./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1210858214 <...> forked to background, child pid 4662 [ 38.171920][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.189448][ T4663] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 38.712928][ T4744] sshd (4744) used greatest stack depth: 20160 bytes left OK syzkaller Warning: Permanently added '10.128.0.48' (ECDSA) to the list of known hosts. execve("./syz-executor1210858214", ["./syz-executor1210858214"], 0x7ffc10649530 /* 10 vars */) = 0 brk(NULL) = 0x555555a55000 brk(0x555555a55c40) = 0x555555a55c40 arch_prctl(ARCH_SET_FS, 0x555555a55300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1210858214", 4096) = 28 brk(0x555555a76c40) = 0x555555a76c40 brk(0x555555a77000) = 0x555555a77000 mprotect(0x7f45b454c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4998 attached , child_tidptr=0x555555a555d0) = 4998 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] getpid(./strace-static-x86_64: Process 4999 attached [pid 4997] <... clone resumed>, child_tidptr=0x555555a555d0) = 4999 [pid 4998] <... getpid resumed>) = 4998 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5000 [pid 4999] getpid(./strace-static-x86_64: Process 5000 attached [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getpid resumed>) = 4999 [pid 4997] <... clone resumed>, child_tidptr=0x555555a555d0) = 5001 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] mkdir("./syzkaller.gWF45a", 0700 [pid 5000] getpid( [pid 4997] <... clone resumed>, child_tidptr=0x555555a555d0) = 5002 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5003 [pid 4998] mkdir("./syzkaller.oF3wY5", 0700 [pid 4999] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5003 attached ./strace-static-x86_64: Process 5002 attached ./strace-static-x86_64: Process 5001 attached [pid 5000] <... getpid resumed>) = 5000 [pid 4999] chmod("./syzkaller.gWF45a", 0777 [pid 5003] getpid( [pid 5002] getpid( [pid 5001] getpid( [pid 5000] mkdir("./syzkaller.K0Ht6f", 0700 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] <... chmod resumed>) = 0 [pid 5002] <... getpid resumed>) = 5002 [pid 5002] mkdir("./syzkaller.Ri5asq", 0700) = 0 [pid 5002] chmod("./syzkaller.Ri5asq", 0777) = 0 [pid 4998] chmod("./syzkaller.oF3wY5", 0777 [pid 5002] chdir("./syzkaller.Ri5asq" [pid 5000] <... mkdir resumed>) = 0 [pid 5001] <... getpid resumed>) = 5001 [pid 4999] chdir("./syzkaller.gWF45a" [pid 4998] <... chmod resumed>) = 0 [pid 5002] <... chdir resumed>) = 0 [pid 5002] mkdir("./0", 0777 [pid 4999] <... chdir resumed>) = 0 [pid 5001] mkdir("./syzkaller.o88Ugn", 0700 [pid 4998] chdir("./syzkaller.oF3wY5" [pid 4999] mkdir("./0", 0777 [pid 4998] <... chdir resumed>) = 0 [pid 4998] mkdir("./0", 0777 [pid 5003] <... getpid resumed>) = 5003 [pid 5003] mkdir("./syzkaller.oXLxKv", 0700 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] chmod("./syzkaller.K0Ht6f", 0777 [pid 5001] chmod("./syzkaller.o88Ugn", 0777 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5000] <... chmod resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... chmod resumed>) = 0 [pid 5000] chdir("./syzkaller.K0Ht6f" [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... openat resumed>) = 3 [pid 5001] chdir("./syzkaller.o88Ugn" [pid 5000] <... chdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... mkdir resumed>) = 0 [pid 5000] mkdir("./0", 0777 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... openat resumed>) = 3 [pid 5003] chmod("./syzkaller.oXLxKv", 0777) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... mkdir resumed>) = 0 [pid 5001] <... chdir resumed>) = 0 [pid 4999] close(3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] chdir("./syzkaller.oXLxKv") = 0 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] mkdir("./0", 0777 [pid 5002] close(3) = 0 [pid 5001] mkdir("./0", 0777 [pid 5003] <... mkdir resumed>) = 0 [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5004 [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5005 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... close resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5006 [pid 5001] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5007 ./strace-static-x86_64: Process 5005 attached [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5001] close(3 [pid 5005] chdir("./0") = 0 [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] <... close resumed>) = 0 [pid 5005] setpgid(0, 0 [pid 5000] <... close resumed>) = 0 ./strace-static-x86_64: Process 5006 attached [pid 5005] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5007 attached [pid 5006] chdir("./0" [pid 5005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5008 attached ./strace-static-x86_64: Process 5004 attached [pid 5007] chdir("./0" [pid 5006] <... chdir resumed>) = 0 [pid 5005] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5009 attached [pid 5008] chdir("./0" [pid 5007] <... chdir resumed>) = 0 [pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] write(3, "1000", 4 [pid 5004] chdir("./0" [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5008 [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5009 [pid 5009] chdir("./0" [pid 5008] <... chdir resumed>) = 0 [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5006] <... prctl resumed>) = 0 [pid 5005] <... write resumed>) = 4 [pid 5004] <... chdir resumed>) = 0 [pid 5009] <... chdir resumed>) = 0 [pid 5008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5007] <... prctl resumed>) = 0 [pid 5006] setpgid(0, 0 [pid 5005] close(3 [pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5008] <... prctl resumed>) = 0 [pid 5007] setpgid(0, 0 [pid 5006] <... setpgid resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5004] <... prctl resumed>) = 0 [pid 5009] <... prctl resumed>) = 0 [pid 5008] setpgid(0, 0 [pid 5007] <... setpgid resumed>) = 0 [pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5005] symlink("/dev/binderfs", "./binderfs" [pid 5004] setpgid(0, 0 [pid 5009] setpgid(0, 0 [pid 5008] <... setpgid resumed>) = 0 [pid 5007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5006] <... openat resumed>) = 3 [pid 5004] <... setpgid resumed>) = 0 [pid 5009] <... setpgid resumed>) = 0 [pid 5008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] <... openat resumed>) = 3 [pid 5006] write(3, "1000", 4 [pid 5005] <... symlink resumed>) = 0 [pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5008] <... openat resumed>) = 3 [pid 5007] write(3, "1000", 4 [pid 5006] <... write resumed>) = 4 [pid 5005] memfd_create("syzkaller", 0 [pid 5004] <... openat resumed>) = 3 [pid 5009] <... openat resumed>) = 3 [pid 5008] write(3, "1000", 4 [pid 5007] <... write resumed>) = 4 [pid 5006] close(3 [pid 5004] write(3, "1000", 4 [pid 5008] <... write resumed>) = 4 [pid 5007] close(3 [pid 5004] <... write resumed>) = 4 [pid 5008] close(3 [pid 5007] <... close resumed>) = 0 [pid 5004] close(3 [pid 5008] <... close resumed>) = 0 [pid 5007] symlink("/dev/binderfs", "./binderfs" [pid 5004] <... close resumed>) = 0 [pid 5009] write(3, "1000", 4 [pid 5008] symlink("/dev/binderfs", "./binderfs" [pid 5007] <... symlink resumed>) = 0 [pid 5006] <... close resumed>) = 0 [pid 5004] symlink("/dev/binderfs", "./binderfs" [pid 5009] <... write resumed>) = 4 [pid 5008] <... symlink resumed>) = 0 [pid 5007] memfd_create("syzkaller", 0 [pid 5006] symlink("/dev/binderfs", "./binderfs" [pid 5004] <... symlink resumed>) = 0 [pid 5009] close(3 [pid 5008] memfd_create("syzkaller", 0 [pid 5007] <... memfd_create resumed>) = 3 [pid 5006] <... symlink resumed>) = 0 [pid 5004] memfd_create("syzkaller", 0 [pid 5009] <... close resumed>) = 0 [pid 5008] <... memfd_create resumed>) = 3 [pid 5007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5006] memfd_create("syzkaller", 0 [pid 5004] <... memfd_create resumed>) = 3 [pid 5005] <... memfd_create resumed>) = 3 [pid 5009] symlink("/dev/binderfs", "./binderfs" [pid 5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5007] <... mmap resumed>) = 0x7f45ac090000 [pid 5006] <... memfd_create resumed>) = 3 [pid 5004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5009] <... symlink resumed>) = 0 [pid 5008] <... mmap resumed>) = 0x7f45ac090000 [pid 5007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5004] <... mmap resumed>) = 0x7f45ac090000 [pid 5009] memfd_create("syzkaller", 0 [pid 5008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5006] <... mmap resumed>) = 0x7f45ac090000 [pid 5005] <... mmap resumed>) = 0x7f45ac090000 [pid 5009] <... memfd_create resumed>) = 3 syzkaller login: [ 65.606232][ T5005] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5005 'syz-executor121' [pid 5009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5008] <... write resumed>) = 1048576 [pid 5006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5009] <... mmap resumed>) = 0x7f45ac090000 [pid 5005] <... write resumed>) = 1048576 [pid 5004] <... write resumed>) = 1048576 [pid 5007] <... write resumed>) = 1048576 [pid 5009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5007] munmap(0x7f45ac090000, 1048576 [pid 5008] munmap(0x7f45ac090000, 1048576 [pid 5007] <... munmap resumed>) = 0 [pid 5004] munmap(0x7f45ac090000, 1048576) = 0 [pid 5008] <... munmap resumed>) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5008] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5007] <... openat resumed>) = 4 [pid 5004] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5008] <... openat resumed>) = 4 [pid 5007] ioctl(4, LOOP_SET_FD, 3 [pid 5004] <... openat resumed>) = 4 [pid 5009] <... write resumed>) = 1048576 [pid 5008] ioctl(4, LOOP_SET_FD, 3 [pid 5007] <... ioctl resumed>) = 0 [pid 5006] <... write resumed>) = 1048576 [pid 5009] munmap(0x7f45ac090000, 1048576 [pid 5008] <... ioctl resumed>) = 0 [pid 5005] munmap(0x7f45ac090000, 1048576 [pid 5004] ioctl(4, LOOP_SET_FD, 3 [pid 5006] munmap(0x7f45ac090000, 1048576 [pid 5009] <... munmap resumed>) = 0 [pid 5005] <... munmap resumed>) = 0 [pid 5004] <... ioctl resumed>) = 0 [pid 5009] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5006] <... munmap resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5004] close(3 [pid 5009] <... openat resumed>) = 4 [pid 5006] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5005] <... openat resumed>) = 4 [pid 5004] <... close resumed>) = 0 [pid 5009] ioctl(4, LOOP_SET_FD, 3 [pid 5006] <... openat resumed>) = 4 [pid 5005] ioctl(4, LOOP_SET_FD, 3 [pid 5004] mkdir("./file0", 0777) = 0 [pid 5004] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [ 65.714754][ T5007] loop1: detected capacity change from 0 to 2048 [ 65.725089][ T5008] loop3: detected capacity change from 0 to 2048 [ 65.736534][ T5004] loop0: detected capacity change from 0 to 2048 [ 65.750687][ T5009] loop2: detected capacity change from 0 to 2048 [ 65.757830][ T5005] loop4: detected capacity change from 0 to 2048 [pid 5006] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5009] <... ioctl resumed>) = 0 [pid 5006] close(3 [pid 5005] <... ioctl resumed>) = 0 [pid 5009] close(3 [pid 5006] <... close resumed>) = 0 [pid 5005] close(3 [pid 5009] <... close resumed>) = 0 [pid 5008] close(3 [pid 5007] close(3 [pid 5006] mkdir("./file0", 0777 [pid 5005] <... close resumed>) = 0 [pid 5009] mkdir("./file0", 0777 [pid 5008] <... close resumed>) = 0 [pid 5007] <... close resumed>) = 0 [pid 5005] mkdir("./file0", 0777 [pid 5009] <... mkdir resumed>) = 0 [pid 5008] mkdir("./file0", 0777 [pid 5007] mkdir("./file0", 0777 [pid 5006] <... mkdir resumed>) = 0 [pid 5005] <... mkdir resumed>) = 0 [pid 5009] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5008] <... mkdir resumed>) = 0 [pid 5007] <... mkdir resumed>) = 0 [pid 5006] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5005] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5008] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [ 65.764874][ T5006] loop5: detected capacity change from 0 to 2048 [pid 5007] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5009] <... mount resumed>) = 0 [ 65.830086][ T5017] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.835032][ T5019] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.841369][ T5015] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.861909][ T5018] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5009] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5008] <... mount resumed>) = 0 [pid 5007] <... mount resumed>) = 0 [pid 5006] <... mount resumed>) = 0 [pid 5005] <... mount resumed>) = 0 [pid 5004] <... mount resumed>) = 0 [pid 5009] <... openat resumed>) = 3 [pid 5006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5008] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5009] chdir("./file0" [pid 5008] <... openat resumed>) = 3 [pid 5007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5006] <... openat resumed>) = 3 [pid 5005] <... openat resumed>) = 3 [pid 5004] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5009] <... chdir resumed>) = 0 [pid 5008] chdir("./file0" [pid 5007] <... openat resumed>) = 3 [pid 5006] chdir("./file0" [pid 5005] chdir("./file0" [pid 5004] <... openat resumed>) = 3 [pid 5009] ioctl(4, LOOP_CLR_FD [pid 5008] <... chdir resumed>) = 0 [pid 5007] chdir("./file0" [pid 5006] <... chdir resumed>) = 0 [pid 5005] <... chdir resumed>) = 0 [pid 5004] chdir("./file0" [pid 5009] <... ioctl resumed>) = 0 [pid 5008] ioctl(4, LOOP_CLR_FD [pid 5007] <... chdir resumed>) = 0 [pid 5006] ioctl(4, LOOP_CLR_FD [pid 5005] ioctl(4, LOOP_CLR_FD [pid 5004] <... chdir resumed>) = 0 [pid 5009] close(4 [pid 5008] <... ioctl resumed>) = 0 [pid 5007] ioctl(4, LOOP_CLR_FD [pid 5006] <... ioctl resumed>) = 0 [pid 5005] <... ioctl resumed>) = 0 [pid 5004] ioctl(4, LOOP_CLR_FD [pid 5009] <... close resumed>) = 0 [pid 5008] close(4 [pid 5007] <... ioctl resumed>) = 0 [pid 5006] close(4 [pid 5005] close(4 [pid 5004] <... ioctl resumed>) = 0 [pid 5009] creat("./file2", 040 [pid 5008] <... close resumed>) = 0 [pid 5007] close(4 [pid 5006] <... close resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5004] close(4 [pid 5007] <... close resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5007] creat("./file2", 040 [ 65.865622][ T5016] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.883130][ T5014] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5004] creat("./file2", 040 [pid 5008] creat("./file2", 040 [pid 5006] creat("./file2", 040 [ 65.930824][ T5007] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 65.930824][ T5009] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 65.932020][ T5009] Remounting filesystem read-only [ 65.941526][ T5004] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 65.949455][ T5009] NILFS (loop2): error -5 truncating bmap (ino=16) [ 65.972111][ T5006] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5005] creat("./file2", 040 [pid 5009] <... creat resumed>) = 4 [ 65.972951][ T5007] Remounting filesystem read-only [ 65.988402][ T5008] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 65.999950][ T5005] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 66.009979][ T5006] Remounting filesystem read-only [ 66.011960][ T5008] Remounting filesystem read-only [ 66.015253][ T5004] Remounting filesystem read-only [ 66.027467][ T5009] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 66.028906][ T5005] Remounting filesystem read-only [ 66.037774][ T5006] NILFS (loop5): error -5 truncating bmap (ino=16) [ 66.044413][ T5008] NILFS (loop3): error -5 truncating bmap (ino=16) [ 66.054446][ T5004] NILFS (loop0): error -5 truncating bmap (ino=16) [ 66.057207][ T5007] NILFS (loop1): error -5 truncating bmap (ino=16) [ 66.062453][ T5009] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5009] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5006] <... creat resumed>) = 4 [pid 5004] <... creat resumed>) = 4 [pid 5004] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5006] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5008] <... creat resumed>) = 4 [pid 5008] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5007] <... creat resumed>) = 4 [ 66.070229][ T5005] NILFS (loop4): error -5 truncating bmap (ino=16) [ 66.086550][ T5004] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 66.087434][ T5008] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 66.096817][ T5006] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 66.107981][ T5007] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5007] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5005] <... creat resumed>) = 4 [pid 5005] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5004] <... write resumed>) = -1 EIO (Input/output error) [ 66.124600][ T5004] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 66.127413][ T5005] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 66.137245][ T5009] NILFS (loop2): error -5 truncating bmap (ino=16) [ 66.154952][ T5008] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 66.166219][ T5007] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 66.175625][ T5004] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5004] exit_group(0) = ? [pid 5004] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5009] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] fstat(3, [pid 5008] <... write resumed>) = -1 EIO (Input/output error) [pid 5008] exit_group(0) = ? [ 66.198196][ T5008] NILFS (loop3): error -5 truncating bmap (ino=16) [ 66.202487][ T5006] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 66.208426][ T5005] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 66.235656][ T5007] NILFS (loop1): error -5 truncating bmap (ino=16) [ 66.239788][ T5006] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 5009] exit_group(0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5009] <... exit_group resumed>) = ? [pid 5009] +++ exited with 0 +++ [pid 5008] +++ exited with 0 +++ [pid 5007] <... write resumed>) = -1 EIO (Input/output error) [pid 5006] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] getdents64(3, [pid 5006] exit_group(0 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5007] exit_group(0 [pid 5006] <... exit_group resumed>) = ? [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5008, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5007] <... exit_group resumed>) = ? [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5009, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./0/binderfs", [pid 5001] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] unlink("./0/binderfs" [pid 5001] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5006] +++ exited with 0 +++ [pid 5001] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 4998] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(3, [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5006, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./0/binderfs") = 0 [pid 5000] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... write resumed>) = -1 EIO (Input/output error) [pid 5005] exit_group(0) = ? [pid 5005] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5005, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5007] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5007, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] unlink("./0/binderfs" [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... unlink resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5002] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... restart_syscall resumed>) = 0 [pid 5001] getdents64(3, [pid 4999] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./0/binderfs") = 0 [pid 4999] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./0/binderfs") = 0 [pid 5003] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 66.249691][ T5005] NILFS (loop4): error -5 truncating bmap (ino=16) [ 66.279089][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 66.289265][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [pid 5001] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 66.291191][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 66.297720][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.304427][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 66.313011][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.320146][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 66.329634][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5001] unlink("./0/binderfs") = 0 [ 66.336966][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.343423][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 66.354803][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.361238][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 66.369076][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 66.376232][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.384359][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 66.392209][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.408786][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.408980][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.418787][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 66.433879][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [ 66.434485][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 66.443436][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 66.452158][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.461378][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.470378][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 66.486346][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5002] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./0/file0") = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./0") = 0 [pid 5002] mkdir("./1", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5020 ./strace-static-x86_64: Process 5020 attached [pid 5020] chdir("./1" [pid 5003] <... umount2 resumed>) = 0 [pid 5020] <... chdir resumed>) = 0 [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5020] setpgid(0, 0) = 0 [pid 5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1000", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5020] memfd_create("syzkaller", 0 [pid 4998] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5020] <... memfd_create resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./0/file0", [pid 5003] lstat("./0/file0", [pid 5020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 66.494519][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.504942][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 66.511595][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.522832][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.532356][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5003] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5003] close(4 [pid 5020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] rmdir("./0/file0" [pid 4998] close(4 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 4998] rmdir("./0/file0" [pid 5003] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] rmdir("./0") = 0 [pid 4998] getdents64(3, [pid 5003] mkdir("./1", 0777) = 0 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] close(3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4998] <... close resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] rmdir("./0" [pid 5003] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 4998] mkdir("./1", 0777 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... mkdir resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5021 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5022 ./strace-static-x86_64: Process 5021 attached [ 66.583681][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 66.593703][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 66.603286][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [pid 5021] chdir("./1"./strace-static-x86_64: Process 5022 attached ) = 0 [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5022] chdir("./1" [pid 5021] <... prctl resumed>) = 0 [pid 5022] <... chdir resumed>) = 0 [pid 5021] setpgid(0, 0 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5021] <... setpgid resumed>) = 0 [pid 5022] <... prctl resumed>) = 0 [pid 5021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5022] setpgid(0, 0 [pid 5021] <... openat resumed>) = 3 [pid 5022] <... setpgid resumed>) = 0 [pid 5021] write(3, "1000", 4 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5021] <... write resumed>) = 4 [pid 5022] <... openat resumed>) = 3 [pid 5021] close(3 [pid 5022] write(3, "1000", 4 [pid 5021] <... close resumed>) = 0 [pid 5022] <... write resumed>) = 4 [pid 5021] symlink("/dev/binderfs", "./binderfs" [pid 5022] close(3 [pid 5021] <... symlink resumed>) = 0 [pid 5022] <... close resumed>) = 0 [pid 5021] memfd_create("syzkaller", 0 [pid 5022] symlink("/dev/binderfs", "./binderfs" [pid 5021] <... memfd_create resumed>) = 3 [pid 5022] <... symlink resumed>) = 0 [pid 5021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5022] memfd_create("syzkaller", 0 [pid 5021] <... mmap resumed>) = 0x7f45ac090000 [pid 5022] <... memfd_create resumed>) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 5022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5020] <... write resumed>) = 1048576 [ 66.629714][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5000] <... umount2 resumed>) = 0 [pid 5020] munmap(0x7f45ac090000, 1048576 [pid 5021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5020] <... munmap resumed>) = 0 [pid 5020] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5020] ioctl(4, LOOP_SET_FD, 3 [pid 5000] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./0/file0", [pid 4999] lstat("./0/file0", [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5021] <... write resumed>) = 1048576 [pid 5000] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4999] fstat(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5021] munmap(0x7f45ac090000, 1048576 [pid 5020] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] getdents64(4, [pid 5022] <... write resumed>) = 1048576 [pid 5021] <... munmap resumed>) = 0 [pid 5020] close(3 [pid 5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5021] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5020] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(4, [pid 4999] getdents64(4, [pid 5021] <... openat resumed>) = 4 [pid 5020] mkdir("./file0", 0777 [pid 5001] lstat("./0/file0", [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5021] ioctl(4, LOOP_SET_FD, 3 [pid 5020] <... mkdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 66.696119][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 66.705592][ T5020] loop4: detected capacity change from 0 to 2048 [pid 5000] close(4 [pid 4999] close(4 [pid 5022] munmap(0x7f45ac090000, 1048576 [pid 5020] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5022] <... munmap resumed>) = 0 [pid 5022] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5022] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5022] ioctl(4, LOOP_SET_FD, 3 [pid 5001] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5021] <... ioctl resumed>) = 0 [pid 5000] rmdir("./0/file0" [pid 4999] rmdir("./0/file0" [pid 5021] close(3 [pid 5001] <... openat resumed>) = 4 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5021] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] getdents64(3, [pid 5021] mkdir("./file0", 0777 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] fstat(4, [pid 5021] <... mkdir resumed>) = 0 [pid 5000] close(3 [pid 4999] close(3 [pid 5021] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5001] getdents64(4, [pid 5000] rmdir("./0" [pid 4999] rmdir("./0" [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] mkdir("./1", 0777 [pid 4999] mkdir("./1", 0777 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 4999] close(3 [pid 5022] <... ioctl resumed>) = 0 [pid 5020] <... mount resumed>) = 0 [pid 5001] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5022] close(3 [pid 5020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5022] <... close resumed>) = 0 [pid 5020] <... openat resumed>) = 3 [pid 5001] close(4 [pid 5022] mkdir("./file0", 0777 [pid 5020] chdir("./file0" [pid 5001] <... close resumed>) = 0 [pid 5022] <... mkdir resumed>) = 0 [pid 5020] <... chdir resumed>) = 0 [ 66.749941][ T5021] loop5: detected capacity change from 0 to 2048 [ 66.767691][ T5022] loop0: detected capacity change from 0 to 2048 [ 66.777093][ T5023] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] rmdir("./0/file0" [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5025 [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5026 [pid 5022] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5020] ioctl(4, LOOP_CLR_FD [pid 5001] <... rmdir resumed>) = 0 [pid 5020] <... ioctl resumed>) = 0 [pid 5001] getdents64(3, [pid 5021] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5025 attached [pid 5020] close(4 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5026 attached [pid 5020] <... close resumed>) = 0 [pid 5001] close(3 [pid 5026] chdir("./1" [pid 5020] creat("./file2", 040 [pid 5001] <... close resumed>) = 0 [pid 5026] <... chdir resumed>) = 0 [pid 5025] chdir("./1" [pid 5022] <... mount resumed>) = 0 [pid 5021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] rmdir("./0" [pid 5026] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5022] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... rmdir resumed>) = 0 [pid 5026] <... prctl resumed>) = 0 [pid 5022] <... openat resumed>) = 3 [pid 5001] mkdir("./1", 0777 [pid 5026] setpgid(0, 0 [pid 5022] chdir("./file0" [pid 5001] <... mkdir resumed>) = 0 [pid 5026] <... setpgid resumed>) = 0 [pid 5022] <... chdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5025] <... chdir resumed>) = 0 [pid 5022] ioctl(4, LOOP_CLR_FD [pid 5021] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5026] <... openat resumed>) = 3 [pid 5025] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5022] <... ioctl resumed>) = 0 [pid 5021] chdir("./file0" [pid 5001] ioctl(3, LOOP_CLR_FD [ 66.803247][ T5024] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.820530][ T5020] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 66.822087][ T5027] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.847740][ T5020] Remounting filesystem read-only [pid 5026] write(3, "1000", 4 [pid 5025] <... prctl resumed>) = 0 [pid 5022] close(4 [pid 5021] <... chdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5026] <... write resumed>) = 4 [pid 5025] setpgid(0, 0 [pid 5022] <... close resumed>) = 0 [pid 5021] ioctl(4, LOOP_CLR_FD [pid 5001] close(3 [pid 5026] close(3 [pid 5025] <... setpgid resumed>) = 0 [pid 5022] creat("./file2", 040 [pid 5021] <... ioctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5026] <... close resumed>) = 0 [pid 5025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5026] symlink("/dev/binderfs", "./binderfs" [pid 5025] <... openat resumed>) = 3 [pid 5021] close(4 [pid 5026] <... symlink resumed>) = 0 [pid 5025] write(3, "1000", 4 [pid 5021] <... close resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5028 [pid 5026] memfd_create("syzkaller", 0 [pid 5025] <... write resumed>) = 4 [pid 5021] creat("./file2", 040 [pid 5026] <... memfd_create resumed>) = 3 [pid 5025] close(3 [pid 5026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5025] <... close resumed>) = 0 [pid 5026] <... mmap resumed>) = 0x7f45ac090000 [pid 5026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 66.852821][ T5020] NILFS (loop4): error -5 truncating bmap (ino=16) [ 66.866605][ T5022] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 66.887137][ T5021] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5025] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5028 attached [pid 5025] memfd_create("syzkaller", 0) = 3 [pid 5025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5028] chdir("./1" [pid 5025] <... mmap resumed>) = 0x7f45ac090000 [pid 5028] <... chdir resumed>) = 0 [pid 5028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5020] <... creat resumed>) = 4 [pid 5028] <... prctl resumed>) = 0 [pid 5026] <... write resumed>) = 1048576 [pid 5020] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5028] setpgid(0, 0 [pid 5025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5021] <... creat resumed>) = 4 [pid 5028] <... setpgid resumed>) = 0 [pid 5026] munmap(0x7f45ac090000, 1048576) = 0 [pid 5026] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5021] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [ 66.904571][ T5022] Remounting filesystem read-only [ 66.909632][ T5022] NILFS (loop0): error -5 truncating bmap (ino=16) [ 66.916780][ T5021] Remounting filesystem read-only [ 66.927017][ T5021] NILFS (loop5): error -5 truncating bmap (ino=16) [ 66.936606][ T5020] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5026] <... openat resumed>) = 4 [pid 5026] ioctl(4, LOOP_SET_FD, 3 [pid 5028] <... openat resumed>) = 3 [pid 5025] <... write resumed>) = 1048576 [pid 5022] <... creat resumed>) = 4 [ 66.955519][ T5021] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 66.959553][ T5026] loop1: detected capacity change from 0 to 2048 [ 66.972552][ T5021] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 66.982890][ T5021] NILFS (loop5): error -5 truncating bmap (ino=16) [ 66.987757][ T5022] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5022] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5028] write(3, "1000", 4 [pid 5025] munmap(0x7f45ac090000, 1048576 [pid 5021] <... write resumed>) = -1 EIO (Input/output error) [pid 5028] <... write resumed>) = 4 [pid 5028] close(3 [pid 5025] <... munmap resumed>) = 0 [pid 5021] exit_group(0 [pid 5028] <... close resumed>) = 0 [pid 5025] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5021] <... exit_group resumed>) = ? [pid 5028] symlink("/dev/binderfs", "./binderfs" [pid 5025] <... openat resumed>) = 4 [pid 5021] +++ exited with 0 +++ [pid 5028] <... symlink resumed>) = 0 [pid 5025] ioctl(4, LOOP_SET_FD, 3 [pid 5028] memfd_create("syzkaller", 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5021, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5026] <... ioctl resumed>) = 0 [pid 5003] fstat(3, [pid 5026] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5026] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5026] mkdir("./file0", 0777 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5028] <... memfd_create resumed>) = 3 [pid 5026] <... mkdir resumed>) = 0 [pid 5003] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5026] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5025] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./1/binderfs") = 0 [pid 5003] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 66.990430][ T5020] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.021258][ T5025] loop2: detected capacity change from 0 to 2048 [ 67.030121][ T5020] NILFS (loop4): error -5 truncating bmap (ino=16) [ 67.038713][ T5022] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.038761][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5028] <... mmap resumed>) = 0x7f45ac090000 [pid 5025] close(3 [pid 5020] <... write resumed>) = -1 EIO (Input/output error) [pid 5025] <... close resumed>) = 0 [pid 5020] exit_group(0 [pid 5025] mkdir("./file0", 0777 [pid 5020] <... exit_group resumed>) = ? [pid 5025] <... mkdir resumed>) = 0 [pid 5020] +++ exited with 0 +++ [pid 5025] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5022] <... write resumed>) = -1 EIO (Input/output error) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5020, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./1/binderfs") = 0 [pid 5002] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5022] exit_group(0) = ? [pid 5022] +++ exited with 0 +++ [pid 5026] <... mount resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5022, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5026] <... openat resumed>) = 3 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5026] chdir("./file0") = 0 [pid 5026] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5026] <... ioctl resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5026] close(4 [ 67.048341][ T5022] NILFS (loop0): error -5 truncating bmap (ino=16) [ 67.058096][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 67.072905][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.087734][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 4998] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5026] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5026] creat("./file2", 040 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./1/binderfs") = 0 [pid 5025] <... mount resumed>) = 0 [pid 4998] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5028] <... write resumed>) = 1048576 [ 67.100396][ T5030] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.105856][ T5026] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.127694][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 67.128275][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.136677][ T5029] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5025] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5028] munmap(0x7f45ac090000, 1048576 [pid 5025] <... openat resumed>) = 3 [pid 5028] <... munmap resumed>) = 0 [pid 5025] chdir("./file0" [pid 5028] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5025] <... chdir resumed>) = 0 [pid 5028] <... openat resumed>) = 4 [pid 5025] ioctl(4, LOOP_CLR_FD [pid 5028] ioctl(4, LOOP_SET_FD, 3 [pid 5025] <... ioctl resumed>) = 0 [pid 5028] <... ioctl resumed>) = 0 [pid 5025] close(4) = 0 [ 67.144593][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.155925][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 67.164600][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 67.171849][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 67.188472][ T5028] loop3: detected capacity change from 0 to 2048 [ 67.189307][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5025] creat("./file2", 040 [pid 5028] close(3) = 0 [ 67.205453][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.215033][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.221957][ T5026] Remounting filesystem read-only [ 67.225009][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.239917][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5028] mkdir("./file0", 0777) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5028] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5003] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5026] <... creat resumed>) = 4 [ 67.240244][ T5025] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.249144][ T5026] NILFS (loop1): error -5 truncating bmap (ino=16) [ 67.268232][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 67.273608][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.287083][ T5025] Remounting filesystem read-only [ 67.292142][ T5025] NILFS (loop2): error -5 truncating bmap (ino=16) [pid 5026] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5025] <... creat resumed>) = 4 [pid 5003] lstat("./1/file0", [pid 5028] <... mount resumed>) = 0 [pid 5028] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5028] chdir("./file0") = 0 [pid 5028] ioctl(4, LOOP_CLR_FD) = 0 [pid 5028] close(4) = 0 [pid 5028] creat("./file2", 040 [pid 5025] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = 0 [ 67.295161][ T5026] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 67.299771][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 67.317413][ T5031] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.326555][ T5028] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.338120][ T5025] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 67.345078][ T5026] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5003] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5025] <... write resumed>) = -1 EIO (Input/output error) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5025] exit_group(0 [pid 5003] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5026] <... write resumed>) = -1 EIO (Input/output error) [pid 5025] <... exit_group resumed>) = ? [pid 5003] <... openat resumed>) = 4 [pid 5002] lstat("./1/file0", [pid 5026] exit_group(0 [pid 5025] +++ exited with 0 +++ [pid 5003] fstat(4, [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5025, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5026] <... exit_group resumed>) = ? [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5026] +++ exited with 0 +++ [pid 5003] getdents64(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5026, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5002] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 5002] <... openat resumed>) = 4 [pid 5000] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] close(4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5000] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4999] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] rmdir("./1/file0" [pid 5002] getdents64(4, [pid 5000] fstat(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] getdents64(3, [pid 5002] close(4 [pid 5000] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 5003] close(3 [pid 5002] rmdir("./1/file0" [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] fstat(3, [pid 5003] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] rmdir("./1" [pid 5002] getdents64(3, [pid 5000] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] <... umount2 resumed>) = 0 [pid 5028] <... creat resumed>) = 4 [pid 5003] mkdir("./2", 0777 [pid 5002] close(3 [pid 5000] lstat("./1/binderfs", [pid 4999] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5028] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 67.350947][ T5025] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.366560][ T5025] NILFS (loop2): error -5 truncating bmap (ino=16) [ 67.373542][ T5026] NILFS (loop1): error -5 truncating bmap (ino=16) [ 67.383296][ T5028] Remounting filesystem read-only [ 67.391160][ T5028] NILFS (loop3): error -5 truncating bmap (ino=16) [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] rmdir("./1" [pid 5003] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] mkdir("./2", 0777 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... mkdir resumed>) = 0 [pid 5003] close(3 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] unlink("./1/binderfs" [pid 4999] lstat("./1/binderfs", [pid 4998] lstat("./1/file0", [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5032 [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5033 ./strace-static-x86_64: Process 5032 attached [pid 5032] chdir("./2") = 0 [pid 5032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5032] setpgid(0, 0) = 0 [pid 5032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5032] write(3, "1000", 4 [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5033 attached [pid 5032] <... write resumed>) = 4 [pid 5000] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./1/binderfs" [pid 4998] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] close(3) = 0 [pid 5032] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5032] memfd_create("syzkaller", 0) = 3 [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 67.423525][ T5028] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 67.444412][ T5028] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.466477][ T5028] NILFS (loop3): error -5 truncating bmap (ino=16) [pid 5033] chdir("./2" [pid 5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5028] <... write resumed>) = -1 EIO (Input/output error) [pid 4999] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5033] <... chdir resumed>) = 0 [pid 5028] exit_group(0 [pid 4998] <... openat resumed>) = 4 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5028] <... exit_group resumed>) = ? [pid 4998] fstat(4, [pid 5033] <... prctl resumed>) = 0 [pid 5028] +++ exited with 0 +++ [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5033] setpgid(0, 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5028, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] getdents64(4, [pid 5033] <... setpgid resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] getdents64(4, [pid 5033] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5033] write(3, "1000", 4 [pid 4998] close(4 [pid 5033] <... write resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5033] close(3 [pid 4998] rmdir("./1/file0" [pid 5033] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5033] symlink("/dev/binderfs", "./binderfs" [pid 5032] <... mmap resumed>) = 0x7f45ac090000 [pid 5001] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5033] <... symlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5033] memfd_create("syzkaller", 0 [pid 5001] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3 [pid 5033] <... memfd_create resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] fstat(3, [pid 4998] rmdir("./1" [pid 5033] <... mmap resumed>) = 0x7f45ac090000 [pid 5032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] getdents64(3, [pid 4998] mkdir("./2", 0777 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5001] lstat("./1/binderfs", [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 67.476344][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 67.483899][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 67.491992][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 67.500846][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 67.510678][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] <... write resumed>) = 1048576 [pid 5001] unlink("./1/binderfs" [pid 4998] close(3 [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5034 ./strace-static-x86_64: Process 5034 attached [pid 5034] chdir("./2") = 0 [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5034] setpgid(0, 0) = 0 [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5034] write(3, "1000", 4) = 4 [pid 5034] close(3) = 0 [pid 5034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5034] memfd_create("syzkaller", 0) = 3 [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5032] munmap(0x7f45ac090000, 1048576 [pid 5034] <... mmap resumed>) = 0x7f45ac090000 [pid 5032] <... munmap resumed>) = 0 [ 67.534415][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.544059][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 67.552966][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.553170][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.566587][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [pid 5032] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5032] ioctl(4, LOOP_SET_FD, 3 [pid 5033] <... write resumed>) = 1048576 [pid 5033] munmap(0x7f45ac090000, 1048576) = 0 [pid 5033] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5033] ioctl(4, LOOP_SET_FD, 3 [pid 5032] <... ioctl resumed>) = 0 [pid 5032] close(3) = 0 [pid 5032] mkdir("./file0", 0777 [pid 5034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5032] <... mkdir resumed>) = 0 [pid 5032] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5033] <... ioctl resumed>) = 0 [pid 5033] close(3) = 0 [pid 5033] mkdir("./file0", 0777) = 0 [pid 5033] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, [pid 5034] <... write resumed>) = 1048576 [pid 5034] munmap(0x7f45ac090000, 1048576 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5034] <... munmap resumed>) = 0 [ 67.580437][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 67.589670][ T5032] loop5: detected capacity change from 0 to 2048 [ 67.597978][ T5033] loop4: detected capacity change from 0 to 2048 [ 67.613753][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5000] close(4 [pid 5032] <... mount resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5032] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] rmdir("./1/file0" [pid 5034] <... openat resumed>) = 4 [pid 5032] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5033] <... mount resumed>) = 0 [ 67.654005][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.654794][ T5035] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.663863][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.677911][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.685569][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5033] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5033] chdir("./file0") = 0 [pid 5033] ioctl(4, LOOP_CLR_FD) = 0 [pid 5033] close(4) = 0 [pid 5033] creat("./file2", 040 [pid 5034] ioctl(4, LOOP_SET_FD, 3 [pid 5032] chdir("./file0" [pid 5000] getdents64(3, [pid 5034] <... ioctl resumed>) = 0 [pid 5032] <... chdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5034] close(3 [pid 5032] ioctl(4, LOOP_CLR_FD [pid 5000] close(3 [pid 5034] <... close resumed>) = 0 [pid 5032] <... ioctl resumed>) = 0 [pid 5034] mkdir("./file0", 0777 [pid 5032] close(4 [pid 5000] <... close resumed>) = 0 [pid 5034] <... mkdir resumed>) = 0 [pid 5000] rmdir("./1" [pid 5032] <... close resumed>) = 0 [pid 5032] creat("./file2", 040 [pid 5034] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5000] <... rmdir resumed>) = 0 [ 67.693098][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 67.709289][ T5033] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.710319][ T5033] Remounting filesystem read-only [ 67.724483][ T5034] loop0: detected capacity change from 0 to 2048 [ 67.725337][ T5036] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.745545][ T5033] NILFS (loop4): error -5 truncating bmap (ino=16) [pid 5000] mkdir("./2", 0777 [pid 5033] <... creat resumed>) = 4 [pid 5033] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5037 ./strace-static-x86_64: Process 5037 attached [ 67.753706][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 67.755584][ T5032] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.765642][ T5033] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5037] chdir("./2" [pid 5034] <... mount resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5037] <... chdir resumed>) = 0 [pid 5034] <... openat resumed>) = 3 [pid 5001] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] chdir("./file0" [pid 5037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5034] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5037] <... prctl resumed>) = 0 [pid 5034] ioctl(4, LOOP_CLR_FD [pid 5001] lstat("./1/file0", [pid 4999] <... umount2 resumed>) = 0 [pid 5034] <... ioctl resumed>) = 0 [pid 5034] close(4) = 0 [pid 4999] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] creat("./file2", 040 [pid 5037] setpgid(0, 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5037] <... setpgid resumed>) = 0 [pid 5001] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5037] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5037] write(3, "1000", 4 [pid 5001] <... openat resumed>) = 4 [pid 5037] <... write resumed>) = 4 [pid 5001] fstat(4, [pid 5037] close(3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5037] <... close resumed>) = 0 [pid 5001] getdents64(4, [pid 5037] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5037] <... symlink resumed>) = 0 [pid 5001] getdents64(4, [pid 5037] memfd_create("syzkaller", 0 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5037] <... memfd_create resumed>) = 3 [pid 5001] close(4 [pid 5037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... close resumed>) = 0 [pid 5037] <... mmap resumed>) = 0x7f45ac090000 [pid 5001] rmdir("./1/file0" [pid 5037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./1/file0", [pid 5001] close(3) = 0 [pid 5001] rmdir("./1" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] mkdir("./2", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 67.800002][ T5033] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.809296][ T5038] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.826583][ T5034] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5039 [pid 4999] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5039 attached [pid 5039] chdir("./2" [pid 4999] fstat(4, [pid 5039] <... chdir resumed>) = 0 [pid 5039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5039] setpgid(0, 0 [pid 5037] <... write resumed>) = 1048576 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5039] <... setpgid resumed>) = 0 [pid 5033] <... write resumed>) = -1 EIO (Input/output error) [pid 5039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] exit_group(0 [pid 5039] <... openat resumed>) = 3 [pid 5033] <... exit_group resumed>) = ? [pid 5039] write(3, "1000", 4 [pid 5033] +++ exited with 0 +++ [pid 4999] getdents64(4, [pid 5039] <... write resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5039] close(3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5033, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] getdents64(4, [pid 5039] <... close resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5039] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... restart_syscall resumed>) = 0 [pid 4999] close(4 [pid 5039] <... symlink resumed>) = 0 [pid 5039] memfd_create("syzkaller", 0) = 3 [pid 5039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] <... close resumed>) = 0 [pid 5032] <... creat resumed>) = 4 [pid 4999] rmdir("./1/file0" [pid 5032] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5002] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [ 67.852746][ T5032] Remounting filesystem read-only [ 67.859183][ T5034] Remounting filesystem read-only [ 67.863211][ T5033] NILFS (loop4): error -5 truncating bmap (ino=16) [ 67.871669][ T5032] NILFS (loop5): error -5 truncating bmap (ino=16) [ 67.879305][ T5034] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5002] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5037] munmap(0x7f45ac090000, 1048576) = 0 [pid 5037] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5002] <... openat resumed>) = 3 [pid 4999] getdents64(3, [pid 5034] <... creat resumed>) = 4 [pid 5002] fstat(3, [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5037] ioctl(4, LOOP_SET_FD, 3 [pid 5034] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 5002] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] rmdir("./1" [pid 5002] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] mkdir("./2", 0777 [pid 5002] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5002] unlink("./2/binderfs" [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... unlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5002] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5040 [ 67.904100][ T5032] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 67.920491][ T5034] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 67.920532][ T5037] loop2: detected capacity change from 0 to 2048 [pid 5039] <... write resumed>) = 1048576 [pid 5039] munmap(0x7f45ac090000, 1048576) = 0 [pid 5039] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5039] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5040 attached [pid 5040] chdir("./2") = 0 [pid 5040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5040] setpgid(0, 0) = 0 [pid 5037] <... ioctl resumed>) = 0 [pid 5037] close(3) = 0 [ 67.961530][ T5032] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 67.972163][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 67.977430][ T5039] loop3: detected capacity change from 0 to 2048 [ 67.984419][ T5034] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 68.000997][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [pid 5037] mkdir("./file0", 0777) = 0 [pid 5037] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5039] <... ioctl resumed>) = 0 [pid 5040] <... openat resumed>) = 3 [pid 5040] write(3, "1000", 4) = 4 [pid 5040] close(3 [pid 5039] close(3 [pid 5040] <... close resumed>) = 0 [pid 5040] symlink("/dev/binderfs", "./binderfs" [pid 5039] <... close resumed>) = 0 [pid 5040] <... symlink resumed>) = 0 [pid 5039] mkdir("./file0", 0777 [pid 5040] memfd_create("syzkaller", 0 [pid 5039] <... mkdir resumed>) = 0 [pid 5040] <... memfd_create resumed>) = 3 [pid 5040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [ 68.002726][ T5032] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 5039] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5034] <... write resumed>) = -1 EIO (Input/output error) [pid 5032] <... write resumed>) = -1 EIO (Input/output error) [pid 5034] exit_group(0 [pid 5032] exit_group(0 [pid 5037] <... mount resumed>) = 0 [pid 5034] <... exit_group resumed>) = ? [pid 5032] <... exit_group resumed>) = ? [pid 5037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5037] chdir("./file0") = 0 [ 68.039492][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.040285][ T5034] NILFS (loop0): error -5 truncating bmap (ino=16) [ 68.049465][ T5041] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.063978][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.075254][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5037] ioctl(4, LOOP_CLR_FD) = 0 [pid 5037] close(4) = 0 [pid 5037] creat("./file2", 040 [pid 5034] +++ exited with 0 +++ [pid 5032] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5032, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5003] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 4998] <... openat resumed>) = 3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(3, [pid 5003] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] getdents64(3, [pid 5003] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5003] lstat("./2/binderfs", [pid 4998] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./2/binderfs" [pid 4998] lstat("./2/binderfs", [pid 5040] <... write resumed>) = 1048576 [pid 5003] <... unlink resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] unlink("./2/binderfs") = 0 [pid 5002] <... umount2 resumed>) = 0 [ 68.084832][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 68.107880][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 68.108003][ T5037] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 68.120872][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [pid 4998] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./2/file0", [pid 5040] munmap(0x7f45ac090000, 1048576) = 0 [pid 5040] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5040] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5040] <... ioctl resumed>) = 0 [pid 5040] close(3) = 0 [pid 5040] mkdir("./file0", 0777) = 0 [ 68.132554][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.141721][ T5042] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.152809][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.157617][ T5040] loop1: detected capacity change from 0 to 2048 [ 68.162963][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.185278][ T5037] Remounting filesystem read-only [pid 5040] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5039] <... mount resumed>) = 0 [pid 5039] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5039] chdir("./file0") = 0 [pid 5039] ioctl(4, LOOP_CLR_FD) = 0 [pid 5039] close(4) = 0 [pid 5039] creat("./file2", 040 [pid 5002] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./2/file0") = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./2") = 0 [pid 5002] mkdir("./3", 0777) = 0 [ 68.190353][ T5037] NILFS (loop2): error -5 truncating bmap (ino=16) [ 68.190726][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 68.205434][ T5039] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 68.206530][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 68.222611][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5037] <... creat resumed>) = 4 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5037] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [ 68.238350][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.245957][ T5039] Remounting filesystem read-only [ 68.262191][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.262600][ T5043] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.272000][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5040] <... mount resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5040] chdir("./file0") = 0 [pid 5040] ioctl(4, LOOP_CLR_FD) = 0 [pid 5040] close(4) = 0 [pid 5040] creat("./file2", 040./strace-static-x86_64: Process 5044 attached [pid 5039] <... creat resumed>) = 4 [pid 5044] chdir("./3" [pid 5039] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5044 [pid 5044] <... chdir resumed>) = 0 [ 68.283498][ T5037] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 68.291594][ T5039] NILFS (loop3): error -5 truncating bmap (ino=16) [ 68.307757][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 68.312932][ T5040] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 68.328425][ T5039] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5044] setpgid(0, 0) = 0 [pid 5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... umount2 resumed>) = 0 [pid 5044] <... openat resumed>) = 3 [pid 5040] <... creat resumed>) = 4 [pid 5044] write(3, "1000", 4 [pid 5003] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... write resumed>) = 4 [pid 5044] close(3) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] symlink("/dev/binderfs", "./binderfs" [pid 5040] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5044] <... symlink resumed>) = 0 [pid 5003] lstat("./2/file0", [pid 5044] memfd_create("syzkaller", 0) = 3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... mmap resumed>) = 0x7f45ac090000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./2/file0") = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./2") = 0 [pid 5003] mkdir("./3", 0777) = 0 [ 68.329000][ T5037] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 68.348679][ T5040] Remounting filesystem read-only [ 68.353796][ T5040] NILFS (loop1): error -5 truncating bmap (ino=16) [ 68.365632][ T5040] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5044] <... write resumed>) = 1048576 [pid 5003] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] close(3 [pid 5044] munmap(0x7f45ac090000, 1048576 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] <... munmap resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 4998] lstat("./2/file0", [pid 5044] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5044] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5037] <... write resumed>) = -1 EIO (Input/output error) [pid 5037] exit_group(0 [pid 5044] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5045 [pid 4998] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5037] <... exit_group resumed>) = ? [pid 5037] +++ exited with 0 +++ [ 68.390190][ T5039] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 68.402215][ T5040] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 68.415082][ T5037] NILFS (loop2): error -5 truncating bmap (ino=16) [ 68.434087][ T5044] loop4: detected capacity change from 0 to 2048 [pid 4998] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5037, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 5000] fstat(3, [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4 [pid 5000] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] rmdir("./2/file0" [pid 5000] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... rmdir resumed>) = 0 [pid 5000] lstat("./2/binderfs", [pid 4998] getdents64(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./2/binderfs" [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3 [pid 5040] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] <... close resumed>) = 0 [pid 5040] exit_group(0) = ? [pid 4998] rmdir("./2") = 0 [pid 4998] mkdir("./3", 0777 [pid 5040] +++ exited with 0 +++ [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5040, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... openat resumed>) = 3 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 4999] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5045 attached ) = 3 [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5046 [pid 5045] chdir("./3" [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5045] <... chdir resumed>) = 0 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5045] setpgid(0, 0) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "1000", 4) = 4 [pid 5045] close(3) = 0 [pid 5045] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./2/binderfs"./strace-static-x86_64: Process 5046 attached [pid 5045] <... symlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5045] memfd_create("syzkaller", 0 [pid 5039] <... write resumed>) = -1 EIO (Input/output error) [pid 5045] <... memfd_create resumed>) = 3 [pid 5039] exit_group(0 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5039] <... exit_group resumed>) = ? [ 68.436735][ T5039] NILFS (loop3): error -5 truncating bmap (ino=16) [ 68.452138][ T5040] NILFS (loop1): error -5 truncating bmap (ino=16) [ 68.472649][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5045] <... mmap resumed>) = 0x7f45ac090000 [pid 5039] +++ exited with 0 +++ [pid 5046] chdir("./3" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5039, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5046] <... chdir resumed>) = 0 [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5044] <... ioctl resumed>) = 0 [pid 5044] close(3) = 0 [pid 5044] mkdir("./file0", 0777) = 0 [pid 5044] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5046] <... prctl resumed>) = 0 [pid 5001] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5046] setpgid(0, 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5046] <... setpgid resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] <... openat resumed>) = 3 [pid 5046] <... openat resumed>) = 3 [pid 5046] write(3, "1000", 4 [ 68.485288][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 68.496875][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 68.503904][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 68.517526][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.527621][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5001] fstat(3, [pid 5046] <... write resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5046] close(3 [pid 5001] getdents64(3, [pid 5046] <... close resumed>) = 0 [pid 5045] <... write resumed>) = 1048576 [pid 5045] munmap(0x7f45ac090000, 1048576 [pid 5046] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5044] <... mount resumed>) = 0 [pid 5044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5044] chdir("./file0") = 0 [pid 5044] ioctl(4, LOOP_CLR_FD) = 0 [pid 5044] close(4) = 0 [pid 5044] creat("./file2", 040 [pid 5001] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5046] <... symlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5046] memfd_create("syzkaller", 0 [pid 5001] lstat("./2/binderfs", [pid 5046] <... memfd_create resumed>) = 3 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] unlink("./2/binderfs" [pid 5046] <... mmap resumed>) = 0x7f45ac090000 [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] <... munmap resumed>) = 0 [pid 5045] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 68.530048][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.537427][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.555656][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 68.565440][ T5047] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.572884][ T5044] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5045] ioctl(4, LOOP_SET_FD, 3 [pid 5046] munmap(0x7f45ac090000, 1048576) = 0 [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 68.594832][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 68.605783][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 68.617099][ T5045] loop5: detected capacity change from 0 to 2048 [ 68.633690][ T5046] loop0: detected capacity change from 0 to 2048 [pid 5046] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5046] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5046] close(3 [pid 4999] lstat("./2/file0", [pid 5046] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5046] mkdir("./file0", 0777 [pid 4999] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5046] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5046] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] fstat(4, [pid 5045] <... ioctl resumed>) = 0 [pid 5045] close(3) = 0 [pid 5045] mkdir("./file0", 0777) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 68.636223][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.656712][ T5044] Remounting filesystem read-only [ 68.657409][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.669446][ T5044] NILFS (loop4): error -5 truncating bmap (ino=16) [ 68.678876][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5045] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5046] <... mount resumed>) = 0 [pid 5044] <... creat resumed>) = 4 [pid 4999] getdents64(4, [pid 5046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5044] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5046] <... openat resumed>) = 3 [pid 5046] chdir("./file0" [pid 5000] <... umount2 resumed>) = 0 [pid 4999] getdents64(4, [pid 5046] <... chdir resumed>) = 0 [pid 5000] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [ 68.683612][ T5048] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.690373][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 68.700386][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.716974][ T5044] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 68.717796][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.733817][ T5044] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5046] ioctl(4, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(4 [pid 5000] lstat("./2/file0", [pid 5046] <... ioctl resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5046] close(4 [pid 5044] <... write resumed>) = -1 EIO (Input/output error) [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./2/file0" [pid 5046] <... close resumed>) = 0 [pid 5044] exit_group(0 [pid 5000] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5046] creat("./file2", 040 [pid 5044] <... exit_group resumed>) = ? [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5045] <... mount resumed>) = 0 [pid 5044] +++ exited with 0 +++ [pid 5000] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 5045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5045] <... openat resumed>) = 3 [pid 5045] chdir("./file0") = 0 [pid 5045] ioctl(4, LOOP_CLR_FD) = 0 [pid 5045] close(4) = 0 [ 68.745764][ T5044] NILFS (loop4): error -5 truncating bmap (ino=16) [ 68.753452][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 68.756922][ T5049] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.777520][ T5046] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5045] creat("./file2", 040 [pid 5002] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 5002] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3 [pid 5002] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./2/file0", [pid 4999] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5002] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4999] rmdir("./2" [pid 5002] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./3/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] close(4 [pid 4999] mkdir("./3", 0777 [pid 5002] unlink("./3/binderfs") = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 5002] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 4999] <... mkdir resumed>) = 0 [pid 5000] rmdir("./2/file0" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] <... rmdir resumed>) = 0 [pid 5001] getdents64(4, [pid 5000] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./2" [pid 4999] close(3 [pid 5001] close(4) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5001] rmdir("./2/file0" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] mkdir("./3", 0777 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5050 [pid 5001] getdents64(3, [pid 5000] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5001] close(3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... close resumed>) = 0 [pid 5000] close(3 [pid 5001] rmdir("./2" [pid 5000] <... close resumed>) = 0 [ 68.793139][ T5045] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 68.815091][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 68.822136][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 68.832940][ T5046] Remounting filesystem read-only [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./3", 0777 [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5051 ./strace-static-x86_64: Process 5051 attached ./strace-static-x86_64: Process 5050 attached [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5051] chdir("./3" [pid 5050] chdir("./3" [pid 5001] <... openat resumed>) = 3 [pid 5051] <... chdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5050] <... chdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5051] <... prctl resumed>) = 0 [pid 5050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] close(3 [pid 5051] setpgid(0, 0 [pid 5050] <... prctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5046] <... creat resumed>) = 4 [pid 5046] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5051] <... setpgid resumed>) = 0 [pid 5050] setpgid(0, 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5050] <... setpgid resumed>) = 0 [pid 5045] <... creat resumed>) = 4 [pid 5045] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [ 68.843082][ T5045] Remounting filesystem read-only [ 68.850473][ T5046] NILFS (loop0): error -5 truncating bmap (ino=16) [ 68.861042][ T5045] NILFS (loop5): error -5 truncating bmap (ino=16) [ 68.867845][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.878888][ T5046] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5051] <... openat resumed>) = 3 [pid 5050] <... openat resumed>) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5052 [pid 5051] write(3, "1000", 4 [pid 5050] write(3, "1000", 4 [pid 5051] <... write resumed>) = 4 [pid 5050] <... write resumed>) = 4 [pid 5051] close(3 [pid 5050] close(3 [pid 5051] <... close resumed>) = 0 [pid 5050] <... close resumed>) = 0 [pid 5051] symlink("/dev/binderfs", "./binderfs" [pid 5050] symlink("/dev/binderfs", "./binderfs" [pid 5051] <... symlink resumed>) = 0 [pid 5050] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5052 attached [pid 5051] memfd_create("syzkaller", 0 [pid 5050] memfd_create("syzkaller", 0 [pid 5051] <... memfd_create resumed>) = 3 [pid 5050] <... memfd_create resumed>) = 3 [pid 5051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5052] chdir("./3" [pid 5051] <... mmap resumed>) = 0x7f45ac090000 [pid 5050] <... mmap resumed>) = 0x7f45ac090000 [pid 5052] <... chdir resumed>) = 0 [pid 5051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5052] setpgid(0, 0) = 0 [pid 5052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5052] write(3, "1000", 4) = 4 [pid 5052] close(3) = 0 [pid 5052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5052] memfd_create("syzkaller", 0) = 3 [pid 5052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [ 68.891088][ T5045] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 68.904058][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.926268][ T5046] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 68.931651][ T5045] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5046] <... write resumed>) = -1 EIO (Input/output error) [pid 5046] exit_group(0) = ? [pid 5046] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5046, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5051] <... write resumed>) = 1048576 [pid 5050] munmap(0x7f45ac090000, 1048576 [pid 5051] munmap(0x7f45ac090000, 1048576 [pid 4998] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5050] <... munmap resumed>) = 0 [pid 5051] <... munmap resumed>) = 0 [pid 5050] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... openat resumed>) = 3 [pid 5051] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] fstat(3, [pid 5051] <... openat resumed>) = 4 [pid 5050] <... openat resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5052] <... write resumed>) = 1048576 [pid 5051] ioctl(4, LOOP_SET_FD, 3 [pid 5050] ioctl(4, LOOP_SET_FD, 3 [pid 5045] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] getdents64(3, [pid 5052] munmap(0x7f45ac090000, 1048576 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [ 68.953626][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 68.967047][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 68.977337][ T5046] NILFS (loop0): error -5 truncating bmap (ino=16) [ 68.978002][ T5045] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 4998] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] <... munmap resumed>) = 0 [pid 5051] <... ioctl resumed>) = 0 [pid 5050] <... ioctl resumed>) = 0 [pid 5045] exit_group(0 [pid 4998] lstat("./3/binderfs", [pid 5052] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5051] close(3 [pid 5050] close(3 [pid 5045] <... exit_group resumed>) = ? [pid 5002] <... umount2 resumed>) = 0 [pid 5052] <... openat resumed>) = 4 [pid 5051] <... close resumed>) = 0 [pid 5050] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5052] ioctl(4, LOOP_SET_FD, 3 [pid 5051] mkdir("./file0", 0777 [pid 5050] mkdir("./file0", 0777 [pid 5045] +++ exited with 0 +++ [pid 5002] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] unlink("./3/binderfs" [pid 5051] <... mkdir resumed>) = 0 [pid 5050] <... mkdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... unlink resumed>) = 0 [pid 5052] <... ioctl resumed>) = 0 [pid 5051] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5050] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] lstat("./3/file0", [pid 4998] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5052] close(3 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5052] <... close resumed>) = 0 [pid 5002] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5052] mkdir("./file0", 0777 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5052] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5052] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5002] <... openat resumed>) = 4 [pid 5003] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [ 69.003048][ T5051] loop2: detected capacity change from 0 to 2048 [ 69.014661][ T5050] loop1: detected capacity change from 0 to 2048 [ 69.029881][ T5052] loop3: detected capacity change from 0 to 2048 [pid 5002] fstat(4, [pid 5051] <... mount resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./3/file0") = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./3") = 0 [pid 5002] mkdir("./4", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5051] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 3 [pid 5051] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 5051] chdir("./file0" [pid 5003] fstat(3, [pid 5051] <... chdir resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5051] ioctl(4, LOOP_CLR_FD [pid 5003] getdents64(3, [pid 5051] <... ioctl resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5051] close(4 [pid 5003] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5051] <... close resumed>) = 0 [pid 5050] <... mount resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 69.053499][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 69.055025][ T5053] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.066106][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 69.079271][ T5054] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.080954][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5051] creat("./file2", 040 [pid 5050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] lstat("./3/binderfs", [pid 5002] close(3 [pid 5052] <... mount resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./3/binderfs") = 0 [pid 5003] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5050] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 5052] <... openat resumed>) = 3 [pid 5050] chdir("./file0" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5052] chdir("./file0" [pid 5050] <... chdir resumed>) = 0 [ 69.106485][ T5051] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.110082][ T5055] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.124740][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.128091][ T5051] Remounting filesystem read-only [ 69.137623][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5052] <... chdir resumed>) = 0 [pid 5050] ioctl(4, LOOP_CLR_FD [pid 5052] ioctl(4, LOOP_CLR_FD [pid 5050] <... ioctl resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5056 [pid 5052] <... ioctl resumed>) = 0 [pid 5050] close(4 [pid 5052] close(4 [pid 5050] <... close resumed>) = 0 [pid 5052] <... close resumed>) = 0 [pid 5050] creat("./file2", 040 [pid 5052] creat("./file2", 040./strace-static-x86_64: Process 5056 attached [pid 5051] <... creat resumed>) = 4 [pid 5056] chdir("./4" [ 69.150887][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 69.161213][ T5050] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.171139][ T5052] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.173037][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 69.187812][ T5051] NILFS (loop2): error -5 truncating bmap (ino=16) [ 69.194842][ T5050] Remounting filesystem read-only [ 69.199907][ T5050] NILFS (loop1): error -5 truncating bmap (ino=16) [pid 5051] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5056] <... chdir resumed>) = 0 [pid 5056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5056] setpgid(0, 0) = 0 [pid 5056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5050] <... creat resumed>) = 4 [pid 5056] <... openat resumed>) = 3 [pid 5050] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5052] <... creat resumed>) = 4 [ 69.208253][ T5052] Remounting filesystem read-only [ 69.214472][ T5051] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 69.216015][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 69.224445][ T5051] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.234628][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.251458][ T5052] NILFS (loop3): error -5 truncating bmap (ino=16) [pid 5056] write(3, "1000", 4) = 4 [pid 5056] close(3 [pid 5052] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5056] <... close resumed>) = 0 [pid 5056] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5056] memfd_create("syzkaller", 0) = 3 [pid 5051] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] <... umount2 resumed>) = 0 [pid 5056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 69.259754][ T5051] NILFS (loop2): error -5 truncating bmap (ino=16) [ 69.266785][ T5050] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 69.277271][ T5052] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 69.289127][ T5050] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.299052][ T5052] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5051] exit_group(0 [pid 4998] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5056] <... mmap resumed>) = 0x7f45ac090000 [pid 5051] <... exit_group resumed>) = ? [pid 4998] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5052] <... write resumed>) = -1 EIO (Input/output error) [pid 5051] +++ exited with 0 +++ [pid 5050] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] fstat(4, [pid 5052] exit_group(0 [pid 5050] exit_group(0 [pid 5052] <... exit_group resumed>) = ? [pid 5052] +++ exited with 0 +++ [pid 5050] <... exit_group resumed>) = ? [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5051, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5050] +++ exited with 0 +++ [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5050, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] <... restart_syscall resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5052, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4998] getdents64(4, [pid 4999] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 4998] getdents64(4, [pid 5001] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(3, [pid 4999] getdents64(3, [pid 4998] close(4 [pid 5000] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 5000] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./3/file0") = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] lstat("./3/binderfs", [pid 4999] lstat("./3/binderfs", [pid 4998] getdents64(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] unlink("./3/binderfs" [pid 4999] unlink("./3/binderfs" [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./3/binderfs", [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] close(3 [pid 5001] unlink("./3/binderfs" [pid 5000] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4998] rmdir("./3" [pid 5001] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [ 69.308697][ T5050] NILFS (loop1): error -5 truncating bmap (ino=16) [ 69.315919][ T5052] NILFS (loop3): error -5 truncating bmap (ino=16) [ 69.320763][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4998] mkdir("./4", 0777) = 0 [pid 5056] <... write resumed>) = 1048576 [pid 5056] munmap(0x7f45ac090000, 1048576) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5056] ioctl(4, LOOP_SET_FD, 3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 69.361382][ T5056] loop4: detected capacity change from 0 to 2048 [ 69.370169][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 69.374573][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.378284][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 69.393220][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 69.398350][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5057 ./strace-static-x86_64: Process 5057 attached [pid 5056] <... ioctl resumed>) = 0 [pid 5057] chdir("./4" [pid 5056] close(3) = 0 [pid 5057] <... chdir resumed>) = 0 [pid 5057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5056] mkdir("./file0", 0777 [pid 5057] <... prctl resumed>) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5057] setpgid(0, 0) = 0 [ 69.412096][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 69.420834][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 69.435226][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [pid 5057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5057] write(3, "1000", 4) = 4 [pid 5057] close(3) = 0 [pid 5003] <... umount2 resumed>) = 0 [ 69.459749][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.469806][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.480191][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.481991][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.490599][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5057] symlink("/dev/binderfs", "./binderfs" [pid 5003] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... symlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] memfd_create("syzkaller", 0 [pid 5003] lstat("./3/file0", [pid 5057] <... memfd_create resumed>) = 3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 69.503198][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.507808][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.518900][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 69.525685][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.543116][ T5058] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5056] <... mount resumed>) = 0 [pid 5003] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5057] <... mmap resumed>) = 0x7f45ac090000 [pid 5056] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5056] <... openat resumed>) = 3 [pid 5003] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] chdir("./file0") = 0 [pid 5003] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] ioctl(4, LOOP_CLR_FD [pid 5003] fstat(4, [pid 4999] lstat("./3/file0", [pid 5056] <... ioctl resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5056] close(4 [pid 5003] getdents64(4, [pid 4999] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] creat("./file2", 040 [pid 4999] <... openat resumed>) = 4 [pid 5003] getdents64(4, [pid 4999] fstat(4, [pid 5057] <... write resumed>) = 1048576 [pid 5057] munmap(0x7f45ac090000, 1048576) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] close(4) = 0 [pid 4999] getdents64(4, [pid 5057] <... openat resumed>) = 4 [pid 5003] rmdir("./3/file0" [pid 5057] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./3/file0") = 0 [ 69.554675][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.565764][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 69.577425][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 69.591453][ T5056] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.602318][ T5056] Remounting filesystem read-only [pid 5003] getdents64(3, [pid 5056] <... creat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 5003] close(3 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5057] mkdir("./file0", 0777 [pid 5000] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 5057] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./3/file0") = 0 [pid 5000] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] close(3 [pid 5003] rmdir("./3" [pid 4999] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./3" [pid 5003] <... rmdir resumed>) = 0 [pid 4999] rmdir("./3" [pid 5003] mkdir("./4", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] mkdir("./4", 0777 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5000] mkdir("./4", 0777 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5056] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5003] close(3 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5059 ./strace-static-x86_64: Process 5059 attached [pid 5059] chdir("./4") = 0 [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] setpgid(0, 0) = 0 [pid 5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "1000", 4) = 4 [pid 5059] close(3 [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... close resumed>) = 0 [pid 5059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5059] memfd_create("syzkaller", 0) = 3 [pid 5059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5062 [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5061 [pid 5059] <... mmap resumed>) = 0x7f45ac090000 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5062 attached [pid 5001] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] chdir("./4" [pid 5001] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... chdir resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [ 69.612433][ T5056] NILFS (loop4): error -5 truncating bmap (ino=16) [ 69.625369][ T5057] loop0: detected capacity change from 0 to 2048 [ 69.650013][ T5056] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5057] <... mount resumed>) = 0 [pid 5001] fstat(4, ./strace-static-x86_64: Process 5061 attached [pid 5057] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... prctl resumed>) = 0 [pid 5061] chdir("./4" [pid 5057] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] setpgid(0, 0 [pid 5061] <... chdir resumed>) = 0 [pid 5057] chdir("./file0" [pid 5062] <... setpgid resumed>) = 0 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5057] <... chdir resumed>) = 0 [pid 5001] getdents64(4, [pid 5061] <... prctl resumed>) = 0 [pid 5057] ioctl(4, LOOP_CLR_FD [pid 5061] setpgid(0, 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... setpgid resumed>) = 0 [pid 5057] close(4 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5062] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5057] <... close resumed>) = 0 [pid 5062] write(3, "1000", 4 [pid 5061] <... openat resumed>) = 3 [pid 5057] creat("./file2", 040 [pid 5001] getdents64(4, [pid 5062] <... write resumed>) = 4 [pid 5061] write(3, "1000", 4 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5061] <... write resumed>) = 4 [pid 5061] close(3) = 0 [pid 5061] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(3 [pid 5061] <... symlink resumed>) = 0 [pid 5001] close(4 [pid 5062] <... close resumed>) = 0 [pid 5061] memfd_create("syzkaller", 0 [pid 5001] <... close resumed>) = 0 [pid 5062] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... memfd_create resumed>) = 3 [pid 5061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] rmdir("./3/file0" [pid 5062] <... symlink resumed>) = 0 [pid 5061] <... mmap resumed>) = 0x7f45ac090000 [pid 5062] memfd_create("syzkaller", 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5062] <... memfd_create resumed>) = 3 [pid 5001] getdents64(3, [ 69.678476][ T5060] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.684565][ T5056] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.715077][ T5057] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5062] <... mmap resumed>) = 0x7f45ac090000 [pid 5061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] close(3 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./3") = 0 [pid 5001] mkdir("./4", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5059] <... write resumed>) = 1048576 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] munmap(0x7f45ac090000, 1048576 [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5063 [pid 5056] <... write resumed>) = -1 EIO (Input/output error) [pid 5059] <... munmap resumed>) = 0 [pid 5056] exit_group(0 [pid 5059] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5059] ioctl(4, LOOP_SET_FD, 3 [pid 5056] <... exit_group resumed>) = ? [ 69.738420][ T5056] NILFS (loop4): error -5 truncating bmap (ino=16) [ 69.754648][ T5057] Remounting filesystem read-only [ 69.759726][ T5057] NILFS (loop0): error -5 truncating bmap (ino=16) ./strace-static-x86_64: Process 5063 attached [pid 5059] <... ioctl resumed>) = 0 [pid 5056] +++ exited with 0 +++ [pid 5063] chdir("./4") = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5056, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... prctl resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5063] setpgid(0, 0 [pid 5061] <... write resumed>) = 1048576 [pid 5063] <... setpgid resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5061] munmap(0x7f45ac090000, 1048576 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] write(3, "1000", 4 [pid 5062] <... write resumed>) = 1048576 [pid 5061] <... munmap resumed>) = 0 [pid 5057] <... creat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... write resumed>) = 4 [pid 5062] munmap(0x7f45ac090000, 1048576 [pid 5057] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5002] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5062] <... munmap resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] fstat(3, [pid 5063] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5061] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] symlink("/dev/binderfs", "./binderfs" [pid 5061] ioctl(4, LOOP_SET_FD, 3 [ 69.784858][ T5059] loop2: detected capacity change from 0 to 2048 [ 69.802400][ T5057] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 69.816335][ T5057] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5002] getdents64(3, [pid 5063] <... symlink resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5059] close(3 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5063] memfd_create("syzkaller", 0 [pid 5002] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... memfd_create resumed>) = 3 [pid 5062] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... close resumed>) = 0 [pid 5057] <... write resumed>) = -1 EIO (Input/output error) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5002] lstat("./4/binderfs", [pid 5063] <... mmap resumed>) = 0x7f45ac090000 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 5059] mkdir("./file0", 0777 [pid 5057] exit_group(0 [pid 5002] unlink("./4/binderfs" [pid 5062] close(3 [pid 5061] <... close resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5057] <... exit_group resumed>) = ? [pid 5002] <... unlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] mkdir("./file0", 0777 [pid 5059] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [ 69.838095][ T5061] loop1: detected capacity change from 0 to 2048 [ 69.846787][ T5057] NILFS (loop0): error -5 truncating bmap (ino=16) [ 69.856050][ T5062] loop5: detected capacity change from 0 to 2048 [pid 5002] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./file0", 0777 [pid 5061] <... mkdir resumed>) = 0 [pid 5057] +++ exited with 0 +++ [pid 5063] <... write resumed>) = 1048576 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5059] <... mount resumed>) = 0 [pid 5062] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5057, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5059] <... openat resumed>) = 3 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5059] chdir("./file0" [pid 4998] <... restart_syscall resumed>) = 0 [pid 5059] <... chdir resumed>) = 0 [pid 5059] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] munmap(0x7f45ac090000, 1048576 [pid 5059] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 69.882207][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 69.890669][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 69.898098][ T5064] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.910039][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.917740][ T5059] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5059] creat("./file2", 040 [pid 4998] <... openat resumed>) = 3 [pid 5063] <... munmap resumed>) = 0 [pid 5061] <... mount resumed>) = 0 [pid 4998] fstat(3, [pid 5061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 4998] getdents64(3, [pid 5063] <... openat resumed>) = 4 [pid 5061] chdir("./file0" [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5063] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... chdir resumed>) = 0 [pid 4998] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mount resumed>) = 0 [pid 5061] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... ioctl resumed>) = 0 [pid 4998] lstat("./4/binderfs", [pid 5062] <... openat resumed>) = 3 [pid 5061] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] chdir("./file0" [pid 5061] <... close resumed>) = 0 [pid 4998] unlink("./4/binderfs" [pid 5062] <... chdir resumed>) = 0 [ 69.928923][ T5065] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.933863][ T5063] loop3: detected capacity change from 0 to 2048 [ 69.940336][ T5066] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.952580][ T5061] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.960735][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5061] creat("./file2", 040 [pid 4998] <... unlink resumed>) = 0 [pid 5062] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(4 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] mkdir("./file0", 0777) = 0 [pid 5063] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [ 69.976635][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 69.986882][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 70.010374][ T5059] Remounting filesystem read-only [ 70.015767][ T5061] Remounting filesystem read-only [ 70.020988][ T5061] NILFS (loop1): error -5 truncating bmap (ino=16) [pid 5062] creat("./file2", 040 [pid 5061] <... creat resumed>) = 4 [pid 5059] <... creat resumed>) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 70.029491][ T5062] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.038992][ T5059] NILFS (loop2): error -5 truncating bmap (ino=16) [ 70.047068][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 70.048924][ T5062] Remounting filesystem read-only [ 70.054026][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 70.066998][ T5067] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5061] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5002] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./4/file0") = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./4") = 0 [pid 5002] mkdir("./5", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [ 70.077898][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.081018][ T5062] NILFS (loop5): error -5 truncating bmap (ino=16) [ 70.093768][ T5059] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 70.103633][ T5061] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 70.115059][ T5061] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5063] <... mount resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] chdir("./file0") = 0 [pid 5062] <... creat resumed>) = 4 [pid 5063] ioctl(4, LOOP_CLR_FD) = 0 [pid 5063] close(4) = 0 [pid 5063] creat("./file2", 040 [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5068 ./strace-static-x86_64: Process 5068 attached [pid 5068] chdir("./5") = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] setpgid(0, 0) = 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5061] <... write resumed>) = -1 EIO (Input/output error) [pid 5059] <... write resumed>) = -1 EIO (Input/output error) [pid 5068] write(3, "1000", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] symlink("/dev/binderfs", "./binderfs") = 0 [ 70.124768][ T5059] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.134249][ T5059] NILFS (loop2): error -5 truncating bmap (ino=16) [ 70.134381][ T5061] NILFS (loop1): error -5 truncating bmap (ino=16) [ 70.148057][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.148625][ T5063] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.157128][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5068] memfd_create("syzkaller", 0) = 3 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] exit_group(0 [pid 5059] exit_group(0 [pid 5068] <... mmap resumed>) = 0x7f45ac090000 [pid 5061] <... exit_group resumed>) = ? [pid 5059] <... exit_group resumed>) = ? [pid 5061] +++ exited with 0 +++ [pid 5059] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5059, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./4/binderfs") = 0 [pid 5062] <... write resumed>) = -1 EIO (Input/output error) [pid 5000] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] exit_group(0) = ? [ 70.175453][ T5062] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 70.185910][ T5062] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.198911][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 70.208075][ T5062] NILFS (loop5): error -5 truncating bmap (ino=16) [ 70.219321][ T5063] Remounting filesystem read-only [ 70.226305][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5063] <... creat resumed>) = 4 [pid 5062] +++ exited with 0 +++ [pid 4999] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5068] munmap(0x7f45ac090000, 1048576 [pid 5063] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... munmap resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 70.233182][ T5063] NILFS (loop3): error -5 truncating bmap (ino=16) [ 70.233260][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 70.249289][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.259109][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.269478][ T5063] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5068] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [pid 4998] lstat("./4/file0", [pid 5068] ioctl(4, LOOP_SET_FD, 3 [pid 5003] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] fstat(3, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./4/binderfs" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... ioctl resumed>) = 0 [pid 4998] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 4999] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./file0", 0777 [pid 5003] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... write resumed>) = -1 EIO (Input/output error) [pid 5063] exit_group(0) = ? [pid 5063] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 5068] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5063, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] fstat(4, [pid 4999] lstat("./4/binderfs", [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] getdents64(4, [pid 5001] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./4/binderfs" [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 70.282090][ T5063] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.292370][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.296052][ T5063] NILFS (loop3): error -5 truncating bmap (ino=16) [ 70.301790][ T5068] loop4: detected capacity change from 0 to 2048 [ 70.315661][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 70.325865][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5001] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... unlink resumed>) = 0 [pid 4998] getdents64(4, [pid 5000] <... umount2 resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] fstat(3, [pid 5000] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5001] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] lstat("./4/file0", [pid 4998] rmdir("./4/file0" [pid 5001] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./4/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 70.341294][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 70.349862][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.360732][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.362171][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 70.370885][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4998] close(3 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... close resumed>) = 0 [pid 5001] unlink("./4/binderfs" [pid 5000] <... openat resumed>) = 4 [pid 4998] rmdir("./4" [pid 5001] <... unlink resumed>) = 0 [pid 5000] fstat(4, [pid 4998] <... rmdir resumed>) = 0 [pid 5001] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... mount resumed>) = 0 [pid 5000] getdents64(4, [pid 4998] mkdir("./5", 0777 [pid 5068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5068] chdir("./file0") = 0 [pid 5068] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] close(4) = 0 [ 70.387351][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 70.396040][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 70.396636][ T5069] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.405730][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.426057][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 70.433050][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [pid 5068] creat("./file2", 040 [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] <... mkdir resumed>) = 0 [pid 5000] getdents64(4, [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4998] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5000] rmdir("./4/file0" [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... rmdir resumed>) = 0 [pid 4998] close(3 [pid 5000] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] close(3) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5070 [pid 5000] rmdir("./4") = 0 [pid 5000] mkdir("./5", 0777./strace-static-x86_64: Process 5070 attached [pid 5003] <... umount2 resumed>) = 0 [pid 5070] chdir("./5" [pid 5003] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... chdir resumed>) = 0 [pid 5003] lstat("./4/file0", [pid 5000] <... openat resumed>) = 3 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] <... prctl resumed>) = 0 [ 70.441253][ T5068] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.458108][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.469512][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.479381][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5070] setpgid(0, 0 [pid 5003] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] <... setpgid resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(3 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... close resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5070] write(3, "1000", 4 [pid 5003] <... openat resumed>) = 4 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... write resumed>) = 4 [pid 5003] fstat(4, [pid 5070] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] <... close resumed>) = 0 [pid 5003] getdents64(4, [pid 5070] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5071 [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5070] <... symlink resumed>) = 0 [pid 5003] rmdir("./4/file0"./strace-static-x86_64: Process 5071 attached [pid 5070] memfd_create("syzkaller", 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5070] <... memfd_create resumed>) = 3 [pid 5003] getdents64(3, [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5070] <... mmap resumed>) = 0x7f45ac090000 [pid 5003] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] chdir("./5" [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] <... close resumed>) = 0 [pid 5001] lstat("./4/file0", [pid 5071] <... chdir resumed>) = 0 [ 70.488154][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.489350][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 70.499297][ T5068] Remounting filesystem read-only [ 70.524681][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.534713][ T5068] NILFS (loop4): error -5 truncating bmap (ino=16) [pid 5003] rmdir("./4" [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5071] <... prctl resumed>) = 0 [pid 5071] setpgid(0, 0 [pid 5003] mkdir("./5", 0777 [pid 5001] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... setpgid resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 5071] write(3, "1000", 4 [pid 5003] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 4 [pid 5071] <... write resumed>) = 4 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] fstat(4, [pid 5071] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5071] <... close resumed>) = 0 [pid 5003] close(3 [pid 5001] getdents64(4, [pid 5071] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5071] <... symlink resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] getdents64(4, [pid 5071] memfd_create("syzkaller", 0 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5071] <... memfd_create resumed>) = 3 [pid 5001] close(4 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./4/file0" [pid 5071] <... mmap resumed>) = 0x7f45ac090000 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5072 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5068] <... creat resumed>) = 4 [pid 5001] close(3 [pid 5068] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47./strace-static-x86_64: Process 5072 attached [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5070] <... write resumed>) = 1048576 [pid 5001] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [ 70.541798][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 70.577666][ T5068] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5072] chdir("./5") = 0 [pid 5071] <... write resumed>) = 1048576 [pid 5070] munmap(0x7f45ac090000, 1048576 [pid 5001] rmdir("./4" [pid 4999] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5070] <... munmap resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] setpgid(0, 0 [pid 5070] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] lstat("./4/file0", [pid 5001] mkdir("./5", 0777 [pid 5072] <... setpgid resumed>) = 0 [pid 5071] munmap(0x7f45ac090000, 1048576 [pid 5070] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] write(3, "1000", 4 [pid 5071] <... munmap resumed>) = 0 [pid 5070] <... ioctl resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... write resumed>) = 4 [pid 5071] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5072] close(3 [pid 5071] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] fstat(4, [pid 5071] ioctl(4, LOOP_SET_FD, 3 [pid 5072] symlink("/dev/binderfs", "./binderfs" [pid 5070] <... close resumed>) = 0 [pid 5001] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... write resumed>) = -1 EIO (Input/output error) [pid 5068] exit_group(0) = ? [pid 5068] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] <... symlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5070] mkdir("./file0", 0777 [pid 5072] memfd_create("syzkaller", 0 [pid 5002] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5070] <... mkdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 5072] <... memfd_create resumed>) = 3 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5073 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5070] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5072] <... mmap resumed>) = 0x7f45ac090000 [pid 5002] <... openat resumed>) = 3 [pid 4999] close(4 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./5/binderfs") = 0 [pid 5002] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] <... close resumed>) = 0 [pid 5072] <... write resumed>) = 1048576 [pid 5071] <... ioctl resumed>) = 0 [pid 4999] rmdir("./4/file0" [pid 5071] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] mkdir("./file0", 0777 [pid 4999] getdents64(3, ./strace-static-x86_64: Process 5073 attached 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./4") = 0 [ 70.590143][ T5068] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.606616][ T5070] loop0: detected capacity change from 0 to 2048 [ 70.610021][ T5068] NILFS (loop4): error -5 truncating bmap (ino=16) [ 70.621697][ T5071] loop2: detected capacity change from 0 to 2048 [pid 4999] mkdir("./5", 0777 [pid 5071] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5071] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] chdir("./5" [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5073] <... chdir resumed>) = 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] <... prctl resumed>) = 0 [pid 4999] close(3 [pid 5072] munmap(0x7f45ac090000, 1048576 [pid 5070] <... mount resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] setpgid(0, 0 [pid 5072] <... munmap resumed>) = 0 [pid 5071] <... mount resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5073] <... setpgid resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1000", 4) = 4 [pid 5073] close(3 [pid 5072] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5070] chdir("./file0" [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5076 [pid 5070] <... chdir resumed>) = 0 [pid 5070] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5076 attached [pid 5073] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5070] <... ioctl resumed>) = 0 [pid 5073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] memfd_create("syzkaller", 0) = 3 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5076] chdir("./5" [pid 5072] ioctl(4, LOOP_SET_FD, 3 [pid 5071] chdir("./file0" [pid 5070] close(4 [pid 5076] <... chdir resumed>) = 0 [ 70.681308][ T5074] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.704845][ T5075] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.720586][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... chdir resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5076] <... prctl resumed>) = 0 [pid 5072] close(3 [pid 5071] ioctl(4, LOOP_CLR_FD [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5076] setpgid(0, 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5070] creat("./file2", 040 [pid 5076] <... setpgid resumed>) = 0 [pid 5072] mkdir("./file0", 0777 [pid 5071] close(4 [pid 5072] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... close resumed>) = 0 [pid 5072] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5076] <... openat resumed>) = 3 [pid 5071] creat("./file2", 040 [ 70.734862][ T5072] loop5: detected capacity change from 0 to 2048 [ 70.743107][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 70.753360][ T5070] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.765504][ T5070] Remounting filesystem read-only [ 70.770599][ T5070] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5076] write(3, "1000", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] memfd_create("syzkaller", 0 [pid 5072] <... mount resumed>) = 0 [pid 5076] <... memfd_create resumed>) = 3 [pid 5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... openat resumed>) = 3 [pid 5076] <... mmap resumed>) = 0x7f45ac090000 [pid 5072] chdir("./file0") = 0 [pid 5072] ioctl(4, LOOP_CLR_FD) = 0 [pid 5072] close(4) = 0 [pid 5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 70.781177][ T5071] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.796289][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.801146][ T5077] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.816915][ T5071] Remounting filesystem read-only [ 70.822754][ T5071] NILFS (loop2): error -5 truncating bmap (ino=16) [pid 5072] creat("./file2", 040 [pid 5071] <... creat resumed>) = 4 [pid 5070] <... creat resumed>) = 4 [pid 5070] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5071] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5073] <... write resumed>) = 1048576 [pid 5073] munmap(0x7f45ac090000, 1048576) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... write resumed>) = 1048576 [ 70.838582][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.846333][ T5070] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 70.856020][ T5072] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.866754][ T5071] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 70.867454][ T5073] loop3: detected capacity change from 0 to 2048 [pid 5076] munmap(0x7f45ac090000, 1048576) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] close(3 [pid 5076] <... openat resumed>) = 4 [pid 5072] <... creat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5073] mkdir("./file0", 0777) = 0 [ 70.878437][ T5071] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.893125][ T5072] Remounting filesystem read-only [ 70.900112][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 70.909450][ T5072] NILFS (loop5): error -5 truncating bmap (ino=16) [ 70.911482][ T5070] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 70.916953][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [pid 5073] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5076] ioctl(4, LOOP_SET_FD, 3 [pid 5072] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5071] <... write resumed>) = -1 EIO (Input/output error) [pid 5071] exit_group(0) = ? [pid 5071] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5076] <... ioctl resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] close(3) = 0 [pid 5076] mkdir("./file0", 0777 [pid 5000] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5000] getdents64(3, [pid 5076] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./5/binderfs") = 0 [ 70.932715][ T5071] NILFS (loop2): error -5 truncating bmap (ino=16) [ 70.941465][ T5076] loop1: detected capacity change from 0 to 2048 [ 70.943186][ T5070] NILFS (loop0): error -5 truncating bmap (ino=16) [ 70.948076][ T5072] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 70.977751][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5000] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5073] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] chdir("./file0") = 0 [pid 5073] ioctl(4, LOOP_CLR_FD) = 0 [pid 5073] close(4) = 0 [pid 5073] creat("./file2", 040 [pid 5002] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... write resumed>) = -1 EIO (Input/output error) [pid 5070] exit_group(0) = ? [ 70.979673][ T5078] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.999629][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 71.010837][ T5073] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 71.020592][ T5072] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5076] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] lstat("./5/file0", [pid 5076] <... openat resumed>) = 3 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] chdir("./file0" [pid 5002] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(4, LOOP_CLR_FD [pid 5072] <... write resumed>) = -1 EIO (Input/output error) [pid 5002] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./5/binderfs") = 0 [pid 4998] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = 0 [pid 5072] exit_group(0 [pid 5002] <... openat resumed>) = 4 [pid 5076] close(4 [pid 5072] <... exit_group resumed>) = ? [ 71.030522][ T5079] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.034453][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.052851][ T5072] NILFS (loop5): error -5 truncating bmap (ino=16) [ 71.060103][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.069685][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.079130][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [pid 5002] fstat(4, [pid 5076] <... close resumed>) = 0 [pid 5072] +++ exited with 0 +++ [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] creat("./file2", 040 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [ 71.086325][ T5073] Remounting filesystem read-only [ 71.094448][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 71.096662][ T75] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 71.101580][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 71.101602][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.127889][ T5076] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 5003] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./5/file0" [pid 5003] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... creat resumed>) = 4 [pid 5073] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5003] fstat(3, [pid 5002] getdents64(3, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(3, [pid 5002] close(3 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] <... close resumed>) = 0 [pid 5003] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./5" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... rmdir resumed>) = 0 [pid 5003] lstat("./5/binderfs", [pid 5002] mkdir("./6", 0777 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5003] unlink("./5/binderfs") = 0 [pid 5003] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5080 ./strace-static-x86_64: Process 5080 attached [pid 5080] chdir("./6") = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... prctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] setpgid(0, 0 [pid 5000] lstat("./5/file0", [pid 5080] <... setpgid resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] write(3, "1000", 4 [pid 5000] <... openat resumed>) = 4 [pid 5080] <... write resumed>) = 4 [pid 5000] fstat(4, [pid 5080] close(3) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 71.128379][ T5073] NILFS (loop3): error -5 truncating bmap (ino=16) [ 71.140257][ T75] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 71.152973][ T5076] Remounting filesystem read-only [ 71.163226][ T5073] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 71.179411][ T5073] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5080] symlink("/dev/binderfs", "./binderfs" [pid 5000] getdents64(4, [pid 5080] <... symlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5080] memfd_create("syzkaller", 0 [pid 5000] close(4) = 0 [pid 5080] <... memfd_create resumed>) = 3 [pid 5076] <... creat resumed>) = 4 [pid 5000] rmdir("./5/file0" [pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5000] <... rmdir resumed>) = 0 [pid 5073] <... write resumed>) = -1 EIO (Input/output error) [ 71.209487][ T5076] NILFS (loop1): error -5 truncating bmap (ino=16) [ 71.222203][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.230102][ T5073] NILFS (loop3): error -5 truncating bmap (ino=16) [ 71.234292][ T75] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.246753][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5080] <... mmap resumed>) = 0x7f45ac090000 [pid 5073] exit_group(0 [pid 5000] getdents64(3, [pid 4998] <... umount2 resumed>) = 0 [pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5073] <... exit_group resumed>) = ? [pid 5000] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] +++ exited with 0 +++ [pid 5000] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./5" [pid 4998] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] mkdir("./6", 0777 [pid 4998] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] <... openat resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] fstat(4, [pid 5001] getdents64(3, [pid 5000] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 71.247973][ T75] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.261467][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 71.265495][ T5076] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 71.283296][ T75] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5080] <... write resumed>) = 1048576 [pid 5076] <... write resumed>) = -1 EIO (Input/output error) [pid 5001] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5076] exit_group(0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./5/binderfs", [pid 4998] close(4 [pid 5080] munmap(0x7f45ac090000, 1048576 [pid 5076] <... exit_group resumed>) = ? [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5081 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5076] +++ exited with 0 +++ [pid 5001] unlink("./5/binderfs" [pid 4998] rmdir("./5/file0" [pid 5001] <... unlink resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] <... rmdir resumed>) = 0 [pid 5001] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 4999] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 4999] fstat(3, [pid 4998] rmdir("./5" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... munmap resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] mkdir("./6", 0777 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [ 71.313629][ T5076] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 71.323533][ T5076] NILFS (loop1): error -5 truncating bmap (ino=16) [ 71.324916][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer ./strace-static-x86_64: Process 5081 attached [pid 5081] chdir("./6") = 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4999] lstat("./5/binderfs", [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] setpgid(0, 0) = 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1000", 4 [pid 4999] unlink("./5/binderfs" [pid 4998] close(3 [pid 5081] <... write resumed>) = 4 [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] close(3) = 0 [pid 5081] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... umount2 resumed>) = 0 [pid 5081] <... symlink resumed>) = 0 [ 71.355780][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 71.363816][ T5080] loop4: detected capacity change from 0 to 2048 [ 71.375674][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 71.383045][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.395041][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 ./strace-static-x86_64: Process 5082 attached [pid 5080] <... ioctl resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5082 [pid 5081] memfd_create("syzkaller", 0) = 3 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5082] chdir("./6" [pid 5080] close(3) = 0 [pid 5082] <... chdir resumed>) = 0 [pid 5080] mkdir("./file0", 0777 [pid 5003] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... mkdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... prctl resumed>) = 0 [pid 5003] lstat("./5/file0", [pid 5080] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5082] setpgid(0, 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5082] <... setpgid resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] write(3, "1000", 4 [pid 5003] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... write resumed>) = 4 [pid 5003] <... openat resumed>) = 4 [pid 5082] close(3 [pid 5003] fstat(4, [pid 5082] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5082] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(4, [pid 5082] <... symlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5082] memfd_create("syzkaller", 0 [pid 5003] getdents64(4, [pid 5082] <... memfd_create resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] close(4 [pid 5082] <... mmap resumed>) = 0x7f45ac090000 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./5/file0") = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./5") = 0 [ 71.395146][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 71.404044][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 71.411233][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.411501][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [pid 5003] mkdir("./6", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] <... mount resumed>) = 0 [pid 5003] close(3 [pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5081] <... write resumed>) = 1048576 [pid 5080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5081] munmap(0x7f45ac090000, 1048576) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5081] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... write resumed>) = 1048576 [pid 5080] <... openat resumed>) = 3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 71.469988][ T5083] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.492209][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.511971][ T5081] loop2: detected capacity change from 0 to 2048 [pid 5001] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... ioctl resumed>) = 0 [pid 5081] close(3 [pid 5082] munmap(0x7f45ac090000, 1048576 [pid 5080] chdir("./file0" [pid 5081] <... close resumed>) = 0 [pid 5081] mkdir("./file0", 0777 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... munmap resumed>) = 0 [pid 5080] <... chdir resumed>) = 0 [pid 5080] ioctl(4, LOOP_CLR_FD [pid 5001] lstat("./5/file0", [pid 5082] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... ioctl resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5084 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5080] close(4 [pid 5001] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... mkdir resumed>) = 0 [pid 5081] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5080] creat("./file2", 040 [pid 5082] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] close(3) = 0 [pid 5001] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5084 attached [pid 5082] mkdir("./file0", 0777 [pid 5001] fstat(4, [pid 5084] chdir("./6" [pid 5082] <... mkdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5082] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5001] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 5084] <... chdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] close(4 [pid 5084] <... prctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5084] setpgid(0, 0 [pid 5001] rmdir("./5/file0" [pid 5084] <... setpgid resumed>) = 0 [ 71.516553][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.531183][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.540676][ T5082] loop0: detected capacity change from 0 to 2048 [ 71.547768][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 71.559146][ T5080] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5080] <... creat resumed>) = 4 [pid 5001] getdents64(3, [pid 4999] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] write(3, "1000", 4 [pid 5082] <... mount resumed>) = 0 [pid 5084] <... write resumed>) = 4 [pid 5082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] close(3 [pid 5082] <... openat resumed>) = 3 [pid 5084] <... close resumed>) = 0 [pid 5082] chdir("./file0" [pid 5084] symlink("/dev/binderfs", "./binderfs" [pid 5082] <... chdir resumed>) = 0 [pid 5084] <... symlink resumed>) = 0 [ 71.586043][ T5080] Remounting filesystem read-only [ 71.591147][ T5080] NILFS (loop4): error -5 truncating bmap (ino=16) [ 71.596384][ T5085] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.611360][ T5080] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5082] ioctl(4, LOOP_CLR_FD [pid 5001] close(3 [pid 4999] lstat("./5/file0", [pid 5084] memfd_create("syzkaller", 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5084] <... memfd_create resumed>) = 3 [pid 5082] close(4 [pid 5001] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] <... close resumed>) = 0 [pid 5084] <... mmap resumed>) = 0x7f45ac090000 [pid 5082] creat("./file2", 040 [pid 5081] <... mount resumed>) = 0 [pid 5001] rmdir("./5" [pid 4999] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5081] chdir("./file0") = 0 [pid 5081] ioctl(4, LOOP_CLR_FD) = 0 [pid 5081] close(4) = 0 [pid 5081] creat("./file2", 040 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] mkdir("./6", 0777 [pid 4999] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [ 71.627632][ T5086] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.646395][ T5082] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 71.651381][ T5080] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 71.659306][ T5081] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 71.678042][ T5081] Remounting filesystem read-only [pid 5084] <... write resumed>) = 1048576 [pid 5080] <... write resumed>) = -1 EIO (Input/output error) [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] fstat(4, [pid 5084] munmap(0x7f45ac090000, 1048576 [pid 5080] exit_group(0 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... munmap resumed>) = 0 [pid 5080] <... exit_group resumed>) = ? [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] getdents64(4, [pid 5082] <... creat resumed>) = 4 [pid 5081] <... creat resumed>) = 4 [pid 5080] +++ exited with 0 +++ [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5080, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5001] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5082] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [ 71.683512][ T5081] NILFS (loop2): error -5 truncating bmap (ino=16) [ 71.685681][ T5080] NILFS (loop4): error -5 truncating bmap (ino=16) [ 71.704832][ T5082] Remounting filesystem read-only [ 71.710325][ T5082] NILFS (loop0): error -5 truncating bmap (ino=16) [ 71.722085][ T5082] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5081] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5002] <... restart_syscall resumed>) = 0 [pid 4999] close(4./strace-static-x86_64: Process 5087 attached [pid 5087] chdir("./6") = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5087] setpgid(0, 0) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1000", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] memfd_create("syzkaller", 0) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5087 [pid 4999] <... close resumed>) = 0 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... write resumed>) = -1 EIO (Input/output error) [pid 4999] rmdir("./5/file0" [pid 5081] <... write resumed>) = -1 EIO (Input/output error) [pid 5084] close(3 [pid 5081] exit_group(0 [pid 5082] exit_group(0 [pid 5002] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... exit_group resumed>) = ? [pid 5084] <... close resumed>) = 0 [pid 5082] <... exit_group resumed>) = ? [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5084] mkdir("./file0", 0777 [pid 5002] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5081] +++ exited with 0 +++ [pid 5002] fstat(3, [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] close(3 [pid 4998] fstat(3, [pid 5002] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] rmdir("./5" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] <... write resumed>) = 1048576 [pid 5002] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 5087] munmap(0x7f45ac090000, 1048576 [pid 5084] <... mount resumed>) = 0 [ 71.733569][ T5081] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 71.742908][ T5082] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 71.744692][ T5081] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 71.754311][ T5082] NILFS (loop0): error -5 truncating bmap (ino=16) [ 71.769118][ T5084] loop5: detected capacity change from 0 to 2048 [ 71.775716][ T5081] NILFS (loop2): error -5 truncating bmap (ino=16) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] mkdir("./6", 0777 [pid 4998] getdents64(3, [pid 5002] lstat("./6/binderfs", [pid 5000] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... mkdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] unlink("./6/binderfs" [pid 5000] fstat(3, [pid 4999] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5087] <... munmap resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5087] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5084] <... openat resumed>) = 3 [pid 4998] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... openat resumed>) = 4 [pid 5084] chdir("./file0" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5084] <... chdir resumed>) = 0 [pid 4998] lstat("./6/binderfs", [pid 5084] ioctl(4, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] close(3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 4998] unlink("./6/binderfs" [pid 5084] close(4 [pid 4998] <... unlink resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5000] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] creat("./file2", 040 [pid 4999] <... close resumed>) = 0 [ 71.801324][ T5088] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.813565][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 71.818447][ T5087] loop3: detected capacity change from 0 to 2048 [ 71.820950][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 71.834471][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] lstat("./6/binderfs", [pid 5087] <... ioctl resumed>) = 0 [pid 5087] close(3) = 0 [pid 5087] mkdir("./file0", 0777) = 0 [pid 5087] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, ""./strace-static-x86_64: Process 5089 attached [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5089 [ 71.846697][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 71.853690][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 71.854354][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.867307][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.879935][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.888378][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5000] unlink("./6/binderfs" [pid 5089] chdir("./6" [pid 5000] <... unlink resumed>) = 0 [pid 5089] <... chdir resumed>) = 0 [pid 5000] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5089] setpgid(0, 0) = 0 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1000", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] <... mount resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 71.890122][ T5084] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 71.898288][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 71.918876][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.919944][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 71.929669][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 71.937762][ T5084] Remounting filesystem read-only [pid 5089] memfd_create("syzkaller", 0) = 3 [pid 5087] <... openat resumed>) = 3 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] chdir("./file0") = 0 [pid 5087] ioctl(4, LOOP_CLR_FD [pid 5089] <... mmap resumed>) = 0x7f45ac090000 [pid 5087] <... ioctl resumed>) = 0 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5087] close(4 [pid 5089] <... write resumed>) = 1048576 [pid 5087] <... close resumed>) = 0 [ 71.956604][ T5090] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.961944][ T5084] NILFS (loop5): error -5 truncating bmap (ino=16) [ 71.975073][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 71.976033][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [pid 5087] creat("./file2", 040 [pid 5084] <... creat resumed>) = 4 [pid 5084] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5089] munmap(0x7f45ac090000, 1048576 [pid 5002] <... umount2 resumed>) = 0 [pid 5089] <... munmap resumed>) = 0 [pid 5002] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./6/file0", [pid 5089] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5089] <... openat resumed>) = 4 [pid 5002] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 72.004964][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.015656][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.016783][ T5084] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 72.025485][ T5087] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.047516][ T5089] loop1: detected capacity change from 0 to 2048 [pid 5002] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./6/file0" [pid 5089] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5089] close(3 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5089] <... close resumed>) = 0 [pid 5002] close(3 [pid 5089] mkdir("./file0", 0777 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./6") = 0 [pid 5002] mkdir("./7", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5089] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5089] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5091 [pid 5000] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... write resumed>) = -1 EIO (Input/output error) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5091 attached [ 72.054741][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 72.080159][ T5084] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.089746][ T5084] NILFS (loop5): error -5 truncating bmap (ino=16) [ 72.099304][ T5087] Remounting filesystem read-only [pid 4998] <... umount2 resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 5084] exit_group(0 [pid 5087] <... creat resumed>) = 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 72.105214][ T5087] NILFS (loop3): error -5 truncating bmap (ino=16) [pid 5089] <... mount resumed>) = 0 [pid 5089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5089] chdir("./file0") = 0 [pid 5089] ioctl(4, LOOP_CLR_FD) = 0 [pid 5089] close(4 [pid 5091] chdir("./7" [pid 5089] <... close resumed>) = 0 [pid 5087] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5084] <... exit_group resumed>) = ? [pid 5000] getdents64(4, [pid 4998] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] <... chdir resumed>) = 0 [pid 5089] creat("./file2", 040 [pid 5084] +++ exited with 0 +++ [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] getdents64(4, [pid 4998] lstat("./6/file0", [pid 5091] <... prctl resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5091] setpgid(0, 0 [pid 5003] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(4 [pid 4998] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] <... setpgid resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] rmdir("./6/file0" [pid 4998] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5091] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5091] write(3, "1000", 4 [pid 5003] fstat(3, [ 72.131653][ T5092] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.156681][ T5087] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5000] getdents64(3, [pid 4998] fstat(4, [pid 5091] <... write resumed>) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5091] close(3 [pid 5003] getdents64(3, [pid 5000] close(3 [pid 4998] getdents64(4, [pid 5091] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5091] symlink("/dev/binderfs", "./binderfs" [pid 5003] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./6" [pid 4998] getdents64(4, [pid 5091] <... symlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5091] memfd_create("syzkaller", 0 [pid 5003] lstat("./6/binderfs", [pid 5000] mkdir("./7", 0777 [pid 4998] close(4 [pid 5091] <... memfd_create resumed>) = 3 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] unlink("./6/binderfs" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] rmdir("./6/file0" [pid 5091] <... mmap resumed>) = 0x7f45ac090000 [pid 5003] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5089] <... creat resumed>) = 4 [pid 5003] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] getdents64(3, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5089] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5000] close(3 [pid 4998] close(3 [pid 5000] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] rmdir("./6") = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5093 [pid 4998] mkdir("./7", 0777) = 0 [ 72.175895][ T5089] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.185688][ T5087] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.197177][ T5089] Remounting filesystem read-only [ 72.202446][ T5089] NILFS (loop1): error -5 truncating bmap (ino=16) [ 72.210729][ T5087] NILFS (loop3): error -5 truncating bmap (ino=16) [ 72.218335][ T5089] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 5087] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5093 attached [pid 5093] chdir("./7" [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5094 [pid 5093] <... chdir resumed>) = 0 [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] exit_group(0 [pid 5093] <... prctl resumed>) = 0 [pid 5093] setpgid(0, 0) = 0 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5093] write(3, "1000", 4) = 4 [pid 5093] close(3./strace-static-x86_64: Process 5094 attached ) = 0 [pid 5087] <... exit_group resumed>) = ? [pid 5094] chdir("./7" [pid 5093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] +++ exited with 0 +++ [pid 5094] <... chdir resumed>) = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5093] memfd_create("syzkaller", 0 [pid 5094] <... prctl resumed>) = 0 [pid 5093] <... memfd_create resumed>) = 3 [pid 5091] <... write resumed>) = 1048576 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5094] setpgid(0, 0 [pid 5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] <... setpgid resumed>) = 0 [pid 5093] <... mmap resumed>) = 0x7f45ac090000 [pid 5091] munmap(0x7f45ac090000, 1048576 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 72.228207][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 72.240761][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 72.255035][ T5089] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5091] <... munmap resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5091] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... openat resumed>) = 3 [pid 5094] <... openat resumed>) = 3 [pid 5091] <... openat resumed>) = 4 [pid 5001] fstat(3, [pid 5094] write(3, "1000", 4 [pid 5091] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5094] <... write resumed>) = 4 [pid 5089] <... write resumed>) = -1 EIO (Input/output error) [pid 5001] getdents64(3, [pid 5094] close(3 [pid 5089] exit_group(0 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5094] <... close resumed>) = 0 [pid 5093] <... write resumed>) = 1048576 [pid 5089] <... exit_group resumed>) = ? [pid 5001] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] symlink("/dev/binderfs", "./binderfs" [pid 5093] munmap(0x7f45ac090000, 1048576 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./6/binderfs", [pid 5089] +++ exited with 0 +++ [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5094] <... symlink resumed>) = 0 [pid 5001] unlink("./6/binderfs" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5093] <... munmap resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5094] memfd_create("syzkaller", 0 [pid 5001] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 72.283489][ T5089] NILFS (loop1): error -5 truncating bmap (ino=16) [ 72.286305][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.300836][ T5091] loop4: detected capacity change from 0 to 2048 [ 72.310678][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4999] unlink("./6/binderfs" [pid 5094] <... memfd_create resumed>) = 3 [pid 5093] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5091] <... ioctl resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5091] close(3 [pid 4999] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] <... close resumed>) = 0 [pid 5091] mkdir("./file0", 0777) = 0 [pid 5091] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5093] <... openat resumed>) = 4 [pid 5094] <... mmap resumed>) = 0x7f45ac090000 [ 72.325499][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.325768][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 72.334948][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 72.348680][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 72.358317][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 72.360494][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5093] ioctl(4, LOOP_SET_FD, 3 [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5093] <... ioctl resumed>) = 0 [pid 5093] close(3) = 0 [pid 5093] mkdir("./file0", 0777) = 0 [pid 5093] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5091] <... mount resumed>) = 0 [pid 5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5091] chdir("./file0") = 0 [pid 5091] ioctl(4, LOOP_CLR_FD) = 0 [pid 5091] close(4) = 0 [ 72.377479][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.382378][ T5093] loop2: detected capacity change from 0 to 2048 [ 72.387906][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.402269][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 72.403821][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [pid 5091] creat("./file2", 040 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5094] <... write resumed>) = 1048576 [pid 5094] munmap(0x7f45ac090000, 1048576 [ 72.432687][ T5091] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.442751][ T5095] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.465112][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5003] getdents64(4, [pid 5094] <... munmap resumed>) = 0 [pid 5093] <... mount resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5094] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] getdents64(4, [pid 5094] <... openat resumed>) = 4 [pid 5093] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5093] chdir("./file0" [ 72.478531][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.479390][ T5096] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.490594][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.508080][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 72.518794][ T5091] Remounting filesystem read-only [ 72.523906][ T5091] NILFS (loop4): error -5 truncating bmap (ino=16) [pid 5003] close(4 [pid 5093] <... chdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5093] ioctl(4, LOOP_CLR_FD [pid 5003] rmdir("./6/file0" [pid 5094] <... ioctl resumed>) = 0 [pid 5093] <... ioctl resumed>) = 0 [pid 5094] close(3 [pid 5093] close(4 [pid 5003] <... rmdir resumed>) = 0 [pid 5094] <... close resumed>) = 0 [pid 5093] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 4999] <... umount2 resumed>) = 0 [pid 5093] creat("./file2", 040 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [ 72.531650][ T5094] loop0: detected capacity change from 0 to 2048 [pid 5003] close(3 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./6") = 0 [pid 5094] mkdir("./file0", 0777 [pid 5003] mkdir("./7", 0777 [pid 5001] <... openat resumed>) = 4 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] fstat(4, [pid 5094] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5094] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5003] <... openat resumed>) = 3 [pid 5001] getdents64(4, [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5091] <... creat resumed>) = 4 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5091] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5003] close(3 [pid 5001] getdents64(4, [pid 5003] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] close(4) = 0 [pid 5001] rmdir("./6/file0") = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5097 [pid 5001] getdents64(3, [pid 4999] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./6" [pid 4999] lstat("./6/file0", ./strace-static-x86_64: Process 5097 attached [pid 5001] <... rmdir resumed>) = 0 [pid 5097] chdir("./7" [pid 5001] mkdir("./7", 0777 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5097] <... chdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL [ 72.555347][ T5093] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.576880][ T5091] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5097] <... prctl resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5097] setpgid(0, 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5097] <... setpgid resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] close(3 [pid 5097] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 5097] write(3, "1000", 4 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5097] <... write resumed>) = 4 [pid 5094] <... mount resumed>) = 0 [pid 5097] close(3 [pid 5094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5099 [pid 4999] <... openat resumed>) = 4 [pid 5097] <... close resumed>) = 0 [pid 5094] <... openat resumed>) = 3 [pid 4999] fstat(4, ./strace-static-x86_64: Process 5099 attached [pid 5097] symlink("/dev/binderfs", "./binderfs" [pid 5094] chdir("./file0" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] chdir("./7" [pid 5097] <... symlink resumed>) = 0 [pid 5099] <... chdir resumed>) = 0 [pid 5097] memfd_create("syzkaller", 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5097] <... memfd_create resumed>) = 3 [pid 5099] <... prctl resumed>) = 0 [pid 5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5099] setpgid(0, 0 [pid 5097] <... mmap resumed>) = 0x7f45ac090000 [pid 5099] <... setpgid resumed>) = 0 [pid 5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5094] <... chdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5094] ioctl(4, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5099] <... openat resumed>) = 3 [pid 5094] <... ioctl resumed>) = 0 [pid 4999] getdents64(4, [pid 5099] write(3, "1000", 4 [pid 5094] close(4 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5099] <... write resumed>) = 4 [pid 5094] <... close resumed>) = 0 [pid 4999] close(4 [pid 5099] close(3 [pid 5094] creat("./file2", 040 [pid 4999] <... close resumed>) = 0 [pid 5099] <... close resumed>) = 0 [ 72.605131][ T5093] Remounting filesystem read-only [ 72.613747][ T5098] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.630310][ T5091] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.633039][ T5093] NILFS (loop2): error -5 truncating bmap (ino=16) [pid 5099] symlink("/dev/binderfs", "./binderfs" [pid 4999] rmdir("./6/file0" [pid 5099] <... symlink resumed>) = 0 [pid 5099] memfd_create("syzkaller", 0) = 3 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./6") = 0 [pid 4999] mkdir("./7", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5097] <... write resumed>) = 1048576 [pid 5093] <... creat resumed>) = 4 [pid 4999] <... openat resumed>) = 3 [pid 5093] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5097] munmap(0x7f45ac090000, 1048576) = 0 [pid 5097] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 72.669609][ T5094] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.688612][ T5091] NILFS (loop4): error -5 truncating bmap (ino=16) [ 72.695576][ T5094] Remounting filesystem read-only [ 72.701561][ T5094] NILFS (loop0): error -5 truncating bmap (ino=16) [ 72.710030][ T5093] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5097] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5091] <... write resumed>) = -1 EIO (Input/output error) [pid 5091] exit_group(0 [pid 5094] <... creat resumed>) = 4 [pid 4999] close(3 [pid 5091] <... exit_group resumed>) = ? [pid 4999] <... close resumed>) = 0 [pid 5094] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5091] +++ exited with 0 +++ [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5099] <... write resumed>) = 1048576 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5099] munmap(0x7f45ac090000, 1048576 [pid 5002] fstat(3, [pid 5099] <... munmap resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5099] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] <... openat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5002] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./7/binderfs") = 0 [pid 5002] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5100 attached [pid 5100] chdir("./7") = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] <... ioctl resumed>) = 0 [ 72.716321][ T5097] loop5: detected capacity change from 0 to 2048 [ 72.738906][ T5094] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 72.750779][ T5099] loop3: detected capacity change from 0 to 2048 [ 72.754477][ T5093] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5100 [pid 5100] write(3, "1000", 4 [pid 5097] close(3 [pid 5100] <... write resumed>) = 4 [pid 5097] <... close resumed>) = 0 [pid 5100] close(3 [pid 5097] mkdir("./file0", 0777 [pid 5100] <... close resumed>) = 0 [pid 5097] <... mkdir resumed>) = 0 [pid 5100] symlink("/dev/binderfs", "./binderfs" [pid 5097] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5100] <... symlink resumed>) = 0 [pid 5100] memfd_create("syzkaller", 0) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5099] <... ioctl resumed>) = 0 [pid 5099] close(3) = 0 [pid 5099] mkdir("./file0", 0777) = 0 [pid 5099] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5094] <... write resumed>) = -1 EIO (Input/output error) [pid 5093] <... write resumed>) = -1 EIO (Input/output error) [ 72.768004][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 72.778201][ T5094] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.780100][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 72.800250][ T5093] NILFS (loop2): error -5 truncating bmap (ino=16) [ 72.807917][ T5094] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5094] exit_group(0 [pid 5093] exit_group(0 [pid 5094] <... exit_group resumed>) = ? [pid 5093] <... exit_group resumed>) = ? [pid 5094] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5093] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5000] fstat(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5000] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./7/binderfs", [pid 4998] lstat("./7/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./7/binderfs" [pid 4998] unlink("./7/binderfs" [pid 5000] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5000] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5100] <... write resumed>) = 1048576 [ 72.815697][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.826167][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.840020][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.850437][ T5101] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.861992][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [pid 5100] munmap(0x7f45ac090000, 1048576) = 0 [pid 5097] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5100] <... openat resumed>) = 4 [pid 5097] <... openat resumed>) = 3 [pid 5100] ioctl(4, LOOP_SET_FD, 3 [pid 5097] chdir("./file0") = 0 [pid 5002] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./7/file0", [pid 5099] <... mount resumed>) = 0 [pid 5097] ioctl(4, LOOP_CLR_FD [pid 5099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5097] <... ioctl resumed>) = 0 [pid 5099] <... openat resumed>) = 3 [pid 5097] close(4 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] chdir("./file0" [pid 5097] <... close resumed>) = 0 [pid 5099] <... chdir resumed>) = 0 [pid 5097] creat("./file2", 040 [pid 5099] ioctl(4, LOOP_CLR_FD) = 0 [pid 5099] close(4) = 0 [ 72.862624][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 72.871603][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 72.885666][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 72.892985][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.903034][ T5102] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.905476][ T5100] loop1: detected capacity change from 0 to 2048 [pid 5099] creat("./file2", 040 [pid 5002] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./7/file0") = 0 [pid 5100] <... ioctl resumed>) = 0 [pid 5100] close(3) = 0 [pid 5100] mkdir("./file0", 0777) = 0 [ 72.928963][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 72.937441][ T5097] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.947288][ T5099] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 72.961025][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.961722][ T5097] Remounting filesystem read-only [pid 5100] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./7") = 0 [pid 5002] mkdir("./8", 0777) = 0 [pid 5099] <... creat resumed>) = 4 [pid 5099] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5097] <... creat resumed>) = 4 [ 72.974939][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 72.985918][ T5099] Remounting filesystem read-only [ 72.991593][ T5099] NILFS (loop3): error -5 truncating bmap (ino=16) [ 73.000025][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.004420][ T5097] NILFS (loop5): error -5 truncating bmap (ino=16) [ 73.011133][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5097] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [ 73.017016][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 73.026411][ T5099] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 73.043254][ T5097] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 73.045148][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.066453][ T5099] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached , child_tidptr=0x555555a555d0) = 5103 [pid 5100] <... mount resumed>) = 0 [pid 5103] chdir("./8" [pid 5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5103] <... chdir resumed>) = 0 [pid 5100] <... openat resumed>) = 3 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] chdir("./file0") = 0 [pid 5103] <... prctl resumed>) = 0 [pid 5100] ioctl(4, LOOP_CLR_FD [pid 5103] setpgid(0, 0 [pid 5100] <... ioctl resumed>) = 0 [pid 5100] close(4 [pid 5103] <... setpgid resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5100] creat("./file2", 040 [pid 5103] <... openat resumed>) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5103] memfd_create("syzkaller", 0) = 3 [pid 5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5099] <... write resumed>) = -1 EIO (Input/output error) [pid 5099] exit_group(0) = ? [pid 5099] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5001] unlink("./7/binderfs") = 0 [ 73.074563][ T5097] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.077147][ T5104] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.101254][ T5099] NILFS (loop3): error -5 truncating bmap (ino=16) [ 73.101608][ T5100] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.109228][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [pid 5001] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5103] <... write resumed>) = 1048576 [pid 5000] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 5103] munmap(0x7f45ac090000, 1048576 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./7/file0") = 0 [pid 5000] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./7") = 0 [ 73.152122][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 73.160212][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 73.173240][ T5100] Remounting filesystem read-only [ 73.175151][ T5097] NILFS (loop5): error -5 truncating bmap (ino=16) [ 73.190816][ T5100] NILFS (loop1): error -5 truncating bmap (ino=16) [pid 5000] mkdir("./8", 0777 [pid 5103] <... munmap resumed>) = 0 [pid 5100] <... creat resumed>) = 4 [pid 5000] <... mkdir resumed>) = 0 [pid 5103] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5100] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5103] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5097] <... write resumed>) = -1 EIO (Input/output error) [pid 5097] exit_group(0) = ? [pid 5097] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5103] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... openat resumed>) = 3 [pid 5003] unlink("./7/binderfs") = 0 [pid 5003] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [ 73.202972][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.213558][ T5100] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 73.226379][ T5103] loop4: detected capacity change from 0 to 2048 [ 73.228221][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.244156][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5103] <... ioctl resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = 0 [pid 5103] close(3 [pid 5100] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5105 attached [pid 5105] chdir("./8") = 0 [ 73.262581][ T5100] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.270236][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 73.271798][ T5100] NILFS (loop1): error -5 truncating bmap (ino=16) [ 73.279569][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 73.294328][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 73.294351][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] memfd_create("syzkaller", 0) = 3 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5103] <... close resumed>) = 0 [pid 5100] exit_group(0 [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5105 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5103] mkdir("./file0", 0777) = 0 [pid 5100] <... exit_group resumed>) = ? [pid 4998] lstat("./7/file0", [pid 5103] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5100] +++ exited with 0 +++ [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4998] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 4998] <... openat resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 4999] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] getdents64(4, [pid 4999] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, [pid 4999] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] unlink("./7/binderfs" [pid 4998] close(4 [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./7/file0") = 0 [ 73.294371][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.294390][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.294655][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [pid 4998] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./7") = 0 [pid 4998] mkdir("./8", 0777) = 0 [pid 5105] <... write resumed>) = 1048576 [pid 5105] munmap(0x7f45ac090000, 1048576) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5103] <... mount resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5105] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 73.353664][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 73.369156][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 73.377307][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.378561][ T5106] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... umount2 resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5103] <... openat resumed>) = 3 [pid 5003] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5103] chdir("./file0" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] close(3 [pid 5103] <... chdir resumed>) = 0 [pid 5003] lstat("./7/file0", [pid 4998] <... close resumed>) = 0 [pid 5103] ioctl(4, LOOP_CLR_FD [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5103] <... ioctl resumed>) = 0 [pid 5003] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] close(4 [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5107 [pid 5001] <... openat resumed>) = 4 [pid 5103] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5103] creat("./file2", 040 [pid 5003] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./7/file0") = 0 [pid 5001] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./7") = 0 [pid 5001] mkdir("./8", 0777 [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [ 73.388321][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.399027][ T5105] loop2: detected capacity change from 0 to 2048 [ 73.414164][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.439137][ T5103] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] close(4./strace-static-x86_64: Process 5107 attached ./strace-static-x86_64: Process 5108 attached [pid 5105] <... ioctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5108 [pid 5108] chdir("./8") = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5107] chdir("./8" [pid 5003] rmdir("./7/file0" [pid 5105] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5107] <... chdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5107] <... prctl resumed>) = 0 [pid 5103] <... creat resumed>) = 4 [pid 5003] close(3 [pid 5107] setpgid(0, 0) = 0 [pid 5103] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5003] <... close resumed>) = 0 [pid 5105] <... close resumed>) = 0 [pid 5105] mkdir("./file0", 0777) = 0 [pid 5108] <... openat resumed>) = 3 [pid 5108] write(3, "1000", 4) = 4 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5108] close(3) = 0 [pid 5108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5108] memfd_create("syzkaller", 0) = 3 [pid 5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5003] rmdir("./7" [pid 5107] <... openat resumed>) = 3 [pid 5003] <... rmdir resumed>) = 0 [pid 5107] write(3, "1000", 4 [pid 5003] mkdir("./8", 0777 [pid 5107] <... write resumed>) = 4 [pid 5003] <... mkdir resumed>) = 0 [pid 5107] close(3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5107] <... close resumed>) = 0 [pid 5107] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... openat resumed>) = 3 [pid 5107] <... symlink resumed>) = 0 [pid 5107] memfd_create("syzkaller", 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = 0 [pid 5107] <... memfd_create resumed>) = 3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5107] <... mmap resumed>) = 0x7f45ac090000 [pid 5003] <... close resumed>) = 0 [pid 4999] lstat("./7/file0", [pid 5108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 73.450558][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 73.461482][ T5103] Remounting filesystem read-only [ 73.470202][ T5103] NILFS (loop4): error -5 truncating bmap (ino=16) [ 73.484797][ T5103] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4999] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5110 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] <... mount resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4999] <... openat resumed>) = 4 [pid 5105] chdir("./file0") = 0 [pid 5105] ioctl(4, LOOP_CLR_FD) = 0 [pid 5105] close(4) = 0 [pid 5105] creat("./file2", 040 [pid 5107] <... write resumed>) = 1048576 [pid 4999] fstat(4, [pid 5107] munmap(0x7f45ac090000, 1048576 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5107] <... munmap resumed>) = 0 [pid 4999] getdents64(4, ./strace-static-x86_64: Process 5110 attached [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5110] chdir("./8") = 0 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5110] setpgid(0, 0) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5110] <... openat resumed>) = 3 [pid 5107] <... openat resumed>) = 4 [pid 4999] <... close resumed>) = 0 [pid 5107] ioctl(4, LOOP_SET_FD, 3 [pid 4999] rmdir("./7/file0" [pid 5110] write(3, "1000", 4 [pid 5103] <... write resumed>) = -1 EIO (Input/output error) [pid 5110] <... write resumed>) = 4 [ 73.514783][ T5109] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.528988][ T5103] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.533031][ T5105] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.552295][ T5103] NILFS (loop4): error -5 truncating bmap (ino=16) [pid 5110] close(3) = 0 [pid 5110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5110] memfd_create("syzkaller", 0) = 3 [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5108] <... write resumed>) = 1048576 [pid 5103] exit_group(0 [pid 4999] <... rmdir resumed>) = 0 [pid 5107] <... ioctl resumed>) = 0 [pid 5103] <... exit_group resumed>) = ? [pid 5107] close(3 [pid 4999] getdents64(3, [pid 5103] +++ exited with 0 +++ [pid 5107] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5107] mkdir("./file0", 0777 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] close(3 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5107] <... mkdir resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5107] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] rmdir("./7" [pid 5108] munmap(0x7f45ac090000, 1048576 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] mkdir("./8", 0777 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5108] <... munmap resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] getdents64(3, [pid 5108] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] <... openat resumed>) = 3 [pid 5108] <... openat resumed>) = 4 [pid 5002] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5108] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./8/binderfs", [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] close(3 [pid 5002] unlink("./8/binderfs") = 0 [pid 4999] <... close resumed>) = 0 [pid 5002] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 73.571663][ T5107] loop0: detected capacity change from 0 to 2048 [ 73.602721][ T5108] loop3: detected capacity change from 0 to 2048 [ 73.611151][ T5105] Remounting filesystem read-only [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5112 attached [pid 5112] chdir("./8" [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5112 [pid 5107] <... mount resumed>) = 0 [pid 5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5112] <... chdir resumed>) = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs" [pid 5108] <... ioctl resumed>) = 0 [pid 5112] <... symlink resumed>) = 0 [pid 5108] close(3) = 0 [pid 5112] memfd_create("syzkaller", 0 [pid 5108] mkdir("./file0", 0777 [pid 5112] <... memfd_create resumed>) = 3 [pid 5108] <... mkdir resumed>) = 0 [pid 5107] <... openat resumed>) = 3 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5108] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5112] <... mmap resumed>) = 0x7f45ac090000 [pid 5107] chdir("./file0") = 0 [pid 5110] <... write resumed>) = 1048576 [pid 5107] ioctl(4, LOOP_CLR_FD) = 0 [pid 5105] <... creat resumed>) = 4 [pid 5107] close(4 [ 73.631300][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 73.641496][ T5111] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.667126][ T5105] NILFS (loop2): error -5 truncating bmap (ino=16) [ 73.669159][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [pid 5105] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5107] <... close resumed>) = 0 [pid 5110] munmap(0x7f45ac090000, 1048576) = 0 [pid 5110] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5110] ioctl(4, LOOP_SET_FD, 3 [pid 5107] creat("./file2", 040 [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5110] <... ioctl resumed>) = 0 [pid 5110] close(3) = 0 [ 73.683263][ T5105] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 73.690223][ T5110] loop5: detected capacity change from 0 to 2048 [ 73.703141][ T5107] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.717612][ T5114] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5110] mkdir("./file0", 0777 [pid 5108] <... mount resumed>) = 0 [pid 5108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5108] chdir("./file0") = 0 [pid 5108] ioctl(4, LOOP_CLR_FD [pid 5110] <... mkdir resumed>) = 0 [pid 5108] <... ioctl resumed>) = 0 [pid 5112] <... write resumed>) = 1048576 [pid 5108] close(4 [pid 5110] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5108] <... close resumed>) = 0 [pid 5108] creat("./file2", 040 [pid 5112] munmap(0x7f45ac090000, 1048576) = 0 [pid 5112] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 73.723875][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.738195][ T5105] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.753915][ T5107] Remounting filesystem read-only [ 73.760669][ T5108] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.770676][ T5107] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5107] <... creat resumed>) = 4 [pid 5105] <... write resumed>) = -1 EIO (Input/output error) [pid 5107] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5105] exit_group(0) = ? [ 73.778190][ T5105] NILFS (loop2): error -5 truncating bmap (ino=16) [ 73.782249][ T5112] loop1: detected capacity change from 0 to 2048 [ 73.798431][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.808672][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.818480][ T5107] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 73.819884][ T5108] Remounting filesystem read-only [pid 5110] <... mount resumed>) = 0 [pid 5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5110] chdir("./file0") = 0 [pid 5110] ioctl(4, LOOP_CLR_FD) = 0 [pid 5112] <... ioctl resumed>) = 0 [pid 5110] close(4 [pid 5112] close(3 [pid 5110] <... close resumed>) = 0 [pid 5112] <... close resumed>) = 0 [pid 5110] creat("./file2", 040 [pid 5112] mkdir("./file0", 0777) = 0 [pid 5105] +++ exited with 0 +++ [pid 5112] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5000] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 73.829185][ T5107] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.842527][ T5115] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.855441][ T5110] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.866829][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 73.876447][ T5107] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5000] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5107] <... write resumed>) = -1 EIO (Input/output error) [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5108] <... creat resumed>) = 4 [pid 5107] exit_group(0 [pid 5002] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(3, [ 73.892519][ T5108] NILFS (loop3): error -5 truncating bmap (ino=16) [ 73.901375][ T5110] Remounting filesystem read-only [ 73.906575][ T5108] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 73.906782][ T5108] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.926162][ T5110] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 5108] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5107] <... exit_group resumed>) = ? [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5107] +++ exited with 0 +++ [pid 5002] lstat("./8/file0", [pid 5000] getdents64(3, [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5107, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... restart_syscall resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] lstat("./8/binderfs", [pid 5002] <... openat resumed>) = 4 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] fstat(4, [pid 5000] unlink("./8/binderfs" [pid 4998] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(4, [pid 5000] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 4998] fstat(3, [pid 5002] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(4 [pid 4998] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] rmdir("./8/file0" [pid 4998] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 4998] lstat("./8/binderfs", [pid 5002] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] close(3 [pid 4998] unlink("./8/binderfs" [pid 5002] <... close resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5002] rmdir("./8" [pid 4998] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./9", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5117 ./strace-static-x86_64: Process 5117 attached [pid 5117] chdir("./9") = 0 [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5117] setpgid(0, 0) = 0 [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5117] write(3, "1000", 4) = 4 [pid 5117] close(3) = 0 [pid 5117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5117] memfd_create("syzkaller", 0) = 3 [pid 5112] <... mount resumed>) = 0 [pid 5110] <... creat resumed>) = 4 [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5112] chdir("./file0") = 0 [pid 5112] ioctl(4, LOOP_CLR_FD) = 0 [pid 5112] close(4) = 0 [pid 5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5112] creat("./file2", 040 [pid 5117] <... mmap resumed>) = 0x7f45ac090000 [ 73.932832][ T5116] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.945083][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 73.952072][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 73.954424][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 73.977499][ T5112] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 73.986834][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 73.987824][ T5108] NILFS (loop3): error -5 truncating bmap (ino=16) [ 73.995541][ T5110] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 74.002314][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.011047][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.038171][ T5112] Remounting filesystem read-only [pid 5110] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [ 74.041838][ T5110] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.062860][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.068332][ T5112] NILFS (loop1): error -5 truncating bmap (ino=16) [ 74.072280][ T5110] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 5117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5117] munmap(0x7f45ac090000, 1048576) = 0 [pid 5117] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5117] ioctl(4, LOOP_SET_FD, 3 [pid 5110] <... write resumed>) = -1 EIO (Input/output error) [pid 5108] <... write resumed>) = -1 EIO (Input/output error) [pid 5112] <... creat resumed>) = 4 [pid 5112] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5117] <... ioctl resumed>) = 0 [pid 5117] close(3 [pid 5110] exit_group(0 [pid 5108] exit_group(0 [pid 5110] <... exit_group resumed>) = ? [pid 5108] <... exit_group resumed>) = ? [pid 5117] <... close resumed>) = 0 [pid 5117] mkdir("./file0", 0777 [pid 5110] +++ exited with 0 +++ [pid 5108] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5003] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5003] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] unlink("./8/binderfs") = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 74.085476][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.091946][ T5117] loop4: detected capacity change from 0 to 2048 [ 74.095924][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 74.104316][ T5112] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 74.122011][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5001] getdents64(3, [pid 5000] <... umount2 resumed>) = 0 [pid 5117] <... mkdir resumed>) = 0 [pid 5117] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./8/file0", [pid 5001] lstat("./8/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./8/binderfs" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 74.145675][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 74.164123][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 74.165249][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 74.175662][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [pid 5000] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [ 74.187466][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.196513][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.196814][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 74.214700][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.215338][ T5112] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.224099][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5000] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./8/file0") = 0 [pid 5000] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./8") = 0 [pid 5000] mkdir("./9", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4998] <... umount2 resumed>) = 0 [ 74.233172][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.243294][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 74.270839][ T5112] NILFS (loop1): error -5 truncating bmap (ino=16) [ 74.279768][ T5118] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] close(3 [pid 5117] <... mount resumed>) = 0 [pid 5117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5117] chdir("./file0") = 0 [pid 5117] ioctl(4, LOOP_CLR_FD [pid 5000] <... close resumed>) = 0 [pid 5117] <... ioctl resumed>) = 0 [pid 5117] close(4) = 0 [pid 5117] creat("./file2", 040 [pid 4998] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5119 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./8/file0") = 0 [pid 4998] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./8") = 0 [pid 4998] mkdir("./9", 0777./strace-static-x86_64: Process 5119 attached [pid 5119] chdir("./9" [pid 4998] <... mkdir resumed>) = 0 [pid 5119] <... chdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... openat resumed>) = 3 [pid 5119] <... prctl resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5119] setpgid(0, 0 [pid 4998] close(3 [pid 5119] <... setpgid resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5112] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5112] exit_group(0) = ? [pid 5119] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5119] write(3, "1000", 4 [pid 5001] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5120 [ 74.282476][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.305221][ T5117] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5119] <... write resumed>) = 4 [pid 5112] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5120 attached [pid 5120] chdir("./9") = 0 [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5120] setpgid(0, 0) = 0 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5120] write(3, "1000", 4 [pid 5119] close(3 [pid 5001] lstat("./8/file0", [pid 5120] <... write resumed>) = 4 [pid 5120] close(3) = 0 [pid 5120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5120] memfd_create("syzkaller", 0) = 3 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5119] <... close resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5119] <... symlink resumed>) = 0 [pid 5001] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5119] memfd_create("syzkaller", 0 [pid 5001] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 5119] <... memfd_create resumed>) = 3 [pid 5001] <... openat resumed>) = 4 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] fstat(4, [pid 4999] getdents64(3, [pid 5119] <... mmap resumed>) = 0x7f45ac090000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./8/binderfs") = 0 [pid 4999] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5117] <... creat resumed>) = 4 [ 74.346421][ T5117] Remounting filesystem read-only [ 74.352277][ T5117] NILFS (loop4): error -5 truncating bmap (ino=16) [ 74.379052][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.388797][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5117] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5001] close(4) = 0 [pid 5001] rmdir("./8/file0" [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] <... rmdir resumed>) = 0 [pid 5120] <... write resumed>) = 1048576 [pid 5120] munmap(0x7f45ac090000, 1048576 [pid 5001] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./8") = 0 [pid 5001] mkdir("./9", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5120] <... munmap resumed>) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5120] <... openat resumed>) = 4 [pid 5120] ioctl(4, LOOP_SET_FD, 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5121 [ 74.391151][ T5117] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 74.406015][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 74.415468][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.425721][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 74.439592][ T5120] loop0: detected capacity change from 0 to 2048 [pid 5120] <... ioctl resumed>) = 0 [pid 5120] close(3) = 0 [pid 5120] mkdir("./file0", 0777 [pid 5119] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 5121 attached [pid 5119] munmap(0x7f45ac090000, 1048576 [pid 5120] <... mkdir resumed>) = 0 [pid 5120] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5121] chdir("./9") = 0 [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5121] setpgid(0, 0) = 0 [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5119] <... munmap resumed>) = 0 [pid 5121] write(3, "1000", 4 [pid 5119] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5121] <... write resumed>) = 4 [pid 5119] <... openat resumed>) = 4 [ 74.448157][ T5117] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.461345][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.479492][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5121] close(3 [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... umount2 resumed>) = 0 [pid 5121] <... close resumed>) = 0 [pid 5003] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./8/file0") = 0 [pid 5003] getdents64(3, [pid 5121] symlink("/dev/binderfs", "./binderfs" [pid 5119] <... ioctl resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5121] <... symlink resumed>) = 0 [pid 5119] close(3 [pid 5117] <... write resumed>) = -1 EIO (Input/output error) [pid 5003] <... close resumed>) = 0 [pid 5121] memfd_create("syzkaller", 0 [pid 5119] <... close resumed>) = 0 [pid 5117] exit_group(0 [pid 5121] <... memfd_create resumed>) = 3 [pid 5119] mkdir("./file0", 0777 [pid 5117] <... exit_group resumed>) = ? [pid 5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5120] <... mount resumed>) = 0 [pid 5119] <... mkdir resumed>) = 0 [pid 5117] +++ exited with 0 +++ [pid 5121] <... mmap resumed>) = 0x7f45ac090000 [pid 5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5119] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5120] <... openat resumed>) = 3 [pid 5003] rmdir("./8" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5117, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] <... umount2 resumed>) = 0 [pid 5120] chdir("./file0" [pid 5003] <... rmdir resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5120] <... chdir resumed>) = 0 [ 74.492336][ T5117] NILFS (loop4): error -5 truncating bmap (ino=16) [ 74.499408][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 74.509121][ T5119] loop2: detected capacity change from 0 to 2048 [ 74.518209][ T5122] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] mkdir("./9", 0777 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5120] ioctl(4, LOOP_CLR_FD [pid 5119] <... mount resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5120] <... ioctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5120] close(4 [pid 5003] <... openat resumed>) = 3 [pid 5002] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5120] <... close resumed>) = 0 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5120] creat("./file2", 040 [pid 5119] <... openat resumed>) = 3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./8/file0", [pid 5121] <... write resumed>) = 1048576 [pid 5003] close(3 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] fstat(3, [pid 4999] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5121] munmap(0x7f45ac090000, 1048576 [pid 5119] chdir("./file0" [pid 5002] getdents64(3, [pid 4999] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5121] <... munmap resumed>) = 0 [pid 5119] <... chdir resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5124 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] <... openat resumed>) = 4 [pid 5121] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5119] ioctl(4, LOOP_CLR_FD [pid 5002] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(4, [pid 5121] <... openat resumed>) = 4 [pid 5119] <... ioctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5121] ioctl(4, LOOP_SET_FD, 3 [pid 5119] close(4 [pid 5002] lstat("./9/binderfs", [pid 4999] getdents64(4, [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5124 attached [ 74.563266][ T5123] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.584967][ T5120] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.595868][ T5120] Remounting filesystem read-only [pid 5002] unlink("./9/binderfs" [pid 4999] getdents64(4, [pid 5124] chdir("./9" [pid 5002] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5124] <... chdir resumed>) = 0 [pid 5002] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(4 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5119] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5124] <... prctl resumed>) = 0 [pid 4999] rmdir("./8/file0" [pid 5124] setpgid(0, 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5124] <... setpgid resumed>) = 0 [pid 4999] getdents64(3, [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5124] <... openat resumed>) = 3 [pid 4999] close(3 [pid 5124] write(3, "1000", 4 [pid 5121] <... ioctl resumed>) = 0 [pid 5120] <... creat resumed>) = 4 [pid 5119] creat("./file2", 040 [pid 4999] <... close resumed>) = 0 [pid 5124] <... write resumed>) = 4 [pid 5121] close(3 [pid 5120] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 4999] rmdir("./8" [pid 5124] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 5124] <... close resumed>) = 0 [pid 4999] mkdir("./9", 0777 [pid 5124] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... mkdir resumed>) = 0 [pid 5124] <... symlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5124] memfd_create("syzkaller", 0 [pid 4999] <... openat resumed>) = 3 [pid 5124] <... memfd_create resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5121] <... close resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5124] <... mmap resumed>) = 0x7f45ac090000 [pid 4999] close(3 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5121] mkdir("./file0", 0777 [pid 4999] <... close resumed>) = 0 [pid 5121] <... mkdir resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5121] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5125 ./strace-static-x86_64: Process 5125 attached [pid 5125] chdir("./9") = 0 [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 74.610060][ T5121] loop3: detected capacity change from 0 to 2048 [ 74.617211][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 74.624977][ T5120] NILFS (loop0): error -5 truncating bmap (ino=16) [ 74.633309][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 74.634955][ T5119] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.650606][ T5120] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5125] setpgid(0, 0) = 0 [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5125] write(3, "1000", 4) = 4 [pid 5125] close(3) = 0 [pid 5125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5125] memfd_create("syzkaller", 0) = 3 [pid 5125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5121] <... mount resumed>) = 0 [pid 5121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5121] chdir("./file0") = 0 [pid 5121] ioctl(4, LOOP_CLR_FD) = 0 [pid 5121] close(4) = 0 [pid 5121] creat("./file2", 040 [pid 5124] <... write resumed>) = 1048576 [pid 5125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 74.675313][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.687759][ T5120] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.697198][ T5126] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.715910][ T5121] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5124] munmap(0x7f45ac090000, 1048576) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5124] ioctl(4, LOOP_SET_FD, 3 [pid 5125] <... write resumed>) = 1048576 [pid 5125] munmap(0x7f45ac090000, 1048576) = 0 [pid 5125] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 74.734663][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.740273][ T5124] loop5: detected capacity change from 0 to 2048 [ 74.744136][ T5119] Remounting filesystem read-only [ 74.755446][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.765767][ T5121] Remounting filesystem read-only [ 74.770869][ T5120] NILFS (loop0): error -5 truncating bmap (ino=16) [ 74.777752][ T5121] NILFS (loop3): error -5 truncating bmap (ino=16) [pid 5125] ioctl(4, LOOP_SET_FD, 3 [pid 5124] <... ioctl resumed>) = 0 [pid 5124] close(3 [pid 5120] <... write resumed>) = -1 EIO (Input/output error) [pid 5124] <... close resumed>) = 0 [pid 5124] mkdir("./file0", 0777) = 0 [pid 5124] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5120] exit_group(0 [pid 5121] <... creat resumed>) = 4 [pid 5120] <... exit_group resumed>) = ? [pid 5119] <... creat resumed>) = 4 [pid 5121] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5120] +++ exited with 0 +++ [pid 5119] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5120, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5125] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5125] close(3 [pid 4998] <... openat resumed>) = 3 [pid 5125] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 5125] mkdir("./file0", 0777 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5125] <... mkdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5125] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./9/binderfs") = 0 [pid 4998] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 74.779623][ T5125] loop1: detected capacity change from 0 to 2048 [ 74.784596][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 74.799876][ T5119] NILFS (loop2): error -5 truncating bmap (ino=16) [ 74.814444][ T5121] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 74.824911][ T5119] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5002] <... umount2 resumed>) = 0 [pid 5119] <... write resumed>) = -1 EIO (Input/output error) [pid 5002] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5119] exit_group(0 [pid 5002] rmdir("./9/file0" [pid 5119] <... exit_group resumed>) = ? [pid 5002] <... rmdir resumed>) = 0 [pid 5124] <... mount resumed>) = 0 [pid 5002] getdents64(3, [pid 5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5124] <... openat resumed>) = 3 [pid 5002] close(3 [pid 5124] chdir("./file0" [pid 5002] <... close resumed>) = 0 [pid 5124] <... chdir resumed>) = 0 [pid 5119] +++ exited with 0 +++ [ 74.853766][ T5119] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.862743][ T5121] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.872241][ T5119] NILFS (loop2): error -5 truncating bmap (ino=16) [ 74.878986][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 74.889895][ T5127] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] rmdir("./9" [pid 5125] <... mount resumed>) = 0 [pid 5124] ioctl(4, LOOP_CLR_FD [pid 5002] <... rmdir resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5124] <... ioctl resumed>) = 0 [pid 5002] mkdir("./10", 0777 [pid 5125] <... openat resumed>) = 3 [pid 5124] close(4 [pid 5002] <... mkdir resumed>) = 0 [pid 5125] chdir("./file0" [pid 5124] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5125] <... chdir resumed>) = 0 [pid 5124] creat("./file2", 040 [pid 5002] <... openat resumed>) = 3 [pid 5125] ioctl(4, LOOP_CLR_FD [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5125] <... ioctl resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5125] close(4 [pid 5002] close(3 [pid 5125] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [ 74.896540][ T5128] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.900879][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 74.916533][ T5124] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.930690][ T5125] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 74.943652][ T5121] NILFS (loop3): error -5 truncating bmap (ino=16) [pid 5125] creat("./file2", 040 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5129 ./strace-static-x86_64: Process 5129 attached [pid 5121] <... write resumed>) = -1 EIO (Input/output error) [pid 5129] chdir("./10" [pid 5121] exit_group(0 [pid 5000] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5129] <... prctl resumed>) = 0 [pid 5121] <... exit_group resumed>) = ? [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 5129] setpgid(0, 0 [pid 5121] +++ exited with 0 +++ [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5121, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5129] <... setpgid resumed>) = 0 [pid 5000] getdents64(3, [pid 5001] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./9/binderfs", [pid 5129] <... openat resumed>) = 3 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] write(3, "1000", 4 [pid 5001] unlink("./9/binderfs") = 0 [pid 5001] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] <... write resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./9/binderfs", [ 74.950304][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.966521][ T5125] Remounting filesystem read-only [ 74.973191][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.976030][ T5124] Remounting filesystem read-only [ 74.994030][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5129] close(3) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5129] symlink("/dev/binderfs", "./binderfs" [pid 5000] unlink("./9/binderfs" [pid 5129] <... symlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5129] memfd_create("syzkaller", 0 [pid 5000] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] <... memfd_create resumed>) = 3 [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [ 74.994476][ T5125] NILFS (loop1): error -5 truncating bmap (ino=16) [ 75.003620][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 75.018352][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.028292][ T5124] NILFS (loop5): error -5 truncating bmap (ino=16) [ 75.028683][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5124] <... creat resumed>) = 4 [pid 5124] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5125] <... creat resumed>) = 4 [pid 5125] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [ 75.048282][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 75.049443][ T5124] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 75.061335][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 75.066369][ T5125] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 75.074401][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 75.084410][ T5124] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5129] munmap(0x7f45ac090000, 1048576) = 0 [pid 5129] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5129] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... umount2 resumed>) = 0 [ 75.100729][ T5125] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.101259][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.110999][ T5125] NILFS (loop1): error -5 truncating bmap (ino=16) [ 75.133090][ T5129] loop4: detected capacity change from 0 to 2048 [ 75.136044][ T5124] NILFS (loop5): error -5 truncating bmap (ino=16) [ 75.141514][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5129] <... ioctl resumed>) = 0 [pid 4998] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... write resumed>) = -1 EIO (Input/output error) [pid 5124] exit_group(0) = ? [pid 5125] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5129] close(3 [pid 4998] lstat("./9/file0", [pid 5125] exit_group(0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5129] <... close resumed>) = 0 [pid 5125] <... exit_group resumed>) = ? [pid 4998] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] mkdir("./file0", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5129] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5129] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5124] +++ exited with 0 +++ [pid 5125] +++ exited with 0 +++ [pid 4998] getdents64(4, [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5125, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] rmdir("./9/file0" [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 4999] <... openat resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5129] <... mount resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 4998] getdents64(3, [pid 5003] getdents64(3, [pid 5129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5129] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5129] chdir("./file0" [pid 5003] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 4998] close(3 [pid 5129] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5003] lstat("./9/binderfs", [pid 4998] <... close resumed>) = 0 [pid 4999] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] rmdir("./9" [pid 5003] unlink("./9/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 75.156219][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.168267][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.191620][ T5130] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5129] ioctl(4, LOOP_CLR_FD [pid 5003] <... unlink resumed>) = 0 [pid 4999] lstat("./9/binderfs", [pid 4998] <... rmdir resumed>) = 0 [pid 5129] <... ioctl resumed>) = 0 [pid 5129] close(4) = 0 [pid 5003] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] mkdir("./10", 0777 [pid 5129] creat("./file2", 040 [pid 4999] unlink("./9/binderfs" [pid 4998] <... mkdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 75.193421][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 75.211942][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.219069][ T5129] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.222582][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 75.241567][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 75.249097][ T5129] Remounting filesystem read-only [pid 4999] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5131 ./strace-static-x86_64: Process 5131 attached [pid 5131] chdir("./10") = 0 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4) = 4 [pid 5131] close(3) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5131] memfd_create("syzkaller", 0) = 3 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5129] <... creat resumed>) = 4 [ 75.254363][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 75.259037][ T5129] NILFS (loop4): error -5 truncating bmap (ino=16) [ 75.262488][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.279083][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 75.289451][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [pid 5129] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] <... write resumed>) = 1048576 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 75.313739][ T5129] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 75.321428][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.335416][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.345920][ T5129] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.352376][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5000] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 5131] munmap(0x7f45ac090000, 1048576 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5131] <... munmap resumed>) = 0 [pid 5001] fstat(4, [pid 5000] lstat("./9/file0", [pid 5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5131] <... openat resumed>) = 4 [pid 5131] ioctl(4, LOOP_SET_FD, 3 [pid 5001] getdents64(4, [pid 5000] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 75.365670][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.373471][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.376846][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 75.395218][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 75.395543][ T5131] loop0: detected capacity change from 0 to 2048 [pid 5000] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(4, [pid 5131] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5131] close(3 [pid 5001] close(4 [pid 5000] fstat(4, [pid 5131] <... close resumed>) = 0 [pid 4999] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5131] mkdir("./file0", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5131] <... mkdir resumed>) = 0 [pid 5001] rmdir("./9/file0" [pid 4999] lstat("./9/file0", [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5000] getdents64(4, [pid 5131] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(4 [pid 4999] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] close(3 [pid 5000] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5000] rmdir("./9/file0" [pid 4999] fstat(4, [pid 5001] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] rmdir("./9" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5001] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] mkdir("./10", 0777 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 5000] close(3 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] close(4 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] rmdir("./9" [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./9/file0" [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] mkdir("./10", 0777 [pid 4999] getdents64(3, [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... mkdir resumed>) = 0 [pid 4999] close(3) = 0 [pid 5001] close(3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] rmdir("./9" [pid 5129] <... write resumed>) = -1 EIO (Input/output error) [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 5129] exit_group(0 [pid 5003] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 75.411166][ T5129] NILFS (loop4): error -5 truncating bmap (ino=16) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] mkdir("./10", 0777 [pid 5129] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... mkdir resumed>) = 0 [pid 5129] +++ exited with 0 +++ [pid 5003] lstat("./9/file0", [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5132 [pid 5000] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5003] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5129, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5134 [pid 4999] close(3./strace-static-x86_64: Process 5132 attached [pid 5003] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... close resumed>) = 0 [pid 5003] fstat(4, [pid 5002] <... openat resumed>) = 3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5132] chdir("./10" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(3, [pid 5132] <... chdir resumed>) = 0 [pid 5003] getdents64(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5135 [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(3, ./strace-static-x86_64: Process 5134 attached [pid 5132] <... prctl resumed>) = 0 [pid 5003] getdents64(4, [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5134] chdir("./10" [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5134] <... chdir resumed>) = 0 [pid 5003] close(4 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... close resumed>) = 0 [pid 5134] <... prctl resumed>) = 0 [pid 5003] rmdir("./9/file0"./strace-static-x86_64: Process 5135 attached [pid 5134] setpgid(0, 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5135] chdir("./10" [pid 5134] <... setpgid resumed>) = 0 [pid 5003] getdents64(3, [pid 5135] <... chdir resumed>) = 0 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5134] <... openat resumed>) = 3 [pid 5003] close(3 [pid 5135] <... prctl resumed>) = 0 [pid 5134] write(3, "1000", 4 [pid 5003] <... close resumed>) = 0 [pid 5135] setpgid(0, 0 [pid 5134] <... write resumed>) = 4 [pid 5003] rmdir("./9" [pid 5135] <... setpgid resumed>) = 0 [pid 5134] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5134] <... close resumed>) = 0 [pid 5003] mkdir("./10", 0777 [pid 5135] <... openat resumed>) = 3 [pid 5134] symlink("/dev/binderfs", "./binderfs" [pid 5132] setpgid(0, 0 [pid 5131] <... mount resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] write(3, "1000", 4 [pid 5134] <... symlink resumed>) = 0 [pid 5132] <... setpgid resumed>) = 0 [pid 5131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5135] <... write resumed>) = 4 [pid 5134] memfd_create("syzkaller", 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5131] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 5002] lstat("./10/binderfs", [pid 5135] close(3 [pid 5134] <... memfd_create resumed>) = 3 [pid 5131] chdir("./file0" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5132] <... openat resumed>) = 3 [pid 5135] <... close resumed>) = 0 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5131] <... chdir resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] unlink("./10/binderfs" [pid 5135] symlink("/dev/binderfs", "./binderfs" [pid 5134] <... mmap resumed>) = 0x7f45ac090000 [pid 5132] write(3, "1000", 4 [pid 5131] ioctl(4, LOOP_CLR_FD [pid 5003] close(3 [pid 5002] <... unlink resumed>) = 0 [pid 5135] <... symlink resumed>) = 0 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5132] <... write resumed>) = 4 [pid 5131] <... ioctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] memfd_create("syzkaller", 0 [pid 5132] close(3 [pid 5131] close(4 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5135] <... memfd_create resumed>) = 3 [pid 5132] <... close resumed>) = 0 [pid 5131] <... close resumed>) = 0 [pid 5135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 75.481746][ T5133] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.513823][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 5131] creat("./file2", 040 [pid 5132] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5136 [pid 5135] <... mmap resumed>) = 0x7f45ac090000 [pid 5135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5132] <... symlink resumed>) = 0 [pid 5132] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5136 attached [pid 5135] <... write resumed>) = 1048576 [pid 5132] <... memfd_create resumed>) = 3 [pid 5136] chdir("./10" [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5136] <... chdir resumed>) = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5132] <... mmap resumed>) = 0x7f45ac090000 [pid 5136] <... prctl resumed>) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3) = 0 [pid 5136] symlink("/dev/binderfs", "./binderfs" [pid 5134] <... write resumed>) = 1048576 [ 75.529167][ T5131] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.534660][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5134] munmap(0x7f45ac090000, 1048576) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... symlink resumed>) = 0 [pid 5136] memfd_create("syzkaller", 0) = 3 [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5135] munmap(0x7f45ac090000, 1048576) = 0 [pid 5135] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5135] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5132] <... write resumed>) = 1048576 [pid 5135] close(3) = 0 [ 75.574968][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.580001][ T5134] loop2: detected capacity change from 0 to 2048 [ 75.592275][ T5131] Remounting filesystem read-only [ 75.606562][ T5135] loop1: detected capacity change from 0 to 2048 [ 75.609398][ T5131] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5135] mkdir("./file0", 0777) = 0 [pid 5132] munmap(0x7f45ac090000, 1048576) = 0 [pid 5135] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5134] <... ioctl resumed>) = 0 [pid 5134] close(3) = 0 [pid 5134] mkdir("./file0", 0777) = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5134] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5132] <... openat resumed>) = 4 [pid 5136] <... write resumed>) = 1048576 [pid 5132] ioctl(4, LOOP_SET_FD, 3 [pid 5136] munmap(0x7f45ac090000, 1048576) = 0 [pid 5136] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5131] <... creat resumed>) = 4 [pid 5136] <... ioctl resumed>) = 0 [pid 5136] close(3) = 0 [pid 5136] mkdir("./file0", 0777) = 0 [ 75.622984][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.649861][ T5132] loop3: detected capacity change from 0 to 2048 [ 75.655210][ T5136] loop5: detected capacity change from 0 to 2048 [ 75.665045][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5136] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5132] <... ioctl resumed>) = 0 [pid 5131] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5132] close(3 [pid 5134] <... mount resumed>) = 0 [pid 5132] <... close resumed>) = 0 [ 75.678541][ T5131] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 75.681651][ T5137] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.692193][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 75.702116][ T5138] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.718496][ T5131] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5132] mkdir("./file0", 0777 [pid 5136] <... mount resumed>) = 0 [pid 5135] <... mount resumed>) = 0 [pid 5134] <... openat resumed>) = 3 [pid 5132] <... mkdir resumed>) = 0 [pid 5131] <... write resumed>) = -1 EIO (Input/output error) [pid 5135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5134] chdir("./file0" [pid 5132] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5136] <... openat resumed>) = 3 [pid 5135] <... openat resumed>) = 3 [pid 5134] <... chdir resumed>) = 0 [pid 5135] chdir("./file0" [pid 5134] ioctl(4, LOOP_CLR_FD [pid 5136] chdir("./file0" [pid 5135] <... chdir resumed>) = 0 [pid 5135] ioctl(4, LOOP_CLR_FD [pid 5134] <... ioctl resumed>) = 0 [pid 5136] <... chdir resumed>) = 0 [pid 5135] <... ioctl resumed>) = 0 [pid 5134] close(4 [pid 5135] close(4 [pid 5136] ioctl(4, LOOP_CLR_FD [pid 5134] <... close resumed>) = 0 [pid 5135] <... close resumed>) = 0 [ 75.728519][ T5131] NILFS (loop0): error -5 truncating bmap (ino=16) [ 75.729140][ T5139] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.755330][ T5135] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.765990][ T5134] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5135] creat("./file2", 040 [pid 5136] <... ioctl resumed>) = 0 [pid 5134] creat("./file2", 040 [pid 5136] close(4) = 0 [pid 5136] creat("./file2", 040 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./10/file0", [pid 5131] exit_group(0) = ? [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5131] +++ exited with 0 +++ [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] getdents64(4, [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4998] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 75.776336][ T5136] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.786499][ T5135] Remounting filesystem read-only [ 75.791979][ T5134] Remounting filesystem read-only [ 75.793485][ T5135] NILFS (loop1): error -5 truncating bmap (ino=16) [ 75.797748][ T5136] Remounting filesystem read-only [ 75.810794][ T5134] NILFS (loop2): error -5 truncating bmap (ino=16) [ 75.818422][ T5140] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] rmdir("./10/file0" [pid 4998] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5135] <... creat resumed>) = 4 [pid 5132] <... mount resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] getdents64(3, [pid 4998] fstat(3, [pid 5002] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(3 [pid 4998] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] rmdir("./10" [pid 4998] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5135] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5132] chdir("./file0" [pid 5002] mkdir("./11", 0777 [pid 4998] lstat("./10/binderfs", [pid 5132] <... chdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] unlink("./10/binderfs" [pid 5002] <... openat resumed>) = 3 [pid 4998] <... unlink resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4998] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5132] ioctl(4, LOOP_CLR_FD [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5141 [pid 5132] <... ioctl resumed>) = 0 [pid 5134] <... creat resumed>) = 4 [pid 5132] close(4 [ 75.827086][ T5136] NILFS (loop5): error -5 truncating bmap (ino=16) [ 75.841719][ T5135] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 75.852759][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 75.864763][ T5134] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5134] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5132] <... close resumed>) = 0 ./strace-static-x86_64: Process 5141 attached [pid 5141] chdir("./11") = 0 [pid 5141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5141] setpgid(0, 0) = 0 [pid 5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5141] write(3, "1000", 4) = 4 [pid 5141] close(3) = 0 [pid 5141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5136] <... creat resumed>) = 4 [pid 5132] creat("./file2", 040 [pid 5141] memfd_create("syzkaller", 0) = 3 [pid 5141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [ 75.864924][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 75.879853][ T5135] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.891785][ T5134] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.902587][ T5132] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.911982][ T5135] NILFS (loop1): error -5 truncating bmap (ino=16) [ 75.919322][ T5136] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5136] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5135] <... write resumed>) = -1 EIO (Input/output error) [pid 5134] <... write resumed>) = -1 EIO (Input/output error) [ 75.920748][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.931585][ T5132] Remounting filesystem read-only [ 75.943300][ T5134] NILFS (loop2): error -5 truncating bmap (ino=16) [ 75.950350][ T5136] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 75.971950][ T5132] NILFS (loop3): error -5 truncating bmap (ino=16) [pid 5141] munmap(0x7f45ac090000, 1048576 [pid 5135] exit_group(0 [pid 5134] exit_group(0 [pid 5141] <... munmap resumed>) = 0 [pid 5141] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5141] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... write resumed>) = -1 EIO (Input/output error) [pid 5135] <... exit_group resumed>) = ? [pid 5134] <... exit_group resumed>) = ? [pid 5132] <... creat resumed>) = 4 [pid 5141] <... ioctl resumed>) = 0 [pid 5141] close(3) = 0 [pid 5141] mkdir("./file0", 0777) = 0 [pid 5141] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5136] exit_group(0 [pid 5135] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5134] +++ exited with 0 +++ [pid 5132] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5136] <... exit_group resumed>) = ? [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 5000] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5136] +++ exited with 0 +++ [pid 5000] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./10/binderfs", [pid 5003] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./10/binderfs", [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./10/binderfs" [pid 5003] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] unlink("./10/binderfs" [pid 4999] <... unlink resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [ 75.979345][ T5136] NILFS (loop5): error -5 truncating bmap (ino=16) [ 75.983647][ T5141] loop4: detected capacity change from 0 to 2048 [ 75.986627][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.005904][ T5132] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5000] <... unlink resumed>) = 0 [pid 4999] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(3, [pid 5000] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./10/binderfs") = 0 [ 76.044612][ T5142] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.054738][ T5132] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.061832][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.064483][ T2810] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 76.075280][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5003] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5141] <... mount resumed>) = 0 [pid 5141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5141] chdir("./file0") = 0 [pid 5141] ioctl(4, LOOP_CLR_FD) = 0 [pid 5141] close(4) = 0 [pid 5141] creat("./file2", 040 [pid 5132] <... write resumed>) = -1 EIO (Input/output error) [ 76.088339][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 76.088676][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 76.097983][ T5132] NILFS (loop3): error -5 truncating bmap (ino=16) [ 76.111849][ T2810] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 76.120041][ T5141] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.129359][ T2810] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5132] exit_group(0) = ? [pid 5132] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./10/file0", [pid 5141] <... creat resumed>) = 4 [ 76.135087][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 76.147548][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 76.155201][ T5141] Remounting filesystem read-only [ 76.160253][ T5141] NILFS (loop4): error -5 truncating bmap (ino=16) [ 76.162363][ T2810] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.168917][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.186653][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5001] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5141] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 76.197159][ T5141] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 76.208130][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.213402][ T2810] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.218482][ T5141] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.226059][ T12] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 4998] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(3, [pid 4998] <... openat resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 5001] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [ 76.235853][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.251920][ T12] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 76.253143][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 76.260502][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.269516][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.277903][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4998] getdents64(4, [pid 5001] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./10/binderfs", [pid 4998] close(4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] unlink("./10/binderfs" [pid 4998] rmdir("./10/file0" [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5141] <... write resumed>) = -1 EIO (Input/output error) [pid 5141] exit_group(0) = ? [pid 5141] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5141, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./11/binderfs") = 0 [pid 5002] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [ 76.286709][ T5141] NILFS (loop4): error -5 truncating bmap (ino=16) [ 76.302476][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.314900][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 76.320602][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.331824][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [pid 5000] lstat("./10/file0", [pid 4998] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5000] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./10" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... rmdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] mkdir("./11", 0777 [pid 5000] fstat(4, [pid 4998] <... mkdir resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] getdents64(4, [pid 4998] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(4, [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5000] close(4) = 0 [pid 4998] <... close resumed>) = 0 [pid 5000] rmdir("./10/file0" [pid 5003] <... umount2 resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5143 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./10") = 0 [pid 5000] mkdir("./11", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5144 ./strace-static-x86_64: Process 5143 attached [ 76.343234][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 76.351066][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 76.351116][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [pid 5143] chdir("./11") = 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5003] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5143] setpgid(0, 0) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5144 attached [pid 5143] <... openat resumed>) = 3 [pid 5143] write(3, "1000", 4) = 4 [pid 5144] chdir("./11" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5143] close(3) = 0 [pid 5143] symlink("/dev/binderfs", "./binderfs" [pid 5144] <... chdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = 0 [pid 5144] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5143] <... symlink resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5144] <... prctl resumed>) = 0 [pid 5003] fstat(4, [pid 5144] setpgid(0, 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5144] <... setpgid resumed>) = 0 [pid 5003] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5143] memfd_create("syzkaller", 0 [pid 5003] getdents64(4, [pid 4999] lstat("./10/file0", [pid 5144] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5144] write(3, "1000", 4 [pid 5143] <... memfd_create resumed>) = 3 [pid 5003] close(4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5144] <... write resumed>) = 4 [pid 5143] <... mmap resumed>) = 0x7f45ac090000 [pid 5003] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5144] close(3 [pid 5003] rmdir("./10/file0" [pid 5144] <... close resumed>) = 0 [pid 5144] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... rmdir resumed>) = 0 [pid 5001] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5144] <... symlink resumed>) = 0 [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, [pid 5144] memfd_create("syzkaller", 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./10/file0", [pid 4999] getdents64(4, [pid 5003] close(3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5144] <... memfd_create resumed>) = 3 [pid 5003] <... close resumed>) = 0 [pid 4999] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] rmdir("./10" [pid 5001] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./10/file0" [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5144] <... mmap resumed>) = 0x7f45ac090000 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] close(3) = 0 [pid 4999] rmdir("./10") = 0 [pid 4999] mkdir("./11", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5145 [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] mkdir("./11", 0777 [pid 5001] <... openat resumed>) = 4 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] fstat(4, [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] getdents64(4, [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] getdents64(4, [pid 5003] close(3 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] close(4./strace-static-x86_64: Process 5145 attached [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 ./strace-static-x86_64: Process 5146 attached [pid 5145] chdir("./11" [pid 5144] <... write resumed>) = 1048576 [pid 5001] rmdir("./10/file0" [pid 5146] chdir("./11" [pid 5145] <... chdir resumed>) = 0 [ 76.431675][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.471747][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5143] <... write resumed>) = 1048576 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5146 [pid 5001] <... rmdir resumed>) = 0 [pid 5144] munmap(0x7f45ac090000, 1048576 [pid 5146] <... chdir resumed>) = 0 [pid 5145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] getdents64(3, [pid 5146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5145] <... prctl resumed>) = 0 [pid 5144] <... munmap resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5146] <... prctl resumed>) = 0 [pid 5145] setpgid(0, 0 [pid 5001] close(3 [pid 5146] setpgid(0, 0 [pid 5145] <... setpgid resumed>) = 0 [pid 5146] <... setpgid resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] rmdir("./10" [pid 5146] <... openat resumed>) = 3 [pid 5145] <... openat resumed>) = 3 [pid 5144] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... rmdir resumed>) = 0 [pid 5146] write(3, "1000", 4 [pid 5145] write(3, "1000", 4 [pid 5001] mkdir("./11", 0777 [pid 5146] <... write resumed>) = 4 [pid 5145] <... write resumed>) = 4 [pid 5144] <... openat resumed>) = 4 [pid 5146] close(3 [pid 5001] <... mkdir resumed>) = 0 [pid 5145] close(3 [pid 5144] ioctl(4, LOOP_SET_FD, 3 [pid 5146] <... close resumed>) = 0 [pid 5145] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5143] munmap(0x7f45ac090000, 1048576) = 0 [pid 5146] symlink("/dev/binderfs", "./binderfs" [pid 5145] symlink("/dev/binderfs", "./binderfs" [pid 5144] <... ioctl resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5143] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5146] <... symlink resumed>) = 0 [pid 5143] <... openat resumed>) = 4 [pid 5143] ioctl(4, LOOP_SET_FD, 3 [pid 5145] <... symlink resumed>) = 0 [pid 5144] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5146] memfd_create("syzkaller", 0 [pid 5145] memfd_create("syzkaller", 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5144] <... close resumed>) = 0 [pid 5146] <... memfd_create resumed>) = 3 [pid 5145] <... memfd_create resumed>) = 3 [pid 5144] mkdir("./file0", 0777 [pid 5001] close(3 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5144] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5146] <... mmap resumed>) = 0x7f45ac090000 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5143] <... ioctl resumed>) = 0 [pid 5143] close(3) = 0 [pid 5143] mkdir("./file0", 0777) = 0 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5144] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5147 [pid 5143] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, ""./strace-static-x86_64: Process 5147 attached [ 76.522547][ T5144] loop2: detected capacity change from 0 to 2048 [ 76.528783][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 76.541888][ T5143] loop0: detected capacity change from 0 to 2048 [pid 5147] chdir("./11" [pid 5146] <... write resumed>) = 1048576 [pid 5147] <... chdir resumed>) = 0 [pid 5146] munmap(0x7f45ac090000, 1048576 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5146] <... munmap resumed>) = 0 [pid 5147] <... prctl resumed>) = 0 [pid 5146] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5144] <... mount resumed>) = 0 [pid 5147] setpgid(0, 0 [pid 5144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5147] <... setpgid resumed>) = 0 [pid 5146] <... openat resumed>) = 4 [pid 5144] <... openat resumed>) = 3 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5146] ioctl(4, LOOP_SET_FD, 3 [pid 5144] chdir("./file0" [pid 5147] <... openat resumed>) = 3 [pid 5147] write(3, "1000", 4 [pid 5146] <... ioctl resumed>) = 0 [pid 5144] <... chdir resumed>) = 0 [pid 5147] <... write resumed>) = 4 [pid 5146] close(3 [pid 5144] ioctl(4, LOOP_CLR_FD [pid 5147] close(3 [pid 5146] <... close resumed>) = 0 [pid 5144] <... ioctl resumed>) = 0 [pid 5147] <... close resumed>) = 0 [pid 5146] mkdir("./file0", 0777 [pid 5144] close(4 [pid 5147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5146] <... mkdir resumed>) = 0 [pid 5144] <... close resumed>) = 0 [ 76.594900][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 76.613653][ T5148] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.630182][ T5146] loop5: detected capacity change from 0 to 2048 [pid 5144] creat("./file2", 040 [pid 5147] memfd_create("syzkaller", 0 [pid 5146] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5147] <... memfd_create resumed>) = 3 [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5145] <... write resumed>) = 1048576 [pid 5145] munmap(0x7f45ac090000, 1048576) = 0 [pid 5143] <... mount resumed>) = 0 [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5145] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5145] ioctl(4, LOOP_SET_FD, 3 [pid 5143] <... openat resumed>) = 3 [pid 5143] chdir("./file0") = 0 [ 76.655045][ T5144] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.683213][ T5149] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.684978][ T5145] loop1: detected capacity change from 0 to 2048 [pid 5147] <... write resumed>) = 1048576 [pid 5146] <... mount resumed>) = 0 [pid 5143] ioctl(4, LOOP_CLR_FD) = 0 [pid 5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5143] close(4 [pid 5146] <... openat resumed>) = 3 [pid 5146] chdir("./file0" [pid 5143] <... close resumed>) = 0 [pid 5143] creat("./file2", 040 [pid 5146] <... chdir resumed>) = 0 [pid 5146] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = 0 [pid 5146] <... ioctl resumed>) = 0 [pid 5146] close(4) = 0 [pid 5146] creat("./file2", 040 [pid 5002] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 76.703805][ T5150] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.714006][ T5144] Remounting filesystem read-only [ 76.725125][ T5143] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.739666][ T5146] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5002] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./11/file0") = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./11") = 0 [pid 5002] mkdir("./12", 0777 [pid 5147] munmap(0x7f45ac090000, 1048576 [pid 5002] <... mkdir resumed>) = 0 [pid 5147] <... munmap resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5147] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] close(3 [pid 5147] <... openat resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 5147] ioctl(4, LOOP_SET_FD, 3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5151 ./strace-static-x86_64: Process 5151 attached [pid 5151] chdir("./12" [pid 5145] <... ioctl resumed>) = 0 [pid 5145] close(3 [pid 5151] <... chdir resumed>) = 0 [pid 5145] <... close resumed>) = 0 [pid 5144] <... creat resumed>) = 4 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5145] mkdir("./file0", 0777 [pid 5151] <... prctl resumed>) = 0 [pid 5145] <... mkdir resumed>) = 0 [pid 5144] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5143] <... creat resumed>) = 4 [pid 5151] setpgid(0, 0 [pid 5145] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5151] <... setpgid resumed>) = 0 [ 76.749500][ T5144] NILFS (loop2): error -5 truncating bmap (ino=16) [ 76.763364][ T5143] Remounting filesystem read-only [ 76.773169][ T5147] loop3: detected capacity change from 0 to 2048 [ 76.780474][ T5146] Remounting filesystem read-only [ 76.786255][ T5143] NILFS (loop0): error -5 truncating bmap (ino=16) [ 76.793495][ T5146] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5151] write(3, "1000", 4) = 4 [pid 5151] close(3) = 0 [pid 5151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5151] memfd_create("syzkaller", 0) = 3 [pid 5151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5143] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5147] <... ioctl resumed>) = 0 [pid 5147] close(3) = 0 [pid 5147] mkdir("./file0", 0777) = 0 [pid 5147] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5146] <... creat resumed>) = 4 [pid 5145] <... mount resumed>) = 0 [ 76.800933][ T5144] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 76.814838][ T5143] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 76.832036][ T5144] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.835340][ T5152] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5146] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5145] <... openat resumed>) = 3 [pid 5145] chdir("./file0") = 0 [pid 5145] ioctl(4, LOOP_CLR_FD) = 0 [pid 5145] close(4) = 0 [pid 5145] creat("./file2", 040 [pid 5147] <... mount resumed>) = 0 [ 76.854182][ T5143] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.862244][ T5145] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.864328][ T5146] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 76.882368][ T5143] NILFS (loop0): error -5 truncating bmap (ino=16) [ 76.889215][ T5144] NILFS (loop2): error -5 truncating bmap (ino=16) [ 76.895911][ T5153] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5143] <... write resumed>) = -1 EIO (Input/output error) [pid 5147] <... openat resumed>) = 3 [pid 5147] chdir("./file0") = 0 [pid 5143] exit_group(0 [pid 5147] ioctl(4, LOOP_CLR_FD) = 0 [pid 5143] <... exit_group resumed>) = ? [pid 5147] close(4) = 0 [pid 5147] creat("./file2", 040 [pid 5143] +++ exited with 0 +++ [pid 5144] <... write resumed>) = -1 EIO (Input/output error) [pid 5144] exit_group(0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5151] <... write resumed>) = 1048576 [pid 5144] <... exit_group resumed>) = ? [pid 5151] munmap(0x7f45ac090000, 1048576 [pid 5144] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5144, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4998] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... restart_syscall resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5151] <... munmap resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5151] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5151] ioctl(4, LOOP_SET_FD, 3 [pid 5000] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5146] <... write resumed>) = -1 EIO (Input/output error) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5146] exit_group(0 [pid 5000] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(3, [pid 5000] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5146] <... exit_group resumed>) = ? [pid 5000] fstat(3, [pid 5146] +++ exited with 0 +++ [ 76.916852][ T5147] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.924512][ T5146] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 76.944024][ T5145] Remounting filesystem read-only [ 76.950209][ T5146] NILFS (loop5): error -5 truncating bmap (ino=16) [ 76.951613][ T5151] loop4: detected capacity change from 0 to 2048 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] <... ioctl resumed>) = 0 [pid 5151] close(3) = 0 [pid 5151] mkdir("./file0", 0777) = 0 [pid 5151] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5146, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5000] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] lstat("./11/binderfs", [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] unlink("./11/binderfs" [pid 5003] <... openat resumed>) = 3 [pid 5000] lstat("./11/binderfs", [pid 5003] fstat(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] unlink("./11/binderfs" [pid 5003] getdents64(3, [pid 5000] <... unlink resumed>) = 0 [pid 4998] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] <... creat resumed>) = 4 [pid 5003] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 76.978562][ T5145] NILFS (loop1): error -5 truncating bmap (ino=16) [ 76.986283][ T5147] Remounting filesystem read-only [ 76.991350][ T5147] NILFS (loop3): error -5 truncating bmap (ino=16) [pid 5145] <... creat resumed>) = 4 [pid 5145] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5003] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./11/binderfs") = 0 [pid 5151] <... mount resumed>) = 0 [pid 5151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5151] chdir("./file0") = 0 [pid 5151] ioctl(4, LOOP_CLR_FD) = 0 [pid 5151] close(4) = 0 [ 77.032580][ T5147] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 77.036308][ T5145] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 77.056776][ T5147] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 77.057083][ T5154] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5151] creat("./file2", 040 [ 77.066463][ T5151] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 77.087644][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 77.101175][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 77.107009][ T5145] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 77.119322][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 77.126415][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.127494][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 77.143279][ T5147] NILFS (loop3): error -5 truncating bmap (ino=16) [ 77.150929][ T5145] NILFS (loop1): error -5 truncating bmap (ino=16) [ 77.152022][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 77.158515][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.173718][ T5151] Remounting filesystem read-only [pid 5003] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5145] <... write resumed>) = -1 EIO (Input/output error) [pid 5145] exit_group(0) = ? [pid 5147] <... write resumed>) = -1 EIO (Input/output error) [pid 5145] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5145, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5147] exit_group(0) = ? [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./11/binderfs") = 0 [pid 4999] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] <... creat resumed>) = 4 [ 77.179258][ T5151] NILFS (loop4): error -5 truncating bmap (ino=16) [ 77.190016][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.196208][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 77.202567][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.216216][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5151] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5147] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 77.225920][ T5151] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 77.235972][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.244861][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.254107][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 77.261287][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.263165][ T5151] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 77.282110][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.283044][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 77.294486][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 77.300087][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 77.314526][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 77.317472][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5001] unlink("./11/binderfs") = 0 [pid 5001] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] <... write resumed>) = -1 EIO (Input/output error) [pid 5151] exit_group(0) = ? [pid 4998] <... umount2 resumed>) = 0 [pid 5151] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./12/binderfs") = 0 [pid 5002] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./11/file0") = 0 [pid 5000] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 4998] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./11" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 77.337207][ T5151] NILFS (loop4): error -5 truncating bmap (ino=16) [ 77.349057][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4998] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./12", 0777 [pid 5003] <... umount2 resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./11/file0" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... rmdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 4998] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5000] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] rmdir("./11") = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5155 ./strace-static-x86_64: Process 5155 attached [pid 4998] mkdir("./12", 0777) = 0 [pid 5003] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5003] lstat("./11/file0", [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(3 [pid 5003] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5155] chdir("./12" [pid 5003] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5156 [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./11/file0") = 0 [pid 5003] getdents64(3, ./strace-static-x86_64: Process 5156 attached 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./11" [pid 5155] <... chdir resumed>) = 0 [pid 5156] chdir("./12" [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./12", 0777 [pid 5156] <... chdir resumed>) = 0 [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... mkdir resumed>) = 0 [pid 5155] <... prctl resumed>) = 0 [pid 5156] <... prctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5155] setpgid(0, 0 [pid 5003] <... openat resumed>) = 3 [pid 5156] setpgid(0, 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5156] <... setpgid resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5155] <... setpgid resumed>) = 0 [pid 5003] close(3 [pid 5156] <... openat resumed>) = 3 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5156] write(3, "1000", 4 [pid 5155] <... openat resumed>) = 3 [pid 5156] <... write resumed>) = 4 [pid 5155] write(3, "1000", 4) = 4 [pid 5155] close(3) = 0 [pid 5155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5155] memfd_create("syzkaller", 0) = 3 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5157 [pid 5156] close(3 [ 77.414269][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 77.421305][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 77.430879][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5157 attached [pid 5156] <... close resumed>) = 0 [pid 5157] chdir("./12" [pid 5156] symlink("/dev/binderfs", "./binderfs" [pid 5157] <... chdir resumed>) = 0 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5157] setpgid(0, 0) = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5157] write(3, "1000", 4) = 4 [pid 5156] <... symlink resumed>) = 0 [pid 5157] close(3 [pid 5156] memfd_create("syzkaller", 0 [pid 5157] <... close resumed>) = 0 [pid 5156] <... memfd_create resumed>) = 3 [pid 5157] symlink("/dev/binderfs", "./binderfs" [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5157] <... symlink resumed>) = 0 [pid 5156] <... mmap resumed>) = 0x7f45ac090000 [pid 5157] memfd_create("syzkaller", 0) = 3 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [ 77.466333][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 77.473848][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.478504][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 77.504918][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [pid 5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5156] munmap(0x7f45ac090000, 1048576) = 0 [pid 5156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5156] ioctl(4, LOOP_SET_FD, 3 [pid 5157] <... write resumed>) = 1048576 [pid 5155] <... write resumed>) = 1048576 [pid 5155] munmap(0x7f45ac090000, 1048576 [pid 5156] <... ioctl resumed>) = 0 [pid 5155] <... munmap resumed>) = 0 [ 77.516229][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.538464][ T5156] loop0: detected capacity change from 0 to 2048 [ 77.539716][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.554011][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5156] close(3) = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5156] mkdir("./file0", 0777 [pid 5155] <... openat resumed>) = 4 [pid 5156] <... mkdir resumed>) = 0 [pid 5156] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5155] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5155] close(3) = 0 [pid 5155] mkdir("./file0", 0777) = 0 [pid 5155] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5157] munmap(0x7f45ac090000, 1048576) = 0 [pid 5157] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5157] ioctl(4, LOOP_SET_FD, 3) = 0 [ 77.563499][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.577498][ T5155] loop2: detected capacity change from 0 to 2048 [ 77.578841][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 77.603804][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5157] close(3) = 0 [pid 5157] mkdir("./file0", 0777) = 0 [pid 5157] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5156] <... mount resumed>) = 0 [pid 5156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5156] chdir("./file0") = 0 [pid 5156] ioctl(4, LOOP_CLR_FD) = 0 [pid 5156] close(4) = 0 [pid 5156] creat("./file2", 040 [pid 5155] <... mount resumed>) = 0 [pid 5155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 77.612699][ T5157] loop5: detected capacity change from 0 to 2048 [ 77.623616][ T5158] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.650351][ T5159] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5155] chdir("./file0") = 0 [pid 5155] ioctl(4, LOOP_CLR_FD) = 0 [pid 5155] close(4) = 0 [pid 5155] creat("./file2", 040 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5157] <... mount resumed>) = 0 [pid 4999] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5157] chdir("./file0") = 0 [pid 4999] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5157] ioctl(4, LOOP_CLR_FD) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5157] close(4) = 0 [pid 4999] fstat(4, [ 77.664042][ T5156] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 77.672923][ T5155] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 77.688055][ T5160] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.702933][ T5156] Remounting filesystem read-only [pid 5157] creat("./file2", 040 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./11/file0") = 0 [pid 4999] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./11") = 0 [pid 4999] mkdir("./12", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5161 ./strace-static-x86_64: Process 5161 attached [pid 5161] chdir("./12") = 0 [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5161] setpgid(0, 0) = 0 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5161] write(3, "1000", 4) = 4 [pid 5161] close(3) = 0 [pid 5161] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... umount2 resumed>) = 0 [pid 5161] <... symlink resumed>) = 0 [pid 5001] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5161] memfd_create("syzkaller", 0) = 3 [pid 5156] <... creat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./11/file0", [pid 5156] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 77.711904][ T5157] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 77.721738][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 77.733424][ T5156] NILFS (loop0): error -5 truncating bmap (ino=16) [ 77.741678][ T5155] Remounting filesystem read-only [ 77.755920][ T5157] Remounting filesystem read-only [ 77.760990][ T5157] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 5161] <... mmap resumed>) = 0x7f45ac090000 [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5155] <... creat resumed>) = 4 [pid 5155] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5001] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./11/file0") = 0 [pid 5001] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./11" [pid 5161] <... write resumed>) = 1048576 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./12", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5157] <... creat resumed>) = 4 [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5162 [ 77.773370][ T5156] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 77.783084][ T5155] NILFS (loop2): error -5 truncating bmap (ino=16) [ 77.785407][ T5155] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5157] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47./strace-static-x86_64: Process 5162 attached [pid 5002] <... umount2 resumed>) = 0 [pid 5162] chdir("./12") = 0 [pid 5162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5162] setpgid(0, 0) = 0 [pid 5002] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5161] munmap(0x7f45ac090000, 1048576 [pid 5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5161] <... munmap resumed>) = 0 [pid 5161] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5161] ioctl(4, LOOP_SET_FD, 3 [pid 5162] <... openat resumed>) = 3 [pid 5002] lstat("./12/file0", [pid 5162] write(3, "1000", 4) = 4 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5162] close(3 [pid 5002] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5162] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5162] symlink("/dev/binderfs", "./binderfs" [pid 5002] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5162] <... symlink resumed>) = 0 [pid 5162] memfd_create("syzkaller", 0 [pid 5002] <... openat resumed>) = 4 [pid 5162] <... memfd_create resumed>) = 3 [pid 5002] fstat(4, [pid 5162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5162] <... mmap resumed>) = 0x7f45ac090000 [ 77.831694][ T5157] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 77.846561][ T5156] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 77.851614][ T5155] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 77.871783][ T5161] loop1: detected capacity change from 0 to 2048 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5002] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./12/file0") = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5161] <... ioctl resumed>) = 0 [pid 5002] rmdir("./12" [pid 5161] close(3) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5161] mkdir("./file0", 0777) = 0 [pid 5161] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5002] mkdir("./13", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5156] <... write resumed>) = -1 EIO (Input/output error) [pid 5002] <... openat resumed>) = 3 [pid 5156] exit_group(0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5156] <... exit_group resumed>) = ? [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [ 77.899763][ T5157] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 77.936208][ T5156] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5162] <... write resumed>) = 1048576 [pid 5156] +++ exited with 0 +++ [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5163 [pid 4998] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 5163 attached [pid 5162] munmap(0x7f45ac090000, 1048576 [pid 5157] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] <... restart_syscall resumed>) = 0 [pid 5163] chdir("./13" [pid 5162] <... munmap resumed>) = 0 [pid 5163] <... chdir resumed>) = 0 [pid 5162] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5162] <... openat resumed>) = 4 [pid 4998] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] <... prctl resumed>) = 0 [pid 5162] ioctl(4, LOOP_SET_FD, 3 [pid 5163] setpgid(0, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5155] <... write resumed>) = -1 EIO (Input/output error) [pid 5155] exit_group(0) = ? [pid 5157] exit_group(0) = ? [pid 5163] <... setpgid resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5163] write(3, "1000", 4 [pid 5162] <... ioctl resumed>) = 0 [pid 4998] fstat(3, [pid 5163] <... write resumed>) = 4 [pid 5162] close(3 [pid 5161] <... mount resumed>) = 0 [pid 5161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5161] chdir("./file0") = 0 [pid 5161] ioctl(4, LOOP_CLR_FD) = 0 [pid 5161] close(4) = 0 [pid 5157] +++ exited with 0 +++ [pid 5155] +++ exited with 0 +++ [ 77.963906][ T5155] NILFS (loop2): error -5 truncating bmap (ino=16) [ 77.976356][ T5157] NILFS (loop5): error -5 truncating bmap (ino=16) [ 77.992914][ T5162] loop3: detected capacity change from 0 to 2048 [ 78.003402][ T5164] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5163] close(3 [pid 5161] creat("./file2", 040 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5163] <... close resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4998] getdents64(3, [pid 5163] symlink("/dev/binderfs", "./binderfs" [pid 5162] <... close resumed>) = 0 [pid 5163] <... symlink resumed>) = 0 [pid 5162] mkdir("./file0", 0777 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5163] memfd_create("syzkaller", 0 [pid 5003] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5162] <... mkdir resumed>) = 0 [pid 5163] <... memfd_create resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5162] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5003] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./12/binderfs", [pid 5163] <... mmap resumed>) = 0x7f45ac090000 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(3, [pid 5000] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] unlink("./12/binderfs" [pid 5003] getdents64(3, [pid 5000] fstat(3, [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5003] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 4998] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5003] lstat("./12/binderfs", [pid 5000] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./12/binderfs" [pid 5000] lstat("./12/binderfs", [pid 5003] <... unlink resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] unlink("./12/binderfs") = 0 [pid 5000] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5161] <... creat resumed>) = 4 [ 78.016554][ T5161] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.047369][ T5161] Remounting filesystem read-only [ 78.052589][ T5161] NILFS (loop1): error -5 truncating bmap (ino=16) [pid 5163] <... write resumed>) = 1048576 [pid 5161] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [ 78.068757][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 78.077475][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 78.085146][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 78.092114][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 78.099994][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 78.102126][ T5161] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5163] munmap(0x7f45ac090000, 1048576) = 0 [pid 5163] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5162] <... mount resumed>) = 0 [ 78.107681][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 78.118826][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.133910][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.134086][ T5165] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.154232][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5163] ioctl(4, LOOP_SET_FD, 3 [pid 5162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5162] chdir("./file0") = 0 [pid 5162] ioctl(4, LOOP_CLR_FD) = 0 [pid 5162] close(4) = 0 [ 78.163125][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.164728][ T5161] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.172263][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.182073][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.190403][ T5163] loop4: detected capacity change from 0 to 2048 [ 78.199581][ T5161] NILFS (loop1): error -5 truncating bmap (ino=16) [pid 5162] creat("./file2", 040 [pid 5163] <... ioctl resumed>) = 0 [pid 5163] close(3 [pid 5161] <... write resumed>) = -1 EIO (Input/output error) [pid 5161] exit_group(0) = ? [pid 5161] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5161, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, [pid 5163] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5163] mkdir("./file0", 0777 [pid 4999] getdents64(3, [pid 5163] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5163] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./12/binderfs") = 0 [ 78.214413][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.223640][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 78.234443][ T5162] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.234862][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 78.245557][ T5162] Remounting filesystem read-only [ 78.252791][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 4999] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5162] <... creat resumed>) = 4 [ 78.274466][ T5162] NILFS (loop3): error -5 truncating bmap (ino=16) [ 78.282234][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 78.291941][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.293013][ T5162] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 78.311292][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [pid 5162] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5163] chdir("./file0") = 0 [pid 5163] ioctl(4, LOOP_CLR_FD) = 0 [pid 5163] close(4) = 0 [pid 5000] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./12/file0") = 0 [pid 5163] creat("./file2", 040 [pid 5000] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [ 78.320253][ T5166] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.331535][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 78.339929][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5000] close(3) = 0 [pid 5000] rmdir("./12") = 0 [pid 5000] mkdir("./13", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5167 ./strace-static-x86_64: Process 5167 attached [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./12/file0") = 0 [pid 4998] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./12" [pid 5167] chdir("./13") = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./13", 0777 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5167] setpgid(0, 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5167] <... setpgid resumed>) = 0 [ 78.365635][ T5163] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.393427][ T5163] Remounting filesystem read-only [ 78.406966][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... openat resumed>) = 3 [pid 5167] <... openat resumed>) = 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5168 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./12/file0") = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./12") = 0 [pid 5003] mkdir("./13", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5163] <... creat resumed>) = 4 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5163] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 78.418497][ T5162] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.419150][ T5163] NILFS (loop4): error -5 truncating bmap (ino=16) [ 78.446793][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.458098][ T5162] NILFS (loop3): error -5 truncating bmap (ino=16) ./strace-static-x86_64: Process 5168 attached [pid 5168] chdir("./13") = 0 [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5168] setpgid(0, 0) = 0 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5168] write(3, "1000", 4) = 4 [pid 5168] close(3) = 0 [pid 5168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5168] memfd_create("syzkaller", 0) = 3 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5003] close(3) = 0 [pid 5162] <... write resumed>) = -1 EIO (Input/output error) [pid 5162] exit_group(0) = ? [pid 5167] <... write resumed>) = 1048576 [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5162] +++ exited with 0 +++ [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5167] munmap(0x7f45ac090000, 1048576) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5162, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5167] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 78.482705][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 78.492064][ T5163] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 78.521069][ T5163] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5167] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5169 [pid 5001] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5169 attached [pid 5169] chdir("./13" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5169] <... chdir resumed>) = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5001] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5169] close(3 [pid 5001] <... openat resumed>) = 3 [pid 5169] <... close resumed>) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs" [pid 5001] fstat(3, [pid 5169] <... symlink resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5169] memfd_create("syzkaller", 0 [pid 5001] getdents64(3, [pid 5169] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... mmap resumed>) = 0x7f45ac090000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./12/binderfs") = 0 [pid 5001] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5163] <... write resumed>) = -1 EIO (Input/output error) [pid 4999] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5163] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5163] <... exit_group resumed>) = ? [ 78.524912][ T5167] loop2: detected capacity change from 0 to 2048 [ 78.539654][ T5163] NILFS (loop4): error -5 truncating bmap (ino=16) [pid 4999] lstat("./12/file0", [pid 5167] <... ioctl resumed>) = 0 [pid 5167] close(3 [pid 5163] +++ exited with 0 +++ [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5169] <... write resumed>) = 1048576 [pid 5167] <... close resumed>) = 0 [pid 4999] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5163, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5169] munmap(0x7f45ac090000, 1048576 [pid 5167] mkdir("./file0", 0777 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] <... write resumed>) = 1048576 [pid 5002] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./13/binderfs") = 0 [pid 5002] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] munmap(0x7f45ac090000, 1048576 [pid 5169] <... munmap resumed>) = 0 [ 78.579532][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 78.589291][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 78.597169][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.607105][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 78.608004][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5169] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5167] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5169] ioctl(4, LOOP_SET_FD, 3 [pid 5168] <... munmap resumed>) = 0 [pid 5167] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] <... openat resumed>) = 4 [pid 5168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4999] fstat(4, [pid 5168] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5168] <... ioctl resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5168] close(3) = 0 [pid 5168] mkdir("./file0", 0777 [pid 4999] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./12/file0") = 0 [pid 4999] getdents64(3, [pid 5168] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./12" [pid 5169] <... ioctl resumed>) = 0 [pid 5169] close(3) = 0 [pid 5169] mkdir("./file0", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./13", 0777 [pid 5168] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] <... mkdir resumed>) = 0 [pid 5169] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 5169] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5170 ./strace-static-x86_64: Process 5170 attached [pid 5170] chdir("./13") = 0 [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5170] setpgid(0, 0) = 0 [ 78.614126][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 78.623456][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.639947][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 78.641876][ T5169] loop5: detected capacity change from 0 to 2048 [ 78.658248][ T5168] loop0: detected capacity change from 0 to 2048 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5167] <... mount resumed>) = 0 [pid 5167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5170] write(3, "1000", 4 [pid 5169] <... mount resumed>) = 0 [pid 5167] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = 0 [ 78.706468][ T5171] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.707557][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.731340][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.731380][ T5173] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5170] <... write resumed>) = 4 [pid 5169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5168] <... mount resumed>) = 0 [pid 5167] chdir("./file0" [pid 5001] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... openat resumed>) = 3 [pid 5168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5169] chdir("./file0" [pid 5168] <... openat resumed>) = 3 [pid 5169] <... chdir resumed>) = 0 [pid 5168] chdir("./file0" [pid 5169] ioctl(4, LOOP_CLR_FD [pid 5168] <... chdir resumed>) = 0 [pid 5169] <... ioctl resumed>) = 0 [pid 5168] ioctl(4, LOOP_CLR_FD [pid 5169] close(4 [pid 5168] <... ioctl resumed>) = 0 [pid 5169] <... close resumed>) = 0 [pid 5168] close(4 [pid 5169] creat("./file2", 040 [pid 5168] <... close resumed>) = 0 [pid 5170] close(3 [pid 5168] creat("./file2", 040 [pid 5167] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5170] <... close resumed>) = 0 [pid 5167] ioctl(4, LOOP_CLR_FD [pid 5170] symlink("/dev/binderfs", "./binderfs" [pid 5001] lstat("./12/file0", [pid 5170] <... symlink resumed>) = 0 [pid 5167] <... ioctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5167] close(4 [pid 5001] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5170] memfd_create("syzkaller", 0 [pid 5167] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5170] <... memfd_create resumed>) = 3 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5167] creat("./file2", 040 [pid 5001] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 78.733127][ T5172] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.757378][ T5169] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.774783][ T5168] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.793933][ T5167] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5170] <... mmap resumed>) = 0x7f45ac090000 [pid 5001] fstat(4, [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 5168] <... creat resumed>) = 4 [pid 5168] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5001] <... close resumed>) = 0 [ 78.795051][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.813258][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 78.822835][ T5169] Remounting filesystem read-only [ 78.827954][ T5168] Remounting filesystem read-only [ 78.833005][ T5168] NILFS (loop0): error -5 truncating bmap (ino=16) [ 78.840762][ T5169] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 5001] rmdir("./12/file0") = 0 [pid 5001] getdents64(3, [pid 5169] <... creat resumed>) = 4 [pid 5169] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5001] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./12") = 0 [pid 5001] mkdir("./13", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5174 [pid 5170] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 5174 attached [ 78.851894][ T5168] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 78.852236][ T5167] Remounting filesystem read-only [ 78.869517][ T5169] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5170] munmap(0x7f45ac090000, 1048576 [pid 5174] chdir("./13" [pid 5170] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5174] <... chdir resumed>) = 0 [pid 5174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5174] setpgid(0, 0) = 0 [pid 5174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5174] write(3, "1000", 4) = 4 [pid 5174] close(3) = 0 [pid 5174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5174] memfd_create("syzkaller", 0 [pid 5170] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5174] <... memfd_create resumed>) = 3 [pid 5170] <... openat resumed>) = 4 [pid 5170] ioctl(4, LOOP_SET_FD, 3 [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5002] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./13/file0", [pid 5170] <... ioctl resumed>) = 0 [pid 5167] <... creat resumed>) = 4 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [ 78.898909][ T5168] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.910622][ T5167] NILFS (loop2): error -5 truncating bmap (ino=16) [ 78.919890][ T5170] loop1: detected capacity change from 0 to 2048 [ 78.924917][ T5169] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.928173][ T5168] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5002] close(4 [pid 5170] close(3 [pid 5167] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./13/file0" [pid 5170] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./13") = 0 [pid 5002] mkdir("./14", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5174] <... write resumed>) = 1048576 [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5175 [pid 5170] mkdir("./file0", 0777) = 0 [pid 5170] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, ""./strace-static-x86_64: Process 5175 attached [pid 5175] chdir("./14") = 0 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5175] setpgid(0, 0) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] write(3, "1000", 4) = 4 [pid 5175] close(3) = 0 [pid 5175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5168] <... write resumed>) = -1 EIO (Input/output error) [pid 5168] exit_group(0) = ? [ 78.945278][ T5167] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 78.980788][ T5167] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 78.985736][ T5169] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 5170] <... mount resumed>) = 0 [pid 5168] +++ exited with 0 +++ [pid 5170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5168, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5170] <... openat resumed>) = 3 [pid 4998] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] munmap(0x7f45ac090000, 1048576) = 0 [pid 5174] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5174] ioctl(4, LOOP_SET_FD, 3 [pid 5170] chdir("./file0" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] <... ioctl resumed>) = 0 [pid 5170] <... chdir resumed>) = 0 [pid 5169] <... write resumed>) = -1 EIO (Input/output error) [pid 5167] <... write resumed>) = -1 EIO (Input/output error) [pid 4998] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5170] ioctl(4, LOOP_CLR_FD [pid 5167] exit_group(0 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5170] <... ioctl resumed>) = 0 [pid 5167] <... exit_group resumed>) = ? [pid 4998] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5174] close(3 [pid 5170] close(4 [pid 5169] exit_group(0 [pid 5167] +++ exited with 0 +++ [pid 4998] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] <... close resumed>) = 0 [pid 5170] <... close resumed>) = 0 [pid 5169] <... exit_group resumed>) = ? [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5174] mkdir("./file0", 0777 [ 78.992516][ T5176] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.009588][ T5167] NILFS (loop2): error -5 truncating bmap (ino=16) [ 79.013997][ T5174] loop3: detected capacity change from 0 to 2048 [pid 5170] creat("./file2", 040 [pid 5169] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5175] <... write resumed>) = 1048576 [pid 5174] <... mkdir resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5174] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5000] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] munmap(0x7f45ac090000, 1048576 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./13/binderfs", [pid 5175] <... munmap resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(3, [pid 5175] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] unlink("./13/binderfs" [pid 5003] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(3, [pid 5175] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] <... unlink resumed>) = 0 [pid 5003] fstat(3, [pid 5000] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 5000] lstat("./13/binderfs", [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] unlink("./13/binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... unlink resumed>) = 0 [pid 4998] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] <... mount resumed>) = 0 [pid 5003] lstat("./13/binderfs", [pid 5000] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5174] <... openat resumed>) = 3 [pid 5003] unlink("./13/binderfs" [pid 5174] chdir("./file0" [pid 5003] <... unlink resumed>) = 0 [pid 5174] <... chdir resumed>) = 0 [pid 5003] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] ioctl(4, LOOP_CLR_FD) = 0 [pid 5174] close(4) = 0 [ 79.053656][ T5170] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.081938][ T5177] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.082041][ T5175] loop4: detected capacity change from 0 to 2048 [ 79.109210][ T5174] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.115879][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 79.126527][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 79.133933][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 79.135327][ T5170] Remounting filesystem read-only [ 79.141309][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [pid 5174] creat("./file2", 040 [pid 5175] <... ioctl resumed>) = 0 [pid 5175] close(3) = 0 [ 79.149021][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 79.161716][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 79.170477][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.174600][ T5170] NILFS (loop1): error -5 truncating bmap (ino=16) [ 79.181097][ T5174] Remounting filesystem read-only [ 79.192263][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5175] mkdir("./file0", 0777) = 0 [pid 5175] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5170] <... creat resumed>) = 4 [pid 5170] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5174] <... creat resumed>) = 4 [ 79.204338][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.213307][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.222786][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.224043][ T5174] NILFS (loop3): error -5 truncating bmap (ino=16) [ 79.238942][ T5170] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 79.239693][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5174] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5175] <... mount resumed>) = 0 [pid 5175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5175] chdir("./file0") = 0 [pid 5175] ioctl(4, LOOP_CLR_FD) = 0 [pid 5175] close(4) = 0 [ 79.254296][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.260508][ T5174] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 79.268761][ T5170] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.286482][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.295870][ T5178] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.310067][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.320507][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 79.320549][ T5175] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.339554][ T5174] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.347042][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 79.360713][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 79.377503][ T5170] NILFS (loop1): error -5 truncating bmap (ino=16) [pid 5175] creat("./file2", 040) = 4 [pid 5170] <... write resumed>) = -1 EIO (Input/output error) [pid 5175] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5170] exit_group(0) = ? [pid 5170] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 4999] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./13/binderfs" [pid 5174] <... write resumed>) = -1 EIO (Input/output error) [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] exit_group(0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5174] <... exit_group resumed>) = ? [pid 4998] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./13/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(4, [pid 4998] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5174] +++ exited with 0 +++ [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] <... openat resumed>) = 4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5174, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] fstat(4, [pid 5000] getdents64(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5001] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... umount2 resumed>) = 0 [ 79.404774][ T5175] Remounting filesystem read-only [ 79.409945][ T5175] NILFS (loop4): error -5 truncating bmap (ino=16) [ 79.414716][ T5174] NILFS (loop3): error -5 truncating bmap (ino=16) [ 79.424057][ T5175] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5000] close(4 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] rmdir("./13/file0") = 0 [pid 5000] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./13") = 0 [pid 5000] mkdir("./14", 0777) = 0 [pid 5003] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 5003] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5003] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] fstat(3, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 4998] getdents64(4, [pid 5003] <... openat resumed>) = 4 [pid 5001] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] fstat(4, [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 5003] getdents64(4, [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5179 [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./13/file0") = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] close(3./strace-static-x86_64: Process 5179 attached ) = 0 [ 79.480018][ T5175] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.508990][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5179] chdir("./14" [pid 5003] rmdir("./13") = 0 [pid 5179] <... chdir resumed>) = 0 [pid 5175] <... write resumed>) = -1 EIO (Input/output error) [pid 5003] mkdir("./14", 0777 [pid 5001] lstat("./13/binderfs", [pid 4998] rmdir("./13/file0" [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... mkdir resumed>) = 0 [pid 5179] <... prctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5179] setpgid(0, 0 [pid 5003] <... openat resumed>) = 3 [pid 5179] <... setpgid resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5179] <... openat resumed>) = 3 [pid 5003] close(3 [pid 5179] write(3, "1000", 4 [pid 5003] <... close resumed>) = 0 [pid 5179] <... write resumed>) = 4 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5179] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 5179] <... close resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5180 [pid 5179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5179] memfd_create("syzkaller", 0) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5175] exit_group(0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] getdents64(3, [pid 5175] <... exit_group resumed>) = ? [pid 5001] unlink("./13/binderfs" [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5180 attached [pid 5175] +++ exited with 0 +++ [pid 5180] chdir("./14" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5180] <... chdir resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4998] close(3 [pid 5180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5002] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] setpgid(0, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] <... setpgid resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... openat resumed>) = 3 [pid 5180] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5180] write(3, "1000", 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] <... write resumed>) = 4 [pid 5002] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5180] close(3 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5180] <... close resumed>) = 0 [pid 5002] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] <... symlink resumed>) = 0 [pid 5002] lstat("./14/binderfs", [pid 5180] memfd_create("syzkaller", 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5180] <... memfd_create resumed>) = 3 [ 79.524441][ T5175] NILFS (loop4): error -5 truncating bmap (ino=16) [ 79.531425][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 79.557827][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.568431][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5002] unlink("./14/binderfs" [pid 5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... unlink resumed>) = 0 [pid 4998] rmdir("./13" [pid 5180] <... mmap resumed>) = 0x7f45ac090000 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5002] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./14", 0777) = 0 [pid 5180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5179] <... write resumed>) = 1048576 [pid 5179] munmap(0x7f45ac090000, 1048576) = 0 [pid 4998] <... close resumed>) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 79.582287][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 79.595787][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 79.603035][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 79.611897][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.622991][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5179] ioctl(4, LOOP_SET_FD, 3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a555d0) = 5181 ./strace-static-x86_64: Process 5181 attached [pid 5181] chdir("./14") = 0 [pid 5180] <... write resumed>) = 1048576 [pid 5180] munmap(0x7f45ac090000, 1048576) = 0 [pid 5180] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5180] ioctl(4, LOOP_SET_FD, 3 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5179] <... ioctl resumed>) = 0 [pid 5179] close(3) = 0 [ 79.637293][ T5179] loop2: detected capacity change from 0 to 2048 [ 79.655349][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.664797][ T5180] loop5: detected capacity change from 0 to 2048 [ 79.672271][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5179] mkdir("./file0", 0777 [pid 5181] setpgid(0, 0 [pid 5179] <... mkdir resumed>) = 0 [pid 5179] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5180] <... ioctl resumed>) = 0 [pid 5180] close(3) = 0 [pid 5180] mkdir("./file0", 0777 [pid 5181] <... setpgid resumed>) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5180] <... mkdir resumed>) = 0 [pid 5180] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5181] <... openat resumed>) = 3 [pid 5181] write(3, "1000", 4) = 4 [pid 5181] close(3) = 0 [pid 5181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] memfd_create("syzkaller", 0) = 3 [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [ 79.676896][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.687330][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 79.700308][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.703620][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.719123][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [pid 5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5180] <... mount resumed>) = 0 [pid 5180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5180] chdir("./file0") = 0 [pid 5180] ioctl(4, LOOP_CLR_FD) = 0 [pid 5180] close(4) = 0 [pid 5180] creat("./file2", 040 [pid 5179] <... mount resumed>) = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] ioctl(4, LOOP_CLR_FD) = 0 [pid 5179] close(4) = 0 [ 79.734185][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.746424][ T5182] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.764333][ T5180] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.774834][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [pid 5179] creat("./file2", 040 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5181] <... write resumed>) = 1048576 [pid 4999] <... openat resumed>) = 4 [pid 5181] munmap(0x7f45ac090000, 1048576) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] fstat(4, [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5181] <... openat resumed>) = 4 [pid 5181] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 5001] lstat("./13/file0", [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(4 [pid 5001] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./13/file0") = 0 [ 79.789547][ T5179] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.799893][ T5183] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.825594][ T5180] Remounting filesystem read-only [ 79.832754][ T5179] Remounting filesystem read-only [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 5001] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5001] fstat(4, [pid 4999] close(3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5181] <... ioctl resumed>) = 0 [pid 5001] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4999] rmdir("./13" [pid 5001] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] close(4) = 0 [pid 4999] mkdir("./14", 0777 [pid 5001] rmdir("./13/file0" [pid 5181] close(3 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5001] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] close(3 [pid 5181] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5181] mkdir("./file0", 0777 [pid 5001] rmdir("./13" [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 5181] <... mkdir resumed>) = 0 [pid 5001] mkdir("./14", 0777 [pid 4999] close(3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./14/file0") = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./14" [pid 5001] <... mkdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5179] <... creat resumed>) = 4 [pid 5002] mkdir("./15", 0777 [pid 5181] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5184 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5179] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47./strace-static-x86_64: Process 5184 attached [pid 5180] <... creat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 79.847285][ T5181] loop0: detected capacity change from 0 to 2048 [ 79.848554][ T5180] NILFS (loop5): error -5 truncating bmap (ino=16) [ 79.870617][ T5179] NILFS (loop2): error -5 truncating bmap (ino=16) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5184] chdir("./14" [pid 5181] <... mount resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5184] <... chdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5184] <... prctl resumed>) = 0 [pid 5180] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5002] close(3 [pid 5184] setpgid(0, 0 [pid 5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 5184] <... setpgid resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5181] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 5184] <... openat resumed>) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5186 [pid 5184] write(3, "1000", 4) = 4 [pid 5184] close(3) = 0 [pid 5184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] chdir("./file0" [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5184] memfd_create("syzkaller", 0 [pid 5181] <... chdir resumed>) = 0 [pid 5184] <... memfd_create resumed>) = 3 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5181] ioctl(4, LOOP_CLR_FD) = 0 [pid 5181] close(4 [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5187 [pid 5181] <... close resumed>) = 0 [ 79.909574][ T5179] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 79.910170][ T5185] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.922239][ T5180] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5181] creat("./file2", 040./strace-static-x86_64: Process 5186 attached [pid 5186] chdir("./15") = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5186] setpgid(0, 0) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5186] write(3, "1000", 4) = 4 [pid 5186] close(3) = 0 [pid 5186] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5187 attached [pid 5186] memfd_create("syzkaller", 0 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5186] <... memfd_create resumed>) = 3 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5187] chdir("./14" [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5187] <... chdir resumed>) = 0 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5187] write(3, "1000", 4) = 4 [pid 5187] close(3) = 0 [pid 5187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5184] <... write resumed>) = 1048576 [ 79.956450][ T5181] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.965539][ T5179] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 79.968789][ T5181] Remounting filesystem read-only [ 79.993421][ T5181] NILFS (loop0): error -5 truncating bmap (ino=16) [pid 5187] memfd_create("syzkaller", 0 [pid 5181] <... creat resumed>) = 4 [pid 5187] <... memfd_create resumed>) = 3 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5184] munmap(0x7f45ac090000, 1048576 [pid 5181] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5184] <... munmap resumed>) = 0 [pid 5179] <... write resumed>) = -1 EIO (Input/output error) [pid 5184] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5187] <... mmap resumed>) = 0x7f45ac090000 [pid 5179] exit_group(0) = ? [pid 5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5186] <... write resumed>) = 1048576 [ 80.011593][ T5180] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.026349][ T5179] NILFS (loop2): error -5 truncating bmap (ino=16) [ 80.029780][ T5180] NILFS (loop5): error -5 truncating bmap (ino=16) [ 80.038484][ T5184] loop1: detected capacity change from 0 to 2048 [ 80.040315][ T5181] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5180] <... write resumed>) = -1 EIO (Input/output error) [pid 5186] munmap(0x7f45ac090000, 1048576 [pid 5179] +++ exited with 0 +++ [pid 5186] <... munmap resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5179, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5186] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5184] <... ioctl resumed>) = 0 [pid 5186] <... openat resumed>) = 4 [pid 5184] close(3 [pid 5186] ioctl(4, LOOP_SET_FD, 3 [pid 5184] <... close resumed>) = 0 [pid 5184] mkdir("./file0", 0777) = 0 [pid 5000] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... write resumed>) = 1048576 [pid 5184] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5180] exit_group(0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] munmap(0x7f45ac090000, 1048576 [pid 5186] <... ioctl resumed>) = 0 [pid 5181] <... write resumed>) = -1 EIO (Input/output error) [pid 5180] <... exit_group resumed>) = ? [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5187] <... munmap resumed>) = 0 [pid 5000] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5186] close(3 [pid 5181] exit_group(0 [pid 5180] +++ exited with 0 +++ [pid 5000] unlink("./14/binderfs" [pid 5187] <... openat resumed>) = 4 [pid 5186] <... close resumed>) = 0 [pid 5181] <... exit_group resumed>) = ? [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5180, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5187] ioctl(4, LOOP_SET_FD, 3 [pid 5186] mkdir("./file0", 0777 [pid 5181] +++ exited with 0 +++ [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [ 80.064753][ T5181] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.073009][ T5186] loop4: detected capacity change from 0 to 2048 [ 80.083955][ T5181] NILFS (loop0): error -5 truncating bmap (ino=16) [ 80.101335][ T5187] loop3: detected capacity change from 0 to 2048 [pid 5003] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... ioctl resumed>) = 0 [pid 5186] <... mkdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5187] close(3 [pid 5186] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4998] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5187] mkdir("./file0", 0777 [pid 4998] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5187] <... mkdir resumed>) = 0 [pid 5003] lstat("./14/binderfs", [pid 4998] <... openat resumed>) = 3 [pid 5187] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./14/binderfs") = 0 [ 80.109237][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 80.119886][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 80.128075][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.128151][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 80.137459][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.148400][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [pid 4998] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] unlink("./14/binderfs" [pid 5184] <... mount resumed>) = 0 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5184] chdir("./file0") = 0 [pid 5184] ioctl(4, LOOP_CLR_FD) = 0 [pid 5184] close(4) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5184] creat("./file2", 040 [pid 5003] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... mount resumed>) = 0 [pid 5187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5187] chdir("./file0") = 0 [pid 5187] ioctl(4, LOOP_CLR_FD) = 0 [pid 5187] close(4) = 0 [ 80.152947][ T5188] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.171950][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.173488][ T5184] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.181111][ T5189] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.204380][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [pid 5187] creat("./file2", 040 [pid 5186] <... mount resumed>) = 0 [pid 5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5186] chdir("./file0") = 0 [pid 5186] ioctl(4, LOOP_CLR_FD) = 0 [pid 5186] close(4) = 0 [pid 5186] creat("./file2", 040 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 80.206094][ T5187] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.224695][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 80.229253][ T5186] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.232041][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 80.241372][ T5190] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 80.268582][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.269675][ T5184] Remounting filesystem read-only [ 80.274310][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.278890][ T5187] Remounting filesystem read-only [ 80.297826][ T5186] Remounting filesystem read-only [ 80.302878][ T5186] NILFS (loop4): error -5 truncating bmap (ino=16) [ 80.304107][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5000] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5186] <... creat resumed>) = 4 [pid 5186] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./14/file0") = 0 [pid 5000] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./14" [pid 5184] <... creat resumed>) = 4 [pid 5184] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5000] <... rmdir resumed>) = 0 [ 80.318913][ T5184] NILFS (loop1): error -5 truncating bmap (ino=16) [ 80.329611][ T5186] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 80.340689][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.354609][ T5184] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5000] mkdir("./15", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5187] <... creat resumed>) = 4 [pid 5187] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5000] <... close resumed>) = 0 [ 80.365390][ T5187] NILFS (loop3): error -5 truncating bmap (ino=16) [ 80.367064][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.372728][ T5186] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.391343][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.402719][ T5187] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5191 attached , child_tidptr=0x555555a555d0) = 5191 [pid 5191] chdir("./15") = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... umount2 resumed>) = 0 [pid 5191] <... symlink resumed>) = 0 [pid 5191] memfd_create("syzkaller", 0) = 3 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 80.413333][ T5184] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.424266][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 80.426653][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 80.433918][ T5184] NILFS (loop1): error -5 truncating bmap (ino=16) [ 80.449441][ T5187] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.459024][ T5186] NILFS (loop4): error -5 truncating bmap (ino=16) [pid 4998] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 5186] <... write resumed>) = -1 EIO (Input/output error) [pid 5191] <... mmap resumed>) = 0x7f45ac090000 [pid 5186] exit_group(0) = ? [pid 5186] +++ exited with 0 +++ [pid 5003] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] <... write resumed>) = -1 EIO (Input/output error) [pid 5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] exit_group(0 [pid 5003] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 4998] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 5002] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] getdents64(4, [pid 5002] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] lstat("./15/binderfs", [pid 4998] getdents64(4, [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] unlink("./15/binderfs" [pid 4998] close(4 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./14/file0" [pid 5003] <... openat resumed>) = 4 [pid 5184] <... exit_group resumed>) = ? [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5184] +++ exited with 0 +++ [pid 5003] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./14/file0" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5003] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5187] <... write resumed>) = -1 EIO (Input/output error) [pid 5003] getdents64(3, [pid 4999] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5187] exit_group(0 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5187] <... exit_group resumed>) = ? [pid 5003] close(3 [pid 4999] fstat(3, [pid 4998] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] getdents64(3, [ 80.477871][ T5187] NILFS (loop3): error -5 truncating bmap (ino=16) [ 80.503180][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [pid 4998] rmdir("./14" [pid 5191] <... write resumed>) = 1048576 [pid 5187] +++ exited with 0 +++ [pid 5003] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] rmdir("./14" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] mkdir("./15", 0777 [pid 5191] munmap(0x7f45ac090000, 1048576 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] mkdir("./15", 0777 [pid 4998] <... mkdir resumed>) = 0 [pid 5191] <... munmap resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] lstat("./14/binderfs", [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... openat resumed>) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5191] <... openat resumed>) = 4 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] unlink("./14/binderfs" [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5192 ./strace-static-x86_64: Process 5192 attached [pid 5192] chdir("./15") = 0 [pid 5192] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5191] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./14/binderfs" [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... unlink resumed>) = 0 [pid 5192] <... prctl resumed>) = 0 [pid 5001] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5192] setpgid(0, 0) = 0 [pid 5192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5192] write(3, "1000", 4) = 4 [pid 5192] close(3) = 0 [pid 5192] symlink("/dev/binderfs", "./binderfs" [pid 5191] <... ioctl resumed>) = 0 [pid 5192] <... symlink resumed>) = 0 [pid 4999] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3 [ 80.521815][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 80.535828][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.545755][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.561872][ T5191] loop2: detected capacity change from 0 to 2048 [ 80.569066][ T5001] NILFS (loop3): discard dirty page: offset=4096, ino=6 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5191] close(3 [pid 4998] <... close resumed>) = 0 [pid 5191] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5191] mkdir("./file0", 0777 [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5191] <... mkdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5193 [pid 5191] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 80.569069][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.569312][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 80.581891][ T5001] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 80.614844][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [pid 5002] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, ./strace-static-x86_64: Process 5193 attached [pid 5193] chdir("./15") = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] setpgid(0, 0) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5193] write(3, "1000", 4 [pid 5002] getdents64(4, [pid 5193] <... write resumed>) = 4 [pid 5193] close(3) = 0 [pid 5002] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] getdents64(4, [pid 5193] memfd_create("syzkaller", 0 [pid 5192] <... write resumed>) = 1048576 [pid 5002] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./15/file0") = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5193] <... memfd_create resumed>) = 3 [pid 5193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5191] <... mount resumed>) = 0 [pid 5002] rmdir("./15") = 0 [pid 5002] mkdir("./16", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5192] munmap(0x7f45ac090000, 1048576 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5193] <... mmap resumed>) = 0x7f45ac090000 [pid 5192] <... munmap resumed>) = 0 [pid 5191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 80.637576][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 80.657445][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.667145][ T5194] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.671218][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5192] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5195 [pid 5192] <... openat resumed>) = 4 [pid 5192] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5191] <... openat resumed>) = 3 [pid 5192] close(3) = 0 [pid 5192] mkdir("./file0", 0777) = 0 [pid 5192] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5191] chdir("./file0") = 0 [pid 5191] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5195 attached ) = 0 [pid 5191] close(4 [pid 5195] chdir("./16" [pid 5191] <... close resumed>) = 0 [pid 5195] <... chdir resumed>) = 0 [pid 5191] creat("./file2", 040 [ 80.687090][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.694526][ T5192] loop5: detected capacity change from 0 to 2048 [ 80.708988][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.728803][ T5191] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] <... write resumed>) = 1048576 [pid 5195] setpgid(0, 0) = 0 [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5195] write(3, "1000", 4) = 4 [pid 5195] close(3) = 0 [pid 5195] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5195] memfd_create("syzkaller", 0 [pid 5193] munmap(0x7f45ac090000, 1048576 [pid 5195] <... memfd_create resumed>) = 3 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5193] <... munmap resumed>) = 0 [pid 5192] <... mount resumed>) = 0 [pid 5192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5192] chdir("./file0") = 0 [pid 5192] ioctl(4, LOOP_CLR_FD) = 0 [ 80.729873][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.754485][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 80.755058][ T5191] Remounting filesystem read-only [ 80.765036][ T5001] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5192] close(4) = 0 [pid 5192] creat("./file2", 040 [pid 5195] <... mmap resumed>) = 0x7f45ac090000 [pid 5193] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5193] <... openat resumed>) = 4 [ 80.779028][ T5196] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.787514][ T5192] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.798799][ T5191] NILFS (loop2): error -5 truncating bmap (ino=16) [ 80.813830][ T5193] loop0: detected capacity change from 0 to 2048 [ 80.815628][ T5192] Remounting filesystem read-only [pid 5193] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5193] close(3) = 0 [pid 5193] mkdir("./file0", 0777) = 0 [pid 5193] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5191] <... creat resumed>) = 4 [pid 4999] close(4 [ 80.830721][ T5001] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [pid 5191] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 4999] <... close resumed>) = 0 [pid 5195] <... write resumed>) = 1048576 [pid 4999] rmdir("./14/file0") = 0 [pid 4999] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./14") = 0 [pid 4999] mkdir("./15", 0777 [pid 5195] munmap(0x7f45ac090000, 1048576 [pid 5193] <... mount resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5195] <... munmap resumed>) = 0 [pid 5193] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5195] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5193] chdir("./file0" [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5195] <... openat resumed>) = 4 [pid 5193] <... chdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5193] ioctl(4, LOOP_CLR_FD [pid 5192] <... creat resumed>) = 4 [pid 4999] close(3 [pid 5193] <... ioctl resumed>) = 0 [ 80.875331][ T5191] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 80.884819][ T5197] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.894180][ T5192] NILFS (loop5): error -5 truncating bmap (ino=16) [ 80.917361][ T5195] loop4: detected capacity change from 0 to 2048 [pid 5192] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 4999] <... close resumed>) = 0 [pid 5195] <... ioctl resumed>) = 0 [pid 5193] close(4 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5193] <... close resumed>) = 0 [pid 5193] creat("./file2", 040 [pid 4999] <... clone resumed>, child_tidptr=0x555555a555d0) = 5198 ./strace-static-x86_64: Process 5198 attached [pid 5195] close(3 [pid 5001] <... umount2 resumed>) = 0 [pid 5198] chdir("./15" [pid 5195] <... close resumed>) = 0 [pid 5198] <... chdir resumed>) = 0 [pid 5195] mkdir("./file0", 0777) = 0 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5195] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5001] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] setpgid(0, 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5198] <... setpgid resumed>) = 0 [pid 5001] lstat("./14/file0", [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5198] <... openat resumed>) = 3 [pid 5001] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] write(3, "1000", 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 80.920094][ T5192] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 80.939182][ T5193] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.963647][ T5193] Remounting filesystem read-only [pid 5198] <... write resumed>) = 4 [pid 5001] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] close(3 [pid 5001] <... openat resumed>) = 4 [pid 5198] <... close resumed>) = 0 [pid 5001] fstat(4, [pid 5191] <... write resumed>) = -1 EIO (Input/output error) [pid 5191] exit_group(0) = ? [pid 5198] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5195] <... mount resumed>) = 0 [pid 5198] <... symlink resumed>) = 0 [pid 5195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] getdents64(4, [pid 5198] memfd_create("syzkaller", 0 [pid 5195] <... openat resumed>) = 3 [pid 5192] <... write resumed>) = -1 EIO (Input/output error) [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5198] <... memfd_create resumed>) = 3 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5195] chdir("./file0" [pid 5193] <... creat resumed>) = 4 [pid 5192] exit_group(0 [ 80.971562][ T5191] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 80.976758][ T5199] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.983034][ T5193] NILFS (loop0): error -5 truncating bmap (ino=16) [ 80.992802][ T5192] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.000688][ T5191] NILFS (loop2): error -5 truncating bmap (ino=16) [ 81.007947][ T5192] NILFS (loop5): error -5 truncating bmap (ino=16) [pid 5001] getdents64(4, [pid 5195] <... chdir resumed>) = 0 [pid 5193] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5192] <... exit_group resumed>) = ? [pid 5191] +++ exited with 0 +++ [pid 5001] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5195] ioctl(4, LOOP_CLR_FD [pid 5192] +++ exited with 0 +++ [pid 5195] <... ioctl resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5192, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] close(4 [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5195] close(4 [pid 5003] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] <... close resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] <... write resumed>) = 1048576 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5195] <... close resumed>) = 0 [pid 5003] lstat("./15/binderfs", [pid 5001] rmdir("./14/file0" [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./15/binderfs") = 0 [pid 5003] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] creat("./file2", 040 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5001] getdents64(3, 0x555555a56620 /* 0 entries */, 32768) = 0 [ 81.036778][ T5193] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 81.048503][ T5193] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.058002][ T5193] NILFS (loop0): error -5 truncating bmap (ino=16) [ 81.070134][ T5003] NILFS (loop5): discard dirty page: offset=4096, ino=6 [pid 5198] munmap(0x7f45ac090000, 1048576 [pid 5001] close(3) = 0 [pid 5000] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./14" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] mkdir("./15", 0777 [pid 5000] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] fstat(3, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5198] <... munmap resumed>) = 0 [pid 5193] <... write resumed>) = -1 EIO (Input/output error) [pid 5001] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 5198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5198] <... openat resumed>) = 4 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] ioctl(4, LOOP_SET_FD, 3 [pid 5001] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5195] <... creat resumed>) = 4 [pid 5193] exit_group(0 [pid 5001] <... close resumed>) = 0 [pid 5000] lstat("./15/binderfs", [ 81.080637][ T5195] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.081523][ T5003] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 81.100499][ T5195] Remounting filesystem read-only [ 81.105823][ T5195] NILFS (loop4): error -5 truncating bmap (ino=16) [ 81.111846][ T5198] loop1: detected capacity change from 0 to 2048 [ 81.113113][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5195] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5193] <... exit_group resumed>) = ? [pid 5000] unlink("./15/binderfs" [pid 5001] <... clone resumed>, child_tidptr=0x555555a555d0) = 5200 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] <... ioctl resumed>) = 0 [pid 5198] close(3) = 0 [pid 5198] mkdir("./file0", 0777) = 0 [pid 5198] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, ""./strace-static-x86_64: Process 5200 attached [pid 5193] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./15/binderfs") = 0 [pid 4998] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 81.130531][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.140468][ T5195] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 81.153093][ T5000] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 81.153323][ T5195] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.167698][ T5000] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 81.170765][ T5003] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5200] chdir("./15") = 0 [pid 5200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5195] <... write resumed>) = -1 EIO (Input/output error) [pid 5200] <... prctl resumed>) = 0 [pid 5195] exit_group(0 [pid 5198] <... mount resumed>) = 0 [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5198] chdir("./file0") = 0 [pid 5198] ioctl(4, LOOP_CLR_FD) = 0 [ 81.186357][ T5195] NILFS (loop4): error -5 truncating bmap (ino=16) [ 81.186441][ T4998] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 81.193200][ T5003] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 81.203524][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.219419][ T4998] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 81.219539][ T5201] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5198] close(4 [pid 5200] setpgid(0, 0 [pid 5198] <... close resumed>) = 0 [pid 5195] <... exit_group resumed>) = ? [pid 5198] creat("./file2", 040 [pid 5200] <... setpgid resumed>) = 0 [pid 5195] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./16/binderfs") = 0 [pid 5002] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 81.238616][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.240333][ T5198] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.249833][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.273327][ T4998] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5003] <... umount2 resumed>) = 0 [ 81.282242][ T5002] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 81.282267][ T5002] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 81.282285][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.282304][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.282324][ T5002] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.282562][ T5002] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [pid 5200] write(3, "1000", 4 [pid 5003] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] <... write resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5200] close(3 [pid 5003] lstat("./15/file0", [pid 5200] <... close resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5200] symlink("/dev/binderfs", "./binderfs" [pid 5003] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5200] <... symlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 81.289818][ T4998] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 81.312630][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.354095][ T5000] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.363806][ T5198] Remounting filesystem read-only [ 81.372719][ T5000] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 81.383147][ T5198] NILFS (loop1): error -5 truncating bmap (ino=16) [pid 4998] lstat("./15/file0", [pid 5003] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] fstat(4, [pid 5200] memfd_create("syzkaller", 0 [pid 4998] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 4998] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5200] <... memfd_create resumed>) = 3 [pid 5003] getdents64(4, [pid 4998] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] close(4 [pid 4998] fstat(4, [pid 5200] <... mmap resumed>) = 0x7f45ac090000 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./15/file0" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5002] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./16/file0", [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(3, [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] getdents64(4, [pid 5002] fstat(4, [pid 5003] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 4998] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./16/file0" [pid 4998] close(4) = 0 [pid 5003] <... close resumed>) = 0 [pid 4998] rmdir("./15/file0" [pid 5003] rmdir("./15" [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5003] mkdir("./16", 0777 [pid 4998] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4998] close(3 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] rmdir("./15" [pid 5002] close(3) = 0 [pid 5002] rmdir("./16") = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 4998] mkdir("./16", 0777 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] mkdir("./17", 0777) = 0 [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] close(3 [pid 5200] <... write resumed>) = 1048576 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 3 [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5198] <... creat resumed>) = 4 [pid 5198] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47./strace-static-x86_64: Process 5203 attached [pid 5200] munmap(0x7f45ac090000, 1048576 [pid 5003] <... clone resumed>, child_tidptr=0x555555a555d0) = 5203 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... clone resumed>, child_tidptr=0x555555a555d0) = 5202 ./strace-static-x86_64: Process 5202 attached [pid 5202] chdir("./17") = 0 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5202] setpgid(0, 0) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5202] write(3, "1000", 4 [pid 5203] chdir("./16" [pid 5202] <... write resumed>) = 4 [pid 5200] <... munmap resumed>) = 0 [pid 5000] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3 [pid 5203] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] lstat("./15/file0", [pid 4998] <... close resumed>) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5203] <... prctl resumed>) = 0 [pid 5202] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5202] <... close resumed>) = 0 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5202] memfd_create("syzkaller", 0) = 3 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5203] setpgid(0, 0 [pid 5200] <... openat resumed>) = 4 [pid 5000] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5203] <... setpgid resumed>) = 0 [pid 5200] ioctl(4, LOOP_SET_FD, 3 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5204 attached [pid 5204] chdir("./16") = 0 [pid 5204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5204] setpgid(0, 0) = 0 [pid 5204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5204] write(3, "1000", 4 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 5203] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555a555d0) = 5204 [pid 5204] <... write resumed>) = 4 [pid 5204] close(3) = 0 [ 81.435505][ T5198] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 81.462230][ T5198] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.476149][ T5200] loop3: detected capacity change from 0 to 2048 [pid 5204] symlink("/dev/binderfs", "./binderfs" [pid 5203] write(3, "1000", 4 [pid 5000] getdents64(4, [pid 5204] <... symlink resumed>) = 0 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5204] memfd_create("syzkaller", 0 [pid 5200] <... ioctl resumed>) = 0 [pid 5204] <... memfd_create resumed>) = 3 [pid 5200] close(3 [pid 5204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5200] <... close resumed>) = 0 [pid 5204] <... mmap resumed>) = 0x7f45ac090000 [pid 5200] mkdir("./file0", 0777 [pid 5204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5203] <... write resumed>) = 4 [pid 5200] <... mkdir resumed>) = 0 [pid 5198] <... write resumed>) = -1 EIO (Input/output error) [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5200] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5203] close(3 [pid 5202] <... write resumed>) = 1048576 [pid 5198] exit_group(0 [pid 5000] getdents64(4, [pid 5203] <... close resumed>) = 0 [pid 5202] munmap(0x7f45ac090000, 1048576 [pid 5198] <... exit_group resumed>) = ? [pid 5000] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5203] symlink("/dev/binderfs", "./binderfs" [pid 5202] <... munmap resumed>) = 0 [pid 5198] +++ exited with 0 +++ [pid 5000] close(4 [pid 5203] <... symlink resumed>) = 0 [pid 5202] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... close resumed>) = 0 [pid 5204] <... write resumed>) = 1048576 [pid 5203] memfd_create("syzkaller", 0 [ 81.485655][ T5198] NILFS (loop1): error -5 truncating bmap (ino=16) [ 81.496437][ T901] cfg80211: failed to load regulatory.db [pid 5202] <... openat resumed>) = 4 [pid 5000] rmdir("./15/file0" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5203] <... memfd_create resumed>) = 3 [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 5200] <... mount resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5204] munmap(0x7f45ac090000, 1048576 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] getdents64(3, [pid 4999] <... restart_syscall resumed>) = 0 [pid 5204] <... munmap resumed>) = 0 [pid 5203] <... mmap resumed>) = 0x7f45ac090000 [pid 5200] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5204] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5202] <... ioctl resumed>) = 0 [pid 5200] chdir("./file0" [pid 5000] close(3 [pid 5204] <... openat resumed>) = 4 [pid 5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5202] close(3 [pid 5200] <... chdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5204] ioctl(4, LOOP_SET_FD, 3 [pid 5202] <... close resumed>) = 0 [pid 5200] ioctl(4, LOOP_CLR_FD [pid 5000] rmdir("./15" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] mkdir("./16", 0777 [pid 4999] <... openat resumed>) = 3 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] fstat(3, [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] getdents64(3, [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5204] <... ioctl resumed>) = 0 [pid 5203] <... write resumed>) = 1048576 [pid 5202] mkdir("./file0", 0777 [pid 5200] <... ioctl resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5204] close(3 [pid 5202] <... mkdir resumed>) = 0 [pid 5200] close(4 [pid 5204] <... close resumed>) = 0 [pid 5202] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5200] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] lstat("./15/binderfs", [pid 5204] mkdir("./file0", 0777 [ 81.531945][ T5205] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.536179][ T5202] loop4: detected capacity change from 0 to 2048 [ 81.568574][ T5204] loop0: detected capacity change from 0 to 2048 [pid 5200] creat("./file2", 040./strace-static-x86_64: Process 5206 attached [pid 5204] <... mkdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5206] chdir("./16" [pid 5204] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5000] <... clone resumed>, child_tidptr=0x555555a555d0) = 5206 [pid 4999] unlink("./15/binderfs" [pid 5206] <... chdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... prctl resumed>) = 0 [pid 5206] setpgid(0, 0) = 0 [pid 5203] munmap(0x7f45ac090000, 1048576) = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 81.593768][ T5200] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.616905][ T4999] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 81.621925][ T5200] Remounting filesystem read-only [ 81.623889][ T4999] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [pid 5203] ioctl(4, LOOP_SET_FD, 3 [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5204] <... mount resumed>) = 0 [pid 5204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5204] chdir("./file0") = 0 [pid 5204] ioctl(4, LOOP_CLR_FD) = 0 [pid 5204] close(4) = 0 [pid 5204] creat("./file2", 040 [pid 5206] <... openat resumed>) = 3 [pid 5202] <... mount resumed>) = 0 [pid 5202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5202] chdir("./file0") = 0 [pid 5202] ioctl(4, LOOP_CLR_FD) = 0 [pid 5202] close(4) = 0 [ 81.623914][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.632818][ T5203] loop5: detected capacity change from 0 to 2048 [ 81.640092][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.651006][ T5204] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.653136][ T5200] NILFS (loop3): error -5 truncating bmap (ino=16) [ 81.665391][ T5202] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [pid 5202] creat("./file2", 040 [pid 5206] write(3, "1000", 4) = 4 [pid 5206] close(3) = 0 [pid 5206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5206] memfd_create("syzkaller", 0 [pid 5200] <... creat resumed>) = 4 [pid 5206] <... memfd_create resumed>) = 3 [ 81.684122][ T4999] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.695598][ T5208] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.707061][ T5207] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.717583][ T4999] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 81.729235][ T5204] Remounting filesystem read-only [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f45ac090000 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5200] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5204] <... creat resumed>) = 4 [pid 5204] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5203] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5203] close(3) = 0 [pid 4999] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5202] <... creat resumed>) = 4 [ 81.745178][ T5204] NILFS (loop0): error -5 truncating bmap (ino=16) [ 81.753332][ T5202] Remounting filesystem read-only [ 81.754223][ T5200] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 81.759664][ T5204] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 81.778423][ T5202] NILFS (loop4): error -5 truncating bmap (ino=16) [pid 5202] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5206] <... write resumed>) = 1048576 [pid 5203] mkdir("./file0", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5206] munmap(0x7f45ac090000, 1048576 [pid 5203] <... mkdir resumed>) = 0 [pid 4999] lstat("./15/file0", [pid 5206] <... munmap resumed>) = 0 [pid 5203] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5200] <... write resumed>) = -1 EIO (Input/output error) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 81.786829][ T5202] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 81.795075][ T5200] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.797615][ T5204] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.808574][ T5200] NILFS (loop3): error -5 truncating bmap (ino=16) [ 81.815660][ T10] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 81.823507][ T5202] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.829504][ T10] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [pid 5206] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5202] <... write resumed>) = -1 EIO (Input/output error) [pid 5200] exit_group(0 [pid 4999] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... openat resumed>) = 4 [pid 5200] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 81.839521][ T5202] NILFS (loop4): error -5 truncating bmap (ino=16) [ 81.851600][ T5204] NILFS (loop0): error -5 truncating bmap (ino=16) [ 81.859598][ T10] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.862097][ T5204] ------------[ cut here ]------------ [ 81.874010][ T5204] WARNING: CPU: 0 PID: 5204 at fs/buffer.c:1130 mark_buffer_dirty+0x2dd/0x500 [ 81.874852][ T5203] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 81.882984][ T5204] Modules linked in: [pid 5206] ioctl(4, LOOP_SET_FD, 3 [pid 5202] exit_group(0 [pid 5200] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5203] <... mount resumed>) = 0 [pid 5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5203] chdir("./file0") = 0 [pid 5203] ioctl(4, LOOP_CLR_FD) = 0 [pid 5203] close(4) = 0 [ 81.892906][ T5209] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.895963][ T5204] CPU: 0 PID: 5204 Comm: syz-executor121 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0 [ 81.895990][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 81.896004][ T5204] RIP: 0010:mark_buffer_dirty+0x2dd/0x500 [ 81.896033][ T5204] Code: df e8 47 0e e0 ff 48 8b 3b be 04 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 22 69 fc ff e8 9d 36 88 ff e9 71 ff ff ff e8 93 36 88 ff <0f> 0b e9 6d fd ff ff e8 87 36 88 ff 0f 0b e9 96 fd ff ff e8 7b 36 [ 81.907239][ T5206] loop2: detected capacity change from 0 to 2048 [ 81.917081][ T5204] RSP: 0018:ffffc900040df890 EFLAGS: 00010293 [ 81.927694][ T10] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.933013][ T5204] [ 81.976273][ T5204] RAX: ffffffff8203490d RBX: ffff8880795ee101 RCX: ffff8880203e5940 [ 81.976877][ T5203] Remounting filesystem read-only [pid 5203] creat("./file2", 040 [pid 5206] <... ioctl resumed>) = 0 [pid 5203] <... creat resumed>) = 4 [pid 5202] <... exit_group resumed>) = ? [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5200, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] <... openat resumed>) = 4 [pid 5206] close(3 [pid 5203] write(4, "\x66\x75\x6c\x6c\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x35\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x34\x32\x39\x34\x39\x36\x37\x32\x39\x35\x00", 47 [pid 5202] +++ exited with 0 +++ [pid 4999] fstat(4, [pid 5206] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5206] mkdir("./file0", 0777 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5001] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 5206] <... mkdir resumed>) = 0 [pid 5002] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 2 entries */, 32768) = 48 [pid 5206] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 5002] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555555a5e660 /* 0 entries */, 32768) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 4999] close(4 [pid 5002] fstat(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 81.984304][ T5204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.984323][ T5204] RBP: 0000000000000000 R08: ffffffff82034674 R09: ffffed100ee9b21e [ 81.984339][ T5204] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880774d90e8 [ 81.984355][ T5204] R13: dffffc0000000000 R14: ffffc900040df900 R15: 1ffff9200081bf20 [ 81.990621][ T5203] NILFS (loop5): error -5 truncating bmap (ino=16) [ 81.997382][ T5204] FS: 0000555555a55300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 81.997407][ T5204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [pid 4999] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4999] rmdir("./15/file0" [pid 5002] getdents64(3, [pid 5001] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555a56620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5002] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555a56620 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./15/binderfs", [pid 4999] close(3 [pid 5002] lstat("./17/binderfs", [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./15/binderfs" [pid 4999] rmdir("./15" [pid 5002] unlink("./17/binderfs" [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] mkdir("./16", 0777 [pid 5002] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 82.005831][ T10] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.013374][ T5204] CR2: 00007f45b45210e8 CR3: 000000001e6fb000 CR4: 00000000003506f0 [ 82.026596][ T5203] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 82.028008][ T5204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.078072][ T5204] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.082814][ T5203] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 82.086078][ T5204] Call Trace: [ 82.086089][ T5204] [ 82.086100][ T5204] ? __warn+0x162/0x4a0 [ 82.086134][ T5204] ? mark_buffer_dirty+0x2dd/0x500 [ 82.086162][ T5204] ? report_bug+0x2b3/0x500 [ 82.103409][ T5203] NILFS (loop5): error -5 truncating bmap (ino=16) [ 82.106413][ T5204] ? mark_buffer_dirty+0x2dd/0x500 [ 82.106450][ T5204] ? handle_bug+0x3d/0x70 [ 82.106475][ T5204] ? exc_invalid_op+0x1a/0x50 [ 82.136893][ T5204] ? asm_exc_invalid_op+0x1a/0x20 [ 82.141985][ T5204] ? mark_buffer_dirty+0x44/0x500 [ 82.147085][ T5204] ? mark_buffer_dirty+0x2dd/0x500 [ 82.152247][ T5204] ? mark_buffer_dirty+0x2dd/0x500 [ 82.157446][ T5204] __nilfs_mark_inode_dirty+0x105/0x280 [ 82.163053][ T5204] ? nilfs_inode_dirty+0x130/0x130 [ 82.168276][ T5204] ? nilfs_truncate+0x310/0x500 [ 82.173169][ T5204] nilfs_truncate+0x403/0x500 [ 82.177931][ T5204] ? nilfs_write_failed+0xa0/0xa0 [ 82.183015][ T5204] nilfs_write_begin+0xe4/0x110 [ 82.187968][ T5204] generic_perform_write+0x300/0x5e0 [ 82.193742][ T5204] ? generic_file_direct_write+0x460/0x460 [ 82.199633][ T5204] ? __file_remove_privs+0x640/0x640 [ 82.204999][ T5204] ? generic_write_checks+0x160/0x1c0 [ 82.210432][ T5204] __generic_file_write_iter+0x17a/0x400 [ 82.216148][ T5204] generic_file_write_iter+0xaf/0x310 [ 82.221568][ T5204] vfs_write+0x790/0xb20 [ 82.225910][ T5204] ? file_end_write+0x250/0x250 [ 82.230827][ T5204] ? lockdep_hardirqs_on+0x98/0x140 [ 82.232240][ T5210] loop1: detected capacity change from 0 to 2048 [ 82.236096][ T5204] ? __fdget_pos+0x265/0x2f0 [ 82.236129][ T5204] ksys_write+0x1a0/0x2c0 [ 82.251478][ T5204] ? __ia32_sys_read+0x90/0x90 [ 82.256328][ T5204] ? syscall_enter_from_user_mode+0x32/0x230 [ 82.262356][ T5204] ? syscall_enter_from_user_mode+0x8c/0x230 [ 82.268434][ T5204] do_syscall_64+0x41/0xc0 [ 82.272891][ T5204] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.278861][ T5204] RIP: 0033:0x7f45b44dda99 [ 82.283316][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 82.303002][ T5204] RSP: 002b:00007ffe9b6155f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.306768][ T5210] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 82.311478][ T5204] RAX: ffffffffffffffda RBX: 0000000000013ace RCX: 00007f45b44dda99 [ 82.321465][ T5212] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.328666][ T5204] RDX: 000000000000002f RSI: 0000000020000040 RDI: 0000000000000004 [ 82.328686][ T5204] RBP: 0000000000000000 R08: 0000000000000014 R09: 00007ffe9b615620 [ 82.328703][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9b61561c [ 82.328718][ T5204] R13: 00007ffe9b615650 R14: 00007ffe9b615630 R15: 0000000000000010 [ 82.328794][ T5204] [ 82.374356][ T5204] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.381642][ T5204] CPU: 0 PID: 5204 Comm: syz-executor121 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0 [ 82.392141][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 82.402201][ T5204] Call Trace: [ 82.405507][ T5204] [ 82.408453][ T5204] dump_stack_lvl+0x1e7/0x2d0 [ 82.413155][ T5204] ? nf_tcp_handle_invalid+0x650/0x650 [ 82.418637][ T5204] ? panic+0x770/0x770 [ 82.422736][ T5204] ? vscnprintf+0x5d/0x80 [ 82.427084][ T5204] panic+0x30f/0x770 [ 82.430991][ T5204] ? __warn+0x171/0x4a0 [ 82.435160][ T5204] ? __memcpy_flushcache+0x2b0/0x2b0 [ 82.440468][ T5204] __warn+0x314/0x4a0 [ 82.444461][ T5204] ? mark_buffer_dirty+0x2dd/0x500 [ 82.449577][ T5204] report_bug+0x2b3/0x500 [ 82.453915][ T5204] ? mark_buffer_dirty+0x2dd/0x500 [ 82.459037][ T5204] handle_bug+0x3d/0x70 [ 82.463201][ T5204] exc_invalid_op+0x1a/0x50 [ 82.467711][ T5204] asm_exc_invalid_op+0x1a/0x20 [ 82.472572][ T5204] RIP: 0010:mark_buffer_dirty+0x2dd/0x500 [ 82.478296][ T5204] Code: df e8 47 0e e0 ff 48 8b 3b be 04 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 22 69 fc ff e8 9d 36 88 ff e9 71 ff ff ff e8 93 36 88 ff <0f> 0b e9 6d fd ff ff e8 87 36 88 ff 0f 0b e9 96 fd ff ff e8 7b 36 [ 82.497905][ T5204] RSP: 0018:ffffc900040df890 EFLAGS: 00010293 [ 82.503997][ T5204] RAX: ffffffff8203490d RBX: ffff8880795ee101 RCX: ffff8880203e5940 [ 82.511978][ T5204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.519954][ T5204] RBP: 0000000000000000 R08: ffffffff82034674 R09: ffffed100ee9b21e [ 82.527932][ T5204] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880774d90e8 [ 82.535912][ T5204] R13: dffffc0000000000 R14: ffffc900040df900 R15: 1ffff9200081bf20 [ 82.543919][ T5204] ? mark_buffer_dirty+0x44/0x500 [ 82.548969][ T5204] ? mark_buffer_dirty+0x2dd/0x500 [ 82.554113][ T5204] __nilfs_mark_inode_dirty+0x105/0x280 [ 82.559684][ T5204] ? nilfs_inode_dirty+0x130/0x130 [ 82.564825][ T5204] ? nilfs_truncate+0x310/0x500 [ 82.569701][ T5204] nilfs_truncate+0x403/0x500 [ 82.574410][ T5204] ? nilfs_write_failed+0xa0/0xa0 [ 82.579463][ T5204] nilfs_write_begin+0xe4/0x110 [ 82.584435][ T5204] generic_perform_write+0x300/0x5e0 [ 82.589759][ T5204] ? generic_file_direct_write+0x460/0x460 [ 82.595588][ T5204] ? __file_remove_privs+0x640/0x640 [ 82.600898][ T5204] ? generic_write_checks+0x160/0x1c0 [ 82.606284][ T5204] __generic_file_write_iter+0x17a/0x400 [ 82.611933][ T5204] generic_file_write_iter+0xaf/0x310 [ 82.617313][ T5204] vfs_write+0x790/0xb20 [ 82.621573][ T5204] ? file_end_write+0x250/0x250 [ 82.626445][ T5204] ? lockdep_hardirqs_on+0x98/0x140 [ 82.631660][ T5204] ? __fdget_pos+0x265/0x2f0 [ 82.636261][ T5204] ksys_write+0x1a0/0x2c0 [ 82.640609][ T5204] ? __ia32_sys_read+0x90/0x90 [ 82.645389][ T5204] ? syscall_enter_from_user_mode+0x32/0x230 [ 82.651389][ T5204] ? syscall_enter_from_user_mode+0x8c/0x230 [ 82.657383][ T5204] do_syscall_64+0x41/0xc0 [ 82.661804][ T5204] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.667710][ T5204] RIP: 0033:0x7f45b44dda99 [ 82.672129][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 82.691746][ T5204] RSP: 002b:00007ffe9b6155f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.700169][ T5204] RAX: ffffffffffffffda RBX: 0000000000013ace RCX: 00007f45b44dda99 [ 82.708144][ T5204] RDX: 000000000000002f RSI: 0000000020000040 RDI: 0000000000000004 [ 82.716120][ T5204] RBP: 0000000000000000 R08: 0000000000000014 R09: 00007ffe9b615620 [ 82.724097][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9b61561c [ 82.732071][ T5204] R13: 00007ffe9b615650 R14: 00007ffe9b615630 R15: 0000000000000010 [ 82.740060][ T5204] [ 82.743404][ T5204] Kernel Offset: disabled [ 82.747841][ T5204] Rebooting in 86400 seconds..