5650] ioctl(4, LOOP_CLR_FD) = 0 [pid 5650] close(4./strace-static-x86_64: Process 5655 attached ) = 0 [ 115.976965][ T5654] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.988649][ T5649] Remounting filesystem read-only [ 115.994230][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 116.001599][ T5649] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 116.001928][ T5647] NILFS (loop4): repaired inode bitmap for reserved inodes [ 116.017034][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5650] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5655] set_robust_list(0x555556b87660, 24 [pid 5647] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... umount2 resumed>) = 0 [ 116.017059][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 116.017081][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 116.017096][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 116.030106][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 116.032506][ T5650] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5655] <... set_robust_list resumed>) = 0 [pid 5647] exit_group(0 [pid 5017] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5655] chdir("./53" [pid 5647] <... exit_group resumed>) = ? [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5655] <... chdir resumed>) = 0 [pid 5647] +++ exited with 0 +++ [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] newfstatat(AT_FDCWD, "./50/file1", [pid 5655] <... prctl resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5655] setpgid(0, 0 [pid 5017] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5655] <... setpgid resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5647, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5655] <... openat resumed>) = 3 [pid 5017] <... openat resumed>) = 4 [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5655] write(3, "1000", 4 [pid 5017] newfstatat(4, "", [pid 5655] <... write resumed>) = 4 [pid 5655] close(3 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... restart_syscall resumed>) = 0 [pid 5655] <... close resumed>) = 0 [pid 5017] getdents64(4, [pid 5655] symlink("/dev/binderfs", "./binderfs" [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, [pid 5016] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5655] <... symlink resumed>) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5655] memfd_create("syzkaller", 0) = 3 [pid 5017] close(4 [pid 5016] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5017] <... close resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5655] <... mmap resumed>) = 0x7f770c286000 [pid 5017] rmdir("./50/file1" [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, [pid 5017] getdents64(3, [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] close(3 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... close resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./54/binderfs", [pid 5017] rmdir("./50" [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 116.045778][ T5647] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 116.055923][ T5649] NILFS (loop0): repaired inode bitmap for reserved inodes [ 116.071253][ T5650] Remounting filesystem read-only [ 116.100326][ T5650] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5017] <... rmdir resumed>) = 0 [pid 5016] unlink("./54/binderfs" [pid 5017] mkdir("./51", 0777 [pid 5016] <... unlink resumed>) = 0 [pid 5016] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5017] close(3) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5656 ./strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x555556b87660, 24) = 0 [pid 5656] chdir("./51") = 0 [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5656] setpgid(0, 0) = 0 [ 116.123797][ T5649] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 116.142163][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 116.153452][ T5650] NILFS (loop1): repaired inode bitmap for reserved inodes [ 116.162053][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5649] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... umount2 resumed>) = 0 [pid 5650] <... openat resumed>) = -1 EIO (Input/output error) [pid 5650] exit_group(0) = ? [pid 5656] <... openat resumed>) = 3 [pid 5650] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5650, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5649] exit_group(0 [pid 5014] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./51/binderfs", [pid 5649] <... exit_group resumed>) = ? [pid 5014] newfstatat(AT_FDCWD, "./51/file1", [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./51/binderfs") = 0 [pid 5649] +++ exited with 0 +++ [ 116.176580][ T47] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 116.177136][ T5650] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 116.183394][ T47] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 116.191868][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5013] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5656] write(3, "1000", 4 [pid 5655] <... write resumed>) = 2097152 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5649, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5656] <... write resumed>) = 4 [pid 5014] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5656] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5656] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5656] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... openat resumed>) = 4 [pid 5656] <... symlink resumed>) = 0 [pid 5014] newfstatat(4, "", [pid 5656] memfd_create("syzkaller", 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5656] <... memfd_create resumed>) = 3 [pid 5014] getdents64(4, [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5656] <... mmap resumed>) = 0x7f770c286000 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./51/file1") = 0 [pid 5014] getdents64(3, [pid 5655] munmap(0x7f770c286000, 2097152 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5655] <... munmap resumed>) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./51") = 0 [pid 5014] mkdir("./52", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5655] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5655] <... openat resumed>) = 4 [ 116.226163][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 116.233388][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 116.242207][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 116.250612][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 116.258535][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 116.267120][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5014] close(3 [pid 5655] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5657 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, ./strace-static-x86_64: Process 5657 attached 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5657] set_robust_list(0x555556b87660, 24 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5657] <... set_robust_list resumed>) = 0 [pid 5012] unlink("./49/binderfs") = 0 [pid 5657] chdir("./52") = 0 [pid 5012] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5657] setpgid(0, 0) = 0 [pid 5657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5657] write(3, "1000", 4) = 4 [pid 5657] close(3) = 0 [pid 5657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5657] memfd_create("syzkaller", 0) = 3 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 116.275937][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 116.277546][ T5655] loop3: detected capacity change from 0 to 4096 [ 116.301821][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [pid 5013] <... umount2 resumed>) = 0 [pid 5655] <... ioctl resumed>) = 0 [pid 5655] close(3) = 0 [pid 5655] mkdir("./file1", 0777) = 0 [pid 5655] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./54/file1", [pid 5013] newfstatat(AT_FDCWD, "./51/file1", [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... openat resumed>) = 4 [pid 5013] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] newfstatat(4, "", [pid 5013] <... openat resumed>) = 4 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, [pid 5013] newfstatat(4, "", [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] getdents64(4, [pid 5016] close(4) = 0 [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] rmdir("./54/file1") = 0 [pid 5013] getdents64(4, [pid 5016] getdents64(3, [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3 [pid 5013] <... close resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./54" [pid 5013] rmdir("./51/file1" [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./55", 0777 [pid 5013] <... rmdir resumed>) = 0 [ 116.334375][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 116.353468][ T5655] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.358131][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5656] <... write resumed>) = 2097152 [pid 5016] <... mkdir resumed>) = 0 [pid 5013] getdents64(3, [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5656] munmap(0x7f770c286000, 2097152 [pid 5016] <... openat resumed>) = 3 [pid 5013] close(3 [pid 5656] <... munmap resumed>) = 0 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5013] <... close resumed>) = 0 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] rmdir("./51" [pid 5656] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5016] close(3 [pid 5013] <... rmdir resumed>) = 0 [pid 5656] <... openat resumed>) = 4 [pid 5016] <... close resumed>) = 0 [ 116.392764][ T5655] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 116.400801][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 116.411406][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 116.421807][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5013] mkdir("./52", 0777 [pid 5656] ioctl(4, LOOP_SET_FD, 3 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... mkdir resumed>) = 0 [pid 5656] <... ioctl resumed>) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5658 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5657] <... write resumed>) = 2097152 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5656] close(3 [pid 5657] munmap(0x7f770c286000, 2097152 [pid 5656] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5658 attached [pid 5657] <... munmap resumed>) = 0 [pid 5656] mkdir("./file1", 0777 [pid 5012] <... umount2 resumed>) = 0 [pid 5658] set_robust_list(0x555556b87660, 24 [pid 5657] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5656] <... mkdir resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5659 [pid 5658] <... set_robust_list resumed>) = 0 [pid 5657] <... openat resumed>) = 4 [ 116.437642][ T5656] loop5: detected capacity change from 0 to 4096 [pid 5656] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5659 attached [pid 5658] chdir("./55" [pid 5657] ioctl(4, LOOP_SET_FD, 3 [pid 5655] <... mount resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, [pid 5659] set_robust_list(0x555556b87660, 24 [pid 5658] <... chdir resumed>) = 0 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./49/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5657] <... ioctl resumed>) = 0 [pid 5655] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5012] close(3) = 0 [pid 5659] <... set_robust_list resumed>) = 0 [pid 5658] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5655] <... openat resumed>) = 3 [pid 5012] rmdir("./49" [pid 5659] chdir("./52" [pid 5658] <... prctl resumed>) = 0 [pid 5657] close(3 [pid 5655] chdir("./file1" [pid 5012] <... rmdir resumed>) = 0 [pid 5659] <... chdir resumed>) = 0 [pid 5658] setpgid(0, 0 [pid 5657] <... close resumed>) = 0 [pid 5655] <... chdir resumed>) = 0 [pid 5012] mkdir("./50", 0777 [pid 5659] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5658] <... setpgid resumed>) = 0 [pid 5657] mkdir("./file1", 0777 [pid 5655] ioctl(4, LOOP_CLR_FD [pid 5012] <... mkdir resumed>) = 0 [pid 5658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 116.470705][ T5656] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.487297][ T5660] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.487331][ T5656] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 116.508983][ T5657] loop2: detected capacity change from 0 to 4096 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5659] <... prctl resumed>) = 0 [pid 5658] <... openat resumed>) = 3 [pid 5657] <... mkdir resumed>) = 0 [pid 5655] <... ioctl resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5659] setpgid(0, 0 [pid 5658] write(3, "1000", 4 [pid 5657] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5655] close(4 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5659] <... setpgid resumed>) = 0 [pid 5658] <... write resumed>) = 4 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5655] <... close resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5661 [pid 5655] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5658] close(3./strace-static-x86_64: Process 5661 attached [pid 5661] set_robust_list(0x555556b87660, 24) = 0 [pid 5661] chdir("./50") = 0 [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5661] setpgid(0, 0) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5661] write(3, "1000", 4) = 4 [pid 5661] close(3) = 0 [pid 5661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5661] memfd_create("syzkaller", 0) = 3 [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5659] <... openat resumed>) = 3 [pid 5658] <... close resumed>) = 0 [pid 5661] <... mmap resumed>) = 0x7f770c286000 [pid 5659] write(3, "1000", 4 [pid 5658] symlink("/dev/binderfs", "./binderfs" [pid 5659] <... write resumed>) = 4 [pid 5658] <... symlink resumed>) = 0 [pid 5656] <... mount resumed>) = 0 [pid 5656] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5656] chdir("./file1") = 0 [pid 5656] ioctl(4, LOOP_CLR_FD) = 0 [pid 5656] close(4) = 0 [ 116.528189][ T5655] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 116.528965][ T5657] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.565674][ T5662] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5656] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5659] close(3 [pid 5658] memfd_create("syzkaller", 0 [pid 5659] <... close resumed>) = 0 [pid 5658] <... memfd_create resumed>) = 3 [pid 5659] symlink("/dev/binderfs", "./binderfs" [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5659] <... symlink resumed>) = 0 [pid 5659] memfd_create("syzkaller", 0 [pid 5658] <... mmap resumed>) = 0x7f770c286000 [pid 5659] <... memfd_create resumed>) = 3 [pid 5659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 116.573768][ T5656] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 116.609024][ T5655] Remounting filesystem read-only [ 116.615740][ T5655] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5661] <... write resumed>) = 2097152 [ 116.629517][ T5657] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 116.647846][ T5655] NILFS (loop3): repaired inode bitmap for reserved inodes [ 116.658916][ T5656] Remounting filesystem read-only [pid 5659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5661] munmap(0x7f770c286000, 2097152 [pid 5659] munmap(0x7f770c286000, 2097152 [pid 5658] <... write resumed>) = 2097152 [pid 5657] <... mount resumed>) = 0 [pid 5657] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5658] munmap(0x7f770c286000, 2097152 [pid 5657] <... openat resumed>) = 3 [pid 5657] chdir("./file1") = 0 [pid 5657] ioctl(4, LOOP_CLR_FD) = 0 [pid 5657] close(4) = 0 [ 116.686191][ T5655] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 116.703145][ T5656] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 116.714023][ T5663] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5659] <... munmap resumed>) = 0 [pid 5658] <... munmap resumed>) = 0 [pid 5657] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5659] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5658] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5661] <... munmap resumed>) = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5661] ioctl(4, LOOP_SET_FD, 3 [pid 5659] <... openat resumed>) = 4 [pid 5658] <... openat resumed>) = 4 [pid 5655] <... openat resumed>) = -1 EIO (Input/output error) [pid 5659] ioctl(4, LOOP_SET_FD, 3 [ 116.732980][ T5656] NILFS (loop5): repaired inode bitmap for reserved inodes [ 116.743022][ T5657] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 116.749423][ T5661] loop0: detected capacity change from 0 to 4096 [ 116.765120][ T5659] loop1: detected capacity change from 0 to 4096 [ 116.766910][ T5656] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5658] ioctl(4, LOOP_SET_FD, 3 [pid 5655] exit_group(0 [pid 5659] <... ioctl resumed>) = 0 [pid 5658] <... ioctl resumed>) = 0 [pid 5655] <... exit_group resumed>) = ? [pid 5661] <... ioctl resumed>) = 0 [pid 5661] close(3) = 0 [pid 5661] mkdir("./file1", 0777 [pid 5659] close(3 [pid 5655] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5655, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5659] <... close resumed>) = 0 [pid 5659] mkdir("./file1", 0777 [pid 5658] close(3 [pid 5661] <... mkdir resumed>) = 0 [pid 5659] <... mkdir resumed>) = 0 [pid 5656] <... openat resumed>) = -1 EIO (Input/output error) [pid 5659] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5661] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5658] <... close resumed>) = 0 [pid 5656] exit_group(0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5658] mkdir("./file1", 0777 [pid 5656] <... exit_group resumed>) = ? [pid 5015] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5658] <... mkdir resumed>) = 0 [pid 5656] +++ exited with 0 +++ [ 116.772925][ T5658] loop4: detected capacity change from 0 to 4096 [ 116.794866][ T5657] Remounting filesystem read-only [ 116.803551][ T5657] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 116.812415][ T5657] NILFS (loop2): repaired inode bitmap for reserved inodes [ 116.822200][ T5659] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5658] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] <... openat resumed>) = 3 [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5656, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5015] newfstatat(3, "", [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] newfstatat(AT_FDCWD, "./53/binderfs", [pid 5017] <... openat resumed>) = 3 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] newfstatat(3, "", [pid 5015] unlink("./53/binderfs" [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5657] <... openat resumed>) = -1 EIO (Input/output error) [pid 5657] exit_group(0) = ? [pid 5657] +++ exited with 0 +++ [ 116.829174][ T5657] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 116.848035][ T5658] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.848252][ T5661] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.858026][ T5659] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5657, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5017] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./51/binderfs" [pid 5014] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] <... unlink resumed>) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./52/binderfs") = 0 [ 116.880273][ T5658] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 116.891720][ T5661] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 116.902253][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 116.910520][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 116.919824][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 116.926185][ T5664] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5014] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5658] <... mount resumed>) = 0 [pid 5658] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5661] <... mount resumed>) = 0 [pid 5661] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5661] chdir("./file1") = 0 [pid 5658] <... openat resumed>) = 3 [pid 5661] ioctl(4, LOOP_CLR_FD [pid 5658] chdir("./file1" [pid 5661] <... ioctl resumed>) = 0 [pid 5658] <... chdir resumed>) = 0 [pid 5658] ioctl(4, LOOP_CLR_FD [pid 5661] close(4 [pid 5659] <... mount resumed>) = 0 [pid 5658] <... ioctl resumed>) = 0 [pid 5661] <... close resumed>) = 0 [ 116.928824][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 116.938346][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 116.945441][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 116.952962][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 116.959477][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 116.975663][ T5665] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5661] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5659] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5658] close(4 [pid 5659] <... openat resumed>) = 3 [pid 5658] <... close resumed>) = 0 [pid 5659] chdir("./file1" [pid 5658] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5659] <... chdir resumed>) = 0 [pid 5659] ioctl(4, LOOP_CLR_FD) = 0 [ 116.977825][ T5666] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.999619][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 117.000824][ T5661] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 117.007100][ T5658] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5659] close(4) = 0 [ 117.034618][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 117.045185][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 117.052904][ T5659] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 117.069648][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 117.070621][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 117.082381][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 117.092521][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 117.102583][ T5661] Remounting filesystem read-only [ 117.108699][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 117.109283][ T5659] Remounting filesystem read-only [pid 5659] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = 0 [ 117.145793][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 117.153794][ T5661] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 117.155140][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 117.170449][ T5658] Remounting filesystem read-only [ 117.182252][ T5659] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5015] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 117.187624][ T5661] NILFS (loop0): repaired inode bitmap for reserved inodes [ 117.193197][ T5659] NILFS (loop1): repaired inode bitmap for reserved inodes [ 117.206085][ T5658] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 117.213958][ T5658] NILFS (loop4): repaired inode bitmap for reserved inodes [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5659] <... openat resumed>) = -1 EIO (Input/output error) [pid 5658] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... umount2 resumed>) = 0 [pid 5015] rmdir("./53/file1" [pid 5659] exit_group(0 [pid 5658] exit_group(0 [pid 5017] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5659] <... exit_group resumed>) = ? [pid 5658] <... exit_group resumed>) = ? [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... rmdir resumed>) = 0 [pid 5659] +++ exited with 0 +++ [pid 5658] +++ exited with 0 +++ [pid 5017] newfstatat(AT_FDCWD, "./51/file1", [pid 5015] getdents64(3, [pid 5014] <... umount2 resumed>) = 0 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5659, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5017] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5658, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] close(3 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... close resumed>) = 0 [pid 5017] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 117.235610][ T5659] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 117.251027][ T5658] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] rmdir("./53" [pid 5017] <... openat resumed>) = 4 [pid 5016] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... rmdir resumed>) = 0 [pid 5017] newfstatat(4, "", [pid 5016] <... openat resumed>) = 3 [pid 5015] mkdir("./54", 0777 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] newfstatat(3, "", [pid 5015] <... mkdir resumed>) = 0 [pid 5014] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] getdents64(4, [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(3, [pid 5015] <... openat resumed>) = 3 [pid 5014] newfstatat(AT_FDCWD, "./52/file1", [pid 5017] getdents64(4, [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(4 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(3 [pid 5014] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5661] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] <... close resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./55/binderfs", [pid 5015] <... close resumed>) = 0 [pid 5661] exit_group(0 [pid 5017] rmdir("./51/file1" [pid 5016] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5661] <... exit_group resumed>) = ? [pid 5017] <... rmdir resumed>) = 0 [pid 5016] unlink("./55/binderfs" [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5661] +++ exited with 0 +++ [pid 5017] getdents64(3, [pid 5016] <... unlink resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... openat resumed>) = 4 [pid 5013] <... openat resumed>) = 3 [pid 5017] close(3 [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5667 [pid 5014] newfstatat(4, "", [pid 5013] newfstatat(3, "", [pid 5017] <... close resumed>) = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5661, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./52/binderfs") = 0 [pid 5013] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5667 attached [pid 5667] set_robust_list(0x555556b87660, 24 [pid 5017] rmdir("./51" [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5667] <... set_robust_list resumed>) = 0 [pid 5667] chdir("./54") = 0 [ 117.289621][ T5661] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 117.323344][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 117.331190][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [pid 5667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5667] setpgid(0, 0) = 0 [pid 5667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5017] <... rmdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5667] <... openat resumed>) = 3 [pid 5667] write(3, "1000", 4) = 4 [pid 5667] close(3) = 0 [pid 5667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5667] memfd_create("syzkaller", 0) = 3 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5017] mkdir("./52", 0777 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] <... mkdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5012] <... openat resumed>) = 3 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] newfstatat(3, "", [pid 5017] <... openat resumed>) = 3 [pid 5014] close(4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 117.331292][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 117.343025][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 117.346478][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 117.360884][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 117.370086][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 117.370781][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5012] getdents64(3, [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5014] rmdir("./52/file1" [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... rmdir resumed>) = 0 [pid 5012] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5668 [pid 5014] getdents64(3, [pid 5012] newfstatat(AT_FDCWD, "./50/binderfs", [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] close(3 [pid 5012] unlink("./50/binderfs" [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./52" [pid 5012] <... unlink resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] mkdir("./53", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5668 attached ) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5668] set_robust_list(0x555556b87660, 24 [pid 5014] <... close resumed>) = 0 [pid 5668] <... set_robust_list resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5669 [pid 5668] chdir("./52") = 0 [pid 5668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 117.377817][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 117.393168][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 117.406621][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 117.414801][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 117.416891][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5668] setpgid(0, 0) = 0 [pid 5668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5669 attached ) = 3 [pid 5668] write(3, "1000", 4) = 4 [pid 5668] close(3) = 0 [pid 5668] symlink("/dev/binderfs", "./binderfs" [pid 5669] set_robust_list(0x555556b87660, 24 [pid 5668] <... symlink resumed>) = 0 [pid 5669] <... set_robust_list resumed>) = 0 [pid 5668] memfd_create("syzkaller", 0) = 3 [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5669] chdir("./53") = 0 [pid 5669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5669] setpgid(0, 0) = 0 [pid 5669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5669] write(3, "1000", 4) = 4 [pid 5669] close(3) = 0 [pid 5669] symlink("/dev/binderfs", "./binderfs") = 0 [ 117.438165][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5669] memfd_create("syzkaller", 0) = 3 [pid 5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5667] <... write resumed>) = 2097152 [pid 5667] munmap(0x7f770c286000, 2097152) = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5667] ioctl(4, LOOP_SET_FD, 3 [pid 5016] <... umount2 resumed>) = 0 [pid 5668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 117.469397][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 117.501767][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 117.502767][ T5667] loop3: detected capacity change from 0 to 4096 [pid 5016] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [pid 5016] rmdir("./55/file1") = 0 [pid 5668] <... write resumed>) = 2097152 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./55") = 0 [pid 5016] mkdir("./56", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] <... openat resumed>) = 3 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5667] <... ioctl resumed>) = 0 [pid 5667] close(3) = 0 [pid 5667] mkdir("./file1", 0777 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5016] close(3) = 0 [pid 5668] munmap(0x7f770c286000, 2097152 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5670 [pid 5667] <... mkdir resumed>) = 0 [pid 5667] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5668] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5670 attached [pid 5668] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5670] set_robust_list(0x555556b87660, 24 [pid 5668] <... openat resumed>) = 4 [pid 5670] <... set_robust_list resumed>) = 0 [pid 5669] <... write resumed>) = 2097152 [pid 5668] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... umount2 resumed>) = 0 [ 117.511765][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 117.525657][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5670] chdir("./56" [pid 5668] <... ioctl resumed>) = 0 [pid 5670] <... chdir resumed>) = 0 [pid 5668] close(3 [pid 5012] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5668] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5670] setpgid(0, 0) = 0 [pid 5670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5668] mkdir("./file1", 0777 [pid 5012] newfstatat(AT_FDCWD, "./50/file1", [pid 5670] write(3, "1000", 4 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5670] <... write resumed>) = 4 [pid 5668] <... mkdir resumed>) = 0 [pid 5012] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5670] close(3 [pid 5668] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5670] <... close resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5670] symlink("/dev/binderfs", "./binderfs" [pid 5012] <... openat resumed>) = 4 [pid 5670] <... symlink resumed>) = 0 [pid 5669] munmap(0x7f770c286000, 2097152 [pid 5012] newfstatat(4, "", [pid 5670] memfd_create("syzkaller", 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, [pid 5670] <... memfd_create resumed>) = 3 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] getdents64(4, [pid 5670] <... mmap resumed>) = 0x7f770c286000 [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4 [pid 5013] <... umount2 resumed>) = 0 [pid 5013] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./52/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./50/file1" [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 117.576716][ T5668] loop5: detected capacity change from 0 to 4096 [ 117.584121][ T5667] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.608354][ T5668] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5669] <... munmap resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5012] getdents64(3, [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./52/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./52") = 0 [pid 5013] mkdir("./53", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5012] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5669] <... openat resumed>) = 4 [pid 5012] close(3 [pid 5669] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./50") = 0 [pid 5669] <... ioctl resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5012] mkdir("./51", 0777 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5669] close(3 [pid 5012] <... mkdir resumed>) = 0 [pid 5669] <... close resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555556b87650) = 5671 [pid 5669] mkdir("./file1", 0777 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5669] <... mkdir resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5669] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [ 117.636768][ T5667] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 117.647458][ T5668] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 117.658713][ T5669] loop2: detected capacity change from 0 to 4096 [pid 5012] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5671 attached [pid 5671] set_robust_list(0x555556b87660, 24 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5671] <... set_robust_list resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5671] chdir("./53") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5673 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5673 attached [pid 5670] <... write resumed>) = 2097152 [ 117.688612][ T5669] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.710341][ T5669] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 117.711425][ T5672] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5673] set_robust_list(0x555556b87660, 24 [pid 5670] munmap(0x7f770c286000, 2097152 [pid 5671] <... openat resumed>) = 3 [pid 5671] write(3, "1000", 4) = 4 [pid 5671] close(3) = 0 [pid 5671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5671] memfd_create("syzkaller", 0) = 3 [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5673] <... set_robust_list resumed>) = 0 [pid 5670] <... munmap resumed>) = 0 [pid 5673] chdir("./51" [pid 5670] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5669] <... mount resumed>) = 0 [pid 5668] <... mount resumed>) = 0 [pid 5667] <... mount resumed>) = 0 [pid 5673] <... chdir resumed>) = 0 [pid 5667] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5670] <... openat resumed>) = 4 [pid 5669] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5673] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5668] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5667] <... openat resumed>) = 3 [pid 5669] <... openat resumed>) = 3 [pid 5673] <... prctl resumed>) = 0 [pid 5669] chdir("./file1" [pid 5668] <... openat resumed>) = 3 [pid 5667] chdir("./file1" [pid 5670] ioctl(4, LOOP_SET_FD, 3 [pid 5673] setpgid(0, 0 [pid 5668] chdir("./file1" [pid 5669] <... chdir resumed>) = 0 [pid 5667] <... chdir resumed>) = 0 [pid 5667] ioctl(4, LOOP_CLR_FD) = 0 [pid 5667] close(4) = 0 [pid 5673] <... setpgid resumed>) = 0 [pid 5669] ioctl(4, LOOP_CLR_FD [pid 5668] <... chdir resumed>) = 0 [pid 5667] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5670] <... ioctl resumed>) = 0 [pid 5669] <... ioctl resumed>) = 0 [pid 5668] ioctl(4, LOOP_CLR_FD [pid 5673] <... openat resumed>) = 3 [pid 5670] close(3 [pid 5669] close(4 [pid 5668] <... ioctl resumed>) = 0 [pid 5670] <... close resumed>) = 0 [pid 5669] <... close resumed>) = 0 [pid 5670] mkdir("./file1", 0777 [pid 5668] close(4 [pid 5669] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 117.731769][ T5675] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.744725][ T5674] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.759135][ T5670] loop4: detected capacity change from 0 to 4096 [ 117.767144][ T5667] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5673] write(3, "1000", 4 [pid 5668] <... close resumed>) = 0 [pid 5670] <... mkdir resumed>) = 0 [pid 5668] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5673] <... write resumed>) = 4 [pid 5673] close(3 [pid 5670] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5673] <... close resumed>) = 0 [pid 5673] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5673] memfd_create("syzkaller", 0) = 3 [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 117.789577][ T5668] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 117.789638][ T5669] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 117.822379][ T5670] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5671] <... write resumed>) = 2097152 [ 117.845594][ T5668] Remounting filesystem read-only [ 117.854992][ T5667] Remounting filesystem read-only [ 117.861781][ T5670] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 117.871976][ T5668] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 117.881709][ T5667] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5671] munmap(0x7f770c286000, 2097152) = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5671] ioctl(4, LOOP_SET_FD, 3 [pid 5673] <... write resumed>) = 2097152 [ 117.917069][ T5668] NILFS (loop5): repaired inode bitmap for reserved inodes [ 117.925854][ T5667] NILFS (loop3): repaired inode bitmap for reserved inodes [ 117.939510][ T5671] loop1: detected capacity change from 0 to 4096 [ 117.940304][ T5668] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5673] munmap(0x7f770c286000, 2097152 [pid 5671] <... ioctl resumed>) = 0 [pid 5667] <... openat resumed>) = -1 EIO (Input/output error) [pid 5667] exit_group(0) = ? [pid 5667] +++ exited with 0 +++ [pid 5668] <... openat resumed>) = -1 EIO (Input/output error) [pid 5668] exit_group(0) = ? [pid 5673] <... munmap resumed>) = 0 [pid 5671] close(3 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5667, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5671] <... close resumed>) = 0 [pid 5670] <... mount resumed>) = 0 [pid 5668] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5668, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5017] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] unlink("./52/binderfs") = 0 [ 117.962682][ T5667] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 117.966242][ T5669] Remounting filesystem read-only [ 117.985535][ T5676] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.989094][ T5669] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 118.002163][ T5673] loop0: detected capacity change from 0 to 4096 [ 118.004351][ T5669] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5017] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] <... openat resumed>) = 4 [pid 5673] ioctl(4, LOOP_SET_FD, 3 [pid 5671] mkdir("./file1", 0777 [pid 5670] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5673] <... ioctl resumed>) = 0 [pid 5671] <... mkdir resumed>) = 0 [pid 5670] <... openat resumed>) = 3 [pid 5669] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5670] chdir("./file1" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5670] <... chdir resumed>) = 0 [ 118.011293][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 118.017937][ T5669] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 118.025648][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 118.043628][ T5671] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.046927][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5015] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5670] ioctl(4, LOOP_CLR_FD [pid 5015] <... openat resumed>) = 3 [pid 5670] <... ioctl resumed>) = 0 [pid 5015] newfstatat(3, "", [pid 5670] close(4 [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5670] <... close resumed>) = 0 [pid 5015] getdents64(3, [pid 5670] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./54/binderfs") = 0 [pid 5015] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5669] exit_group(0 [pid 5673] close(3) = 0 [pid 5673] mkdir("./file1", 0777 [pid 5669] <... exit_group resumed>) = ? [pid 5673] <... mkdir resumed>) = 0 [ 118.063379][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 118.071569][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 118.082897][ T5670] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 118.102365][ T5673] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5673] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5669] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5669, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5014] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./53/binderfs") = 0 [ 118.108022][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 118.115305][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 118.120251][ T5671] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 118.137198][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 118.137899][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 118.144853][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 118.156025][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [pid 5014] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] <... mount resumed>) = 0 [ 118.159338][ T5670] Remounting filesystem read-only [ 118.172549][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 118.175189][ T5677] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.179986][ T5673] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 118.200136][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 118.200160][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [pid 5671] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5671] chdir("./file1") = 0 [pid 5671] ioctl(4, LOOP_CLR_FD) = 0 [pid 5671] close(4) = 0 [ 118.208458][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 118.222249][ T5670] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 118.231432][ T5670] NILFS (loop4): repaired inode bitmap for reserved inodes [ 118.239914][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 118.250567][ T5671] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5671] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./52/file1", [pid 5673] <... mount resumed>) = 0 [pid 5673] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5673] chdir("./file1") = 0 [pid 5673] ioctl(4, LOOP_CLR_FD) = 0 [pid 5673] close(4) = 0 [ 118.252268][ T5670] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 118.283592][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [pid 5673] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 118.310836][ T5673] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 118.310859][ T5678] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.312593][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 118.346415][ T5671] Remounting filesystem read-only [pid 5017] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, [pid 5017] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./54/file1") = 0 [pid 5017] getdents64(4, [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5017] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./54" [pid 5017] close(4 [pid 5015] <... rmdir resumed>) = 0 [pid 5017] <... close resumed>) = 0 [pid 5015] mkdir("./55", 0777 [pid 5017] rmdir("./52/file1" [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5017] <... rmdir resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] getdents64(3, [pid 5015] <... clone resumed>, child_tidptr=0x555556b87650) = 5679 [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3./strace-static-x86_64: Process 5679 attached [pid 5679] set_robust_list(0x555556b87660, 24) = 0 [pid 5679] chdir("./55" [pid 5017] <... close resumed>) = 0 [pid 5017] rmdir("./52" [pid 5679] <... chdir resumed>) = 0 [pid 5679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5679] setpgid(0, 0 [pid 5017] <... rmdir resumed>) = 0 [pid 5679] <... setpgid resumed>) = 0 [pid 5017] mkdir("./53", 0777 [pid 5679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5017] <... mkdir resumed>) = 0 [pid 5679] write(3, "1000", 4) = 4 [pid 5679] close(3) = 0 [pid 5679] symlink("/dev/binderfs", "./binderfs") = 0 [ 118.354158][ T5671] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [ 118.363728][ T5671] NILFS (loop1): repaired inode bitmap for reserved inodes [ 118.383787][ T5673] Remounting filesystem read-only [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5679] memfd_create("syzkaller", 0 [pid 5017] <... openat resumed>) = 3 [pid 5679] <... memfd_create resumed>) = 3 [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5670] <... openat resumed>) = -1 EIO (Input/output error) [pid 5670] exit_group(0) = ? [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5670] +++ exited with 0 +++ [pid 5017] close(3 [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5670, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5016] restart_syscall(<... resuming interrupted clone ...> [pid 5017] <... close resumed>) = 0 [pid 5016] <... restart_syscall resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./56/binderfs") = 0 [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5680 [pid 5016] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] <... openat resumed>) = -1 EIO (Input/output error) [pid 5014] <... umount2 resumed>) = 0 [pid 5014] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] exit_group(0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./53/file1", [pid 5671] <... exit_group resumed>) = ? [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 118.404385][ T5673] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 118.408915][ T5671] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 118.442126][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 118.453996][ T5673] NILFS (loop0): repaired inode bitmap for reserved inodes ./strace-static-x86_64: Process 5680 attached [pid 5679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5671] +++ exited with 0 +++ [pid 5014] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5013] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5680] set_robust_list(0x555556b87660, 24 [pid 5013] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5680] <... set_robust_list resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./53/binderfs") = 0 [ 118.458189][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 118.486132][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 118.488971][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 118.492846][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [pid 5013] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5680] chdir("./53" [pid 5679] <... write resumed>) = 2097152 [pid 5014] <... openat resumed>) = 4 [pid 5680] <... chdir resumed>) = 0 [pid 5679] munmap(0x7f770c286000, 2097152 [pid 5014] newfstatat(4, "", [pid 5680] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5679] <... munmap resumed>) = 0 [pid 5680] <... prctl resumed>) = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5680] setpgid(0, 0 [pid 5679] <... openat resumed>) = 4 [pid 5014] getdents64(4, [pid 5680] <... setpgid resumed>) = 0 [pid 5680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5679] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [ 118.507327][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 118.518595][ T5673] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 118.533648][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 118.540659][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 118.540684][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 118.540704][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [pid 5680] <... openat resumed>) = 3 [pid 5673] <... openat resumed>) = -1 EIO (Input/output error) [pid 5673] exit_group(0) = ? [pid 5673] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5673, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5012] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./51/binderfs") = 0 [pid 5012] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5680] write(3, "1000", 4 [pid 5679] <... ioctl resumed>) = 0 [pid 5014] getdents64(4, [pid 5680] <... write resumed>) = 4 [pid 5679] close(3 [pid 5014] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5680] close(3 [pid 5679] <... close resumed>) = 0 [pid 5014] close(4 [pid 5680] <... close resumed>) = 0 [pid 5679] mkdir("./file1", 0777 [pid 5014] <... close resumed>) = 0 [pid 5679] <... mkdir resumed>) = 0 [pid 5680] symlink("/dev/binderfs", "./binderfs" [pid 5014] rmdir("./53/file1" [pid 5680] <... symlink resumed>) = 0 [pid 5679] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] <... rmdir resumed>) = 0 [pid 5680] memfd_create("syzkaller", 0 [pid 5014] getdents64(3, [pid 5680] <... memfd_create resumed>) = 3 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [ 118.549228][ T5679] loop3: detected capacity change from 0 to 4096 [ 118.563435][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 118.570013][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 118.584555][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 118.593875][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [pid 5680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... close resumed>) = 0 [pid 5680] <... mmap resumed>) = 0x7f770c286000 [pid 5014] rmdir("./53") = 0 [pid 5014] mkdir("./54", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5681 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5681 attached [pid 5680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] <... umount2 resumed>) = 0 [pid 5016] newfstatat(AT_FDCWD, "./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5681] set_robust_list(0x555556b87660, 24 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5016] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4) = 0 [ 118.614038][ T5679] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.649522][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [pid 5016] rmdir("./56/file1" [pid 5681] <... set_robust_list resumed>) = 0 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5016] close(3) = 0 [pid 5016] rmdir("./56") = 0 [pid 5016] mkdir("./57", 0777) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5681] chdir("./54" [pid 5016] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] close(3 [pid 5681] <... chdir resumed>) = 0 [pid 5013] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... close resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5681] setpgid(0, 0) = 0 [pid 5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5682 [pid 5681] <... openat resumed>) = 3 [pid 5681] write(3, "1000", 4) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5681] close(3) = 0 [pid 5013] newfstatat(AT_FDCWD, "./53/file1", [pid 5681] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5682 attached [pid 5682] set_robust_list(0x555556b87660, 24) = 0 [pid 5682] chdir("./57") = 0 [pid 5682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5681] memfd_create("syzkaller", 0 [pid 5013] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5681] <... memfd_create resumed>) = 3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5682] setpgid(0, 0) = 0 [pid 5682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] <... openat resumed>) = 4 [pid 5681] <... mmap resumed>) = 0x7f770c286000 [pid 5013] newfstatat(4, "", [pid 5682] <... openat resumed>) = 3 [pid 5682] write(3, "1000", 4) = 4 [pid 5682] close(3) = 0 [pid 5682] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5682] memfd_create("syzkaller", 0) = 3 [pid 5682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./53/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./53") = 0 [pid 5013] mkdir("./54", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5683 ./strace-static-x86_64: Process 5683 attached [ 118.661201][ T5679] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 118.701472][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5683] set_robust_list(0x555556b87660, 24) = 0 [pid 5681] <... write resumed>) = 2097152 [pid 5680] <... write resumed>) = 2097152 [pid 5680] munmap(0x7f770c286000, 2097152 [pid 5683] chdir("./54") = 0 [pid 5681] munmap(0x7f770c286000, 2097152 [pid 5680] <... munmap resumed>) = 0 [pid 5680] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5680] ioctl(4, LOOP_SET_FD, 3 [pid 5683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5681] <... munmap resumed>) = 0 [pid 5679] <... mount resumed>) = 0 [pid 5683] <... prctl resumed>) = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5683] setpgid(0, 0 [pid 5679] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5681] ioctl(4, LOOP_SET_FD, 3 [pid 5683] <... setpgid resumed>) = 0 [pid 5679] <... openat resumed>) = 3 [pid 5683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5679] chdir("./file1" [pid 5683] <... openat resumed>) = 3 [pid 5679] <... chdir resumed>) = 0 [pid 5683] write(3, "1000", 4 [pid 5679] ioctl(4, LOOP_CLR_FD) = 0 [pid 5683] <... write resumed>) = 4 [pid 5683] close(3 [ 118.752163][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 118.760759][ T5684] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.761396][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 118.774020][ T5680] loop5: detected capacity change from 0 to 4096 [ 118.790590][ T5681] loop2: detected capacity change from 0 to 4096 [pid 5679] close(4 [pid 5683] <... close resumed>) = 0 [pid 5679] <... close resumed>) = 0 [pid 5679] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5683] memfd_create("syzkaller", 0) = 3 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5681] <... ioctl resumed>) = 0 [pid 5680] <... ioctl resumed>) = 0 [pid 5680] close(3) = 0 [pid 5683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5681] close(3) = 0 [pid 5681] mkdir("./file1", 0777 [pid 5680] mkdir("./file1", 0777 [pid 5681] <... mkdir resumed>) = 0 [ 118.806583][ T5679] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5681] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5680] <... mkdir resumed>) = 0 [pid 5680] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5682] <... write resumed>) = 2097152 [pid 5682] munmap(0x7f770c286000, 2097152) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5012] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./51/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./51") = 0 [pid 5012] mkdir("./52", 0777) = 0 [pid 5682] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5682] <... openat resumed>) = 4 [ 118.849956][ T5679] Remounting filesystem read-only [ 118.856256][ T5681] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.856984][ T5680] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.877750][ T5679] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 118.888666][ T5681] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5682] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... clone resumed>, child_tidptr=0x555556b87650) = 5685 ./strace-static-x86_64: Process 5685 attached [pid 5685] set_robust_list(0x555556b87660, 24) = 0 [pid 5685] chdir("./52") = 0 [pid 5685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5685] setpgid(0, 0) = 0 [pid 5685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5685] write(3, "1000", 4) = 4 [pid 5685] close(3) = 0 [pid 5685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5685] memfd_create("syzkaller", 0) = 3 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5683] <... write resumed>) = 2097152 [pid 5682] <... ioctl resumed>) = 0 [pid 5682] close(3) = 0 [ 118.904536][ T5682] loop4: detected capacity change from 0 to 4096 [ 118.924985][ T5679] NILFS (loop3): repaired inode bitmap for reserved inodes [ 118.935932][ T5680] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5683] munmap(0x7f770c286000, 2097152 [pid 5682] mkdir("./file1", 0777 [pid 5683] <... munmap resumed>) = 0 [pid 5682] <... mkdir resumed>) = 0 [pid 5682] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5683] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5683] ioctl(4, LOOP_SET_FD, 3 [pid 5681] <... mount resumed>) = 0 [pid 5681] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5681] chdir("./file1") = 0 [pid 5681] ioctl(4, LOOP_CLR_FD) = 0 [pid 5681] close(4) = 0 [ 118.938215][ T5679] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 118.967539][ T5682] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.979626][ T5683] loop1: detected capacity change from 0 to 4096 [ 118.986672][ T5681] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5681] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5683] <... ioctl resumed>) = 0 [pid 5679] <... openat resumed>) = -1 EIO (Input/output error) [pid 5683] close(3 [pid 5679] exit_group(0 [pid 5683] <... close resumed>) = 0 [pid 5679] <... exit_group resumed>) = ? [pid 5683] mkdir("./file1", 0777 [pid 5679] +++ exited with 0 +++ [pid 5683] <... mkdir resumed>) = 0 [pid 5683] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5679, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5015] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5685] <... write resumed>) = 2097152 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 119.002127][ T5686] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.017166][ T5682] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 119.028796][ T5681] Remounting filesystem read-only [ 119.028821][ T5683] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.044400][ T5681] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [pid 5685] munmap(0x7f770c286000, 2097152 [pid 5682] <... mount resumed>) = 0 [pid 5685] <... munmap resumed>) = 0 [pid 5682] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5680] <... mount resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5682] <... openat resumed>) = 3 [pid 5680] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5015] newfstatat(3, "", [pid 5685] <... openat resumed>) = 4 [pid 5682] chdir("./file1" [pid 5680] <... openat resumed>) = 3 [pid 5685] ioctl(4, LOOP_SET_FD, 3 [pid 5682] <... chdir resumed>) = 0 [pid 5680] chdir("./file1" [pid 5015] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 119.056751][ T5688] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.059351][ T5687] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.078799][ T5683] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 119.081859][ T5681] NILFS (loop2): repaired inode bitmap for reserved inodes [pid 5682] ioctl(4, LOOP_CLR_FD [pid 5681] <... openat resumed>) = -1 EIO (Input/output error) [pid 5680] <... chdir resumed>) = 0 [pid 5015] getdents64(3, [pid 5682] <... ioctl resumed>) = 0 [pid 5680] ioctl(4, LOOP_CLR_FD [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5682] close(4 [pid 5680] <... ioctl resumed>) = 0 [pid 5015] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5683] <... mount resumed>) = 0 [pid 5682] <... close resumed>) = 0 [pid 5680] close(4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5683] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5682] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5680] <... close resumed>) = 0 [pid 5015] newfstatat(AT_FDCWD, "./55/binderfs", [pid 5685] <... ioctl resumed>) = 0 [pid 5683] <... openat resumed>) = 3 [pid 5681] exit_group(0 [pid 5680] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5683] chdir("./file1" [pid 5681] <... exit_group resumed>) = ? [pid 5683] <... chdir resumed>) = 0 [pid 5681] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5681, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5683] ioctl(4, LOOP_CLR_FD [pid 5015] unlink("./55/binderfs" [pid 5683] <... ioctl resumed>) = 0 [pid 5683] close(4) = 0 [pid 5683] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5685] close(3) = 0 [pid 5685] mkdir("./file1", 0777) = 0 [pid 5685] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 119.096878][ T5681] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 119.099293][ T5685] loop0: detected capacity change from 0 to 4096 [ 119.118261][ T5689] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.121403][ T5682] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5014] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] unlink("./54/binderfs") = 0 [pid 5014] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... unlink resumed>) = 0 [ 119.149753][ T5680] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 119.165918][ T5683] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 119.180115][ T5685] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.185168][ T5682] Remounting filesystem read-only [ 119.196004][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 119.202734][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 119.210261][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 119.211430][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 119.218510][ T5683] Remounting filesystem read-only [ 119.225296][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 119.229665][ T5680] Remounting filesystem read-only [ 119.237204][ T5685] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 119.249237][ T5682] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 119.254394][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 119.262093][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 119.268898][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 119.281988][ T5680] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 119.296576][ T5683] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5015] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5685] <... mount resumed>) = 0 [pid 5685] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5685] chdir("./file1") = 0 [pid 5685] ioctl(4, LOOP_CLR_FD) = 0 [pid 5685] close(4) = 0 [ 119.302345][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 119.311975][ T5682] NILFS (loop4): repaired inode bitmap for reserved inodes [ 119.315209][ T5683] NILFS (loop1): repaired inode bitmap for reserved inodes [ 119.327662][ T5690] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.333536][ T5680] NILFS (loop5): repaired inode bitmap for reserved inodes [pid 5685] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5015] <... umount2 resumed>) = 0 [pid 5015] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./55/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./55") = 0 [pid 5015] mkdir("./56", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [ 119.343625][ T5685] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 119.345742][ T5682] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 119.376398][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 119.384106][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 119.391874][ T5680] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5691 ./strace-static-x86_64: Process 5691 attached [pid 5691] set_robust_list(0x555556b87660, 24 [pid 5680] <... openat resumed>) = -1 EIO (Input/output error) [pid 5682] <... openat resumed>) = -1 EIO (Input/output error) [pid 5682] exit_group(0 [pid 5680] exit_group(0 [pid 5682] <... exit_group resumed>) = ? [pid 5680] <... exit_group resumed>) = ? [pid 5691] <... set_robust_list resumed>) = 0 [pid 5680] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5680, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5691] chdir("./56" [pid 5017] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5682] +++ exited with 0 +++ [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5682, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5017] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5016] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5691] <... chdir resumed>) = 0 [pid 5017] newfstatat(AT_FDCWD, "./53/binderfs", [pid 5014] <... umount2 resumed>) = 0 [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5014] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5691] <... prctl resumed>) = 0 [pid 5017] unlink("./53/binderfs" [pid 5016] newfstatat(3, "", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5691] setpgid(0, 0 [pid 5017] <... unlink resumed>) = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5014] newfstatat(AT_FDCWD, "./54/file1", [pid 5691] <... setpgid resumed>) = 0 [ 119.411305][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 119.420652][ T5685] Remounting filesystem read-only [ 119.439831][ T5683] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5017] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] getdents64(3, [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5691] write(3, "1000", 4) = 4 [pid 5691] close(3) = 0 [pid 5691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5691] memfd_create("syzkaller", 0) = 3 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5683] <... openat resumed>) = -1 EIO (Input/output error) [pid 5683] exit_group(0 [pid 5016] unlink("./57/binderfs" [pid 5014] newfstatat(4, "", [pid 5683] <... exit_group resumed>) = ? [pid 5691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5683] +++ exited with 0 +++ [pid 5016] <... unlink resumed>) = 0 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 119.464045][ T5685] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 119.473325][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 119.481812][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 119.490685][ T5685] NILFS (loop0): repaired inode bitmap for reserved inodes [ 119.498119][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5016] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(4, [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5683, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5014] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5691] <... write resumed>) = 2097152 [pid 5691] munmap(0x7f770c286000, 2097152 [pid 5014] close(4 [pid 5013] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5691] <... munmap resumed>) = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5691] ioctl(4, LOOP_SET_FD, 3 [pid 5685] <... openat resumed>) = -1 EIO (Input/output error) [pid 5685] exit_group(0) = ? [pid 5691] <... ioctl resumed>) = 0 [pid 5691] close(3) = 0 [pid 5691] mkdir("./file1", 0777 [pid 5685] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5685, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [ 119.505798][ T5685] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 119.520832][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 119.528737][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 119.536916][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 119.540353][ T5691] loop3: detected capacity change from 0 to 4096 [ 119.543703][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 119.543746][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5012] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./52/binderfs") = 0 [pid 5012] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5691] <... mkdir resumed>) = 0 [pid 5691] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] rmdir("./54/file1" [pid 5013] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... rmdir resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5014] getdents64(3, [pid 5013] newfstatat(3, "", [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 119.543761][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 119.571529][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 119.572040][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 119.581354][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 119.587467][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 119.592967][ T5691] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5014] <... close resumed>) = 0 [pid 5013] getdents64(3, [pid 5014] rmdir("./54") = 0 [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] mkdir("./55", 0777 [pid 5013] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] newfstatat(AT_FDCWD, "./54/binderfs", [pid 5014] <... openat resumed>) = 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] unlink("./54/binderfs" [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... unlink resumed>) = 0 [pid 5014] close(3 [pid 5013] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5692 ./strace-static-x86_64: Process 5692 attached [ 119.612695][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 119.625400][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 119.634875][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 119.652642][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5692] set_robust_list(0x555556b87660, 24) = 0 [pid 5692] chdir("./55") = 0 [pid 5692] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5692] setpgid(0, 0) = 0 [pid 5692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5692] write(3, "1000", 4) = 4 [pid 5692] close(3) = 0 [pid 5692] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5692] memfd_create("syzkaller", 0) = 3 [pid 5692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5016] <... umount2 resumed>) = 0 [pid 5016] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./57/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5017] <... umount2 resumed>) = 0 [pid 5017] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] newfstatat(AT_FDCWD, "./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./53/file1") = 0 [ 119.661271][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 119.672714][ T5691] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 119.695841][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 119.706316][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5017] rmdir("./53") = 0 [pid 5016] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5016] newfstatat(4, "", [pid 5017] mkdir("./54", 0777 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, [pid 5017] <... mkdir resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5016] close(4 [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5016] <... close resumed>) = 0 [pid 5017] <... openat resumed>) = 3 [pid 5016] rmdir("./57/file1" [pid 5017] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] <... rmdir resumed>) = 0 [pid 5017] close(3 [pid 5016] getdents64(3, [pid 5017] <... close resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5694 ./strace-static-x86_64: Process 5694 attached [pid 5016] close(3) = 0 [pid 5694] set_robust_list(0x555556b87660, 24) = 0 [pid 5016] rmdir("./57") = 0 [pid 5694] chdir("./54" [pid 5016] mkdir("./58", 0777 [pid 5694] <... chdir resumed>) = 0 [pid 5694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5016] <... mkdir resumed>) = 0 [pid 5694] <... prctl resumed>) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5694] setpgid(0, 0 [pid 5016] <... openat resumed>) = 3 [pid 5694] <... setpgid resumed>) = 0 [ 119.713696][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 119.722154][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 119.745596][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5691] <... mount resumed>) = 0 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5694] <... openat resumed>) = 3 [pid 5691] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] close(3 [pid 5694] write(3, "1000", 4 [pid 5691] <... openat resumed>) = 3 [pid 5016] <... close resumed>) = 0 [pid 5694] <... write resumed>) = 4 [pid 5691] chdir("./file1" [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5694] close(3 [pid 5691] <... chdir resumed>) = 0 [pid 5694] <... close resumed>) = 0 [pid 5692] <... write resumed>) = 2097152 [pid 5691] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5695 attached [pid 5694] symlink("/dev/binderfs", "./binderfs" [pid 5692] munmap(0x7f770c286000, 2097152 [pid 5691] <... ioctl resumed>) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5695 [pid 5695] set_robust_list(0x555556b87660, 24 [pid 5694] <... symlink resumed>) = 0 [pid 5691] close(4 [pid 5692] <... munmap resumed>) = 0 [pid 5691] <... close resumed>) = 0 [pid 5691] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5694] memfd_create("syzkaller", 0) = 3 [pid 5695] <... set_robust_list resumed>) = 0 [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5692] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5695] chdir("./58" [pid 5694] <... mmap resumed>) = 0x7f770c286000 [pid 5695] <... chdir resumed>) = 0 [pid 5692] <... openat resumed>) = 4 [pid 5695] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5692] ioctl(4, LOOP_SET_FD, 3 [pid 5695] <... prctl resumed>) = 0 [ 119.761395][ T5693] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.777195][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 119.789759][ T5691] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5695] setpgid(0, 0) = 0 [pid 5695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5695] write(3, "1000", 4 [pid 5692] <... ioctl resumed>) = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5695] <... write resumed>) = 4 [pid 5695] close(3 [pid 5692] close(3 [pid 5695] <... close resumed>) = 0 [pid 5692] <... close resumed>) = 0 [pid 5695] symlink("/dev/binderfs", "./binderfs" [pid 5692] mkdir("./file1", 0777 [pid 5012] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5695] <... symlink resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5692] <... mkdir resumed>) = 0 [pid 5012] newfstatat(AT_FDCWD, "./52/file1", [pid 5695] memfd_create("syzkaller", 0 [pid 5692] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5695] <... memfd_create resumed>) = 3 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5695] <... mmap resumed>) = 0x7f770c286000 [pid 5012] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [ 119.815961][ T5692] loop2: detected capacity change from 0 to 4096 [ 119.834048][ T5691] Remounting filesystem read-only [pid 5012] rmdir("./52/file1") = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./52") = 0 [pid 5012] mkdir("./53", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5696 ./strace-static-x86_64: Process 5696 attached [pid 5696] set_robust_list(0x555556b87660, 24) = 0 [pid 5696] chdir("./53") = 0 [pid 5696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5696] setpgid(0, 0) = 0 [pid 5013] <... umount2 resumed>) = 0 [pid 5696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5696] write(3, "1000", 4) = 4 [pid 5696] close(3) = 0 [pid 5696] symlink("/dev/binderfs", "./binderfs") = 0 [ 119.865596][ T5692] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.886672][ T5691] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [ 119.900909][ T5691] NILFS (loop3): repaired inode bitmap for reserved inodes [pid 5696] memfd_create("syzkaller", 0) = 3 [pid 5696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5013] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5694] <... write resumed>) = 2097152 [ 119.910534][ T5692] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5694] munmap(0x7f770c286000, 2097152 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5694] <... munmap resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5694] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] <... openat resumed>) = 4 [pid 5694] <... openat resumed>) = 4 [pid 5013] newfstatat(4, "", [pid 5694] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, [pid 5695] <... write resumed>) = 2097152 [pid 5694] <... ioctl resumed>) = 0 [pid 5692] <... mount resumed>) = 0 [pid 5691] <... openat resumed>) = -1 EIO (Input/output error) [pid 5695] munmap(0x7f770c286000, 2097152 [pid 5694] close(3 [pid 5692] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5695] <... munmap resumed>) = 0 [pid 5694] <... close resumed>) = 0 [pid 5692] <... openat resumed>) = 3 [pid 5691] exit_group(0 [pid 5013] getdents64(4, [pid 5696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5695] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5694] mkdir("./file1", 0777 [pid 5692] chdir("./file1" [pid 5691] <... exit_group resumed>) = ? [pid 5013] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5695] <... openat resumed>) = 4 [pid 5694] <... mkdir resumed>) = 0 [pid 5692] <... chdir resumed>) = 0 [pid 5692] ioctl(4, LOOP_CLR_FD [pid 5691] +++ exited with 0 +++ [pid 5695] ioctl(4, LOOP_SET_FD, 3 [ 119.944973][ T5691] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 119.971900][ T5694] loop5: detected capacity change from 0 to 4096 [ 119.979122][ T5697] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5694] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] close(4 [pid 5692] <... ioctl resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5691, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5695] <... ioctl resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] <... close resumed>) = 0 [pid 5692] close(4 [pid 5015] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] unlink("./56/binderfs") = 0 [pid 5015] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5695] close(3 [pid 5692] <... close resumed>) = 0 [pid 5013] rmdir("./54/file1" [pid 5695] <... close resumed>) = 0 [pid 5694] <... mount resumed>) = 0 [ 120.006843][ T5695] loop4: detected capacity change from 0 to 4096 [ 120.014475][ T5694] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.025670][ T5694] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 120.035981][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [pid 5692] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5695] mkdir("./file1", 0777 [pid 5694] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5013] <... rmdir resumed>) = 0 [pid 5696] <... write resumed>) = 2097152 [pid 5696] munmap(0x7f770c286000, 2097152) = 0 [pid 5696] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5696] ioctl(4, LOOP_SET_FD, 3 [pid 5695] <... mkdir resumed>) = 0 [pid 5694] <... openat resumed>) = 3 [pid 5013] getdents64(3, [pid 5695] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5694] chdir("./file1" [pid 5013] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5696] <... ioctl resumed>) = 0 [pid 5696] close(3) = 0 [pid 5696] mkdir("./file1", 0777) = 0 [ 120.047106][ T5698] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.049054][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 120.060465][ T5692] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 120.075760][ T5696] loop0: detected capacity change from 0 to 4096 [ 120.082597][ T5692] Remounting filesystem read-only [ 120.088774][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5696] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5694] <... chdir resumed>) = 0 [pid 5013] close(3 [pid 5694] ioctl(4, LOOP_CLR_FD) = 0 [pid 5694] close(4) = 0 [pid 5694] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] <... close resumed>) = 0 [ 120.093915][ T5692] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 120.105070][ T5015] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 120.116598][ T5695] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.120296][ T5694] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 120.141728][ T5695] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5013] rmdir("./54") = 0 [pid 5013] mkdir("./55", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5695] <... mount resumed>) = 0 [pid 5695] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5695] chdir("./file1") = 0 [pid 5695] ioctl(4, LOOP_CLR_FD) = 0 [pid 5695] close(4) = 0 [pid 5692] <... openat resumed>) = -1 EIO (Input/output error) [ 120.146421][ T5015] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 120.153281][ T5692] NILFS (loop2): repaired inode bitmap for reserved inodes [ 120.160272][ T5696] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.170582][ T5692] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 120.193029][ T5699] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5695] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5692] exit_group(0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5692] <... exit_group resumed>) = ? [pid 5013] close(3 [pid 5692] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5692, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5700 attached , child_tidptr=0x555556b87650) = 5700 [pid 5700] set_robust_list(0x555556b87660, 24) = 0 [pid 5700] chdir("./55" [pid 5014] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5700] <... chdir resumed>) = 0 [pid 5700] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5700] <... prctl resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5700] setpgid(0, 0 [pid 5014] <... openat resumed>) = 3 [pid 5700] <... setpgid resumed>) = 0 [pid 5014] newfstatat(3, "", [pid 5700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5700] <... openat resumed>) = 3 [pid 5014] getdents64(3, [pid 5700] write(3, "1000", 4 [pid 5014] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5700] <... write resumed>) = 4 [pid 5700] close(3 [pid 5014] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5700] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5700] symlink("/dev/binderfs", "./binderfs" [pid 5014] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5700] <... symlink resumed>) = 0 [pid 5014] unlink("./55/binderfs" [pid 5700] memfd_create("syzkaller", 0) = 3 [pid 5014] <... unlink resumed>) = 0 [pid 5700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... umount2 resumed>) = 0 [pid 5014] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5700] <... mmap resumed>) = 0x7f770c286000 [pid 5015] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 120.204299][ T5015] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 120.206668][ T5695] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 120.230239][ T5694] Remounting filesystem read-only [ 120.242161][ T5696] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [pid 5015] newfstatat(AT_FDCWD, "./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5015] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [ 120.266300][ T5014] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 120.267226][ T5694] NILFS (loop5): inode bitmap is inconsistent for reserved inodes [ 120.273193][ T5014] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 120.292698][ T5695] Remounting filesystem read-only [pid 5015] close(4) = 0 [pid 5015] rmdir("./56/file1") = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./56") = 0 [pid 5015] mkdir("./57", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5701 [pid 5700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5701 attached [pid 5701] set_robust_list(0x555556b87660, 24) = 0 [pid 5701] chdir("./57") = 0 [pid 5701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5701] setpgid(0, 0) = 0 [pid 5701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5701] write(3, "1000", 4) = 4 [pid 5701] close(3) = 0 [pid 5701] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5701] memfd_create("syzkaller", 0) = 3 [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 120.310302][ T5694] NILFS (loop5): repaired inode bitmap for reserved inodes [ 120.328548][ T5695] NILFS (loop4): inode bitmap is inconsistent for reserved inodes [ 120.336696][ T5702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.344613][ T5694] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5696] <... mount resumed>) = 0 [pid 5696] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5696] chdir("./file1") = 0 [pid 5696] ioctl(4, LOOP_CLR_FD) = 0 [pid 5696] close(4) = 0 [pid 5696] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5700] <... write resumed>) = 2097152 [ 120.363652][ T5695] NILFS (loop4): repaired inode bitmap for reserved inodes [ 120.372606][ T5014] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 120.385798][ T5696] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 120.390549][ T5695] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5700] munmap(0x7f770c286000, 2097152 [pid 5694] <... openat resumed>) = -1 EIO (Input/output error) [pid 5700] <... munmap resumed>) = 0 [pid 5700] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5700] ioctl(4, LOOP_SET_FD, 3 [pid 5694] exit_group(0 [pid 5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5694] <... exit_group resumed>) = ? [pid 5694] +++ exited with 0 +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5694, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5017] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5017] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5017] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5700] <... ioctl resumed>) = 0 [pid 5700] close(3) = 0 [pid 5700] mkdir("./file1", 0777 [pid 5017] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5701] <... write resumed>) = 2097152 [pid 5695] <... openat resumed>) = -1 EIO (Input/output error) [pid 5017] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5700] <... mkdir resumed>) = 0 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 120.417221][ T5014] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 120.426227][ T5014] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 120.432771][ T5700] loop1: detected capacity change from 0 to 4096 [ 120.433933][ T5014] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 120.450660][ T5696] Remounting filesystem read-only [pid 5700] mount("/dev/loop1", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5695] exit_group(0 [pid 5017] newfstatat(AT_FDCWD, "./54/binderfs", [pid 5695] <... exit_group resumed>) = ? [pid 5017] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5695] +++ exited with 0 +++ [pid 5017] unlink("./54/binderfs" [pid 5016] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5695, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5016] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5016] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(3, [pid 5017] <... unlink resumed>) = 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5017] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] unlink("./58/binderfs") = 0 [ 120.478012][ T5696] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 120.487477][ T5700] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.503117][ T5017] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 120.503189][ T5016] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 120.515576][ T5017] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [pid 5016] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5701] munmap(0x7f770c286000, 2097152) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5701] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... umount2 resumed>) = 0 [pid 5701] <... ioctl resumed>) = 0 [pid 5701] close(3) = 0 [pid 5701] mkdir("./file1", 0777) = 0 [ 120.517430][ T5696] NILFS (loop0): repaired inode bitmap for reserved inodes [ 120.523991][ T5017] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 120.524012][ T5017] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 120.524032][ T5017] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 120.540261][ T5701] loop3: detected capacity change from 0 to 4096 [ 120.549611][ T5016] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [pid 5701] mount("/dev/loop3", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5014] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5696] <... openat resumed>) = -1 EIO (Input/output error) [pid 5696] exit_group(0) = ? [pid 5696] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5696, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 120.560556][ T5696] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 120.569797][ T5016] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 120.588499][ T5017] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 120.598042][ T5700] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 120.607633][ T5016] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 120.607675][ T5016] NILFS (loop4): discard dirty page: offset=8192, ino=6 [pid 5014] newfstatat(AT_FDCWD, "./55/file1", [pid 5012] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] unlink("./53/binderfs") = 0 [pid 5012] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] <... umount2 resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 5014] newfstatat(4, "", [pid 5016] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 120.607691][ T5016] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 120.629505][ T5701] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.644307][ T5012] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 120.651865][ T5012] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 120.660683][ T5012] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 120.668782][ T5012] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5014] close(4 [pid 5016] newfstatat(AT_FDCWD, "./58/file1", [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./55/file1") = 0 [pid 5014] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./55") = 0 [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] mkdir("./56", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5016] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... openat resumed>) = 3 [pid 5016] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5016] <... openat resumed>) = 4 [pid 5014] close(3) = 0 [pid 5016] newfstatat(4, "", [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] getdents64(4, [pid 5014] <... clone resumed>, child_tidptr=0x555556b87650) = 5705 [pid 5016] <... getdents64 resumed>0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5016] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [ 120.676748][ T5701] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 120.694955][ T5012] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 120.711726][ T5012] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [pid 5016] close(4 [pid 5017] <... umount2 resumed>) = 0 [pid 5016] <... close resumed>) = 0 [pid 5016] rmdir("./58/file1") = 0 [pid 5701] <... mount resumed>) = 0 [pid 5016] getdents64(3, [pid 5701] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5701] chdir("./file1") = 0 [pid 5701] ioctl(4, LOOP_CLR_FD) = 0 [pid 5701] close(4) = 0 [pid 5701] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 5705 attached [pid 5705] set_robust_list(0x555556b87660, 24) = 0 [pid 5705] chdir("./56") = 0 [pid 5705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5705] setpgid(0, 0 [pid 5016] <... getdents64 resumed>0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5700] <... mount resumed>) = 0 [pid 5016] close(3 [pid 5705] <... setpgid resumed>) = 0 [pid 5700] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5016] <... close resumed>) = 0 [pid 5705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5700] <... openat resumed>) = 3 [pid 5705] <... openat resumed>) = 3 [pid 5700] chdir("./file1" [pid 5016] rmdir("./58" [pid 5705] write(3, "1000", 4 [pid 5700] <... chdir resumed>) = 0 [pid 5705] <... write resumed>) = 4 [pid 5700] ioctl(4, LOOP_CLR_FD [pid 5705] close(3 [pid 5700] <... ioctl resumed>) = 0 [pid 5705] <... close resumed>) = 0 [pid 5700] close(4 [pid 5705] symlink("/dev/binderfs", "./binderfs" [pid 5700] <... close resumed>) = 0 [pid 5705] <... symlink resumed>) = 0 [pid 5700] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5016] <... rmdir resumed>) = 0 [pid 5016] mkdir("./59", 0777 [pid 5705] memfd_create("syzkaller", 0 [pid 5016] <... mkdir resumed>) = 0 [ 120.726035][ T5703] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.738892][ T5704] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.750024][ T5701] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5705] <... memfd_create resumed>) = 3 [pid 5017] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5016] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5017] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5016] <... openat resumed>) = 3 [pid 5017] newfstatat(AT_FDCWD, "./54/file1", [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5016] close(3) = 0 [pid 5017] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... openat resumed>) = 4 [pid 5017] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x555556b87650) = 5706 [pid 5017] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(4) = 0 [pid 5017] rmdir("./54/file1") = 0 [pid 5012] <... umount2 resumed>) = 0 [pid 5017] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5012] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] rmdir("./54" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] newfstatat(AT_FDCWD, "./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5012] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5017] <... rmdir resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5017] mkdir("./55", 0777 [pid 5012] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5017] <... mkdir resumed>) = 0 [pid 5012] newfstatat(4, "", [pid 5017] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5012] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5017] <... openat resumed>) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5012] getdents64(4, [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... getdents64 resumed>0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5017] close(3 [pid 5012] close(4) = 0 [pid 5017] <... close resumed>) = 0 [pid 5012] rmdir("./53/file1" [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... rmdir resumed>) = 0 [pid 5012] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./53") = 0 ./strace-static-x86_64: Process 5706 attached [pid 5017] <... clone resumed>, child_tidptr=0x555556b87650) = 5707 [ 120.775462][ T5700] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [pid 5012] mkdir("./54", 0777 [pid 5706] set_robust_list(0x555556b87660, 24 [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5708 [pid 5706] <... set_robust_list resumed>) = 0 [pid 5706] chdir("./59") = 0 [pid 5705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5708 attached [pid 5708] set_robust_list(0x555556b87660, 24 [pid 5706] setpgid(0, 0 [pid 5708] <... set_robust_list resumed>) = 0 [pid 5706] <... setpgid resumed>) = 0 [pid 5708] chdir("./54"./strace-static-x86_64: Process 5707 attached ) = 0 [pid 5706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5708] setpgid(0, 0) = 0 [pid 5708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5707] set_robust_list(0x555556b87660, 24 [pid 5706] <... openat resumed>) = 3 [pid 5708] write(3, "1000", 4) = 4 [pid 5708] close(3) = 0 [pid 5707] <... set_robust_list resumed>) = 0 [pid 5706] write(3, "1000", 4 [pid 5708] symlink("/dev/binderfs", "./binderfs" [pid 5707] chdir("./55" [pid 5706] <... write resumed>) = 4 [pid 5708] <... symlink resumed>) = 0 [pid 5707] <... chdir resumed>) = 0 [pid 5706] close(3 [pid 5708] memfd_create("syzkaller", 0) = 3 [pid 5707] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5707] <... prctl resumed>) = 0 [pid 5706] <... close resumed>) = 0 [ 120.828525][ T5701] Remounting filesystem read-only [ 120.836757][ T5700] Remounting filesystem read-only [ 120.860825][ T5701] NILFS (loop3): inode bitmap is inconsistent for reserved inodes [pid 5708] <... mmap resumed>) = 0x7f770c286000 [pid 5707] setpgid(0, 0 [pid 5706] symlink("/dev/binderfs", "./binderfs" [pid 5707] <... setpgid resumed>) = 0 [pid 5706] <... symlink resumed>) = 0 [pid 5707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5706] memfd_create("syzkaller", 0 [pid 5707] <... openat resumed>) = 3 [pid 5707] write(3, "1000", 4 [pid 5706] <... memfd_create resumed>) = 3 [pid 5706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5707] <... write resumed>) = 4 [ 120.871820][ T5700] NILFS (loop1): inode bitmap is inconsistent for reserved inodes [pid 5706] <... mmap resumed>) = 0x7f770c286000 [pid 5707] close(3) = 0 [pid 5707] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5707] memfd_create("syzkaller", 0) = 3 [pid 5707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [pid 5705] <... write resumed>) = 2097152 [pid 5705] munmap(0x7f770c286000, 2097152 [pid 5708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5705] <... munmap resumed>) = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5705] ioctl(4, LOOP_SET_FD, 3 [ 120.900451][ T5701] NILFS (loop3): repaired inode bitmap for reserved inodes [ 120.912967][ T5700] NILFS (loop1): repaired inode bitmap for reserved inodes [ 120.938395][ T5705] loop2: detected capacity change from 0 to 4096 [pid 5706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5706] <... write resumed>) = 2097152 [pid 5705] <... ioctl resumed>) = 0 [pid 5705] close(3) = 0 [pid 5705] mkdir("./file1", 0777) = 0 [pid 5705] mount("/dev/loop2", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5701] <... openat resumed>) = -1 EIO (Input/output error) [pid 5701] exit_group(0) = ? [pid 5708] <... write resumed>) = 2097152 [pid 5708] munmap(0x7f770c286000, 2097152 [pid 5701] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5701, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5015] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5015] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5706] munmap(0x7f770c286000, 2097152 [pid 5708] <... munmap resumed>) = 0 [pid 5707] <... write resumed>) = 2097152 [ 120.955599][ T5701] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 120.962322][ T5700] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 120.996167][ T5705] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [pid 5706] <... munmap resumed>) = 0 [pid 5700] <... openat resumed>) = -1 EIO (Input/output error) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5707] munmap(0x7f770c286000, 2097152 [pid 5706] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5707] <... munmap resumed>) = 0 [pid 5706] <... openat resumed>) = 4 [pid 5707] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5706] ioctl(4, LOOP_SET_FD, 3 [pid 5708] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5707] <... openat resumed>) = 4 [pid 5700] exit_group(0 [pid 5015] newfstatat(AT_FDCWD, "./57/binderfs", [pid 5708] <... openat resumed>) = 4 [pid 5707] ioctl(4, LOOP_SET_FD, 3 [pid 5700] <... exit_group resumed>) = ? [pid 5015] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5705] <... mount resumed>) = 0 [pid 5708] ioctl(4, LOOP_SET_FD, 3 [pid 5706] <... ioctl resumed>) = 0 [pid 5705] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5700] +++ exited with 0 +++ [pid 5015] unlink("./57/binderfs" [pid 5707] <... ioctl resumed>) = 0 [pid 5705] <... openat resumed>) = 3 [pid 5705] chdir("./file1") = 0 [pid 5705] ioctl(4, LOOP_CLR_FD) = 0 [pid 5705] close(4 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5700, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5708] <... ioctl resumed>) = 0 [pid 5707] close(3 [pid 5706] close(3 [pid 5705] <... close resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5708] close(3 [pid 5707] <... close resumed>) = 0 [pid 5706] <... close resumed>) = 0 [ 121.006681][ T5705] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 121.012550][ T5706] loop4: detected capacity change from 0 to 4096 [ 121.024863][ T5709] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.025275][ T5707] loop5: detected capacity change from 0 to 4096 [ 121.038364][ T5708] loop0: detected capacity change from 0 to 4096 [pid 5015] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5708] <... close resumed>) = 0 [pid 5707] mkdir("./file1", 0777 [pid 5706] mkdir("./file1", 0777 [pid 5705] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5013] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5708] mkdir("./file1", 0777 [pid 5707] <... mkdir resumed>) = 0 [pid 5706] <... mkdir resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5708] <... mkdir resumed>) = 0 [pid 5707] mount("/dev/loop5", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5706] mount("/dev/loop4", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 121.051462][ T5015] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 121.061935][ T5705] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 121.063926][ T5015] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 121.085966][ T5706] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 121.093271][ T5705] Remounting filesystem read-only [pid 5708] mount("/dev/loop0", "./file1", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "" [pid 5013] <... openat resumed>) = 3 [pid 5013] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 4 entries */, 32768) = 112 [pid 5013] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] unlink("./55/binderfs") = 0 [ 121.096384][ T5707] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 121.102109][ T5705] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 121.110529][ T5708] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 121.129057][ T12] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 121.136923][ T5013] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 121.136949][ T12] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 121.143712][ T5706] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 121.151838][ T5015] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 121.160616][ T5708] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 121.169732][ T5707] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 121.178307][ T5705] ------------[ cut here ]------------ [ 121.188090][ T5013] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 121.192596][ T5705] WARNING: CPU: 0 PID: 5705 at fs/buffer.c:1193 mark_buffer_dirty+0x2dd/0x500 [ 121.209014][ T5705] Modules linked in: [ 121.212935][ T5705] CPU: 0 PID: 5705 Comm: syz-executor112 Not tainted 6.5.0-rc3-syzkaller #0 [ 121.221685][ T5705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 121.231857][ T5705] RIP: 0010:mark_buffer_dirty+0x2dd/0x500 [ 121.232785][ T5013] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 121.237628][ T5705] Code: df e8 c7 19 e0 ff 48 8b 3b be 04 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 62 5e fc ff e8 4d 5d 87 ff e9 71 ff ff ff e8 43 5d 87 ff <0f> 0b e9 6d fd ff ff e8 37 5d 87 ff 0f 0b e9 96 fd ff ff e8 2b 5d [ 121.237647][ T5705] RSP: 0018:ffffc900053c75b0 EFLAGS: 00010293 [ 121.237667][ T5705] RAX: ffffffff8204a84d RBX: ffff888074d9c101 RCX: ffff8880163c0000 [ 121.237682][ T5705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.237694][ T5705] RBP: 0000000000000000 R08: ffffffff8204a5b4 R09: 1ffff1100f26dfd0 [ 121.237705][ T5705] R10: dffffc0000000000 R11: ffffed100f26dfd1 R12: ffff88807936fe80 [pid 5013] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5013] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] newfstatat(AT_FDCWD, "./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5013] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5013] getdents64(4, 0x555556b90730 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x555556b90730 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [ 121.237717][ T5705] R13: 1ffff92000a78ecd R14: 1ffff92000a78ece R15: ffffc900053c7668 [ 121.237731][ T5705] FS: 0000555556b87380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 121.254653][ T5013] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 121.264447][ T5705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.285575][ T5013] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 121.286541][ T5705] CR2: 0000000020006ac0 CR3: 0000000023b90000 CR4: 00000000003506f0 [ 121.295151][ T5013] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [pid 5013] rmdir("./55/file1") = 0 [pid 5013] getdents64(3, 0x555556b886f0 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./55") = 0 [pid 5013] mkdir("./56", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 121.302517][ T5705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.366475][ T5705] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.374495][ T5705] Call Trace: [ 121.377923][ T5705] [ 121.381208][ T5705] ? __warn+0x162/0x4a0 [ 121.385913][ T5705] ? mark_buffer_dirty+0x2dd/0x500 [ 121.391162][ T5705] ? report_bug+0x2b3/0x500 [ 121.395872][ T5705] ? mark_buffer_dirty+0x2dd/0x500 [ 121.401019][ T5705] ? handle_bug+0x3d/0x70 [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b87650) = 5713 ./strace-static-x86_64: Process 5713 attached [pid 5713] set_robust_list(0x555556b87660, 24) = 0 [pid 5713] chdir("./56") = 0 [pid 5713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5713] setpgid(0, 0) = 0 [pid 5713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5713] write(3, "1000", 4) = 4 [pid 5713] close(3) = 0 [pid 5713] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5713] memfd_create("syzkaller", 0) = 3 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f770c286000 [ 121.405367][ T5705] ? exc_invalid_op+0x1a/0x50 [ 121.410166][ T5705] ? asm_exc_invalid_op+0x1a/0x20 [ 121.415624][ T5705] ? mark_buffer_dirty+0x44/0x500 [ 121.420791][ T5705] ? mark_buffer_dirty+0x2dd/0x500 [ 121.426056][ T5705] ? mark_buffer_dirty+0x2dd/0x500 [ 121.432259][ T5705] nilfs_palloc_commit_alloc_entry+0x6e/0x160 [ 121.439124][ T5705] nilfs_ifile_create_inode+0x11a/0x2d0 [ 121.445317][ T5705] ? nilfs_sufile_read+0x4e0/0x4e0 [ 121.450589][ T5705] ? _raw_spin_unlock+0x28/0x40 [ 121.455724][ T5705] ? new_inode+0x1be/0x1d0 [ 121.460206][ T5705] nilfs_new_inode+0x8b4/0xa30 [ 121.465014][ T5705] ? __might_sleep+0xc0/0xc0 [ 121.470026][ T5705] ? nilfs_direct_IO+0x120/0x120 [ 121.475006][ T5705] ? rcu_read_lock_any_held+0xb7/0x160 [ 121.480569][ T5705] ? rcu_is_watching+0x15/0xb0 [ 121.485362][ T5705] ? trace_nilfs2_transaction_transition+0x9a/0x1f0 [ 121.492081][ T5705] ? nilfs_transaction_begin+0x4fc/0x6e0 [ 121.495572][ T5710] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5708] <... mount resumed>) = 0 [pid 5708] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5708] chdir("./file1") = 0 [pid 5708] ioctl(4, LOOP_CLR_FD) = 0 [pid 5708] close(4) = 0 [ 121.497968][ T5705] nilfs_create+0xfd/0x2c0 [ 121.513234][ T5705] ? nilfs_lookup+0x110/0x110 [ 121.518306][ T5705] ? d_splice_alias+0x113/0x330 [ 121.523600][ T5705] ? nilfs_lookup+0x110/0x110 [ 121.528429][ T5705] path_openat+0x13e7/0x3180 [ 121.533109][ T5705] ? do_filp_open+0x490/0x490 [ 121.538019][ T5705] do_filp_open+0x234/0x490 [ 121.542646][ T5705] ? vfs_tmpfile+0x4b0/0x4b0 [ 121.547354][ T5705] ? _raw_spin_unlock+0x28/0x40 [ 121.552241][ T5705] ? alloc_fd+0x59c/0x640 [ 121.556785][ T5705] do_sys_openat2+0x13e/0x1d0 [ 121.557844][ T5708] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 121.561672][ T5705] ? do_sys_open+0x230/0x230 [ 121.581220][ T5705] ? lockdep_hardirqs_on+0x98/0x140 [ 121.586719][ T5705] ? _raw_spin_unlock_irq+0x2e/0x50 [ 121.591978][ T5705] ? ptrace_notify+0x278/0x380 [ 121.596971][ T5705] __x64_sys_openat+0x247/0x290 [ 121.601881][ T5705] ? __ia32_sys_open+0x270/0x270 [pid 5708] openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5713] <... write resumed>) = 2097152 [pid 5713] munmap(0x7f770c286000, 2097152) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 121.606924][ T5705] ? syscall_enter_from_user_mode+0x32/0x230 [ 121.613035][ T5705] ? syscall_enter_from_user_mode+0x8c/0x230 [ 121.619244][ T5705] do_syscall_64+0x41/0xc0 [ 121.622753][ T5708] Remounting filesystem read-only [ 121.624103][ T5705] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.632731][ T5713] loop1: detected capacity change from 0 to 4096 [ 121.635736][ T5705] RIP: 0033:0x7f77146c51d9 [ 121.643063][ T5708] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [pid 5713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5713] close(3) = 0 [pid 5713] mkdir("./file1", 0777) = 0 [ 121.646106][ T5705] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 121.655605][ T5708] NILFS (loop0): repaired inode bitmap for reserved inodes [ 121.673618][ T5705] RSP: 002b:00007fff3f9f51d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.673647][ T5705] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f77146c51d9 [ 121.673659][ T5705] RDX: 000000000000275a RSI: 0000000020006ac0 RDI: 00000000ffffff9c [ 121.673671][ T5705] RBP: 0000000000000004 R08: 0000000000000f5f R09: 00000000022100d8 [ 121.673683][ T5705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3f9f5220 [ 121.691627][ T5711] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.698152][ T5705] R13: 00007fff3f9f5260 R14: 0000000000200000 R15: 0000000000000003 [ 121.707409][ T5708] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=67, name_len=0 [ 121.713688][ T5705] [ 121.713701][ T5705] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.713711][ T5705] CPU: 0 PID: 5705 Comm: syz-executor112 Not tainted 6.5.0-rc3-syzkaller #0 [ 121.713729][ T5705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 121.713739][ T5705] Call Trace: [ 121.713746][ T5705] [ 121.713751][ T5705] dump_stack_lvl+0x1e7/0x2d0 [ 121.713784][ T5705] ? nf_tcp_handle_invalid+0x650/0x650 [ 121.713802][ T5705] ? panic+0x770/0x770 [ 121.713830][ T5705] ? vscnprintf+0x5d/0x80 [ 121.713855][ T5705] panic+0x30f/0x770 [ 121.713875][ T5705] ? __warn+0x171/0x4a0 [ 121.713895][ T5705] ? __memcpy_flushcache+0x2b0/0x2b0 [ 121.713932][ T5705] __warn+0x314/0x4a0 [ 121.713950][ T5705] ? mark_buffer_dirty+0x2dd/0x500 [ 121.713970][ T5705] report_bug+0x2b3/0x500 [ 121.713987][ T5705] ? mark_buffer_dirty+0x2dd/0x500 [ 121.714008][ T5705] handle_bug+0x3d/0x70 [ 121.714023][ T5705] exc_invalid_op+0x1a/0x50 [ 121.714040][ T5705] asm_exc_invalid_op+0x1a/0x20 [ 121.714063][ T5705] RIP: 0010:mark_buffer_dirty+0x2dd/0x500 [ 121.714080][ T5705] Code: df e8 c7 19 e0 ff 48 8b 3b be 04 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 62 5e fc ff e8 4d 5d 87 ff e9 71 ff ff ff e8 43 5d 87 ff <0f> 0b e9 6d fd ff ff e8 37 5d 87 ff 0f 0b e9 96 fd ff ff e8 2b 5d [ 121.714093][ T5705] RSP: 0018:ffffc900053c75b0 EFLAGS: 00010293 [ 121.714110][ T5705] RAX: ffffffff8204a84d RBX: ffff888074d9c101 RCX: ffff8880163c0000 [ 121.714123][ T5705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.714133][ T5705] RBP: 0000000000000000 R08: ffffffff8204a5b4 R09: 1ffff1100f26dfd0 [ 121.714145][ T5705] R10: dffffc0000000000 R11: ffffed100f26dfd1 R12: ffff88807936fe80 [ 121.714157][ T5705] R13: 1ffff92000a78ecd R14: 1ffff92000a78ece R15: ffffc900053c7668 [ 121.714176][ T5705] ? mark_buffer_dirty+0x44/0x500 [ 121.714191][ T5705] ? mark_buffer_dirty+0x2dd/0x500 [ 121.714217][ T5705] nilfs_palloc_commit_alloc_entry+0x6e/0x160 [ 121.714244][ T5705] nilfs_ifile_create_inode+0x11a/0x2d0 [ 121.714268][ T5705] ? nilfs_sufile_read+0x4e0/0x4e0 [ 121.714292][ T5705] ? _raw_spin_unlock+0x28/0x40 [ 121.714313][ T5705] ? new_inode+0x1be/0x1d0 [ 121.714337][ T5705] nilfs_new_inode+0x8b4/0xa30 [ 121.714354][ T5705] ? __might_sleep+0xc0/0xc0 [ 121.714381][ T5705] ? nilfs_direct_IO+0x120/0x120 [ 121.714396][ T5705] ? rcu_read_lock_any_held+0xb7/0x160 [ 121.714421][ T5705] ? rcu_is_watching+0x15/0xb0 [ 121.714438][ T5705] ? trace_nilfs2_transaction_transition+0x9a/0x1f0 [ 121.714461][ T5705] ? nilfs_transaction_begin+0x4fc/0x6e0 [ 121.714483][ T5705] nilfs_create+0xfd/0x2c0 [ 121.714505][ T5705] ? nilfs_lookup+0x110/0x110 [ 121.714531][ T5705] ? d_splice_alias+0x113/0x330 [ 121.714546][ T5705] ? nilfs_lookup+0x110/0x110 [ 121.714565][ T5705] path_openat+0x13e7/0x3180 [ 121.714614][ T5705] ? do_filp_open+0x490/0x490 [ 121.714651][ T5705] do_filp_open+0x234/0x490 [ 121.714670][ T5705] ? vfs_tmpfile+0x4b0/0x4b0 [ 121.714710][ T5705] ? _raw_spin_unlock+0x28/0x40 [ 121.714728][ T5705] ? alloc_fd+0x59c/0x640 [ 121.714758][ T5705] do_sys_openat2+0x13e/0x1d0 [ 121.714786][ T5705] ? do_sys_open+0x230/0x230 [ 121.714808][ T5705] ? lockdep_hardirqs_on+0x98/0x140 [ 121.714828][ T5705] ? _raw_spin_unlock_irq+0x2e/0x50 [ 121.714846][ T5705] ? ptrace_notify+0x278/0x380 [ 121.714866][ T5705] __x64_sys_openat+0x247/0x290 [ 121.714888][ T5705] ? __ia32_sys_open+0x270/0x270 [ 121.714912][ T5705] ? syscall_enter_from_user_mode+0x32/0x230 [ 121.714935][ T5705] ? syscall_enter_from_user_mode+0x8c/0x230 [ 121.714957][ T5705] do_syscall_64+0x41/0xc0 [ 121.714975][ T5705] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.714996][ T5705] RIP: 0033:0x7f77146c51d9 [ 121.715012][ T5705] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 121.715025][ T5705] RSP: 002b:00007fff3f9f51d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.715042][ T5705] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f77146c51d9 [ 121.715053][ T5705] RDX: 000000000000275a RSI: 0000000020006ac0 RDI: 00000000ffffff9c [ 121.715065][ T5705] RBP: 0000000000000004 R08: 0000000000000f5f R09: 00000000022100d8 [ 121.715075][ T5705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3f9f5220 [ 121.715086][ T5705] R13: 00007fff3f9f5260 R14: 0000000000200000 R15: 0000000000000003 [ 121.715113][ T5705] [ 121.721814][ T5705] Kernel Offset: disabled [ 122.180299][ T5705] Rebooting in 86400 seconds..