./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1153081276 <...> Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. execve("./syz-executor1153081276", ["./syz-executor1153081276"], 0x7fff9a65f5d0 /* 10 vars */) = 0 brk(NULL) = 0x555592c38000 brk(0x555592c38d00) = 0x555592c38d00 arch_prctl(ARCH_SET_FS, 0x555592c38380) = 0 set_tid_address(0x555592c38650) = 5830 set_robust_list(0x555592c38660, 24) = 0 rseq(0x555592c38ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1153081276", 4096) = 28 getrandom("\x56\xb4\x9e\xa3\x41\x2b\x5d\xcc", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555592c38d00 brk(0x555592c59d00) = 0x555592c59d00 brk(0x555592c5a000) = 0x555592c5a000 mprotect(0x7f8021b00000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5831 attached , child_tidptr=0x555592c38650) = 5831 [pid 5831] set_robust_list(0x555592c38660, 24) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] mkdir("./syzkaller.HAYiI7", 0700./strace-static-x86_64: Process 5832 attached [pid 5830] <... clone resumed>, child_tidptr=0x555592c38650) = 5832 [pid 5832] set_robust_list(0x555592c38660, 24 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... mkdir resumed>) = 0 [pid 5831] chmod("./syzkaller.HAYiI7", 0777./strace-static-x86_64: Process 5833 attached [pid 5832] <... set_robust_list resumed>) = 0 [pid 5831] <... chmod resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555592c38650) = 5833 [pid 5833] set_robust_list(0x555592c38660, 24 [pid 5832] mkdir("./syzkaller.CtjJid", 0700 [pid 5831] chdir("./syzkaller.HAYiI7" [pid 5833] <... set_robust_list resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5834 attached [pid 5830] <... clone resumed>, child_tidptr=0x555592c38650) = 5834 [pid 5833] mkdir("./syzkaller.R3lfZY", 0700 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] mkdir("./0", 0777 [pid 5834] set_robust_list(0x555592c38660, 24 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] chmod("./syzkaller.CtjJid", 0777 [pid 5834] <... set_robust_list resumed>) = 0 [pid 5832] <... chmod resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] chmod("./syzkaller.R3lfZY", 0777 [pid 5834] mkdir("./syzkaller.8fmDU4", 0700 [pid 5833] <... chmod resumed>) = 0 [pid 5832] chdir("./syzkaller.CtjJid" [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] chdir("./syzkaller.R3lfZY"./strace-static-x86_64: Process 5835 attached ) = 0 [pid 5832] <... chdir resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5833] mkdir("./0", 0777 [pid 5835] set_robust_list(0x555592c38660, 24 [pid 5830] <... clone resumed>, child_tidptr=0x555592c38650) = 5835 [pid 5834] <... mkdir resumed>) = 0 [pid 5832] mkdir("./0", 0777 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5835] <... set_robust_list resumed>) = 0 [pid 5834] chmod("./syzkaller.8fmDU4", 0777 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5836 attached [pid 5835] mkdir("./syzkaller.1v5kbb", 0700 [pid 5834] <... chmod resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5830] <... clone resumed>, child_tidptr=0x555592c38650) = 5836 [pid 5836] set_robust_list(0x555592c38660, 24 [pid 5832] <... openat resumed>) = 3 [pid 5836] <... set_robust_list resumed>) = 0 [pid 5834] chdir("./syzkaller.8fmDU4" [pid 5833] <... openat resumed>) = 3 [pid 5831] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5836] mkdir("./syzkaller.e2RyqX", 0700 [pid 5835] <... mkdir resumed>) = 0 [pid 5834] <... chdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] <... close resumed>) = 0 [pid 5835] chmod("./syzkaller.1v5kbb", 0777 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5835] <... chmod resumed>) = 0 [pid 5834] mkdir("./0", 0777 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] close(3 [pid 5835] chdir("./syzkaller.1v5kbb" [pid 5832] <... close resumed>) = 0 [pid 5836] <... mkdir resumed>) = 0 [pid 5835] <... chdir resumed>) = 0 [pid 5833] close(3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5835] mkdir("./0", 0777 [pid 5833] <... close resumed>) = 0 ./strace-static-x86_64: Process 5837 attached [pid 5835] <... mkdir resumed>) = 0 [pid 5837] set_robust_list(0x555592c38660, 24) = 0 [pid 5837] chdir("./0") = 0 ./strace-static-x86_64: Process 5838 attached [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5836] chmod("./syzkaller.e2RyqX", 0777 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5834] <... mkdir resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... clone resumed>, child_tidptr=0x555592c38650) = 5837 ./strace-static-x86_64: Process 5840 attached [pid 5838] set_robust_list(0x555592c38660, 24 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5840] set_robust_list(0x555592c38660, 24 [pid 5838] <... set_robust_list resumed>) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5831] <... clone resumed>, child_tidptr=0x555592c38650) = 5838 [pid 5840] <... set_robust_list resumed>) = 0 [pid 5838] chdir("./0" [pid 5834] ioctl(3, LOOP_CLR_FD [pid 5833] <... clone resumed>, child_tidptr=0x555592c38650) = 5840 [pid 5840] chdir("./0" [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5840] <... chdir resumed>) = 0 [pid 5838] <... chdir resumed>) = 0 [pid 5837] <... prctl resumed>) = 0 [pid 5836] <... chmod resumed>) = 0 [pid 5835] <... openat resumed>) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5837] setpgid(0, 0 [pid 5836] chdir("./syzkaller.e2RyqX" [pid 5835] close(3 [pid 5834] close(3 [pid 5835] <... close resumed>) = 0 [pid 5840] <... prctl resumed>) = 0 [pid 5837] <... setpgid resumed>) = 0 [pid 5836] <... chdir resumed>) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] <... close resumed>) = 0 [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5836] mkdir("./0", 0777 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5842 attached [pid 5836] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5843 attached [pid 5840] setpgid(0, 0 [pid 5838] <... prctl resumed>) = 0 [pid 5837] <... openat resumed>) = 3 [pid 5836] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5840] <... setpgid resumed>) = 0 [pid 5838] setpgid(0, 0 [pid 5837] write(3, "1000", 4 [pid 5836] <... openat resumed>) = 3 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5838] <... setpgid resumed>) = 0 [pid 5837] <... write resumed>) = 4 [pid 5836] ioctl(3, LOOP_CLR_FD [pid 5843] set_robust_list(0x555592c38660, 24 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5837] close(3 [pid 5836] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5842] set_robust_list(0x555592c38660, 24 [pid 5837] <... close resumed>) = 0 [pid 5836] close(3 [pid 5835] <... clone resumed>, child_tidptr=0x555592c38650) = 5842 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5842] <... set_robust_list resumed>) = 0 [pid 5838] <... openat resumed>) = 3 [pid 5837] symlink("/dev/binderfs", "./binderfs" [pid 5836] <... close resumed>) = 0 [pid 5843] chdir("./0" [pid 5842] chdir("./0" [pid 5840] <... openat resumed>) = 3 [pid 5838] write(3, "1000", 4 [pid 5837] <... symlink resumed>) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] <... clone resumed>, child_tidptr=0x555592c38650) = 5843 ./strace-static-x86_64: Process 5844 attached [pid 5843] <... chdir resumed>) = 0 [pid 5842] <... chdir resumed>) = 0 [pid 5840] write(3, "1000", 4 [pid 5838] <... write resumed>) = 4 executing program [pid 5837] write(1, "executing program\n", 18 [pid 5844] set_robust_list(0x555592c38660, 24 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5840] <... write resumed>) = 4 [pid 5838] close(3 [pid 5837] <... write resumed>) = 18 [pid 5836] <... clone resumed>, child_tidptr=0x555592c38650) = 5844 [pid 5844] <... set_robust_list resumed>) = 0 [pid 5843] <... prctl resumed>) = 0 [pid 5842] <... prctl resumed>) = 0 [pid 5840] close(3 [pid 5838] <... close resumed>) = 0 [pid 5837] memfd_create("syzkaller", 0 [pid 5844] chdir("./0" [pid 5843] setpgid(0, 0 [pid 5842] setpgid(0, 0 [pid 5840] <... close resumed>) = 0 [pid 5844] <... chdir resumed>) = 0 [pid 5842] <... setpgid resumed>) = 0 [pid 5840] symlink("/dev/binderfs", "./binderfs" [pid 5838] symlink("/dev/binderfs", "./binderfs" [pid 5843] <... setpgid resumed>) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5840] <... symlink resumed>) = 0 [pid 5838] <... symlink resumed>) = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5842] <... openat resumed>) = 3 executing program [pid 5840] write(1, "executing program\n", 18 [pid 5838] write(1, "executing program\n", 18 [pid 5837] <... memfd_create resumed>) = 3 executing program [pid 5844] <... prctl resumed>) = 0 [pid 5843] <... openat resumed>) = 3 [pid 5842] write(3, "1000", 4 [pid 5840] <... write resumed>) = 18 [pid 5838] <... write resumed>) = 18 [pid 5837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5844] setpgid(0, 0 [pid 5843] write(3, "1000", 4 [pid 5842] <... write resumed>) = 4 [pid 5838] memfd_create("syzkaller", 0 [pid 5844] <... setpgid resumed>) = 0 [pid 5843] <... write resumed>) = 4 [pid 5842] close(3 [pid 5840] memfd_create("syzkaller", 0 [pid 5837] <... mmap resumed>) = 0x7f8019600000 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5843] close(3 [pid 5842] <... close resumed>) = 0 [pid 5843] <... close resumed>) = 0 [pid 5842] symlink("/dev/binderfs", "./binderfs" [pid 5838] <... memfd_create resumed>) = 3 [pid 5844] <... openat resumed>) = 3 [pid 5843] symlink("/dev/binderfs", "./binderfs" [pid 5842] <... symlink resumed>) = 0 [pid 5840] <... memfd_create resumed>) = 3 [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5844] write(3, "1000", 4 [pid 5843] <... symlink resumed>) = 0 [pid 5840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5844] <... write resumed>) = 4 [pid 5840] <... mmap resumed>) = 0x7f8019600000 [pid 5838] <... mmap resumed>) = 0x7f8019600000 [pid 5844] close(3executing program executing program ) = 0 [pid 5843] write(1, "executing program\n", 18 [pid 5842] write(1, "executing program\n", 18 [pid 5843] <... write resumed>) = 18 [pid 5842] <... write resumed>) = 18 [pid 5843] memfd_create("syzkaller", 0 [pid 5842] memfd_create("syzkaller", 0 [pid 5844] symlink("/dev/binderfs", "./binderfs" [pid 5843] <... memfd_create resumed>) = 3 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program ) = 0x7f8019600000 [pid 5844] <... symlink resumed>) = 0 [pid 5842] <... memfd_create resumed>) = 3 [pid 5844] write(1, "executing program\n", 18) = 18 [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5844] memfd_create("syzkaller", 0 [pid 5842] <... mmap resumed>) = 0x7f8019600000 [pid 5844] <... memfd_create resumed>) = 3 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5838] <... write resumed>) = 16777216 [pid 5838] munmap(0x7f8019600000, 138412032 [pid 5842] <... write resumed>) = 16777216 [pid 5843] <... write resumed>) = 16777216 [pid 5842] munmap(0x7f8019600000, 138412032 [pid 5838] <... munmap resumed>) = 0 [pid 5843] munmap(0x7f8019600000, 138412032 [pid 5837] <... write resumed>) = 16777216 [pid 5840] <... write resumed>) = 16777216 [pid 5837] munmap(0x7f8019600000, 138412032 [pid 5844] <... write resumed>) = 16777216 [pid 5840] munmap(0x7f8019600000, 138412032 [pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5837] <... munmap resumed>) = 0 [pid 5844] munmap(0x7f8019600000, 138412032 [pid 5843] <... munmap resumed>) = 0 [pid 5842] <... munmap resumed>) = 0 [pid 5838] <... openat resumed>) = 4 [pid 5837] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5842] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5837] <... openat resumed>) = 4 [pid 5842] <... openat resumed>) = 4 [pid 5842] ioctl(4, LOOP_SET_FD, 3 [pid 5838] ioctl(4, LOOP_SET_FD, 3 [pid 5837] ioctl(4, LOOP_SET_FD, 3 [pid 5842] <... ioctl resumed>) = 0 [pid 5840] <... munmap resumed>) = 0 [pid 5840] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5844] <... munmap resumed>) = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5842] close(3 [pid 5840] <... openat resumed>) = 4 [pid 5837] <... ioctl resumed>) = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5843] <... openat resumed>) = 4 [pid 5842] <... close resumed>) = 0 [pid 5842] close(4) = 0 [pid 5842] mkdir("./file0", 0777) = 0 [pid 5844] <... openat resumed>) = 4 [pid 5843] ioctl(4, LOOP_SET_FD, 3 [pid 5837] close(3) = 0 [pid 5844] ioctl(4, LOOP_SET_FD, 3 [pid 5837] close(4 [pid 5842] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5840] ioctl(4, LOOP_SET_FD, 3 [pid 5838] <... ioctl resumed>) = 0 [pid 5837] <... close resumed>) = 0 [pid 5838] close(3) = 0 [ 95.327011][ T5842] loop4: detected capacity change from 0 to 32768 [ 95.327073][ T5837] loop1: detected capacity change from 0 to 32768 [ 95.342026][ T5838] loop0: detected capacity change from 0 to 32768 [ 95.355359][ T5844] loop5: detected capacity change from 0 to 32768 [ 95.362371][ T5843] loop3: detected capacity change from 0 to 32768 [pid 5838] close(4 [pid 5844] <... ioctl resumed>) = 0 [pid 5843] <... ioctl resumed>) = 0 [pid 5837] mkdir("./file0", 0777 [pid 5844] close(3 [pid 5843] close(3 [pid 5837] <... mkdir resumed>) = 0 [pid 5843] <... close resumed>) = 0 [pid 5843] close(4 [pid 5844] <... close resumed>) = 0 [pid 5843] <... close resumed>) = 0 [pid 5837] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5844] close(4 [pid 5843] mkdir("./file0", 0777 [pid 5844] <... close resumed>) = 0 [pid 5843] <... mkdir resumed>) = 0 [pid 5838] <... close resumed>) = 0 [ 95.376105][ T5840] loop2: detected capacity change from 0 to 32768 [ 95.383912][ T5842] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 95.397749][ T5837] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [pid 5844] mkdir("./file0", 0777 [pid 5843] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5838] mkdir("./file0", 0777 [pid 5844] <... mkdir resumed>) = 0 [pid 5840] <... ioctl resumed>) = 0 [pid 5840] close(3 [pid 5838] <... mkdir resumed>) = 0 [pid 5838] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5840] <... close resumed>) = 0 [pid 5840] close(4) = 0 [pid 5844] mount("/dev/loop5", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5840] mkdir("./file0", 0777) = 0 [ 95.417620][ T5838] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 95.417656][ T5843] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 95.445851][ T5844] bcachefs (/dev/loop5): error reading default superblock: checksum error, type none: got should be [ 95.464334][ T5840] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [ 95.617325][ T5844] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=ro,errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 95.636144][ T5844] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 95.644545][ T5844] bcachefs (loop5): superblock requires following recovery passes to be run: [ 95.644545][ T5844] check_inodes,check_extents,check_dirents [ 95.659442][ T5844] bcachefs (loop5): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.20: directory_size [ 95.659442][ T5844] running recovery passes: check_allocations,check_extents_to_backpointers [ 95.691009][ T5844] bcachefs (loop5): error validating btree node at btree inodes level 0/0 [ 95.691048][ T5844] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 95.691080][ T5844] node offset 8/24 bset u64s 29 bset byte offset 152: keys out of order: u64s 16 type inode_v3 5:4096:U32_MAX len 0 ver 0 > u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0, fixing [ 95.707222][ T5843] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 95.707334][ T5843] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 95.717758][ T5840] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 95.717854][ T5840] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 95.734851][ T5838] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 95.800823][ T5844] invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 5:4096:U32_MAX len 0 ver 0: [ 95.800856][ T5844] mode=40755 [ 95.800873][ T5844] flags=(16300000) [ 95.800890][ T5844] journal_seq=1 [ 95.800907][ T5844] hash_seed=28e4f092a4fc58ee [ 95.800925][ T5844] hash_type=siphash [ 95.800943][ T5844] bi_size=0 [ 95.800958][ T5844] bi_sectors=0 [ 95.800975][ T5844] bi_version=0 [ 95.800991][ T5844] bi_atime=200535484 [ 95.801008][ T5844] bi_ctime=200535484 [ 95.801025][ T5844] bi_mtime=200535484 [ 95.801042][ T5844] bi_otime=200535484 [ 95.801059][ T5844] bi_uid=0 [ 95.801075][ T5844] bi_gid=0 [ 95.801091][ T5844] bi_nlink=1 [ 95.801107][ T5844] bi_generation=0 [ 95.801124][ T5844] bi_dev=0 [ 95.801140][ T5844] bi_data_checksum=0 [ 95.801157][ T5844] bi_compression=0 [ 95.801173][ T5844] bi_project=0 [pid 5840] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5837] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 95.801190][ T5844] bi_background_compression=0 [ 95.801208][ T5844] bi_data_replicas=0 [ 95.801225][ T5844] bi_promote_target=0 [ 95.801242][ T5844] bi_foreground_target=0 [ 95.801260][ T5844] bi_background_target=0 [ 95.801478][ T5844] bi_erasure_code=0 [ 95.801501][ T5844] bi_fields_set=0 [pid 5837] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5837] ioctl(3, LOOP_CLR_FD) = 0 [pid 5840] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 95.801518][ T5844] bi_dir=0 [ 95.801534][ T5844] bi_dir_offset=0 [ 95.801550][ T5844] bi_subvol=1 [ 95.801567][ T5844] bi_parent_subvol=0 [ 95.801583][ T5844] bi_nocow=0 [ 95.801599][ T5844] bi_depth=0 [pid 5840] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5837] close(3 [pid 5840] <... openat resumed>) = 3 [pid 5840] ioctl(3, LOOP_CLR_FD) = 0 [pid 5840] close(3 [ 95.801615][ T5844] bi_inodes_32bit=0 [ 95.801632][ T5844] nonzero k.p.inode: delete?, fixing [pid 5843] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5843] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5842] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5842] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5842] ioctl(3, LOOP_CLR_FD) = 0 [pid 5842] close(3 [pid 5843] <... openat resumed>) = 3 [pid 5838] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5843] ioctl(3, LOOP_CLR_FD) = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5843] close(3 [pid 5838] <... openat resumed>) = 3 [pid 5838] ioctl(3, LOOP_CLR_FD) = 0 [ 95.824378][ T5838] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 95.826370][ T5837] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 95.826462][ T5837] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 95.835000][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 95.835076][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 96.059316][ T5837] bcachefs: bch2_fs_get_tree() error: EINVAL [ 96.106348][ T5840] bcachefs: bch2_fs_get_tree() error: EINVAL [ 96.174366][ T5843] bcachefs: bch2_fs_get_tree() error: EINVAL [ 96.215291][ T5838] bcachefs: bch2_fs_get_tree() error: EINVAL [ 96.218274][ T5842] bcachefs: bch2_fs_get_tree() error: EINVAL [ 96.511677][ T5844] bcachefs (loop5): btree_node_read_work: rewriting btree node at due to error [ 96.511677][ T5844] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [pid 5838] close(3 [pid 5840] <... close resumed>) = 0 [pid 5840] exit_group(0 [pid 5837] <... close resumed>) = 0 [pid 5840] <... exit_group resumed>) = ? [ 96.595531][ T903] cfg80211: failed to load regulatory.db [pid 5840] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=49 /* 0.49 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5837] exit_group(0 [pid 5833] newfstatat(3, "", [pid 5837] <... exit_group resumed>) = ? [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] +++ exited with 0 +++ [pid 5833] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5837, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=58 /* 0.58 s */} --- [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./0/binderfs") = 0 [pid 5833] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./0/file0", [pid 5832] <... restart_syscall resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [ 96.646044][ T5844] bcachefs (loop5): error validating btree node on loop5 at btree freespace level 0/0 [pid 5833] rmdir("./0/file0" [pid 5843] <... close resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 5838] exit_group(0 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 96.646077][ T5844] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 96.646108][ T5844] node offset 0/32 bset u64s 0: checksum error, type none: got should be , fixing [ 96.716095][ T5844] bcachefs (loop5): btree_node_read_work: rewriting btree node at due to error [pid 5832] getdents64(3, [pid 5843] exit_group(0 [pid 5842] exit_group(0 [pid 5838] <... exit_group resumed>) = ? [pid 5833] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5842] <... exit_group resumed>) = ? [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./0") = 0 [pid 5838] +++ exited with 0 +++ [pid 5833] mkdir("./1", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=56 /* 0.56 s */} --- [pid 5833] <... openat resumed>) = 3 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5842] +++ exited with 0 +++ [pid 5843] <... exit_group resumed>) = ? [pid 5833] close(3 [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=48 /* 0.48 s */} --- [pid 5833] <... close resumed>) = 0 [pid 5835] restart_syscall(<... resuming interrupted clone ...> [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 5891 [pid 5835] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5835] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5835] newfstatat(3, "", [pid 5831] newfstatat(3, "", [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, [pid 5831] getdents64(3, [pid 5835] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5843] +++ exited with 0 +++ [pid 5835] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5891 attached [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=59 /* 0.59 s */} --- [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5831] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5835] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./0/binderfs" [pid 5831] unlink("./0/binderfs" [pid 5891] set_robust_list(0x555592c38660, 24 [pid 5835] <... unlink resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] <... unlink resumed>) = 0 [pid 5835] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5891] <... set_robust_list resumed>) = 0 [pid 5832] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5891] chdir("./1" [pid 5834] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5835] newfstatat(AT_FDCWD, "./0/file0", [pid 5831] newfstatat(AT_FDCWD, "./0/file0", [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] newfstatat(3, "", [pid 5832] unlink("./0/binderfs" [pid 5831] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... unlink resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] <... openat resumed>) = 4 [pid 5834] getdents64(3, [pid 5832] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 4 [pid 5835] newfstatat(4, "", [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(4, "", [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, [pid 5834] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./0/file0", [pid 5831] getdents64(4, [pid 5835] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5891] <... chdir resumed>) = 0 [pid 5835] getdents64(4, [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] getdents64(4, [pid 5835] close(4 [pid 5831] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5835] <... close resumed>) = 0 [pid 5831] close(4 [pid 5832] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] rmdir("./0/file0" [pid 5831] <... close resumed>) = 0 [pid 5835] <... rmdir resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] rmdir("./0/file0" [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] getdents64(3, [pid 5834] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5832] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... rmdir resumed>) = 0 [pid 5891] <... prctl resumed>) = 0 [pid 5835] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 96.716095][ T5844] btree=freespace level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [pid 5831] getdents64(3, [pid 5891] setpgid(0, 0 [pid 5835] close(3 [pid 5834] unlink("./0/binderfs" [pid 5832] <... openat resumed>) = 4 [pid 5831] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5891] <... setpgid resumed>) = 0 [pid 5835] <... close resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 5831] close(3 [pid 5835] rmdir("./0" [pid 5834] <... unlink resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] <... rmdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] rmdir("./0" [pid 5891] <... openat resumed>) = 3 [pid 5835] mkdir("./1", 0777 [pid 5834] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, [pid 5891] write(3, "1000", 4 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] <... rmdir resumed>) = 0 [pid 5891] <... write resumed>) = 4 [pid 5835] <... mkdir resumed>) = 0 [pid 5834] newfstatat(AT_FDCWD, "./0/file0", [pid 5831] mkdir("./1", 0777 [pid 5891] close(3 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] getdents64(4, [pid 5891] <... close resumed>) = 0 [pid 5834] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5891] symlink("/dev/binderfs", "./binderfs" [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5891] <... symlink resumed>) = 0 [pid 5834] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 5832] close(4 [pid 5891] write(1, "executing program\n", 18 [pid 5834] <... openat resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 5891] <... write resumed>) = 18 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5834] newfstatat(4, "", [pid 5832] rmdir("./0/file0" [pid 5831] <... mkdir resumed>) = 0 [pid 5891] memfd_create("syzkaller", 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5891] <... memfd_create resumed>) = 3 [pid 5834] getdents64(4, [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5834] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5891] <... mmap resumed>) = 0x7f8019600000 [pid 5834] getdents64(4, [pid 5835] <... openat resumed>) = 3 [pid 5834] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5834] close(4 [pid 5832] getdents64(3, [pid 5834] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5834] rmdir("./0/file0") = 0 [pid 5832] <... close resumed>) = 0 [pid 5834] getdents64(3, [pid 5832] rmdir("./0" [pid 5835] ioctl(3, LOOP_CLR_FD [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5834] close(3 [pid 5832] mkdir("./1", 0777 [pid 5835] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] <... mkdir resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5835] close(3 [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5835] <... close resumed>) = 0 [pid 5831] close(3 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... close resumed>) = 0 [pid 5834] <... close resumed>) = 0 [pid 5834] rmdir("./0"./strace-static-x86_64: Process 5892 attached [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5835] <... clone resumed>, child_tidptr=0x555592c38650) = 5892 ./strace-static-x86_64: Process 5893 attached [pid 5892] set_robust_list(0x555592c38660, 24 [pid 5834] <... rmdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5834] mkdir("./1", 0777 [pid 5832] <... openat resumed>) = 3 [pid 5834] <... mkdir resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... clone resumed>, child_tidptr=0x555592c38650) = 5893 [pid 5892] <... set_robust_list resumed>) = 0 [pid 5893] set_robust_list(0x555592c38660, 24) = 0 [pid 5892] chdir("./1" [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5834] <... openat resumed>) = 3 [pid 5832] close(3 [pid 5834] ioctl(3, LOOP_CLR_FD [pid 5832] <... close resumed>) = 0 [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5893] chdir("./1" [pid 5892] <... chdir resumed>) = 0 [pid 5834] close(3) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555592c38650) = 5894 [ 96.791910][ T5844] bcachefs (loop5): accounting_read... done [ 96.803509][ T5844] bcachefs (loop5): alloc_read... done [ 96.809361][ T5844] bcachefs (loop5): stripes_read... done [ 96.815672][ T5844] bcachefs (loop5): snapshots_read... done [ 96.822431][ T5844] bcachefs (loop5): check_allocations... [ 96.829273][ T5844] btree ptr not marked in member info btree allocated bitmap [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5895 attached [pid 5895] set_robust_list(0x555592c38660, 24 [pid 5834] <... clone resumed>, child_tidptr=0x555592c38650) = 5895 [pid 5895] <... set_robust_list resumed>) = 0 [pid 5895] chdir("./1") = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] setpgid(0, 0) = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5894 attached [pid 5893] <... chdir resumed>) = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] <... openat resumed>) = 3 [pid 5894] set_robust_list(0x555592c38660, 24 [pid 5893] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5892] setpgid(0, 0 [pid 5894] <... set_robust_list resumed>) = 0 [pid 5893] <... prctl resumed>) = 0 [pid 5892] <... setpgid resumed>) = 0 [pid 5895] write(3, "1000", 4) = 4 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5893] setpgid(0, 0 [pid 5895] close(3) = 0 [pid 5895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5895] write(1, "executing program\n", 18executing program ) = 18 [pid 5895] memfd_create("syzkaller", 0) = 3 [pid 5894] chdir("./1" [pid 5893] <... setpgid resumed>) = 0 [pid 5892] <... openat resumed>) = 3 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 96.829310][ T5844] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 96.868901][ T5844] btree ptr not marked in member info btree allocated bitmap [ 96.868931][ T5844] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [pid 5894] <... chdir resumed>) = 0 [pid 5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5892] write(3, "1000", 4) = 4 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5893] <... openat resumed>) = 3 [pid 5892] close(3 [pid 5894] setpgid(0, 0 [pid 5893] write(3, "1000", 4 [pid 5892] <... close resumed>) = 0 [pid 5892] symlink("/dev/binderfs", "./binderfs" [pid 5894] <... setpgid resumed>) = 0 [pid 5893] <... write resumed>) = 4 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5893] close(3 [pid 5892] <... symlink resumed>) = 0 [pid 5894] <... openat resumed>) = 3 [pid 5893] <... close resumed>) = 0 [pid 5892] write(1, "executing program\n", 18executing program [pid 5894] write(3, "1000", 4 [pid 5893] symlink("/dev/binderfs", "./binderfs" [pid 5892] <... write resumed>) = 18 [pid 5894] <... write resumed>) = 4 [ 96.894663][ T5844] btree ptr not marked in member info btree allocated bitmap [ 96.894689][ T5844] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 96.921959][ T5844] btree ptr not marked in member info btree allocated bitmap [ 96.921987][ T5844] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [pid 5894] close(3) = 0 [pid 5893] <... symlink resumed>) = 0 [pid 5892] memfd_create("syzkaller", 0executing program [pid 5894] symlink("/dev/binderfs", "./binderfs" [pid 5893] write(1, "executing program\n", 18 [pid 5892] <... memfd_create resumed>) = 3 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5893] <... write resumed>) = 18 [pid 5892] <... mmap resumed>) = 0x7f8019600000 [pid 5893] memfd_create("syzkaller", 0executing program [pid 5894] <... symlink resumed>) = 0 [pid 5894] write(1, "executing program\n", 18) = 18 [pid 5894] memfd_create("syzkaller", 0 [pid 5893] <... memfd_create resumed>) = 3 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5894] <... memfd_create resumed>) = 3 [pid 5893] <... mmap resumed>) = 0x7f8019600000 [ 96.948263][ T5844] btree ptr not marked in member info btree allocated bitmap [ 96.948292][ T5844] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 97.035463][ T5844] btree ptr not marked in member info btree allocated bitmap [ 97.035494][ T5844] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 97.178190][ T5844] done [pid 5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 97.214701][ T5844] bcachefs (loop5): going read-write [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 97.240569][ T5844] bcachefs (loop5): journal_replay... done [ 97.437712][ T5844] bcachefs (loop5): check_extents_to_backpointers... [ 97.440076][ T5844] bcachefs (loop5): scanning for missing backpointers in 4/128 buckets [ 97.458341][ T5844] done [ 97.463126][ T5844] bcachefs (loop5): check_inodes... [ 97.464530][ T5844] inode points to missing dirent [ 97.464562][ T5844] inum: 536870912:4294967295 [ 97.464582][ T5844] mode=100755 [ 97.464599][ T5844] flags=(15300000) [ 97.464617][ T5844] journal_seq=4 [ 97.464635][ T5844] hash_seed=8469d717004af4ef [ 97.464654][ T5844] hash_type=siphash [ 97.464672][ T5844] bi_size=10 [ 97.464689][ T5844] bi_sectors=8 [ 97.464707][ T5844] bi_version=0 [ 97.464724][ T5844] bi_atime=2780562352 [ 97.464742][ T5844] bi_ctime=2780562352 [ 97.464761][ T5844] bi_mtime=2780562352 [ 97.464779][ T5844] bi_otime=2780562352 [ 97.464797][ T5844] bi_uid=0 [ 97.464814][ T5844] bi_gid=0 [ 97.464831][ T5844] bi_nlink=0 [ 97.464848][ T5844] bi_generation=0 [ 97.464866][ T5844] bi_dev=0 [ 97.464883][ T5844] bi_data_checksum=0 [ 97.464901][ T5844] bi_compression=0 [ 97.464919][ T5844] bi_project=0 [ 97.464937][ T5844] bi_background_compression=0 [ 97.464956][ T5844] bi_data_replicas=0 [ 97.464974][ T5844] bi_promote_target=0 [ 97.464993][ T5844] bi_foreground_target=0 [ 97.465011][ T5844] bi_background_target=0 [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5894] <... write resumed>) = 16777216 [ 97.465030][ T5844] bi_erasure_code=0 [ 97.465048][ T5844] bi_fields_set=0 [ 97.465066][ T5844] bi_dir=4096 [ 97.465084][ T5844] bi_dir_offset=4330382808765833931 [pid 5894] munmap(0x7f8019600000, 138412032) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 97.465104][ T5844] bi_subvol=0 [ 97.465121][ T5844] bi_parent_subvol=0 [ 97.465139][ T5844] bi_nocow=0 [ 97.465157][ T5844] bi_depth=0 [ 97.465174][ T5844] bi_inodes_32bit=0, fixing [ 97.754396][ T5844] done [ 97.758959][ T5894] loop1: detected capacity change from 0 to 32768 [pid 5894] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5894] close(3) = 0 [pid 5894] close(4) = 0 [pid 5894] mkdir("./file0", 0777) = 0 [ 97.762545][ T5844] bcachefs (loop5): check_extents... done [ 97.800923][ T5894] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [ 97.811908][ T5844] bcachefs (loop5): check_dirents... [ 97.813751][ T5844] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 5894] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5891] <... write resumed>) = 16777216 [pid 5891] munmap(0x7f8019600000, 138412032 [pid 5895] <... write resumed>) = 16777216 [ 97.813785][ T5844] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 97.906485][ T5844] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 5895] munmap(0x7f8019600000, 138412032 [pid 5891] <... munmap resumed>) = 0 [pid 5895] <... munmap resumed>) = 0 [pid 5891] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5891] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5891] close(3) = 0 [ 97.906528][ T5844] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 97.937777][ T5894] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 5891] close(4 [pid 5895] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5891] <... close resumed>) = 0 [pid 5895] <... openat resumed>) = 4 [pid 5892] <... write resumed>) = 16777216 [pid 5891] mkdir("./file0", 0777 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5892] munmap(0x7f8019600000, 138412032 [pid 5891] <... mkdir resumed>) = 0 [pid 5891] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5895] <... ioctl resumed>) = 0 [pid 5895] close(3) = 0 [pid 5895] close(4) = 0 [pid 5895] mkdir("./file0", 0777) = 0 [ 97.937860][ T5894] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 97.982621][ T5891] loop2: detected capacity change from 0 to 32768 [pid 5895] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5892] <... munmap resumed>) = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 98.033210][ T5891] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [ 98.035223][ T5895] loop3: detected capacity change from 0 to 32768 [ 98.059621][ T5895] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 98.088411][ T5844] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 5892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5892] close(3 [pid 5893] <... write resumed>) = 16777216 [pid 5893] munmap(0x7f8019600000, 138412032 [pid 5892] <... close resumed>) = 0 [pid 5892] close(4) = 0 [pid 5892] mkdir("./file0", 0777 [pid 5893] <... munmap resumed>) = 0 [pid 5892] <... mkdir resumed>) = 0 [ 98.088445][ T5844] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [pid 5892] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5893] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5893] close(3) = 0 [pid 5893] close(4) = 0 [pid 5893] mkdir("./file0", 0777) = 0 [ 98.113036][ T5892] loop4: detected capacity change from 0 to 32768 [ 98.158133][ T5891] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 98.158217][ T5891] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 98.169610][ T5892] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 98.204526][ T5894] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5893] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5894] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5894] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5894] ioctl(3, LOOP_CLR_FD) = 0 [ 98.205018][ T5844] dirent points to inode that does not point back: [ 98.205044][ T5844] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg [ 98.205070][ T5844] inum: 536870912:4294967295 [ 98.205088][ T5844] mode=100755 [ 98.205105][ T5844] flags=(15300000) [ 98.205121][ T5844] journal_seq=19 [pid 5894] close(3 [pid 5891] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 98.205137][ T5844] hash_seed=8469d717004af4ef [ 98.205153][ T5844] hash_type=siphash [pid 5891] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5891] ioctl(3, LOOP_CLR_FD) = 0 [ 98.205170][ T5844] bi_size=10 [ 98.205186][ T5844] bi_sectors=8 [ 98.205203][ T5844] bi_version=0 [ 98.205220][ T5844] bi_atime=2780562352 [ 98.205237][ T5844] bi_ctime=2780562352 [ 98.205268][ T5844] bi_mtime=2780562352 [ 98.205286][ T5844] bi_otime=2780562352 [ 98.205303][ T5844] bi_uid=0 [ 98.205320][ T5844] bi_gid=0 [pid 5891] close(3 [pid 5894] <... close resumed>) = 0 [pid 5894] exit_group(0) = ? [pid 5894] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=51 /* 0.51 s */} --- [pid 5895] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5895] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] <... openat resumed>) = 3 [pid 5832] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5895] ioctl(3, LOOP_CLR_FD [pid 5832] <... openat resumed>) = 3 [pid 5895] <... ioctl resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5895] close(3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [ 98.205336][ T5844] bi_nlink=0 [ 98.205353][ T5844] bi_generation=0 [ 98.205370][ T5844] bi_dev=0 [ 98.205386][ T5844] bi_data_checksum=0 [ 98.205404][ T5844] bi_compression=0 [pid 5832] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./1/binderfs") = 0 [pid 5832] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 98.205421][ T5844] bi_project=0 [ 98.205445][ T5844] bi_background_compression=0 [ 98.205464][ T5844] bi_data_replicas=0 [pid 5832] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [ 98.205482][ T5844] bi_promote_target=0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./1/file0") = 0 [pid 5832] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./1" [pid 5893] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... rmdir resumed>) = 0 [pid 5832] mkdir("./2", 0777 [pid 5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] <... mkdir resumed>) = 0 [pid 5893] ioctl(3, LOOP_CLR_FD [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5893] <... ioctl resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5893] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [ 98.205499][ T5844] bi_foreground_target=0 [ 98.205518][ T5844] bi_background_target=0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5933 attached , child_tidptr=0x555592c38650) = 5933 [pid 5933] set_robust_list(0x555592c38660, 24) = 0 [pid 5933] chdir("./2") = 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5892] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5933] close(3) = 0 [ 98.205535][ T5844] bi_erasure_code=0 [ 98.205553][ T5844] bi_fields_set=0 [ 98.205570][ T5844] bi_dir=0 [pid 5933] symlink("/dev/binderfs", "./binderfs" [pid 5892] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5933] <... symlink resumed>) = 0 [pid 5892] ioctl(3, LOOP_CLR_FDexecuting program [pid 5933] write(1, "executing program\n", 18 [pid 5892] <... ioctl resumed>) = 0 [pid 5933] <... write resumed>) = 18 [pid 5892] close(3 [pid 5891] <... close resumed>) = 0 [pid 5933] memfd_create("syzkaller", 0) = 3 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5891] exit_group(0) = ? [pid 5933] <... mmap resumed>) = 0x7f8019600000 [pid 5891] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=41 /* 0.41 s */} --- [ 98.205586][ T5844] bi_dir_offset=4330382808765833931 [ 98.205605][ T5844] bi_subvol=0 [ 98.205622][ T5844] bi_parent_subvol=0 [ 98.205639][ T5844] bi_nocow=0 [ 98.205655][ T5844] bi_depth=0 [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 98.205672][ T5844] bi_inodes_32bit=0, fixing [ 98.213662][ T5893] loop0: detected capacity change from 0 to 32768 [ 98.238865][ T5893] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [pid 5833] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./1/binderfs") = 0 [pid 5833] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 98.403899][ T5895] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 98.403980][ T5895] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 5833] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5895] <... close resumed>) = 0 [pid 5833] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5895] exit_group(0 [pid 5833] rmdir("./1/file0") = 0 [pid 5895] <... exit_group resumed>) = ? [pid 5833] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./1") = 0 [pid 5833] mkdir("./2", 0777) = 0 [ 98.432442][ T5891] bcachefs: bch2_fs_get_tree() error: EINVAL [ 98.433833][ T5893] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 98.433910][ T5893] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 5895] +++ exited with 0 +++ [pid 5893] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=57 /* 0.57 s */} --- [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5834] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5834] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] close(3 [pid 5834] newfstatat(3, "", [pid 5833] <... close resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5893] exit_group(0 [pid 5834] getdents64(3, [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5893] <... exit_group resumed>) = ? [pid 5834] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... clone resumed>, child_tidptr=0x555592c38650) = 5934 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./1/binderfs") = 0 ./strace-static-x86_64: Process 5934 attached [pid 5834] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5893] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=58 /* 0.58 s */} --- [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5934] set_robust_list(0x555592c38660, 24 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5934] <... set_robust_list resumed>) = 0 [pid 5834] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5934] chdir("./2" [pid 5831] <... openat resumed>) = 3 [pid 5831] newfstatat(3, "", [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(3, [pid 5834] <... openat resumed>) = 4 [pid 5831] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5834] newfstatat(4, "", [pid 5831] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5934] <... chdir resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5834] getdents64(4, [pid 5831] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5934] <... prctl resumed>) = 0 [pid 5834] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5934] setpgid(0, 0 [pid 5834] getdents64(4, [pid 5831] unlink("./1/binderfs" [ 98.493234][ T5892] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 98.493316][ T5892] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 5934] <... setpgid resumed>) = 0 [pid 5834] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5934] <... openat resumed>) = 3 [pid 5834] close(4 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./1/file0" [pid 5934] write(3, "1000", 4 [pid 5831] <... rmdir resumed>) = 0 [pid 5934] <... write resumed>) = 4 [pid 5831] getdents64(3, [pid 5934] close(3 [pid 5831] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5934] <... close resumed>) = 0 [pid 5831] close(3 [pid 5834] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5834] rmdir("./1/file0" [pid 5831] rmdir("./1") = 0 [pid 5934] symlink("/dev/binderfs", "./binderfs" [pid 5831] mkdir("./2", 0777executing program [pid 5934] <... symlink resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5934] write(1, "executing program\n", 18 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5934] <... write resumed>) = 18 [pid 5831] <... openat resumed>) = 3 [pid 5934] memfd_create("syzkaller", 0 [pid 5834] <... rmdir resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5934] <... memfd_create resumed>) = 3 [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] close(3 [pid 5934] <... mmap resumed>) = 0x7f8019600000 [pid 5834] getdents64(3, [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5834] close(3 [pid 5831] <... clone resumed>, child_tidptr=0x555592c38650) = 5935 [ 98.670930][ T5895] bcachefs: bch2_fs_get_tree() error: EINVAL [ 98.814049][ T5893] bcachefs: bch2_fs_get_tree() error: EINVAL ./strace-static-x86_64: Process 5935 attached [pid 5834] <... close resumed>) = 0 [pid 5935] set_robust_list(0x555592c38660, 24 [pid 5834] rmdir("./1" [pid 5935] <... set_robust_list resumed>) = 0 [pid 5935] chdir("./2" [pid 5892] <... close resumed>) = 0 [pid 5834] <... rmdir resumed>) = 0 [pid 5935] <... chdir resumed>) = 0 [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5892] exit_group(0 [pid 5834] mkdir("./2", 0777 [pid 5935] <... prctl resumed>) = 0 [pid 5935] setpgid(0, 0 [pid 5892] <... exit_group resumed>) = ? [pid 5834] <... mkdir resumed>) = 0 [pid 5935] <... setpgid resumed>) = 0 [pid 5892] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=54 /* 0.54 s */} --- [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5835] restart_syscall(<... resuming interrupted clone ...> [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] <... restart_syscall resumed>) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5935] <... openat resumed>) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD [pid 5935] write(3, "1000", 4 [pid 5835] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5935] <... write resumed>) = 4 [pid 5933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 98.873044][ T5892] bcachefs: bch2_fs_get_tree() error: EINVAL [ 99.263072][ T5844] inode 536870912:4294967295 has wrong backpointer: [ 99.263099][ T5844] got 0:4330382808765833931 [pid 5935] close(3 [pid 5835] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] close(3 [pid 5935] <... close resumed>) = 0 [pid 5834] <... close resumed>) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs" [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5935] <... symlink resumed>) = 0 [pid 5835] <... openat resumed>) = 3 executing program ./strace-static-x86_64: Process 5936 attached [pid 5935] write(1, "executing program\n", 18 [pid 5835] newfstatat(3, "", [pid 5834] <... clone resumed>, child_tidptr=0x555592c38650) = 5936 [pid 5935] <... write resumed>) = 18 [pid 5935] memfd_create("syzkaller", 0) = 3 [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5936] set_robust_list(0x555592c38660, 24) = 0 [pid 5835] getdents64(3, [pid 5936] chdir("./2" [pid 5835] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5936] <... chdir resumed>) = 0 [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] <... prctl resumed>) = 0 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5936] setpgid(0, 0 [pid 5835] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5936] <... setpgid resumed>) = 0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] unlink("./1/binderfs" [pid 5936] <... openat resumed>) = 3 [pid 5835] <... unlink resumed>) = 0 [pid 5936] write(3, "1000", 4) = 4 [pid 5835] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] close(3 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./1/file0", [pid 5936] <... close resumed>) = 0 [pid 5936] symlink("/dev/binderfs", "./binderfs" [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 99.263119][ T5844] should be 4096:4330382808765833931, fixing [ 99.309227][ T5844] dirent points to inode that does not point back: [pid 5936] <... symlink resumed>) = 0 [pid 5835] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] kill(-5844, SIGKILL) = 0 [pid 5836] kill(5844, SIGKILL) = 0 [pid 5936] write(1, "executing program\n", 18 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5936] <... write resumed>) = 18 [pid 5835] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5936] memfd_create("syzkaller", 0 [pid 5835] newfstatat(4, "", [pid 5936] <... memfd_create resumed>) = 3 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5835] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./1/file0") = 0 [pid 5835] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [ 99.309254][ T5844] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg [ 99.309282][ T5844] inum: 536870912:4294967295 [ 99.309301][ T5844] mode=100755 [ 99.309318][ T5844] flags=(15300000) [pid 5835] close(3) = 0 [pid 5835] rmdir("./1") = 0 [pid 5835] mkdir("./2", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 5937 ./strace-static-x86_64: Process 5937 attached [pid 5937] set_robust_list(0x555592c38660, 24) = 0 [ 99.309336][ T5844] journal_seq=19 [ 99.309354][ T5844] hash_seed=8469d717004af4ef [ 99.309373][ T5844] hash_type=siphash [pid 5937] chdir("./2") = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] setpgid(0, 0) = 0 [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5937] write(3, "1000", 4) = 4 [pid 5937] close(3) = 0 [pid 5937] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5937] write(1, "executing program\n", 18) = 18 [pid 5937] memfd_create("syzkaller", 0) = 3 [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 99.309391][ T5844] bi_size=10 [ 99.309409][ T5844] bi_sectors=8 [ 99.309426][ T5844] bi_version=0 [ 99.309444][ T5844] bi_atime=2780562352 [ 99.309462][ T5844] bi_ctime=2780562352 [ 99.309480][ T5844] bi_mtime=2780562352 [ 99.309505][ T5844] bi_otime=2780562352 [ 99.309524][ T5844] bi_uid=0 [ 99.309540][ T5844] bi_gid=0 [ 99.309556][ T5844] bi_nlink=0 [ 99.309573][ T5844] bi_generation=0 [ 99.309591][ T5844] bi_dev=0 [ 99.309608][ T5844] bi_data_checksum=0 [ 99.309626][ T5844] bi_compression=0 [ 99.309644][ T5844] bi_project=0 [ 99.309661][ T5844] bi_background_compression=0 [ 99.309681][ T5844] bi_data_replicas=0 [ 99.309699][ T5844] bi_promote_target=0 [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5836] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [ 99.309717][ T5844] bi_foreground_target=0 [ 99.309736][ T5844] bi_background_target=0 [ 99.309754][ T5844] bi_erasure_code=0 [ 99.309773][ T5844] bi_fields_set=0 [ 99.309790][ T5844] bi_dir=0 [pid 5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 99.309807][ T5844] bi_dir_offset=4330382808765833931 [ 99.309828][ T5844] bi_subvol=0 [ 99.309845][ T5844] bi_parent_subvol=0 [ 99.309863][ T5844] bi_nocow=0 [ 99.309880][ T5844] bi_depth=0 [ 99.309897][ T5844] bi_inodes_32bit=0, fixing [ 99.792262][ T5844] inode 536870912:4294967295 has wrong backpointer: [ 99.792290][ T5844] got 0:4330382808765833931 [ 99.792310][ T5844] should be 4096:4330382808765833931, fixing [pid 5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5933] <... write resumed>) = 16777216 [ 99.838113][ T5844] hash table key at wrong offset: btree dirents inode 4096 offset 8130059955150870709, hashed to 6728544935518790663 [pid 5933] munmap(0x7f8019600000, 138412032) = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 99.838149][ T5844] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 99.914671][ T5844] bcachefs (loop5): fsck counted subdirectories wrong for inum 4096:4294967295: got 1 should be 2 [pid 5933] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5933] close(3) = 0 [pid 5933] close(4) = 0 [pid 5933] mkdir("./file0", 0777) = 0 [ 99.932853][ T5933] loop1: detected capacity change from 0 to 32768 [ 99.960930][ T5844] directory 4096:4294967295 with wrong i_size: got 0, should be 288, fixing [ 99.965759][ T5933] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [ 100.002088][ T5844] done [ 100.012872][ T5844] bcachefs (loop5): resume_logged_ops... done [ 100.030097][ T5844] bcachefs (loop5): delete_dead_inodes... done [ 100.061552][ T5844] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 100.070909][ T5844] bcachefs (loop5): check_extents_to_backpointers... done [ 100.111352][ T5844] bcachefs (loop5): check_inodes... done [ 100.118472][ T5844] bcachefs (loop5): check_extents... done [ 100.133793][ T5933] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 100.154029][ T5844] bcachefs (loop5): check_dirents... [pid 5933] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5935] <... write resumed>) = 16777216 [pid 5934] <... write resumed>) = 16777216 [pid 5935] munmap(0x7f8019600000, 138412032 [pid 5934] munmap(0x7f8019600000, 138412032 [pid 5935] <... munmap resumed>) = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 100.156411][ T5844] dirent points to missing inode: [ 100.156436][ T5844] u64s 8 type dirent 4096:6728544935518790663:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 100.181390][ T5933] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 100.226951][ T5844] directory 4096:4294967295 with wrong i_size: got 288, should be 352, fixing [pid 5935] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5935] close(3) = 0 [pid 5935] close(4) = 0 [pid 5935] mkdir("./file0", 0777) = 0 [ 100.238615][ T5935] loop0: detected capacity change from 0 to 32768 [ 100.248336][ T5844] done [ 100.253180][ T5844] bcachefs (loop5): resume_logged_ops... done [ 100.259334][ T5844] bcachefs (loop5): delete_dead_inodes... done [ 100.267515][ T5935] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [pid 5935] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5934] <... munmap resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 100.304766][ T5844] bcachefs (loop5): Second fsck run was not clean [ 100.317671][ T5844] bcachefs (loop5): going read-only [ 100.320378][ T5934] loop2: detected capacity change from 0 to 32768 [ 100.334077][ T5844] bcachefs (loop5): finished waiting for writes to stop [pid 5934] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5934] close(3) = 0 [pid 5934] close(4) = 0 [pid 5934] mkdir("./file0", 0777) = 0 [ 100.368656][ T5844] bcachefs (loop5): flushing journal and stopping allocators, journal seq 25 [ 100.381138][ T5935] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 100.398975][ T5935] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 100.409539][ T5844] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 25 [pid 5934] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5936] <... write resumed>) = 16777216 [ 100.421881][ T5934] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [ 100.443656][ T5844] bcachefs (loop5): clean shutdown complete, journal seq 26 [pid 5936] munmap(0x7f8019600000, 138412032) = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 100.474249][ T5844] bcachefs (loop5): marking filesystem clean [ 100.502338][ T5936] loop3: detected capacity change from 0 to 32768 [pid 5936] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5936] close(3) = 0 [pid 5936] close(4) = 0 [pid 5936] mkdir("./file0", 0777) = 0 [pid 5936] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5933] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5933] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5844] <... mount resumed>) = ? [pid 5933] ioctl(3, LOOP_CLR_FD [pid 5937] <... write resumed>) = 16777216 [pid 5933] <... ioctl resumed>) = 0 [pid 5933] close(3 [ 100.520029][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 100.530620][ T5844] bcachefs (loop5): done starting filesystem [ 100.531116][ T5933] bcachefs: bch2_fs_get_tree() error: EINVAL [ 100.552730][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 100.555317][ T5936] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [pid 5937] munmap(0x7f8019600000, 138412032 [pid 5844] +++ killed by SIGKILL +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5844, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=174 /* 1.74 s */} --- [pid 5836] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5937] <... munmap resumed>) = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5836] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 100.631852][ T5844] syz-executor115 (5844) used greatest stack depth: 16256 bytes left [pid 5937] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5836] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5937] <... openat resumed>) = 4 [pid 5836] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./0/binderfs" [pid 5937] ioctl(4, LOOP_SET_FD, 3 [pid 5836] <... unlink resumed>) = 0 [ 100.679553][ T5936] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 100.691129][ T5937] loop4: detected capacity change from 0 to 32768 [ 100.700474][ T5936] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 100.713541][ T5935] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5836] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5937] <... ioctl resumed>) = 0 [pid 5937] close(3) = 0 [pid 5937] close(4 [pid 5935] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5937] <... close resumed>) = 0 [pid 5937] mkdir("./file0", 0777 [pid 5935] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5935] ioctl(3, LOOP_CLR_FD) = 0 [pid 5935] close(3 [pid 5937] <... mkdir resumed>) = 0 [ 100.729364][ T5836] bcachefs (loop5): shutting down [ 100.772663][ T5937] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [pid 5937] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5933] <... close resumed>) = 0 [ 100.887955][ T5836] bcachefs (loop5): shutdown complete [pid 5933] exit_group(0) = ? [pid 5933] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=57 /* 0.57 s */} --- [pid 5832] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./2/binderfs") = 0 [pid 5832] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./2/file0") = 0 [pid 5832] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./2") = 0 [pid 5832] mkdir("./3", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5971 attached [pid 5971] set_robust_list(0x555592c38660, 24) = 0 [pid 5971] chdir("./3" [pid 5832] <... clone resumed>, child_tidptr=0x555592c38650) = 5971 [pid 5971] <... chdir resumed>) = 0 [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5971] setpgid(0, 0) = 0 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5935] <... close resumed>) = 0 [pid 5971] write(3, "1000", 4) = 4 [pid 5971] close(3) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5971] write(1, "executing program\n", 18) = 18 [pid 5971] memfd_create("syzkaller", 0 [pid 5935] exit_group(0) = ? [pid 5971] <... memfd_create resumed>) = 3 [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5935] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=51 /* 0.51 s */} --- [pid 5831] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./2/binderfs") = 0 [pid 5831] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./2/file0") = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./2") = 0 [pid 5831] mkdir("./3", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5972 attached [pid 5972] set_robust_list(0x555592c38660, 24) = 0 [pid 5972] chdir("./3" [pid 5831] <... clone resumed>, child_tidptr=0x555592c38650) = 5972 [pid 5972] <... chdir resumed>) = 0 [pid 5972] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5972] setpgid(0, 0) = 0 [pid 5972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5972] write(3, "1000", 4) = 4 [pid 5972] close(3) = 0 [pid 5972] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5972] write(1, "executing program\n", 18) = 18 [pid 5972] memfd_create("syzkaller", 0) = 3 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5934] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5934] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5934] ioctl(3, LOOP_CLR_FD) = 0 [pid 5934] close(3 [pid 5936] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5936] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 101.372192][ T5934] bcachefs: bch2_fs_get_tree() error: EINVAL [ 101.401660][ T5936] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5936] ioctl(3, LOOP_CLR_FD) = 0 [pid 5936] close(3 [pid 5971] <... write resumed>) = 16777216 [pid 5971] munmap(0x7f8019600000, 138412032) = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5971] ioctl(4, LOOP_SET_FD, 3 [pid 5972] <... write resumed>) = 16777216 [pid 5971] <... ioctl resumed>) = 0 [pid 5971] close(3) = 0 [pid 5971] close(4) = 0 [pid 5971] mkdir("./file0", 0777 [pid 5972] munmap(0x7f8019600000, 138412032 [pid 5971] <... mkdir resumed>) = 0 [ 101.589641][ T5971] loop1: detected capacity change from 0 to 32768 [pid 5971] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5972] <... munmap resumed>) = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 101.642355][ T5971] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [pid 5972] ioctl(4, LOOP_SET_FD, 3 [pid 5936] <... close resumed>) = 0 [pid 5972] <... ioctl resumed>) = 0 [pid 5934] <... close resumed>) = 0 [pid 5972] close(3 [pid 5936] exit_group(0 [pid 5934] exit_group(0 [pid 5972] <... close resumed>) = 0 [pid 5936] <... exit_group resumed>) = ? [pid 5934] <... exit_group resumed>) = ? [pid 5972] close(4 [pid 5936] +++ exited with 0 +++ [pid 5934] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5936, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=54 /* 0.54 s */} --- [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=0, si_stime=54 /* 0.54 s */} --- [pid 5834] restart_syscall(<... resuming interrupted clone ...> [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5972] <... close resumed>) = 0 [pid 5972] mkdir("./file0", 0777) = 0 [pid 5834] <... restart_syscall resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5972] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5834] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 101.702108][ T5972] loop0: detected capacity change from 0 to 32768 [pid 5834] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(3, [pid 5833] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5833] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [ 101.750894][ T5972] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [pid 5833] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5833] unlink("./2/binderfs" [pid 5834] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5834] unlink("./2/binderfs") = 0 [pid 5833] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./2/file0", [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5834] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(4, "", [pid 5834] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] <... openat resumed>) = 4 [pid 5834] newfstatat(4, "", [pid 5833] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 5834] getdents64(4, [pid 5833] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5834] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5833] close(4 [pid 5834] getdents64(4, [pid 5833] <... close resumed>) = 0 [pid 5834] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5834] close(4 [pid 5833] rmdir("./2/file0") = 0 [pid 5834] <... close resumed>) = 0 [pid 5834] rmdir("./2/file0" [pid 5833] getdents64(3, [pid 5834] <... rmdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5834] getdents64(3, [pid 5833] close(3 [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./2" [pid 5834] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 5834] <... close resumed>) = 0 [pid 5833] mkdir("./3", 0777 [pid 5834] rmdir("./2" [pid 5833] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5834] <... rmdir resumed>) = 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] close(3 [pid 5834] mkdir("./3", 0777 [pid 5833] <... close resumed>) = 0 [pid 5834] <... mkdir resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5985 attached ) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5834] close(3) = 0 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5987 attached [pid 5985] set_robust_list(0x555592c38660, 24 [pid 5987] set_robust_list(0x555592c38660, 24 [pid 5985] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555592c38650) = 5985 [pid 5987] <... set_robust_list resumed>) = 0 [pid 5834] <... clone resumed>, child_tidptr=0x555592c38650) = 5987 [pid 5987] chdir("./3") = 0 [pid 5987] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5987] setpgid(0, 0) = 0 [pid 5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5985] chdir("./3" [pid 5987] <... openat resumed>) = 3 [pid 5985] <... chdir resumed>) = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5985] setpgid(0, 0) = 0 [pid 5987] write(3, "1000", 4 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5987] <... write resumed>) = 4 [pid 5985] <... openat resumed>) = 3 [pid 5987] close(3) = 0 [pid 5987] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5987] write(1, "executing program\n", 18 [pid 5985] write(3, "1000", 4) = 4 [pid 5985] close(3) = 0 [pid 5985] symlink("/dev/binderfs", "./binderfs") = 0 executing program executing program [pid 5985] write(1, "executing program\n", 18 [pid 5987] <... write resumed>) = 18 [pid 5985] <... write resumed>) = 18 [pid 5987] memfd_create("syzkaller", 0 [pid 5985] memfd_create("syzkaller", 0 [pid 5987] <... memfd_create resumed>) = 3 [pid 5985] <... memfd_create resumed>) = 3 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 101.984269][ T5971] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 101.995709][ T5937] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=ro,errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 102.017051][ T5972] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 102.017394][ T5937] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 102.034351][ T5937] bcachefs (loop4): superblock requires following recovery passes to be run: [ 102.034351][ T5937] check_inodes,check_extents,check_dirents [ 102.049327][ T5937] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.20: directory_size [ 102.049327][ T5937] running recovery passes: check_allocations,check_extents_to_backpointers [ 102.065391][ T5972] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 102.078673][ T5971] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 102.093763][ T5937] bcachefs (loop4): error validating btree node at btree inodes level 0/0 [ 102.093791][ T5937] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 102.093822][ T5937] node offset 8/24 bset u64s 29 bset byte offset 152: keys out of order: u64s 16 type inode_v3 5:4096:U32_MAX len 0 ver 0 > u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0, fixing [ 102.172282][ T5937] invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 5:4096:U32_MAX len 0 ver 0: [ 102.172315][ T5937] mode=40755 [ 102.172332][ T5937] flags=(16300000) [ 102.172349][ T5937] journal_seq=1 [ 102.172366][ T5937] hash_seed=28e4f092a4fc58ee [ 102.172385][ T5937] hash_type=siphash [ 102.172402][ T5937] bi_size=0 [ 102.172419][ T5937] bi_sectors=0 [ 102.172435][ T5937] bi_version=0 [ 102.172452][ T5937] bi_atime=200535484 [ 102.172470][ T5937] bi_ctime=200535484 [pid 5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5836] <... umount2 resumed>) = 0 [pid 5836] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 102.172487][ T5937] bi_mtime=200535484 [ 102.172504][ T5937] bi_otime=200535484 [pid 5836] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [ 102.172522][ T5937] bi_uid=0 [ 102.172538][ T5937] bi_gid=0 [ 102.172554][ T5937] bi_nlink=1 [ 102.172571][ T5937] bi_generation=0 [ 102.172588][ T5937] bi_dev=0 [ 102.172605][ T5937] bi_data_checksum=0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./0/file0") = 0 [pid 5972] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5972] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5836] getdents64(3, [pid 5972] <... openat resumed>) = 3 [pid 5836] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5972] ioctl(3, LOOP_CLR_FD [pid 5836] close(3 [pid 5971] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5972] <... ioctl resumed>) = 0 [pid 5836] <... close resumed>) = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5971] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] rmdir("./0" [pid 5972] close(3 [ 102.172622][ T5937] bi_compression=0 [ 102.172639][ T5937] bi_project=0 [ 102.172656][ T5937] bi_background_compression=0 [ 102.172675][ T5937] bi_data_replicas=0 [ 102.172693][ T5937] bi_promote_target=0 [ 102.172710][ T5937] bi_foreground_target=0 [ 102.172728][ T5937] bi_background_target=0 [pid 5971] close(3 [pid 5836] <... rmdir resumed>) = 0 [pid 5836] mkdir("./1", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = 0 [ 102.172746][ T5937] bi_erasure_code=0 [ 102.172764][ T5937] bi_fields_set=0 [ 102.172781][ T5937] bi_dir=0 [ 102.172797][ T5937] bi_dir_offset=0 [ 102.172814][ T5937] bi_subvol=1 [ 102.172831][ T5937] bi_parent_subvol=0 [ 102.172848][ T5937] bi_nocow=0 [ 102.172865][ T5937] bi_depth=0 [ 102.172881][ T5937] bi_inodes_32bit=0 [ 102.172899][ T5937] nonzero k.p.inode: delete?, fixing [ 102.433483][ T5972] bcachefs: bch2_fs_get_tree() error: EINVAL [ 102.446327][ T5971] bcachefs: bch2_fs_get_tree() error: EINVAL [ 102.693844][ T5937] bcachefs (loop4): btree_node_read_work: rewriting btree node at due to error [ 102.693844][ T5937] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [pid 5836] close(3 [pid 5971] <... close resumed>) = 0 [ 102.821878][ T5937] bcachefs (loop4): error validating btree node on loop4 at btree freespace level 0/0 [pid 5972] <... close resumed>) = 0 [pid 5971] exit_group(0 [pid 5972] exit_group(0 [pid 5836] <... close resumed>) = 0 [pid 5971] <... exit_group resumed>) = ? [pid 5971] +++ exited with 0 +++ [pid 5972] <... exit_group resumed>) = ? [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=55 /* 0.55 s */} --- [pid 5972] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5972, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=52 /* 0.52 s */} --- [ 102.821910][ T5937] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 102.821942][ T5937] node offset 0/32 bset u64s 0: checksum error, type none: got should be , fixing [ 102.910614][ T5937] bcachefs (loop4): btree_node_read_work: rewriting btree node at due to error [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5987] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5992 attached [pid 5831] <... restart_syscall resumed>) = 0 [pid 5992] set_robust_list(0x555592c38660, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555592c38650) = 5992 [pid 5832] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5992] <... set_robust_list resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5992] chdir("./1" [pid 5832] <... openat resumed>) = 3 [pid 5831] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(3, "", [pid 5992] <... chdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(3, [pid 5831] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] <... openat resumed>) = 3 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(3, "", [pid 5992] <... prctl resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5992] setpgid(0, 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] getdents64(3, [pid 5832] unlink("./3/binderfs" [pid 5992] <... setpgid resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... unlink resumed>) = 0 [pid 5831] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5992] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5992] write(3, "1000", 4 [pid 5831] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5992] <... write resumed>) = 4 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5992] close(3 [pid 5831] unlink("./3/binderfs" [pid 5992] <... close resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./3/file0", [pid 5992] symlink("/dev/binderfs", "./binderfs" [pid 5831] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5992] <... symlink resumed>) = 0 [pid 5832] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5992] write(1, "executing program\n", 18executing program [pid 5832] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(AT_FDCWD, "./3/file0", [pid 5832] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 5992] <... write resumed>) = 18 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] getdents64(4, [pid 5992] memfd_create("syzkaller", 0 [pid 5832] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] close(4 [pid 5831] <... openat resumed>) = 4 [pid 5987] munmap(0x7f8019600000, 138412032 [pid 5832] <... close resumed>) = 0 [pid 5831] newfstatat(4, "", [pid 5992] <... memfd_create resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] getdents64(4, [pid 5992] <... mmap resumed>) = 0x7f8019600000 [pid 5831] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5987] <... munmap resumed>) = 0 [pid 5832] rmdir("./3/file0" [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./3/file0" [pid 5832] getdents64(3, [pid 5831] <... rmdir resumed>) = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5831] close(3 [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5832] rmdir("./3" [pid 5831] rmdir("./3" [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5832] mkdir("./4", 0777 [pid 5831] mkdir("./4", 0777 [pid 5832] <... mkdir resumed>) = 0 [ 102.910614][ T5937] btree=freespace level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] close(3 [pid 5831] close(3 [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5993 attached , child_tidptr=0x555592c38650) = 5993 [pid 5993] set_robust_list(0x555592c38660, 24) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5994 attached [pid 5993] chdir("./4" [pid 5994] set_robust_list(0x555592c38660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555592c38650) = 5994 [pid 5993] <... chdir resumed>) = 0 [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5994] <... set_robust_list resumed>) = 0 [pid 5993] <... prctl resumed>) = 0 [pid 5994] chdir("./4" [pid 5993] setpgid(0, 0 [pid 5987] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5993] <... setpgid resumed>) = 0 [pid 5987] ioctl(4, LOOP_SET_FD, 3 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5993] write(3, "1000", 4) = 4 executing program [pid 5994] <... chdir resumed>) = 0 [pid 5993] close(3) = 0 [pid 5993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5993] write(1, "executing program\n", 18) = 18 [pid 5994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5993] memfd_create("syzkaller", 0 [pid 5994] <... prctl resumed>) = 0 [pid 5985] <... write resumed>) = 16777216 [pid 5993] <... memfd_create resumed>) = 3 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5994] setpgid(0, 0) = 0 [pid 5994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5994] write(3, "1000", 4 [pid 5987] <... ioctl resumed>) = 0 [pid 5985] munmap(0x7f8019600000, 138412032 [pid 5994] <... write resumed>) = 4 [pid 5994] close(3) = 0 [ 102.997586][ T5937] bcachefs (loop4): accounting_read... done [ 103.006369][ T5987] loop3: detected capacity change from 0 to 32768 [ 103.011572][ T5937] bcachefs (loop4): alloc_read... done [pid 5994] symlink("/dev/binderfs", "./binderfs" [pid 5987] close(3 [pid 5994] <... symlink resumed>) = 0 [pid 5987] <... close resumed>) = 0 [pid 5987] close(4 [pid 5994] write(1, "executing program\n", 18 [pid 5987] <... close resumed>) = 0 executing program [pid 5994] <... write resumed>) = 18 [pid 5987] mkdir("./file0", 0777 [pid 5994] memfd_create("syzkaller", 0 [pid 5987] <... mkdir resumed>) = 0 [pid 5994] <... memfd_create resumed>) = 3 [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5987] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5994] <... mmap resumed>) = 0x7f8019600000 [pid 5985] <... munmap resumed>) = 0 [ 103.051765][ T5937] bcachefs (loop4): stripes_read... done [ 103.061013][ T5937] bcachefs (loop4): snapshots_read... done [ 103.091519][ T5937] bcachefs (loop4): check_allocations... [pid 5985] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5985] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5985] close(3) = 0 [pid 5985] close(4) = 0 [ 103.091855][ T5987] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 103.110080][ T5985] loop2: detected capacity change from 0 to 32768 [ 103.117122][ T5937] btree ptr not marked in member info btree allocated bitmap [pid 5985] mkdir("./file0", 0777) = 0 [ 103.117149][ T5937] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 103.172430][ T5985] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [ 103.247681][ T5937] btree ptr not marked in member info btree allocated bitmap [ 103.247710][ T5937] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 103.300229][ T5987] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 5985] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 103.300330][ T5987] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 103.335877][ T5985] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 5994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 103.335953][ T5985] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 103.492598][ T5937] btree ptr not marked in member info btree allocated bitmap [ 103.492627][ T5937] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5987] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5987] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5987] ioctl(3, LOOP_CLR_FD) = 0 [ 103.552775][ T5987] bcachefs: bch2_fs_get_tree() error: EINVAL [ 103.622474][ T5937] btree ptr not marked in member info btree allocated bitmap [ 103.622510][ T5937] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [pid 5987] close(3 [pid 5985] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5985] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 103.682272][ T5985] bcachefs: bch2_fs_get_tree() error: EINVAL [ 103.696513][ T5937] btree ptr not marked in member info btree allocated bitmap [ 103.696540][ T5937] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [pid 5985] ioctl(3, LOOP_CLR_FD) = 0 [ 103.745394][ T5937] btree ptr not marked in member info btree allocated bitmap [ 103.745423][ T5937] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [pid 5985] close(3 [pid 5987] <... close resumed>) = 0 [pid 5987] exit_group(0) = ? [pid 5993] <... write resumed>) = 16777216 [pid 5993] munmap(0x7f8019600000, 138412032 [pid 5987] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5987, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=50 /* 0.50 s */} --- [pid 5834] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5834] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5834] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./3/binderfs") = 0 [pid 5834] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5834] close(4) = 0 [pid 5834] rmdir("./3/file0") = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5834] close(3) = 0 [pid 5834] rmdir("./3") = 0 [pid 5834] mkdir("./4", 0777) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 103.888649][ T5937] done [ 103.901554][ T5937] bcachefs (loop4): going read-write [pid 5834] ioctl(3, LOOP_CLR_FD [pid 5993] <... munmap resumed>) = 0 [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5834] close(3) = 0 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6009 ./strace-static-x86_64: Process 6009 attached [pid 6009] set_robust_list(0x555592c38660, 24) = 0 [pid 6009] chdir("./4" [pid 5993] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6009] <... chdir resumed>) = 0 [pid 5993] <... openat resumed>) = 4 [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5993] ioctl(4, LOOP_SET_FD, 3 [pid 6009] <... prctl resumed>) = 0 [pid 6009] setpgid(0, 0) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6009] write(3, "1000", 4) = 4 [pid 6009] close(3) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6009] write(1, "executing program\n", 18) = 18 [pid 6009] memfd_create("syzkaller", 0) = 3 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 103.921229][ T5937] bcachefs (loop4): journal_replay... [ 103.977499][ T5993] loop0: detected capacity change from 0 to 32768 [pid 5993] <... ioctl resumed>) = 0 [pid 5993] close(3) = 0 [pid 5993] close(4) = 0 [pid 5993] mkdir("./file0", 0777 [pid 5985] <... close resumed>) = 0 [pid 5993] <... mkdir resumed>) = 0 [pid 5993] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5992] <... write resumed>) = 16777216 [pid 5985] exit_group(0) = ? [pid 5985] +++ exited with 0 +++ [pid 5992] munmap(0x7f8019600000, 138412032 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=52 /* 0.52 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./3/binderfs") = 0 [pid 5833] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [ 104.071626][ T5993] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 104.073875][ T5937] done [ 104.094258][ T5937] bcachefs (loop4): check_extents_to_backpointers... [ 104.106806][ T5937] bcachefs (loop4): scanning for missing backpointers in 4/128 buckets [pid 5833] rmdir("./3/file0") = 0 [pid 5833] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5994] <... write resumed>) = 16777216 [pid 5992] <... munmap resumed>) = 0 [pid 5833] rmdir("./3" [pid 5992] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 5992] ioctl(4, LOOP_SET_FD, 3 [pid 5833] mkdir("./4", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3 [pid 5992] <... ioctl resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5994] munmap(0x7f8019600000, 138412032./strace-static-x86_64: Process 6012 attached [pid 5992] close(3) = 0 [pid 5992] close(4) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555592c38650) = 6012 [pid 5992] mkdir("./file0", 0777 [pid 6012] set_robust_list(0x555592c38660, 24 [pid 5992] <... mkdir resumed>) = 0 [pid 6012] <... set_robust_list resumed>) = 0 [pid 6012] chdir("./4") = 0 [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 104.143316][ T5992] loop5: detected capacity change from 0 to 32768 [ 104.150827][ T5937] done [ 104.165651][ T5937] bcachefs (loop4): check_inodes... [ 104.166799][ T5937] inode points to missing dirent [ 104.166823][ T5937] inum: 536870912:4294967295 [pid 6012] setpgid(0, 0 [pid 5992] mount("/dev/loop5", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6012] <... setpgid resumed>) = 0 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6012] write(3, "1000", 4) = 4 [pid 6012] close(3) = 0 [pid 6012] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6012] write(1, "executing program\n", 18executing program ) = 18 [pid 6012] memfd_create("syzkaller", 0) = 3 [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5994] <... munmap resumed>) = 0 [ 104.166843][ T5937] mode=100755 [ 104.166860][ T5937] flags=(15300000) [ 104.166879][ T5937] journal_seq=4 [ 104.166897][ T5937] hash_seed=8469d717004af4ef [pid 5994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5994] ioctl(4, LOOP_SET_FD, 3) = 0 [ 104.166916][ T5937] hash_type=siphash [ 104.166934][ T5937] bi_size=10 [ 104.166952][ T5937] bi_sectors=8 [ 104.166969][ T5937] bi_version=0 [ 104.166987][ T5937] bi_atime=2780562352 [pid 5994] close(3) = 0 [pid 5994] close(4) = 0 [pid 5994] mkdir("./file0", 0777) = 0 [ 104.167005][ T5937] bi_ctime=2780562352 [ 104.167023][ T5937] bi_mtime=2780562352 [ 104.167042][ T5937] bi_otime=2780562352 [ 104.167060][ T5937] bi_uid=0 [ 104.167077][ T5937] bi_gid=0 [ 104.167094][ T5937] bi_nlink=0 [ 104.167112][ T5937] bi_generation=0 [pid 5994] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5835] kill(-5937, SIGKILL) = 0 [ 104.167130][ T5937] bi_dev=0 [ 104.167148][ T5937] bi_data_checksum=0 [ 104.167166][ T5937] bi_compression=0 [ 104.167185][ T5937] bi_project=0 [ 104.167202][ T5937] bi_background_compression=0 [pid 5835] kill(5937, SIGKILL) = 0 [ 104.167222][ T5937] bi_data_replicas=0 [ 104.167240][ T5937] bi_promote_target=0 [ 104.167258][ T5937] bi_foreground_target=0 [ 104.167278][ T5937] bi_background_target=0 [ 104.167296][ T5937] bi_erasure_code=0 [ 104.167315][ T5937] bi_fields_set=0 [pid 5992] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5992] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5992] ioctl(3, LOOP_CLR_FD) = 0 [ 104.167332][ T5937] bi_dir=4096 [ 104.167350][ T5937] bi_dir_offset=4330382808765833931 [ 104.167370][ T5937] bi_subvol=0 [ 104.167387][ T5937] bi_parent_subvol=0 [ 104.167406][ T5937] bi_nocow=0 [ 104.167423][ T5937] bi_depth=0 [ 104.167441][ T5937] bi_inodes_32bit=0, fixing [ 104.198124][ T5992] bcachefs (/dev/loop5): error reading default superblock: checksum error, type none: got should be [pid 5992] close(3 [pid 5993] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 104.270656][ T5993] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 5993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5993] ioctl(3, LOOP_CLR_FD [pid 6012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5993] <... ioctl resumed>) = 0 [ 104.270735][ T5993] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 104.271936][ T5994] loop1: detected capacity change from 0 to 32768 [ 104.314669][ T5992] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 104.314747][ T5992] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 104.319901][ T5994] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [ 104.469100][ T5994] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 104.469201][ T5994] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 104.581736][ T5992] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5993] close(3 [pid 5994] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 104.657924][ T5993] bcachefs: bch2_fs_get_tree() error: EINVAL [ 104.899368][ T5994] bcachefs: bch2_fs_get_tree() error: EINVAL [ 104.925583][ T5937] done [pid 5994] ioctl(3, LOOP_CLR_FD) = 0 [pid 5994] close(3 [pid 5992] <... close resumed>) = 0 [pid 5992] exit_group(0) = ? [ 104.949264][ T5937] bcachefs (loop4): check_extents... done [pid 5992] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=49 /* 0.49 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5836] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./1/binderfs") = 0 [pid 5836] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [ 104.991614][ T5937] bcachefs (loop4): check_dirents... [ 104.993379][ T5937] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 5836] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./1/file0") = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./1") = 0 [pid 5836] mkdir("./2", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6032 [ 104.993414][ T5937] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing ./strace-static-x86_64: Process 6032 attached [pid 5993] <... close resumed>) = 0 [pid 6032] set_robust_list(0x555592c38660, 24 [pid 5993] exit_group(0) = ? [pid 6032] <... set_robust_list resumed>) = 0 [pid 6032] chdir("./2" [pid 5993] +++ exited with 0 +++ [pid 6032] <... chdir resumed>) = 0 [pid 6032] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=49 /* 0.49 s */} --- [pid 6032] <... prctl resumed>) = 0 [pid 6032] setpgid(0, 0) = 0 [pid 5831] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6032] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6032] write(3, "1000", 4 [pid 5831] <... openat resumed>) = 3 [pid 6032] <... write resumed>) = 4 [pid 5831] newfstatat(3, "", [pid 6032] close(3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6032] <... close resumed>) = 0 [pid 5831] getdents64(3, [ 105.111807][ T5937] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 6032] symlink("/dev/binderfs", "./binderfs" [pid 6009] <... write resumed>) = 16777216 [pid 5831] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 6032] <... symlink resumed>) = 0 [pid 6009] munmap(0x7f8019600000, 138412032 [pid 5831] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] write(1, "executing program\n", 18 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6032] <... write resumed>) = 18 [pid 5831] unlink("./4/binderfs") = 0 [pid 5831] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] memfd_create("syzkaller", 0) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] newfstatat(AT_FDCWD, "./4/file0", [pid 6032] <... mmap resumed>) = 0x7f8019600000 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./4/file0") = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./4") = 0 [pid 5831] mkdir("./5", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [ 105.111842][ T5937] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6033 ./strace-static-x86_64: Process 6033 attached [pid 6033] set_robust_list(0x555592c38660, 24) = 0 [pid 6033] chdir("./5") = 0 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6033] setpgid(0, 0) = 0 [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6009] <... munmap resumed>) = 0 [pid 6033] <... openat resumed>) = 3 [pid 6033] write(3, "1000", 4 [pid 6009] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6033] <... write resumed>) = 4 [pid 6009] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6033] close(3 [pid 6009] close(3 [pid 6033] <... close resumed>) = 0 [pid 6009] <... close resumed>) = 0 [pid 6033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6009] close(4) = 0 [ 105.198430][ T5937] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 6033] write(1, "executing program\n", 18 [pid 6009] mkdir("./file0", 0777executing program [pid 5994] <... close resumed>) = 0 [pid 6009] <... mkdir resumed>) = 0 [pid 6033] <... write resumed>) = 18 [pid 6009] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6033] memfd_create("syzkaller", 0) = 3 [pid 6033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5994] exit_group(0) = ? [pid 5994] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5994, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=57 /* 0.57 s */} --- [pid 5832] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 105.198465][ T5937] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 105.243113][ T6009] loop3: detected capacity change from 0 to 32768 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555592c396f0 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(3, [pid 5832] getdents64(3, [pid 5835] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5835] close(3) = 0 [pid 5832] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./4/binderfs") = 0 [ 105.267182][ T6009] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [pid 5832] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] <... write resumed>) = 16777216 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 105.368058][ T5937] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [ 105.368254][ T5937] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [pid 5832] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] munmap(0x7f8019600000, 138412032 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 105.405815][ T6009] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 6012] <... munmap resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 6012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, [pid 6012] <... openat resumed>) = 4 [pid 5832] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./4/file0") = 0 [pid 6012] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5832] getdents64(3, [pid 6012] close(3) = 0 [pid 6012] close(4) = 0 [pid 6012] mkdir("./file0", 0777) = 0 [pid 6012] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5832] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [ 105.405897][ T6009] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 105.472301][ T5937] dirent points to inode that does not point back: [ 105.472328][ T5937] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg [pid 5832] rmdir("./4") = 0 [pid 5832] mkdir("./5", 0777 [pid 6032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5832] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6043 attached [pid 6043] set_robust_list(0x555592c38660, 24) = 0 [pid 6043] chdir("./5" [pid 5832] <... clone resumed>, child_tidptr=0x555592c38650) = 6043 [pid 6043] <... chdir resumed>) = 0 [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6043] setpgid(0, 0) = 0 [ 105.472355][ T5937] inum: 536870912:4294967295 [ 105.472374][ T5937] mode=100755 [ 105.472461][ T5937] flags=(15300000) [ 105.472480][ T5937] journal_seq=18 [ 105.472498][ T5937] hash_seed=8469d717004af4ef [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6043] write(3, "1000", 4) = 4 [pid 6043] close(3) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6043] write(1, "executing program\n", 18) = 18 [pid 6043] memfd_create("syzkaller", 0) = 3 [pid 6033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 105.472523][ T5937] hash_type=siphash [ 105.472541][ T5937] bi_size=10 [ 105.472558][ T5937] bi_sectors=8 [ 105.472575][ T5937] bi_version=0 [ 105.474402][ T5937] bi_atime=2780562352 [ 105.474423][ T5937] bi_ctime=2780562352 [ 105.474441][ T5937] bi_mtime=2780562352 [ 105.474460][ T5937] bi_otime=2780562352 [ 105.474478][ T5937] bi_uid=0 [ 105.474495][ T5937] bi_gid=0 [ 105.474518][ T5937] bi_nlink=0 [ 105.474536][ T5937] bi_generation=0 [ 105.474553][ T5937] bi_dev=0 [ 105.474570][ T5937] bi_data_checksum=0 [ 105.474589][ T5937] bi_compression=0 [ 105.474607][ T5937] bi_project=0 [pid 6009] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6009] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 105.474625][ T5937] bi_background_compression=0 [ 105.474644][ T5937] bi_data_replicas=0 [ 105.474662][ T5937] bi_promote_target=0 [pid 6009] ioctl(3, LOOP_CLR_FD) = 0 [ 105.474681][ T5937] bi_foreground_target=0 [ 105.474699][ T5937] bi_background_target=0 [ 105.474718][ T5937] bi_erasure_code=0 [ 105.474737][ T5937] bi_fields_set=0 [ 105.474755][ T5937] bi_dir=0 [ 105.474772][ T5937] bi_dir_offset=4330382808765833931 [ 105.474792][ T5937] bi_subvol=0 [ 105.474809][ T5937] bi_parent_subvol=0 [ 105.474978][ T5937] bi_nocow=0 [pid 6009] close(3 [ 105.474997][ T5937] bi_depth=0 [ 105.475013][ T5937] bi_inodes_32bit=0, fixing [ 105.482135][ T6012] loop2: detected capacity change from 0 to 32768 [ 105.502440][ T6012] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [pid 6043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6012] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6012] ioctl(3, LOOP_CLR_FD) = 0 [ 105.620336][ T6012] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 105.620417][ T6012] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 105.772100][ T6009] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6012] close(3 [pid 6032] <... write resumed>) = 16777216 [ 106.053115][ T6012] bcachefs: bch2_fs_get_tree() error: EINVAL [ 106.107626][ T5937] inode 536870912:4294967295 has wrong backpointer: [ 106.107652][ T5937] got 0:4330382808765833931 [ 106.107671][ T5937] should be 4096:4330382808765833931, fixing [ 106.169795][ T5937] dirent points to inode that does not point back: [ 106.169822][ T5937] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg [pid 6032] munmap(0x7f8019600000, 138412032) = 0 [pid 6032] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 106.169850][ T5937] inum: 536870912:4294967295 [pid 6032] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6032] close(3) = 0 [pid 6032] close(4) = 0 [pid 6032] mkdir("./file0", 0777) = 0 [pid 6032] mount("/dev/loop5", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6009] <... close resumed>) = 0 [pid 6033] <... write resumed>) = 16777216 [pid 6009] exit_group(0) = ? [pid 6009] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=53 /* 0.53 s */} --- [pid 5834] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 106.169869][ T5937] mode=100755 [ 106.169887][ T5937] flags=(15300000) [ 106.169904][ T5937] journal_seq=18 [ 106.169922][ T5937] hash_seed=8469d717004af4ef [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6033] munmap(0x7f8019600000, 138412032 [pid 5834] getdents64(3, [pid 6043] <... write resumed>) = 16777216 [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5834] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./4/binderfs" [pid 6043] munmap(0x7f8019600000, 138412032 [pid 5834] <... unlink resumed>) = 0 [pid 5834] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5834] close(4) = 0 [pid 5834] rmdir("./4/file0") = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [ 106.169941][ T5937] hash_type=siphash [pid 5834] close(3 [pid 6043] <... munmap resumed>) = 0 [pid 5834] <... close resumed>) = 0 [pid 5834] rmdir("./4") = 0 [pid 5834] mkdir("./5", 0777) = 0 [pid 6043] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6012] <... close resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD [pid 6043] <... openat resumed>) = 4 [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6043] ioctl(4, LOOP_SET_FD, 3 [pid 6012] exit_group(0 [pid 5834] close(3 [pid 6033] <... munmap resumed>) = 0 [pid 6012] <... exit_group resumed>) = ? [pid 5834] <... close resumed>) = 0 [ 106.169959][ T5937] bi_size=10 [ 106.169977][ T5937] bi_sectors=8 [ 106.169994][ T5937] bi_version=0 [ 106.170011][ T5937] bi_atime=2780562352 [ 106.170030][ T5937] bi_ctime=2780562352 [ 106.170048][ T5937] bi_mtime=2780562352 [ 106.170067][ T5937] bi_otime=2780562352 [ 106.170085][ T5937] bi_uid=0 [ 106.170102][ T5937] bi_gid=0 [ 106.170119][ T5937] bi_nlink=0 [ 106.170136][ T5937] bi_generation=0 [ 106.170154][ T5937] bi_dev=0 [ 106.170171][ T5937] bi_data_checksum=0 [pid 6012] +++ exited with 0 +++ [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6012, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=50 /* 0.50 s */} --- [pid 5833] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6057 attached [pid 5833] unlink("./4/binderfs") = 0 [pid 5833] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6057] set_robust_list(0x555592c38660, 24 [pid 5833] <... openat resumed>) = 4 [pid 6057] <... set_robust_list resumed>) = 0 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./4/file0" [pid 6057] chdir("./5" [pid 5833] <... rmdir resumed>) = 0 [pid 6043] <... ioctl resumed>) = 0 [pid 5833] getdents64(3, [pid 6057] <... chdir resumed>) = 0 [pid 6043] close(3 [pid 6033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6043] <... close resumed>) = 0 [pid 6033] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 6057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6043] close(4 [pid 6033] ioctl(4, LOOP_SET_FD, 3 [pid 5833] close(3 [pid 6057] <... prctl resumed>) = 0 [pid 6043] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 6057] setpgid(0, 0 [pid 6043] mkdir("./file0", 0777 [pid 5834] <... clone resumed>, child_tidptr=0x555592c38650) = 6057 [pid 5833] rmdir("./4" [pid 6043] <... mkdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] mkdir("./5", 0777) = 0 [pid 6057] <... setpgid resumed>) = 0 [ 106.170189][ T5937] bi_compression=0 [ 106.170207][ T5937] bi_project=0 [ 106.170225][ T5937] bi_background_compression=0 [ 106.170244][ T5937] bi_data_replicas=0 [ 106.170262][ T5937] bi_promote_target=0 [ 106.170280][ T5937] bi_foreground_target=0 [ 106.170298][ T5937] bi_background_target=0 [ 106.170317][ T5937] bi_erasure_code=0 [ 106.170335][ T5937] bi_fields_set=0 [ 106.170353][ T5937] bi_dir=0 [ 106.170370][ T5937] bi_dir_offset=4330382808765833931 [ 106.170390][ T5937] bi_subvol=0 [ 106.170408][ T5937] bi_parent_subvol=0 [ 106.170426][ T5937] bi_nocow=0 [ 106.170443][ T5937] bi_depth=0 [ 106.170460][ T5937] bi_inodes_32bit=0, fixing [ 106.264298][ T6032] loop5: detected capacity change from 0 to 32768 [ 106.280730][ T6032] bcachefs (/dev/loop5): error reading default superblock: checksum error, type none: got should be [ 106.401962][ T6043] loop1: detected capacity change from 0 to 32768 [ 106.415154][ T6032] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 6043] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29"executing program [pid 6057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6033] <... ioctl resumed>) = 0 [pid 6033] close(3 [pid 5833] <... clone resumed>, child_tidptr=0x555592c38650) = 6058 ./strace-static-x86_64: Process 6058 attached [pid 6033] <... close resumed>) = 0 [pid 6058] set_robust_list(0x555592c38660, 24 [pid 6033] close(4) = 0 [pid 6058] <... set_robust_list resumed>) = 0 [pid 6033] mkdir("./file0", 0777 [pid 6058] chdir("./5" [pid 6033] <... mkdir resumed>) = 0 [pid 6058] <... chdir resumed>) = 0 [pid 6033] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6058] write(3, "1000", 4) = 4 [pid 6058] close(3) = 0 [pid 6058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6058] write(1, "executing program\n", 18) = 18 [pid 6058] memfd_create("syzkaller", 0) = 3 [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 6057] <... openat resumed>) = 3 [pid 6057] write(3, "1000", 4) = 4 [pid 6057] close(3) = 0 [pid 6057] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6057] write(1, "executing program\n", 18) = 18 [pid 6057] memfd_create("syzkaller", 0) = 3 [ 106.459764][ T6033] loop0: detected capacity change from 0 to 32768 [ 106.463656][ T6032] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 106.474546][ T6043] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [pid 6057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 106.554790][ T6033] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 106.566448][ T5937] inode 536870912:4294967295 has wrong backpointer: [ 106.566474][ T5937] got 0:4330382808765833931 [ 106.566494][ T5937] should be 4096:4330382808765833931, fixing [ 106.688118][ T5937] hash table key at wrong offset: btree dirents inode 4096 offset 8130059955150870709, hashed to 6728544935518790663 [ 106.688154][ T5937] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 106.777884][ T5937] bcachefs (loop4): fsck counted subdirectories wrong for inum 4096:4294967295: got 1 should be 2 [ 106.791478][ T6033] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 106.807391][ T6032] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6032] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6032] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6032] ioctl(3, LOOP_CLR_FD) = 0 [ 106.824233][ T5937] directory 4096:4294967295 with wrong i_size: got 0, should be 288, fixing [ 106.870330][ T6033] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 106.888804][ T6043] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 6032] close(3 [ 106.888880][ T6043] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 107.061876][ T5937] done [ 107.077301][ T5937] bcachefs (loop4): resume_logged_ops... done [ 107.083715][ T5937] bcachefs (loop4): delete_dead_inodes... done [pid 6058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6057] <... write resumed>) = 16777216 [pid 6057] munmap(0x7f8019600000, 138412032 [pid 6032] <... close resumed>) = 0 [ 107.114086][ T5937] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 107.150052][ T6043] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6043] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6032] exit_group(0) = ? [pid 6043] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6032] +++ exited with 0 +++ [pid 6043] ioctl(3, LOOP_CLR_FD) = 0 [pid 6043] close(3 [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6032, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=60 /* 0.60 s */} --- [pid 5836] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6033] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6057] <... munmap resumed>) = 0 [ 107.156489][ T5937] bcachefs (loop4): check_extents_to_backpointers... done [ 107.177344][ T5937] bcachefs (loop4): check_inodes... done [ 107.192592][ T6033] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5836] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 6057] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5836] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6057] <... openat resumed>) = 4 [pid 6057] ioctl(4, LOOP_SET_FD, 3 [pid 6033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5836] newfstatat(AT_FDCWD, "./2/binderfs", [pid 6033] <... openat resumed>) = 3 [pid 5836] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6033] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] unlink("./2/binderfs" [pid 6033] close(3 [pid 5836] <... unlink resumed>) = 0 [pid 5836] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./2/file0") = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [ 107.211519][ T5937] bcachefs (loop4): check_extents... done [ 107.218037][ T5937] bcachefs (loop4): check_dirents... [ 107.218994][ T5937] dirent points to missing inode: [ 107.219017][ T5937] u64s 8 type dirent 4096:6728544935518790663:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 107.237873][ T6057] loop3: detected capacity change from 0 to 32768 [ 107.292165][ T5937] ================================================================== [ 107.300285][ T5937] BUG: KASAN: use-after-free in check_dirent+0x2455/0x2620 [ 107.307534][ T5937] Read of size 1 at addr ffff888078964048 by task syz-executor115/5937 [ 107.315799][ T5937] [ 107.318133][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz-executor115 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 107.318178][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.318200][ T5937] Call Trace: [ 107.318211][ T5937] [ 107.318224][ T5937] dump_stack_lvl+0x116/0x1f0 [ 107.318293][ T5937] print_report+0xc3/0x670 [ 107.318354][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.318418][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.318481][ T5937] ? __phys_addr+0xc6/0x150 [ 107.318522][ T5937] kasan_report+0xd9/0x110 [ 107.318555][ T5937] ? check_dirent+0x2455/0x2620 [ 107.318608][ T5937] ? check_dirent+0x2455/0x2620 [ 107.318664][ T5937] check_dirent+0x2455/0x2620 [ 107.318727][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.318790][ T5937] ? bch2_btree_iter_peek_max+0x213a/0x5b50 [ 107.318856][ T5937] ? __pfx_check_dirent+0x10/0x10 [ 107.318916][ T5937] ? bch2_check_dirents+0x168/0x780 [ 107.318974][ T5937] ? __pfx_bch2_btree_iter_peek_max+0x10/0x10 [ 107.319038][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.319116][ T5937] ? bch2_check_dirents+0x409/0x780 [ 107.319170][ T5937] ? bch2_check_dirents+0x399/0x780 [ 107.319224][ T5937] bch2_check_dirents+0x409/0x780 [ 107.319293][ T5937] ? __pfx_bch2_check_dirents+0x10/0x10 [ 107.319348][ T5937] ? __pfx_prb_read_valid+0x10/0x10 [ 107.319408][ T5937] ? __up_console_sem+0x8f/0xe0 [ 107.319464][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.319527][ T5937] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.319574][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.319636][ T5937] ? console_unlock+0x185/0x210 [ 107.319674][ T5937] ? __pfx_console_unlock+0x10/0x10 [ 107.319714][ T5937] ? irq_work_claim+0x76/0xa0 [ 107.319779][ T5937] ? __pfx_vprintk_emit+0x10/0x10 [ 107.319824][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.319893][ T5937] ? bch2_check_dirents+0x168/0x780 [ 107.319947][ T5937] ? __pfx_lock_release+0x10/0x10 [ 107.320008][ T5937] bch2_run_recovery_pass+0x91/0x1a0 [ 107.320050][ T5937] bch2_run_recovery_passes+0x3f4/0x8f0 [ 107.320101][ T5937] bch2_fs_recovery+0x3c1b/0x43d0 [ 107.320147][ T5937] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 107.320184][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.320254][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.320320][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.320383][ T5937] ? bch2_get_next_online_dev+0x35a/0x7e0 [ 107.320440][ T5937] ? __pfx_lock_release+0x10/0x10 [ 107.320493][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.320563][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.320625][ T5937] ? bch2_get_next_online_dev+0x364/0x7e0 [ 107.320682][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.320745][ T5937] ? llist_reverse_order+0x4c/0x70 [ 107.320793][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [pid 5836] close(3 [pid 6058] <... write resumed>) = 16777216 [pid 6057] <... ioctl resumed>) = 0 [pid 6043] <... close resumed>) = 0 [ 107.320856][ T5937] ? __closure_wake_up+0x31/0x420 [ 107.320908][ T5937] bch2_fs_start+0x343/0x660 [ 107.320952][ T5937] bch2_fs_get_tree+0x1118/0x1760 [ 107.320999][ T5937] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 107.321041][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.321119][ T5937] ? __pfx_aa_get_newest_label+0x10/0x10 [ 107.321158][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.321222][ T5937] ? trace_cap_capable+0x1a2/0x210 [ 107.321267][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.321330][ T5937] ? apparmor_capable+0x114/0x1d0 [ 107.321368][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.321430][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.321496][ T5937] vfs_get_tree+0x8e/0x340 [ 107.321540][ T5937] path_mount+0x14e6/0x1f10 [ 107.321603][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.321666][ T5937] ? kmem_cache_free+0x2e2/0x4d0 [ 107.321723][ T5937] ? __pfx_path_mount+0x10/0x10 [ 107.321787][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.321849][ T5937] ? putname+0x13c/0x180 [ 107.321888][ T5937] __x64_sys_mount+0x28f/0x310 [ 107.321950][ T5937] ? __pfx___x64_sys_mount+0x10/0x10 [ 107.322012][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.322076][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.322139][ T5937] ? _raw_spin_unlock_irq+0x2e/0x50 [ 107.322178][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 107.322241][ T5937] ? ptrace_notify+0xf1/0x130 [ 107.322308][ T5937] do_syscall_64+0xcd/0x250 [ 107.322358][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.322413][ T5937] RIP: 0033:0x7f8021a8861a [ 107.322441][ T5937] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 107.322477][ T5937] RSP: 002b:00007ffcadd266b8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 107.322512][ T5937] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8021a8861a [ 107.322536][ T5937] RDX: 0000400000000000 RSI: 0000400000000040 RDI: 00007ffcadd26700 [ 107.322561][ T5937] RBP: 0000000000000004 R08: 00007ffcadd26740 R09: 0000000000005956 [ 107.322585][ T5937] R10: 0000000001000001 R11: 0000000000000282 R12: 0000000001000000 [ 107.322609][ T5937] R13: 00007ffcadd26740 R14: 0000400000000000 R15: 0000000000000003 [ 107.322643][ T5937] [ 107.322655][ T5937] [ 107.814087][ T5937] The buggy address belongs to the physical page: [ 107.820503][ T5937] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78964 [ 107.829273][ T5937] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 107.836408][ T5937] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 107.845006][ T5937] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 107.853595][ T5937] page dumped because: kasan: bad access detected [ 107.860007][ T5937] page_owner tracks the page as freed [ 107.865374][ T5937] page last allocated via order 5, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 5937, tgid 5937 (syz-executor115), ts 106777006193, free_ts 107291852583 [ 107.884016][ T5937] post_alloc_hook+0x181/0x1b0 [ 107.888814][ T5937] get_page_from_freelist+0xfce/0x2f80 [ 107.894309][ T5937] __alloc_frozen_pages_noprof+0x221/0x2470 [ 107.900239][ T5937] __alloc_pages_noprof+0xb/0x1b0 [ 107.905304][ T5937] ___kmalloc_large_node+0x84/0x1b0 [ 107.910529][ T5937] __kmalloc_large_node_noprof+0x1c/0x70 [ 107.916210][ T5937] __kmalloc_node_noprof.cold+0x5/0x5f [ 107.921690][ T5937] __kvmalloc_node_noprof+0x6f/0x1a0 [ 107.927005][ T5937] btree_bounce_alloc+0x11e/0x210 [ 107.932152][ T5937] btree_node_sort+0x1104/0x14f0 [ 107.937109][ T5937] bch2_btree_post_write_cleanup+0x145/0x600 [ 107.943114][ T5937] bch2_btree_node_prep_for_write+0x35b/0x550 [ 107.949200][ T5937] bch2_trans_lock_write+0x6c5/0x8e0 [ 107.954506][ T5937] __bch2_trans_commit+0x2264/0x7d70 [ 107.959809][ T5937] __bch2_str_hash_check_key+0x2097/0x3800 [ 107.965646][ T5937] check_dirent+0x12d3/0x2620 [ 107.970362][ T5937] page last free pid 5937 tgid 5937 stack trace: [ 107.976694][ T5937] __free_pages_ok+0x62b/0xe50 [ 107.981488][ T5937] __folio_put+0x32a/0x450 [ 107.985934][ T5937] kvfree+0x47/0x50 [ 107.989771][ T5937] btree_node_sort+0xf9f/0x14f0 [ 107.994647][ T5937] bch2_btree_post_write_cleanup+0x145/0x600 [ 108.000656][ T5937] bch2_btree_node_prep_for_write+0x35b/0x550 [ 108.006741][ T5937] bch2_trans_lock_write+0x6c5/0x8e0 [ 108.012042][ T5937] __bch2_trans_commit+0x2264/0x7d70 [ 108.017346][ T5937] check_dirent+0xff1/0x2620 [ 108.022048][ T5937] bch2_check_dirents+0x409/0x780 [ 108.027100][ T5937] bch2_run_recovery_pass+0x91/0x1a0 [ 108.032405][ T5937] bch2_run_recovery_passes+0x3f4/0x8f0 [ 108.037972][ T5937] bch2_fs_recovery+0x3c1b/0x43d0 [ 108.043012][ T5937] bch2_fs_start+0x343/0x660 [ 108.047725][ T5937] bch2_fs_get_tree+0x1118/0x1760 [ 108.052774][ T5937] vfs_get_tree+0x8e/0x340 [ 108.057219][ T5937] [ 108.059548][ T5937] Memory state around the buggy address: [ 108.065181][ T5937] ffff888078963f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.073266][ T5937] ffff888078963f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.081340][ T5937] >ffff888078964000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.089455][ T5937] ^ [pid 6033] <... close resumed>) = 0 [pid 5836] <... close resumed>) = 0 [pid 6058] munmap(0x7f8019600000, 138412032 [pid 6057] close(3 [pid 6058] <... munmap resumed>) = 0 [pid 6057] <... close resumed>) = 0 [pid 6033] exit_group(0 [ 108.095875][ T5937] ffff888078964080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.103984][ T5937] ffff888078964100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.112048][ T5937] ================================================================== [pid 5836] rmdir("./2" [pid 6058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6057] close(4 [pid 6043] exit_group(0 [pid 6033] <... exit_group resumed>) = ? [pid 5836] <... rmdir resumed>) = 0 [pid 6058] <... openat resumed>) = 4 [pid 6057] <... close resumed>) = 0 [pid 5836] mkdir("./3", 0777) = 0 [pid 6033] +++ exited with 0 +++ [pid 5836] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6058] ioctl(4, LOOP_SET_FD, 3 [pid 6057] mkdir("./file0", 0777 [pid 5836] <... openat resumed>) = 3 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6033, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=50 /* 0.50 s */} --- [pid 5836] ioctl(3, LOOP_CLR_FD [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5836] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6073 attached [pid 6058] <... ioctl resumed>) = 0 [pid 6073] set_robust_list(0x555592c38660, 24 [pid 6058] close(3 [pid 6057] <... mkdir resumed>) = 0 [pid 6073] <... set_robust_list resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./5/binderfs") = 0 [pid 5831] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", [pid 6058] <... close resumed>) = 0 [pid 6057] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 6058] close(4 [pid 6043] <... exit_group resumed>) = ? [pid 6058] <... close resumed>) = 0 [pid 6043] +++ exited with 0 +++ [pid 5831] <... close resumed>) = 0 [pid 6058] mkdir("./file0", 0777 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=108 /* 1.08 s */} --- [pid 5831] rmdir("./5/file0" [pid 6058] <... mkdir resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 6058] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5831] getdents64(3, [pid 5832] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] close(3 [pid 5832] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] rmdir("./5" [pid 5832] newfstatat(3, "", [pid 5831] <... rmdir resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] mkdir("./6", 0777 [pid 5832] getdents64(3, [pid 5831] <... mkdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6073] chdir("./3" [pid 5832] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] close(3 [pid 5832] unlink("./5/binderfs" [pid 5831] <... close resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] <... clone resumed>, child_tidptr=0x555592c38650) = 6074 ./strace-static-x86_64: Process 6074 attached [pid 5832] newfstatat(AT_FDCWD, "./5/file0", [pid 6073] <... chdir resumed>) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555592c38650) = 6073 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6073] <... prctl resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6074] set_robust_list(0x555592c38660, 24 [pid 6073] setpgid(0, 0 [pid 5832] <... openat resumed>) = 4 [pid 6074] <... set_robust_list resumed>) = 0 [pid 6073] <... setpgid resumed>) = 0 [pid 5832] newfstatat(4, "", [pid 6074] chdir("./6" [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6073] <... openat resumed>) = 3 [pid 5832] getdents64(4, [pid 6074] <... chdir resumed>) = 0 [pid 6073] write(3, "1000", 4 [pid 5832] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 6074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] getdents64(4, [pid 6074] <... prctl resumed>) = 0 [pid 6074] setpgid(0, 0 [pid 5832] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 6074] <... setpgid resumed>) = 0 [pid 6074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] close(4 [pid 6074] <... openat resumed>) = 3 [pid 6073] <... write resumed>) = 4 [pid 5832] <... close resumed>) = 0 [ 108.140752][ T5937] Disabling lock debugging due to kernel taint [ 108.152662][ T6058] loop2: detected capacity change from 0 to 32768 [ 108.165959][ T6057] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 108.178905][ T5937] directory 4096:4294967295 with wrong i_size: got 288, should be 352, fixing [pid 6073] close(3) = 0 [pid 5832] rmdir("./5/file0" [pid 6074] write(3, "1000", 4 [pid 6073] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... rmdir resumed>) = 0 [pid 6074] <... write resumed>) = 4 [pid 6073] <... symlink resumed>) = 0 [pid 5832] getdents64(3, executing program [pid 6074] close(3 [pid 6073] write(1, "executing program\n", 18 [pid 5832] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 6074] <... close resumed>) = 0 [pid 6073] <... write resumed>) = 18 [pid 5832] close(3 [pid 6074] symlink("/dev/binderfs", "./binderfs" [pid 6073] memfd_create("syzkaller", 0 [pid 5832] <... close resumed>) = 0 [pid 6074] <... symlink resumed>) = 0 [pid 6073] <... memfd_create resumed>) = 3 [pid 5832] rmdir("./5"executing program [pid 6074] write(1, "executing program\n", 18 [pid 6073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6074] <... write resumed>) = 18 [pid 6073] <... mmap resumed>) = 0x7f8019600000 [pid 5832] mkdir("./6", 0777 [pid 6074] memfd_create("syzkaller", 0 [pid 5832] <... mkdir resumed>) = 0 [pid 6074] <... memfd_create resumed>) = 3 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... openat resumed>) = 3 [pid 6074] <... mmap resumed>) = 0x7f8019600000 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6080 attached [pid 6080] set_robust_list(0x555592c38660, 24) = 0 [pid 6080] chdir("./6") = 0 [pid 6080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6080] setpgid(0, 0) = 0 [pid 6080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6080] write(3, "1000", 4) = 4 [pid 6080] close(3) = 0 [pid 6080] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6080] write(1, "executing program\n", 18) = 18 [pid 6080] memfd_create("syzkaller", 0) = 3 [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 108.189888][ T6058] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [ 108.220220][ T5937] done [ 108.224309][ T5937] bcachefs (loop4): resume_logged_ops... done [ 108.230665][ T5937] bcachefs (loop4): delete_dead_inodes... done [ 108.241314][ T5937] bcachefs (loop4): Second fsck run was not clean [pid 5832] <... clone resumed>, child_tidptr=0x555592c38650) = 6080 [ 108.262064][ T5937] bcachefs (loop4): going read-only [ 108.267317][ T5937] bcachefs (loop4): finished waiting for writes to stop [ 108.281343][ T5937] bcachefs (loop4): flushing journal and stopping allocators, journal seq 22 [ 108.306467][ T5937] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 23 [ 108.332375][ T5937] bcachefs (loop4): clean shutdown complete, journal seq 24 [ 108.342209][ T5937] bcachefs (loop4): marking filesystem clean [pid 5937] <... mount resumed>) = ? [ 108.360260][ T6058] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 108.381738][ T5937] bcachefs (loop4): done starting filesystem [pid 6073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5937] +++ killed by SIGKILL +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5937, si_uid=0, si_status=SIGKILL, si_utime=6 /* 0.06 s */, si_stime=173 /* 1.73 s */} --- [pid 5835] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5835] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./2/binderfs") = 0 [ 108.412372][ T6057] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 108.412399][ T6058] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 108.441441][ T5835] bcachefs (loop4): shutting down [ 108.458632][ T6057] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 5835] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 108.506360][ T5835] bcachefs (loop4): shutdown complete [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6080] <... write resumed>) = 16777216 [pid 6080] munmap(0x7f8019600000, 138412032) = 0 [pid 6073] <... write resumed>) = 16777216 [pid 6080] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6073] munmap(0x7f8019600000, 138412032 [pid 6080] <... openat resumed>) = 4 [pid 6080] ioctl(4, LOOP_SET_FD, 3 [pid 6073] <... munmap resumed>) = 0 [pid 6073] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6080] <... ioctl resumed>) = 0 [pid 6080] close(3 [pid 6073] <... openat resumed>) = 4 [pid 6080] <... close resumed>) = 0 [pid 6080] close(4 [pid 6073] ioctl(4, LOOP_SET_FD, 3 [pid 6080] <... close resumed>) = 0 [pid 6080] mkdir("./file0", 0777) = 0 [ 108.738511][ T6080] loop1: detected capacity change from 0 to 32768 [ 108.758792][ T6073] loop5: detected capacity change from 0 to 32768 [pid 6080] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6074] <... write resumed>) = 16777216 [pid 6073] <... ioctl resumed>) = 0 [pid 6074] munmap(0x7f8019600000, 138412032 [pid 6073] close(3) = 0 [pid 6073] close(4) = 0 [pid 6073] mkdir("./file0", 0777) = 0 [pid 6074] <... munmap resumed>) = 0 [pid 6073] mount("/dev/loop5", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 108.778787][ T6080] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [pid 6074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6074] close(3) = 0 [pid 6074] close(4) = 0 [pid 6074] mkdir("./file0", 0777) = 0 [ 108.823098][ T6073] bcachefs (/dev/loop5): error reading default superblock: checksum error, type none: got should be [ 108.823718][ T6074] loop0: detected capacity change from 0 to 32768 [ 108.848321][ T6074] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [pid 6074] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6058] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6057] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6057] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6058] <... openat resumed>) = 3 [pid 6058] ioctl(3, LOOP_CLR_FD [pid 6057] <... openat resumed>) = 3 [pid 6058] <... ioctl resumed>) = 0 [pid 6058] close(3 [pid 6057] ioctl(3, LOOP_CLR_FD) = 0 [ 108.893247][ T6058] bcachefs: bch2_fs_get_tree() error: EINVAL [ 108.902766][ T6057] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6057] close(3 [pid 6058] <... close resumed>) = 0 [pid 6058] exit_group(0) = ? [pid 6058] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6058, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=46 /* 0.46 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6057] <... close resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 6057] exit_group(0) = ? [pid 5833] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6057] +++ exited with 0 +++ [pid 5833] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6057, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=51 /* 0.51 s */} --- [pid 5834] restart_syscall(<... resuming interrupted clone ...> [pid 5833] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./5/binderfs") = 0 [pid 5833] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./5/file0") = 0 [pid 5833] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5834] <... restart_syscall resumed>) = 0 [pid 5833] rmdir("./5") = 0 [pid 5834] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] mkdir("./6", 0777 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5834] newfstatat(3, "", [pid 5833] <... mkdir resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5834] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5833] <... openat resumed>) = 3 [pid 5834] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5834] unlink("./5/binderfs" [pid 5833] close(3 [pid 5834] <... unlink resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6111 attached [pid 5834] newfstatat(AT_FDCWD, "./5/file0", [pid 5833] <... clone resumed>, child_tidptr=0x555592c38650) = 6111 [pid 6111] set_robust_list(0x555592c38660, 24 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6111] <... set_robust_list resumed>) = 0 [pid 5834] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6111] chdir("./6" [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6111] <... chdir resumed>) = 0 [pid 5834] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5834] <... openat resumed>) = 4 [pid 6111] <... prctl resumed>) = 0 [pid 6111] setpgid(0, 0 [pid 5834] newfstatat(4, "", [pid 6111] <... setpgid resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5834] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 6111] <... openat resumed>) = 3 [pid 5834] close(4) = 0 [pid 6111] write(3, "1000", 4 [pid 5834] rmdir("./5/file0" [pid 6111] <... write resumed>) = 4 [pid 6111] close(3 [pid 5834] <... rmdir resumed>) = 0 [pid 6111] <... close resumed>) = 0 [pid 5834] getdents64(3, [pid 6111] symlink("/dev/binderfs", "./binderfs" [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5834] close(3 [pid 6111] <... symlink resumed>) = 0 [pid 5834] <... close resumed>) = 0 [pid 6111] write(1, "executing program\n", 18 executing program [pid 5834] rmdir("./5" [pid 6111] <... write resumed>) = 18 [pid 6111] memfd_create("syzkaller", 0 [pid 5834] <... rmdir resumed>) = 0 [pid 5834] mkdir("./6", 0777 [pid 6111] <... memfd_create resumed>) = 3 [pid 6111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5834] <... mkdir resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5834] close(3) = 0 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6112 ./strace-static-x86_64: Process 6112 attached [pid 6112] set_robust_list(0x555592c38660, 24) = 0 [pid 6112] chdir("./6") = 0 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6112] setpgid(0, 0) = 0 [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6112] write(3, "1000", 4) = 4 [pid 6112] close(3) = 0 [pid 6112] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6112] write(1, "executing program\n", 18) = 18 [pid 6112] memfd_create("syzkaller", 0) = 3 [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 6111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 109.365516][ T6073] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=ro,errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 109.371547][ T6074] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 109.403011][ T6073] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 109.410964][ T6073] bcachefs (loop5): superblock requires following recovery passes to be run: [ 109.410964][ T6073] check_inodes,check_extents,check_dirents [ 109.426435][ T6074] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 109.431350][ T6080] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 109.461369][ T6080] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 109.483157][ T6073] bcachefs (loop5): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.20: directory_size [ 109.483157][ T6073] running recovery passes: check_allocations,check_extents_to_backpointers [pid 6112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5835] <... umount2 resumed>) = 0 [pid 5835] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./2/file0") = 0 [pid 5835] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./2") = 0 [pid 5835] mkdir("./3", 0777) = 0 [pid 6111] <... write resumed>) = 16777216 [pid 6111] munmap(0x7f8019600000, 138412032 [pid 6112] <... write resumed>) = 16777216 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = 0 [pid 5835] close(3 [pid 6112] munmap(0x7f8019600000, 138412032) = 0 [pid 6112] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6111] <... munmap resumed>) = 0 [pid 6112] <... openat resumed>) = 4 [pid 6112] ioctl(4, LOOP_SET_FD, 3 [pid 6111] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6111] ioctl(4, LOOP_SET_FD, 3 [pid 6112] <... ioctl resumed>) = 0 [pid 6111] <... ioctl resumed>) = 0 [pid 6112] close(3 [pid 6111] close(3 [pid 6112] <... close resumed>) = 0 [pid 6111] <... close resumed>) = 0 [pid 6111] close(4 [pid 6112] close(4 [pid 6111] <... close resumed>) = 0 [pid 6112] <... close resumed>) = 0 [pid 6112] mkdir("./file0", 0777) = 0 [ 109.555494][ T6073] bcachefs (loop5): error validating btree node at btree inodes level 0/0 [ 109.555521][ T6073] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [pid 6112] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6111] mkdir("./file0", 0777) = 0 [ 109.555549][ T6073] node offset 8/24 bset u64s 29 bset byte offset 152: keys out of order: u64s 16 type inode_v3 5:4096:U32_MAX len 0 ver 0 > u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0, fixing [ 109.608902][ T6112] loop3: detected capacity change from 0 to 32768 [ 109.608967][ T6111] loop2: detected capacity change from 0 to 32768 [ 109.632144][ T6111] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [pid 6111] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6074] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 109.661523][ T6112] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 109.679421][ T6073] invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 5:4096:U32_MAX len 0 ver 0: [ 109.679450][ T6073] mode=40755 [ 109.679469][ T6073] flags=(16300000) [ 109.679484][ T6073] journal_seq=1 [ 109.679498][ T6073] hash_seed=28e4f092a4fc58ee [ 109.679514][ T6073] hash_type=siphash [ 109.679529][ T6073] bi_size=0 [pid 6074] ioctl(3, LOOP_CLR_FD) = 0 [ 109.679542][ T6073] bi_sectors=0 [ 109.679556][ T6073] bi_version=0 [ 109.679570][ T6073] bi_atime=200535484 [ 109.679585][ T6073] bi_ctime=200535484 [ 109.679600][ T6073] bi_mtime=200535484 [ 109.679615][ T6073] bi_otime=200535484 [ 109.679629][ T6073] bi_uid=0 [ 109.679643][ T6073] bi_gid=0 [ 109.679656][ T6073] bi_nlink=1 [ 109.679670][ T6073] bi_generation=0 [ 109.679685][ T6073] bi_dev=0 [ 109.679699][ T6073] bi_data_checksum=0 [ 109.679714][ T6073] bi_compression=0 [ 109.679729][ T6073] bi_project=0 [ 109.679743][ T6073] bi_background_compression=0 [ 109.679759][ T6073] bi_data_replicas=0 [ 109.679774][ T6073] bi_promote_target=0 [ 109.679789][ T6073] bi_foreground_target=0 [ 109.679805][ T6073] bi_background_target=0 [ 109.679820][ T6073] bi_erasure_code=0 [ 109.679835][ T6073] bi_fields_set=0 [ 109.679849][ T6073] bi_dir=0 [ 109.679863][ T6073] bi_dir_offset=0 [ 109.679878][ T6073] bi_subvol=1 [ 109.679892][ T6073] bi_parent_subvol=0 [ 109.679907][ T6073] bi_nocow=0 [ 109.679921][ T6073] bi_depth=0 [ 109.679935][ T6073] bi_inodes_32bit=0 [ 109.679950][ T6073] nonzero k.p.inode: delete?, fixing [ 109.702004][ T6074] bcachefs: bch2_fs_get_tree() error: EINVAL [ 109.705427][ T6073] bcachefs (loop5): btree_node_read_work: rewriting btree node at due to error [ 109.705427][ T6073] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 109.712955][ T6080] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6074] close(3) = 0 [pid 6080] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6080] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6080] ioctl(3, LOOP_CLR_FD) = 0 [pid 6080] close(3 [pid 6074] exit_group(0) = ? [pid 6074] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6074, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=35 /* 0.35 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5831] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 109.873371][ T6073] bcachefs (loop5): error validating btree node on loop5 at btree freespace level 0/0 [ 109.873398][ T6073] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [pid 5831] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] <... close resumed>) = 0 [pid 5831] unlink("./6/binderfs" [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... unlink resumed>) = 0 [ 109.873426][ T6073] node offset 0/32 bset u64s 0: checksum error, type none: got should be , fixing [ 109.948349][ T6073] bcachefs (loop5): btree_node_read_work: rewriting btree node at due to error [ 109.948349][ T6073] btree=freespace level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 109.976132][ T6073] bcachefs (loop5): accounting_read... done [pid 5831] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program ./strace-static-x86_64: Process 6122 attached ) = -1 EINVAL (Invalid argument) [pid 5835] <... clone resumed>, child_tidptr=0x555592c38650) = 6122 [pid 6122] set_robust_list(0x555592c38660, 24) = 0 [pid 6122] chdir("./3") = 0 [pid 6122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6122] setpgid(0, 0) = 0 [pid 6122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6122] write(3, "1000", 4) = 4 [pid 6122] close(3) = 0 [pid 6122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6122] write(1, "executing program\n", 18) = 18 [pid 6122] memfd_create("syzkaller", 0 [pid 5831] newfstatat(AT_FDCWD, "./6/file0", [pid 6122] <... memfd_create resumed>) = 3 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [ 109.983812][ T6073] bcachefs (loop5): alloc_read... done [ 109.989338][ T6073] bcachefs (loop5): stripes_read... done [ 110.001163][ T6073] bcachefs (loop5): snapshots_read... done [ 110.009139][ T6073] bcachefs (loop5): check_allocations... [ 110.010840][ T6073] btree ptr not marked in member info btree allocated bitmap [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 6080] <... close resumed>) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./6/file0" [pid 6080] exit_group(0) = ? [pid 6080] +++ exited with 0 +++ [pid 5831] <... rmdir resumed>) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6080, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=44 /* 0.44 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./6") = 0 [pid 5831] mkdir("./7", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) executing program [pid 5831] close(3) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6128 [pid 5832] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6128 attached ) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6128] set_robust_list(0x555592c38660, 24) = 0 [pid 6128] chdir("./7") = 0 [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6128] setpgid(0, 0) = 0 [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6128] write(3, "1000", 4) = 4 [pid 6128] close(3) = 0 [pid 6128] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6128] write(1, "executing program\n", 18) = 18 [pid 6128] memfd_create("syzkaller", 0 [pid 5832] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 110.010863][ T6073] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 110.069853][ T6112] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 5832] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./6/binderfs") = 0 [pid 5832] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6128] <... memfd_create resumed>) = 3 [pid 5832] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6128] <... mmap resumed>) = 0x7f8019600000 [pid 5832] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./6/file0") = 0 [pid 5832] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./6") = 0 [pid 5832] mkdir("./7", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6130 attached [pid 6130] set_robust_list(0x555592c38660, 24) = 0 [pid 6130] chdir("./7") = 0 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6130] setpgid(0, 0) = 0 [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] <... clone resumed>, child_tidptr=0x555592c38650) = 6130 [pid 6130] write(3, "1000", 4) = 4 [pid 6130] close(3) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6130] write(1, "executing program\n", 18executing program ) = 18 [pid 6130] memfd_create("syzkaller", 0) = 3 [pid 6130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 110.086081][ T6073] btree ptr not marked in member info btree allocated bitmap [ 110.086105][ T6073] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 110.102391][ T6112] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 110.106225][ T6111] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 110.106288][ T6111] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6112] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6112] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 110.211978][ T6112] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6112] ioctl(3, LOOP_CLR_FD) = 0 [ 110.252977][ T6073] btree ptr not marked in member info btree allocated bitmap [ 110.253001][ T6073] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [pid 6112] close(3 [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6111] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6111] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6111] ioctl(3, LOOP_CLR_FD) = 0 [ 110.336615][ T6111] bcachefs: bch2_fs_get_tree() error: EINVAL [ 110.352727][ T6073] btree ptr not marked in member info btree allocated bitmap [ 110.352751][ T6073] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [pid 6111] close(3 [ 110.423872][ T6073] btree ptr not marked in member info btree allocated bitmap [ 110.423898][ T6073] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [pid 6130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6112] <... close resumed>) = 0 [pid 6112] exit_group(0) = ? [pid 6112] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6112, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=34 /* 0.34 s */} --- [pid 5834] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5834] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./6/binderfs") = 0 [pid 5834] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5834] close(4) = 0 [pid 5834] rmdir("./6/file0") = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5834] close(3) = 0 [pid 5834] rmdir("./6") = 0 [pid 5834] mkdir("./7", 0777) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 110.521533][ T6073] btree ptr not marked in member info btree allocated bitmap [ 110.521558][ T6073] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [pid 5834] close(3) = 0 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6131 attached [pid 6131] set_robust_list(0x555592c38660, 24 [pid 5834] <... clone resumed>, child_tidptr=0x555592c38650) = 6131 [pid 6131] <... set_robust_list resumed>) = 0 [pid 6131] chdir("./7") = 0 [pid 6131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6131] setpgid(0, 0) = 0 [pid 6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6131] write(3, "1000", 4) = 4 [pid 6131] close(3) = 0 [pid 6131] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6131] write(1, "executing program\n", 18) = 18 [pid 6131] memfd_create("syzkaller", 0) = 3 [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 6122] <... write resumed>) = 16777216 [pid 6122] munmap(0x7f8019600000, 138412032) = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 110.606795][ T6073] done [ 110.624115][ T6073] bcachefs (loop5): going read-write [pid 6122] ioctl(4, LOOP_SET_FD, 3 [pid 6111] <... close resumed>) = 0 [pid 6122] <... ioctl resumed>) = 0 [pid 6111] exit_group(0) = ? [pid 6122] close(3 [pid 6111] +++ exited with 0 +++ [pid 6122] <... close resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6111, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=34 /* 0.34 s */} --- [pid 5833] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6122] close(4 [pid 5833] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 6122] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 6122] mkdir("./file0", 0777 [pid 5833] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6122] <... mkdir resumed>) = 0 [ 110.640427][ T6073] bcachefs (loop5): journal_replay... [ 110.671584][ T6122] loop4: detected capacity change from 0 to 32768 [pid 5833] newfstatat(AT_FDCWD, "./6/binderfs", [pid 6122] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./6/binderfs") = 0 [pid 5833] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6128] <... write resumed>) = 16777216 [pid 5833] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [ 110.713752][ T6073] done [ 110.717652][ T6122] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 110.730110][ T6073] bcachefs (loop5): check_extents_to_backpointers... [ 110.739762][ T6073] bcachefs (loop5): scanning for missing backpointers in 4/128 buckets [pid 6128] munmap(0x7f8019600000, 138412032 [pid 5833] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./6/file0") = 0 [pid 5833] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./6") = 0 [pid 5833] mkdir("./7", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6134 ./strace-static-x86_64: Process 6134 attached [pid 6134] set_robust_list(0x555592c38660, 24) = 0 [pid 6134] chdir("./7") = 0 [pid 6134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6134] setpgid(0, 0) = 0 [pid 6134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6134] write(3, "1000", 4) = 4 [pid 6134] close(3) = 0 [pid 6134] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6128] <... munmap resumed>) = 0 [pid 6134] write(1, "executing program\n", 18) = 18 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6134] memfd_create("syzkaller", 0) = 3 [pid 6128] <... openat resumed>) = 4 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6128] ioctl(4, LOOP_SET_FD, 3 [pid 6134] <... mmap resumed>) = 0x7f8019600000 [pid 6128] <... ioctl resumed>) = 0 [ 110.769798][ T6073] done [ 110.787278][ T6073] bcachefs (loop5): check_inodes... [pid 6128] close(3) = 0 [pid 6128] close(4) = 0 [ 110.788319][ T6073] inode points to missing dirent [pid 6128] mkdir("./file0", 0777) = 0 [ 110.788340][ T6073] inum: 536870912:4294967295 [ 110.788357][ T6073] mode=100755 [ 110.788371][ T6073] flags=(15300000) [ 110.788386][ T6073] journal_seq=4 [ 110.788401][ T6073] hash_seed=8469d717004af4ef [ 110.788417][ T6073] hash_type=siphash [ 110.788432][ T6073] bi_size=10 [ 110.788446][ T6073] bi_sectors=8 [ 110.788460][ T6073] bi_version=0 [ 110.788475][ T6073] bi_atime=2780562352 [ 110.788490][ T6073] bi_ctime=2780562352 [ 110.788510][ T6073] bi_mtime=2780562352 [ 110.788526][ T6073] bi_otime=2780562352 [ 110.788541][ T6073] bi_uid=0 [ 110.788555][ T6073] bi_gid=0 [ 110.788569][ T6073] bi_nlink=0 [pid 6128] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6130] <... write resumed>) = 16777216 [ 110.788583][ T6073] bi_generation=0 [ 110.788598][ T6073] bi_dev=0 [ 110.788612][ T6073] bi_data_checksum=0 [ 110.788627][ T6073] bi_compression=0 [ 110.788642][ T6073] bi_project=0 [ 110.788657][ T6073] bi_background_compression=0 [ 110.788673][ T6073] bi_data_replicas=0 [ 110.788688][ T6073] bi_promote_target=0 [ 110.788704][ T6073] bi_foreground_target=0 [ 110.788720][ T6073] bi_background_target=0 [ 110.788735][ T6073] bi_erasure_code=0 [ 110.788750][ T6073] bi_fields_set=0 [pid 6130] munmap(0x7f8019600000, 138412032) = 0 [pid 6130] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6130] ioctl(4, LOOP_SET_FD, 3 [ 110.788765][ T6073] bi_dir=4096 [ 110.788779][ T6073] bi_dir_offset=4330382808765833931 [ 110.788796][ T6073] bi_subvol=0 [ 110.788811][ T6073] bi_parent_subvol=0 [ 110.788826][ T6073] bi_nocow=0 [ 110.788840][ T6073] bi_depth=0 [ 110.788854][ T6073] bi_inodes_32bit=0, fixing [ 110.805040][ T6128] loop0: detected capacity change from 0 to 32768 [ 110.838642][ T6122] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 110.838711][ T6122] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 6131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6130] <... ioctl resumed>) = 0 [pid 6130] close(3) = 0 [ 110.875832][ T6128] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 110.970488][ T6128] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 110.971013][ T6073] done [ 111.021368][ T6128] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 111.044102][ T6130] loop1: detected capacity change from 0 to 32768 [pid 6130] close(4 [pid 6122] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6130] <... close resumed>) = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6122] ioctl(3, LOOP_CLR_FD [pid 6130] mkdir("./file0", 0777 [pid 6122] <... ioctl resumed>) = 0 [pid 6130] <... mkdir resumed>) = 0 [pid 6122] close(3 [ 111.128597][ T6122] bcachefs: bch2_fs_get_tree() error: EINVAL [ 111.160625][ T6130] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [ 111.172582][ T6073] bcachefs (loop5): check_extents... done [ 111.180171][ T6073] bcachefs (loop5): check_dirents... [ 111.181716][ T6073] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [ 111.181747][ T6073] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 111.258631][ T6073] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [ 111.258663][ T6073] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 111.319414][ T6130] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 111.319484][ T6130] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 111.452706][ T6073] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 6130] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6122] <... close resumed>) = 0 [pid 6128] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6122] exit_group(0) = ? [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6128] ioctl(3, LOOP_CLR_FD) = 0 [pid 6128] close(3 [pid 6122] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6122, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [pid 5835] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5835] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./3/binderfs") = 0 [pid 5835] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./3/file0") = 0 [pid 5835] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./3") = 0 [pid 5835] mkdir("./4", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6154 attached [pid 6131] <... write resumed>) = 16777216 [pid 6131] munmap(0x7f8019600000, 138412032 [pid 5835] <... clone resumed>, child_tidptr=0x555592c38650) = 6154 [ 111.452738][ T6073] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 111.469144][ T6128] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6154] set_robust_list(0x555592c38660, 24) = 0 [pid 6154] chdir("./4") = 0 [pid 6131] <... munmap resumed>) = 0 [pid 6130] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6130] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6154] <... prctl resumed>) = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6130] <... openat resumed>) = 3 [pid 6154] setpgid(0, 0 [pid 6134] <... write resumed>) = 16777216 [pid 6131] <... openat resumed>) = 4 [pid 6130] ioctl(3, LOOP_CLR_FD [pid 6154] <... setpgid resumed>) = 0 [pid 6130] <... ioctl resumed>) = 0 [pid 6154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6131] ioctl(4, LOOP_SET_FD, 3 [ 111.523098][ T6073] dirent points to inode that does not point back: [ 111.523120][ T6073] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg [ 111.523144][ T6073] inum: 536870912:4294967295 [ 111.523160][ T6073] mode=100755 [ 111.523174][ T6073] flags=(15300000) [ 111.523189][ T6073] journal_seq=18 [ 111.523203][ T6073] hash_seed=8469d717004af4ef [ 111.523219][ T6073] hash_type=siphash [ 111.523237][ T6073] bi_size=10 [ 111.523257][ T6073] bi_sectors=8 [ 111.523271][ T6073] bi_version=0 [ 111.523285][ T6073] bi_atime=2780562352 [ 111.523300][ T6073] bi_ctime=2780562352 [ 111.523315][ T6073] bi_mtime=2780562352 [ 111.523330][ T6073] bi_otime=2780562352 [ 111.523345][ T6073] bi_uid=0 [ 111.523359][ T6073] bi_gid=0 [ 111.523372][ T6073] bi_nlink=0 [ 111.523386][ T6073] bi_generation=0 [ 111.523401][ T6073] bi_dev=0 [ 111.523414][ T6073] bi_data_checksum=0 [ 111.523429][ T6073] bi_compression=0 [ 111.523444][ T6073] bi_project=0 [pid 6130] close(3executing program [pid 6154] <... openat resumed>) = 3 [pid 6154] write(3, "1000", 4) = 4 [pid 6154] close(3) = 0 [pid 6154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6154] write(1, "executing program\n", 18) = 18 [pid 6154] memfd_create("syzkaller", 0) = 3 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 111.523458][ T6073] bi_background_compression=0 [ 111.523474][ T6073] bi_data_replicas=0 [ 111.523489][ T6073] bi_promote_target=0 [ 111.523504][ T6073] bi_foreground_target=0 [ 111.523519][ T6073] bi_background_target=0 [ 111.523534][ T6073] bi_erasure_code=0 [ 111.523549][ T6073] bi_fields_set=0 [ 111.523564][ T6073] bi_dir=0 [ 111.523577][ T6073] bi_dir_offset=4330382808765833931 [ 111.523594][ T6073] bi_subvol=0 [ 111.523608][ T6073] bi_parent_subvol=0 [ 111.523623][ T6073] bi_nocow=0 [ 111.523636][ T6073] bi_depth=0 [pid 6134] munmap(0x7f8019600000, 138412032) = 0 [ 111.523650][ T6073] bi_inodes_32bit=0, fixing [ 111.547317][ T6130] bcachefs: bch2_fs_get_tree() error: EINVAL [ 111.568823][ T6131] loop3: detected capacity change from 0 to 32768 [ 111.701340][ T6073] inode 536870912:4294967295 has wrong backpointer: [pid 6134] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6131] <... ioctl resumed>) = 0 [pid 6134] <... openat resumed>) = 4 [pid 6131] close(3 [pid 6134] ioctl(4, LOOP_SET_FD, 3 [pid 6131] <... close resumed>) = 0 [pid 6134] <... ioctl resumed>) = 0 [pid 6131] close(4 [pid 6134] close(3 [pid 6131] <... close resumed>) = 0 [pid 6134] <... close resumed>) = 0 [pid 6131] mkdir("./file0", 0777 [pid 6134] close(4) = 0 [pid 6131] <... mkdir resumed>) = 0 [pid 6134] mkdir("./file0", 0777 [ 111.701365][ T6073] got 0:4330382808765833931 [ 111.701382][ T6073] should be 4096:4330382808765833931, fixing [pid 6131] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6134] <... mkdir resumed>) = 0 [ 111.737285][ T6134] loop2: detected capacity change from 0 to 32768 [ 111.776172][ T6131] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 111.801598][ T6073] hash table key at wrong offset: btree dirents inode 4096 offset 8130059955150870709, hashed to 6728544935518790663 [pid 6134] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6130] <... close resumed>) = 0 [pid 6128] <... close resumed>) = 0 [pid 6128] exit_group(0) = ? [pid 6128] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6128, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=35 /* 0.35 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6130] exit_group(0) = ? [pid 5831] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./7/binderfs") = 0 [pid 5831] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./7/file0") = 0 [pid 6130] +++ exited with 0 +++ [pid 5831] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6130, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] close(3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5831] rmdir("./7") = 0 [pid 5832] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] mkdir("./8", 0777 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] newfstatat(3, "", [pid 5831] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5832] getdents64(3, [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] close(3 [pid 5832] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 111.801628][ T6073] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 111.815429][ T6134] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [ 111.853055][ T6073] bcachefs (loop5): fsck counted subdirectories wrong for inum 4096:4294967295: got 1 should be 2 [ 111.864588][ T6073] directory 4096:4294967295 with wrong i_size: got 0, should be 288, fixing [ 111.875883][ T6073] done [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555592c38650) = 6162 [pid 5832] unlink("./7/binderfs") = 0 [pid 5832] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", [pid 6154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./7/file0"./strace-static-x86_64: Process 6162 attached ) = 0 [pid 6162] set_robust_list(0x555592c38660, 24) = 0 [pid 6162] chdir("./8" [pid 5832] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./7") = 0 [pid 5832] mkdir("./8", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3 [pid 6162] <... chdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6162] setpgid(0, 0./strace-static-x86_64: Process 6165 attached ) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555592c38650) = 6165 [pid 6165] set_robust_list(0x555592c38660, 24) = 0 [pid 6165] chdir("./8") = 0 [pid 6162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6165] setpgid(0, 0) = 0 [pid 6165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6165] write(3, "1000", 4) = 4 [pid 6165] close(3) = 0 [pid 6165] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6165] write(1, "executing program\n", 18) = 18 [pid 6165] memfd_create("syzkaller", 0) = 3 [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 6162] <... openat resumed>) = 3 [ 111.881883][ T6073] bcachefs (loop5): resume_logged_ops... done [ 111.894261][ T6073] bcachefs (loop5): delete_dead_inodes... done [ 111.913019][ T6073] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [pid 6162] write(3, "1000", 4) = 4 [pid 6162] close(3) = 0 [pid 6162] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6162] write(1, "executing program\n", 18) = 18 [pid 6162] memfd_create("syzkaller", 0) = 3 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 111.941890][ T6073] bcachefs (loop5): check_extents_to_backpointers... done [ 111.963729][ T6073] bcachefs (loop5): check_inodes... done [ 111.981460][ T6073] bcachefs (loop5): check_extents... done [ 111.989763][ T6134] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 111.999958][ T6073] bcachefs (loop5): check_dirents... [ 112.000792][ T6073] dirent points to missing inode: [ 112.000812][ T6073] u64s 8 type dirent 4096:6728544935518790663:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 112.041390][ T6134] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 112.061300][ T6131] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 112.070378][ T6073] directory 4096:4294967295 with wrong i_size: got 288, should be 352, fixing [ 112.092680][ T6073] done [ 112.101255][ T6073] bcachefs (loop5): resume_logged_ops... done [ 112.109158][ T6073] bcachefs (loop5): delete_dead_inodes... done [ 112.111416][ T6131] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 112.115800][ T6073] bcachefs (loop5): Second fsck run was not clean [ 112.153373][ T6073] bcachefs (loop5): going read-only [ 112.158604][ T6073] bcachefs (loop5): finished waiting for writes to stop [ 112.171762][ T6073] bcachefs (loop5): flushing journal and stopping allocators, journal seq 22 [ 112.192310][ T6073] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 22 [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6073] <... mount resumed>) = 0 [pid 6073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6073] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6073] ioctl(4, LOOP_CLR_FD) = 0 [ 112.215027][ T6073] bcachefs (loop5): clean shutdown complete, journal seq 23 [ 112.232317][ T6073] bcachefs (loop5): marking filesystem clean [ 112.250697][ T6073] bcachefs (loop5): done starting filesystem [pid 6073] close(4) = 0 [pid 6073] exit_group(0) = ? [pid 6073] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=104 /* 1.04 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5836] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./3/binderfs" [pid 6134] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6134] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6134] ioctl(3, LOOP_CLR_FD) = 0 [pid 6134] close(3 [pid 5836] <... unlink resumed>) = 0 [ 112.272788][ T6134] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5836] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6154] <... write resumed>) = 16777216 [pid 6154] munmap(0x7f8019600000, 138412032) = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6154] ioctl(4, LOOP_SET_FD, 3 [pid 6131] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6154] <... ioctl resumed>) = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6154] close(3 [pid 6131] <... openat resumed>) = 3 [pid 6154] <... close resumed>) = 0 [pid 6131] ioctl(3, LOOP_CLR_FD [pid 6154] close(4 [pid 6131] <... ioctl resumed>) = 0 [ 112.351540][ T5836] bcachefs (loop5): shutting down [ 112.371082][ T6131] bcachefs: bch2_fs_get_tree() error: EINVAL [ 112.385613][ T6154] loop4: detected capacity change from 0 to 32768 [pid 6131] close(3 [pid 6165] <... write resumed>) = 16777216 [pid 6165] munmap(0x7f8019600000, 138412032 [pid 6154] <... close resumed>) = 0 [pid 6165] <... munmap resumed>) = 0 [pid 6154] mkdir("./file0", 0777) = 0 [pid 6154] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6165] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6165] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6165] close(3) = 0 [pid 6165] close(4) = 0 [pid 6165] mkdir("./file0", 0777) = 0 [ 112.442460][ T5836] bcachefs (loop5): shutdown complete [ 112.473216][ T6154] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 112.478350][ T6165] loop1: detected capacity change from 0 to 32768 [pid 6165] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6134] <... close resumed>) = 0 [pid 6134] exit_group(0) = ? [pid 6134] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6134, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 112.505332][ T6165] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got should be [pid 5833] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./7/binderfs") = 0 [pid 5833] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./7/file0") = 0 [pid 5833] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./7") = 0 [pid 5833] mkdir("./8", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6181 attached , child_tidptr=0x555592c38650) = 6181 [pid 6181] set_robust_list(0x555592c38660, 24) = 0 [pid 6181] chdir("./8") = 0 [pid 6181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6181] setpgid(0, 0) = 0 [pid 6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6181] write(3, "1000", 4) = 4 [pid 6181] close(3) = 0 [pid 6181] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6181] write(1, "executing program\n", 18) = 18 [pid 6181] memfd_create("syzkaller", 0) = 3 [pid 6181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 6131] <... close resumed>) = 0 [pid 6131] exit_group(0) = ? [pid 6131] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6131, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=43 /* 0.43 s */} --- [pid 5834] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6162] <... write resumed>) = 16777216 [pid 5834] <... openat resumed>) = 3 [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5834] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./7/binderfs" [pid 6162] munmap(0x7f8019600000, 138412032 [pid 5834] <... unlink resumed>) = 0 [pid 5834] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6162] <... munmap resumed>) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./7/file0", [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5834] close(4) = 0 [pid 5834] rmdir("./7/file0") = 0 [pid 6162] <... ioctl resumed>) = 0 [pid 6162] close(3) = 0 [pid 6162] close(4) = 0 [pid 6162] mkdir("./file0", 0777) = 0 [pid 6162] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5834] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5834] close(3) = 0 [pid 5834] rmdir("./7") = 0 [pid 5834] mkdir("./8", 0777) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5834] close(3) = 0 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6183 attached [pid 6183] set_robust_list(0x555592c38660, 24 [pid 5834] <... clone resumed>, child_tidptr=0x555592c38650) = 6183 [pid 6183] <... set_robust_list resumed>) = 0 [pid 6183] chdir("./8") = 0 [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6183] setpgid(0, 0) = 0 [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6183] write(3, "1000", 4) = 4 [pid 6183] close(3) = 0 [pid 6183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6183] write(1, "executing program\n", 18executing program ) = 18 [pid 6183] memfd_create("syzkaller", 0) = 3 [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 112.659678][ T6162] loop0: detected capacity change from 0 to 32768 [ 112.682522][ T6162] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [pid 6183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6181] <... write resumed>) = 16777216 [pid 6181] munmap(0x7f8019600000, 138412032) = 0 [pid 6181] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6181] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6181] close(3) = 0 [pid 6181] close(4) = 0 [pid 6181] mkdir("./file0", 0777) = 0 [pid 6181] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6183] <... write resumed>) = 16777216 [pid 6183] munmap(0x7f8019600000, 138412032) = 0 [pid 6183] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 112.901486][ T6181] loop2: detected capacity change from 0 to 32768 [ 112.937926][ T6181] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [pid 6183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6183] close(3) = 0 [pid 6183] close(4) = 0 [pid 6183] mkdir("./file0", 0777) = 0 [ 112.976495][ T6183] loop3: detected capacity change from 0 to 32768 [ 113.007576][ T6183] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 113.268061][ T6162] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 113.268369][ T6165] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=ro,errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 113.277677][ T6162] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 113.294932][ T6165] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 113.302842][ T6154] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 113.311187][ T6165] bcachefs (loop1): superblock requires following recovery passes to be run: [ 113.311187][ T6165] check_inodes,check_extents,check_dirents [ 113.335368][ T6165] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.20: directory_size [ 113.335368][ T6165] running recovery passes: check_allocations,check_extents_to_backpointers [ 113.338570][ T6154] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 113.366768][ T6165] bcachefs (loop1): error validating btree node at btree inodes level 0/0 [ 113.366787][ T6165] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 113.366809][ T6165] node offset 8/24 bset u64s 29 bset byte offset 152: keys out of order: u64s 16 type inode_v3 5:4096:U32_MAX len 0 ver 0 > u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0, fixing [ 113.383892][ T6181] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 113.431322][ T6165] invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 5:4096:U32_MAX len 0 ver 0: [ 113.431353][ T6165] mode=40755 [ 113.431367][ T6165] flags=(16300000) [ 113.431382][ T6165] journal_seq=1 [ 113.431396][ T6165] hash_seed=28e4f092a4fc58ee [pid 6183] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6162] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6162] ioctl(3, LOOP_CLR_FD) = 0 [ 113.431412][ T6165] hash_type=siphash [ 113.431427][ T6165] bi_size=0 [ 113.431441][ T6165] bi_sectors=0 [ 113.431455][ T6165] bi_version=0 [ 113.431470][ T6165] bi_atime=200535484 [ 113.431485][ T6165] bi_ctime=200535484 [ 113.431500][ T6165] bi_mtime=200535484 [ 113.431520][ T6165] bi_otime=200535484 [ 113.431535][ T6165] bi_uid=0 [ 113.431549][ T6165] bi_gid=0 [ 113.431563][ T6165] bi_nlink=1 [ 113.431577][ T6165] bi_generation=0 [ 113.431591][ T6165] bi_dev=0 [ 113.431605][ T6165] bi_data_checksum=0 [ 113.431620][ T6165] bi_compression=0 [ 113.431635][ T6165] bi_project=0 [ 113.431649][ T6165] bi_background_compression=0 [ 113.431665][ T6165] bi_data_replicas=0 [ 113.431680][ T6165] bi_promote_target=0 [ 113.431695][ T6165] bi_foreground_target=0 [ 113.431711][ T6165] bi_background_target=0 [ 113.431726][ T6165] bi_erasure_code=0 [ 113.431741][ T6165] bi_fields_set=0 [ 113.431755][ T6165] bi_dir=0 [ 113.431769][ T6165] bi_dir_offset=0 [ 113.431783][ T6165] bi_subvol=1 [ 113.431798][ T6165] bi_parent_subvol=0 [ 113.431812][ T6165] bi_nocow=0 [ 113.431826][ T6165] bi_depth=0 [ 113.431840][ T6165] bi_inodes_32bit=0 [ 113.431855][ T6165] nonzero k.p.inode: delete?, fixing [ 113.459525][ T6181] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 113.460460][ T6183] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 113.460545][ T6183] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 113.463809][ T6162] bcachefs: bch2_fs_get_tree() error: EINVAL [ 113.467081][ T6165] bcachefs (loop1): btree_node_read_work: rewriting btree node at due to error [ 113.467081][ T6165] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [pid 6162] close(3 [pid 6183] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6181] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 113.718333][ T6181] bcachefs: bch2_fs_get_tree() error: EINVAL [ 113.741991][ T6183] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6181] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6183] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6181] <... openat resumed>) = 3 [pid 6162] <... close resumed>) = 0 [pid 6183] <... openat resumed>) = 3 [pid 5836] <... umount2 resumed>) = 0 [pid 6181] ioctl(3, LOOP_CLR_FD [pid 6183] ioctl(3, LOOP_CLR_FD [pid 5836] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./3/file0") = 0 [pid 5836] getdents64(3, [pid 6183] <... ioctl resumed>) = 0 [pid 5836] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./3") = 0 [pid 5836] mkdir("./4", 0777 [pid 6183] close(3 [pid 5836] <... mkdir resumed>) = 0 [pid 6162] exit_group(0 [pid 5836] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6209 [pid 6181] <... ioctl resumed>) = 0 [pid 6181] close(3 [pid 6162] <... exit_group resumed>) = ? [pid 6162] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6162, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=35 /* 0.35 s */} --- ./strace-static-x86_64: Process 6209 attached [pid 5831] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5831] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./8/binderfs") = 0 [pid 5831] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6209] set_robust_list(0x555592c38660, 24) = 0 [pid 6209] chdir("./4" [pid 5831] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./8/file0") = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 6209] <... chdir resumed>) = 0 [pid 5831] rmdir("./8" [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5831] mkdir("./9", 0777executing program [pid 6209] setpgid(0, 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6209] <... setpgid resumed>) = 0 [pid 6154] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6209] <... openat resumed>) = 3 [pid 6154] <... openat resumed>) = 3 [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6209] write(3, "1000", 4 [pid 6154] ioctl(3, LOOP_CLR_FD [pid 6209] <... write resumed>) = 4 [pid 6209] close(3 [pid 5831] close(3 [pid 6154] <... ioctl resumed>) = 0 [pid 6209] <... close resumed>) = 0 [pid 6154] close(3 [pid 6209] symlink("/dev/binderfs", "./binderfs" [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6209] <... symlink resumed>) = 0 [pid 6209] write(1, "executing program\n", 18 [pid 5831] <... clone resumed>, child_tidptr=0x555592c38650) = 6210 [pid 6209] <... write resumed>) = 18 ./strace-static-x86_64: Process 6210 attached [pid 6209] memfd_create("syzkaller", 0 [pid 6210] set_robust_list(0x555592c38660, 24 [pid 6209] <... memfd_create resumed>) = 3 [pid 6210] <... set_robust_list resumed>) = 0 [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6210] chdir("./9" [pid 6209] <... mmap resumed>) = 0x7f8019600000 [pid 6210] <... chdir resumed>) = 0 [pid 6210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6210] setpgid(0, 0) = 0 [pid 6210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6210] write(3, "1000", 4) = 4 [pid 6210] close(3executing program ) = 0 [pid 6210] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6210] write(1, "executing program\n", 18) = 18 [pid 6210] memfd_create("syzkaller", 0) = 3 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 113.829976][ T6154] bcachefs: bch2_fs_get_tree() error: EINVAL [ 113.867298][ T6165] bcachefs (loop1): error validating btree node on loop1 at btree freespace level 0/0 [ 113.867326][ T6165] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 113.867356][ T6165] node offset 0/32 bset u64s 0: checksum error, type none: got should be , fixing [ 114.011905][ T6165] bcachefs (loop1): btree_node_read_work: rewriting btree node at due to error [ 114.011905][ T6165] btree=freespace level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 114.086682][ T6165] bcachefs (loop1): accounting_read... done [ 114.101309][ T6165] bcachefs (loop1): alloc_read... done [ 114.106832][ T6165] bcachefs (loop1): stripes_read... done [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6183] <... close resumed>) = 0 [pid 6181] <... close resumed>) = 0 [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6183] exit_group(0 [pid 6154] <... close resumed>) = 0 [pid 6183] <... exit_group resumed>) = ? [pid 6183] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6183, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=35 /* 0.35 s */} --- [pid 6154] exit_group(0) = ? [pid 6154] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6154, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5835] restart_syscall(<... resuming interrupted clone ...> [pid 6181] exit_group(0) = ? [pid 6181] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6181, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5835] <... restart_syscall resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5835] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5834] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5834] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... openat resumed>) = 3 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(3, "", [pid 5833] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] getdents64(3, [pid 5833] <... openat resumed>) = 3 [pid 5835] unlink("./4/binderfs" [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5835] <... unlink resumed>) = 0 [pid 5834] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(3, "", [pid 5835] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] newfstatat(AT_FDCWD, "./4/file0", [pid 5834] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./8/binderfs" [pid 5833] getdents64(3, [pid 5835] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... unlink resumed>) = 0 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5835] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... openat resumed>) = 4 [pid 5834] newfstatat(AT_FDCWD, "./8/file0", [pid 5833] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] newfstatat(4, "", [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] getdents64(4, [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5835] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5834] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] getdents64(4, [pid 5834] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5835] close(4 [pid 5834] newfstatat(4, "", [pid 5835] <... close resumed>) = 0 [pid 5833] unlink("./8/binderfs" [pid 5835] rmdir("./4/file0" [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] <... rmdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5835] getdents64(3, [pid 5834] getdents64(4, [pid 5833] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5835] close(3 [pid 5834] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... close resumed>) = 0 [pid 5834] getdents64(4, [pid 5833] newfstatat(AT_FDCWD, "./8/file0", [pid 5835] rmdir("./4" [pid 5834] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5835] <... rmdir resumed>) = 0 [pid 5834] close(4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] mkdir("./5", 0777 [pid 5834] <... close resumed>) = 0 [pid 5835] <... mkdir resumed>) = 0 executing program executing program [pid 5834] rmdir("./8/file0" [pid 5833] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5834] <... rmdir resumed>) = 0 [pid 5835] <... openat resumed>) = 3 [pid 5834] getdents64(3, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] ioctl(3, LOOP_CLR_FD [pid 5834] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5834] close(3 [pid 5835] close(3 [pid 5834] <... close resumed>) = 0 [pid 5835] <... close resumed>) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] rmdir("./8"./strace-static-x86_64: Process 6212 attached [pid 6212] set_robust_list(0x555592c38660, 24 [pid 5835] <... clone resumed>, child_tidptr=0x555592c38650) = 6212 [pid 5834] <... rmdir resumed>) = 0 [pid 6212] <... set_robust_list resumed>) = 0 [pid 6212] chdir("./5" [pid 5834] mkdir("./9", 0777 [pid 6212] <... chdir resumed>) = 0 [pid 5834] <... mkdir resumed>) = 0 [pid 6212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6212] <... prctl resumed>) = 0 [pid 6212] setpgid(0, 0) = 0 [pid 5834] <... openat resumed>) = 3 [pid 6212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5834] ioctl(3, LOOP_CLR_FD [pid 6212] <... openat resumed>) = 3 [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6212] write(3, "1000", 4 [pid 5834] close(3 [pid 6212] <... write resumed>) = 4 [pid 5834] <... close resumed>) = 0 [pid 6212] close(3 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6213 attached [pid 6212] <... close resumed>) = 0 [pid 6212] symlink("/dev/binderfs", "./binderfs" [pid 5834] <... clone resumed>, child_tidptr=0x555592c38650) = 6213 [pid 6212] <... symlink resumed>) = 0 [pid 6212] write(1, "executing program\n", 18 [pid 6213] set_robust_list(0x555592c38660, 24 [pid 6212] <... write resumed>) = 18 [pid 6213] <... set_robust_list resumed>) = 0 [pid 6212] memfd_create("syzkaller", 0 [pid 5833] <... openat resumed>) = 4 [pid 6213] chdir("./9" [pid 6212] <... memfd_create resumed>) = 3 [pid 6213] <... chdir resumed>) = 0 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6212] <... mmap resumed>) = 0x7f8019600000 [pid 6213] <... prctl resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 6213] setpgid(0, 0) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6213] write(3, "1000", 4) = 4 [pid 6213] close(3) = 0 [pid 6213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6213] write(1, "executing program\n", 18 [pid 5833] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 6213] <... write resumed>) = 18 [pid 6213] memfd_create("syzkaller", 0) = 3 [pid 6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5833] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./8/file0") = 0 [pid 5833] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./8") = 0 [ 114.140526][ T6165] bcachefs (loop1): snapshots_read... done [ 114.149102][ T6165] bcachefs (loop1): check_allocations... [ 114.156784][ T6165] btree ptr not marked in member info btree allocated bitmap [pid 5833] mkdir("./9", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6214 attached , child_tidptr=0x555592c38650) = 6214 [ 114.156809][ T6165] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [pid 6214] set_robust_list(0x555592c38660, 24) = 0 [pid 6214] chdir("./9") = 0 [pid 6214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 114.273469][ T6165] btree ptr not marked in member info btree allocated bitmap [ 114.273494][ T6165] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 114.312531][ T6165] btree ptr not marked in member info btree allocated bitmap [pid 6214] setpgid(0, 0) = 0 [pid 6214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 114.312554][ T6165] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 114.353001][ T6165] btree ptr not marked in member info btree allocated bitmap [pid 6214] write(3, "1000", 4) = 4 [pid 6214] close(3) = 0 [pid 6214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6214] write(1, "executing program\n", 18executing program ) = 18 [ 114.353025][ T6165] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [pid 6214] memfd_create("syzkaller", 0) = 3 [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 114.404770][ T6165] btree ptr not marked in member info btree allocated bitmap [ 114.404794][ T6165] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [pid 6213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6210] <... write resumed>) = 16777216 [pid 6210] munmap(0x7f8019600000, 138412032 [pid 6209] <... write resumed>) = 16777216 [pid 6209] munmap(0x7f8019600000, 138412032 [pid 6210] <... munmap resumed>) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 114.457075][ T6165] btree ptr not marked in member info btree allocated bitmap [ 114.457099][ T6165] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [pid 6210] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6210] close(3) = 0 [pid 6210] close(4) = 0 [ 114.517036][ T6210] loop0: detected capacity change from 0 to 32768 [ 114.530371][ T6165] done [ 114.552716][ T6209] loop5: detected capacity change from 0 to 32768 [pid 6210] mkdir("./file0", 0777) = 0 [pid 6209] <... munmap resumed>) = 0 [pid 6209] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6210] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6209] <... openat resumed>) = 4 [pid 6209] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6209] close(3) = 0 [pid 6209] close(4) = 0 [pid 6209] mkdir("./file0", 0777) = 0 [ 114.555625][ T6210] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 114.572558][ T6165] bcachefs (loop1): going read-write [ 114.591623][ T6209] bcachefs (/dev/loop5): error reading default superblock: checksum error, type none: got should be [pid 6209] mount("/dev/loop5", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [ 114.591860][ T6165] bcachefs (loop1): journal_replay... done [ 114.705855][ T6165] bcachefs (loop1): check_extents_to_backpointers... [ 114.707937][ T6165] bcachefs (loop1): scanning for missing backpointers in 4/128 buckets [ 114.726979][ T6165] done [ 114.743755][ T6165] bcachefs (loop1): check_inodes... [ 114.744784][ T6165] inode points to missing dirent [ 114.744804][ T6165] inum: 536870912:4294967295 [ 114.744821][ T6165] mode=100755 [pid 6214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6213] <... write resumed>) = 16777216 [pid 6212] <... write resumed>) = 16777216 [pid 6213] munmap(0x7f8019600000, 138412032 [pid 6212] munmap(0x7f8019600000, 138412032 [pid 6213] <... munmap resumed>) = 0 [pid 6213] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6212] <... munmap resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6213] ioctl(4, LOOP_SET_FD, 3 [pid 6212] ioctl(4, LOOP_SET_FD, 3 [pid 6213] <... ioctl resumed>) = 0 [pid 6212] <... ioctl resumed>) = 0 [pid 6213] close(3 [pid 6212] close(3 [pid 6213] <... close resumed>) = 0 [pid 6212] <... close resumed>) = 0 [pid 6213] close(4 [pid 6212] close(4 [pid 6213] <... close resumed>) = 0 [pid 6212] <... close resumed>) = 0 [pid 6213] mkdir("./file0", 0777 [pid 6212] mkdir("./file0", 0777 [pid 6213] <... mkdir resumed>) = 0 [pid 6212] <... mkdir resumed>) = 0 [pid 6213] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [ 114.744835][ T6165] flags=(15300000) [ 114.744850][ T6165] journal_seq=4 [ 114.744865][ T6165] hash_seed=8469d717004af4ef [ 114.744881][ T6165] hash_type=siphash [ 114.744896][ T6165] bi_size=10 [pid 6212] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6210] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6210] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6210] ioctl(3, LOOP_CLR_FD) = 0 [ 114.744910][ T6165] bi_sectors=8 [ 114.744924][ T6165] bi_version=0 [ 114.744938][ T6165] bi_atime=2780562352 [ 114.744953][ T6165] bi_ctime=2780562352 [ 114.744968][ T6165] bi_mtime=2780562352 [ 114.744983][ T6165] bi_otime=2780562352 [pid 6210] close(3 [pid 6209] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6209] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [ 114.744998][ T6165] bi_uid=0 [ 114.745012][ T6165] bi_gid=0 [ 114.745026][ T6165] bi_nlink=0 [ 114.745040][ T6165] bi_generation=0 [ 114.745054][ T6165] bi_dev=0 [ 114.745068][ T6165] bi_data_checksum=0 [pid 6209] ioctl(3, LOOP_CLR_FD) = 0 [pid 6209] close(3 [pid 6214] <... write resumed>) = 16777216 [ 114.745083][ T6165] bi_compression=0 [pid 6214] munmap(0x7f8019600000, 138412032) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6214] close(3) = 0 [pid 6214] close(4) = 0 [pid 6214] mkdir("./file0", 0777) = 0 [ 114.745098][ T6165] bi_project=0 [ 114.745113][ T6165] bi_background_compression=0 [ 114.745129][ T6165] bi_data_replicas=0 [ 114.745144][ T6165] bi_promote_target=0 [pid 6214] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6210] <... close resumed>) = 0 [pid 6210] exit_group(0) = ? [pid 6210] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6210, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=37 /* 0.37 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5831] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./9/binderfs") = 0 [pid 5831] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./9/file0") = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [ 114.745159][ T6165] bi_foreground_target=0 [pid 5831] rmdir("./9") = 0 [pid 5831] mkdir("./10", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6250 ./strace-static-x86_64: Process 6250 attached [pid 6250] set_robust_list(0x555592c38660, 24) = 0 [pid 6250] chdir("./10") = 0 [pid 6250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6250] setpgid(0, 0) = 0 [pid 6250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6250] write(3, "1000", 4 [pid 6213] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6250] <... write resumed>) = 4 [pid 6250] close(3) = 0 [pid 6250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6213] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6213] ioctl(3, LOOP_CLR_FD) = 0 [ 114.745175][ T6165] bi_background_target=0 [ 114.745190][ T6165] bi_erasure_code=0 [ 114.745205][ T6165] bi_fields_set=0 [ 114.745220][ T6165] bi_dir=4096 [pid 6213] close(3executing program [pid 6250] write(1, "executing program\n", 18) = 18 [pid 6250] memfd_create("syzkaller", 0) = 3 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 114.745234][ T6165] bi_dir_offset=4330382808765833931 [ 114.745257][ T6165] bi_subvol=0 [ 114.745271][ T6165] bi_parent_subvol=0 [pid 6209] <... close resumed>) = 0 [pid 6209] exit_group(0) = ? [pid 6212] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6209] +++ exited with 0 +++ [pid 6212] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=34 /* 0.34 s */} --- [pid 6212] <... openat resumed>) = 3 [pid 6212] ioctl(3, LOOP_CLR_FD) = 0 [pid 5836] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6212] close(3 [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", [pid 6214] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5836] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5836] getdents64(3, [pid 6214] <... openat resumed>) = 3 [pid 5836] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5836] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./4/binderfs", [pid 6214] ioctl(3, LOOP_CLR_FD [pid 5836] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6214] <... ioctl resumed>) = 0 [ 114.745286][ T6165] bi_nocow=0 [ 114.745300][ T6165] bi_depth=0 [ 114.745315][ T6165] bi_inodes_32bit=0, fixing [pid 5836] unlink("./4/binderfs" [pid 6214] close(3 [pid 5836] <... unlink resumed>) = 0 [pid 5836] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./4/file0") = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./4") = 0 [pid 5836] mkdir("./5", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6251 attached , child_tidptr=0x555592c38650) = 6251 [pid 6251] set_robust_list(0x555592c38660, 24) = 0 [pid 6251] chdir("./5") = 0 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6251] setpgid(0, 0) = 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6251] write(3, "1000", 4) = 4 [pid 6251] close(3) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6251] write(1, "executing program\n", 18) = 18 [pid 6251] memfd_create("syzkaller", 0) = 3 [pid 6251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 114.764274][ T6210] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 114.764341][ T6210] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 114.766629][ T6209] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 6250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6213] <... close resumed>) = 0 [ 114.766692][ T6209] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 114.864164][ T6212] loop4: detected capacity change from 0 to 32768 [pid 6213] exit_group(0) = ? [ 114.864364][ T6213] loop3: detected capacity change from 0 to 32768 [ 114.867492][ T6212] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [pid 6213] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6213, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 6212] <... close resumed>) = 0 [pid 6214] <... close resumed>) = 0 [pid 6212] exit_group(0) = ? [pid 6212] +++ exited with 0 +++ [pid 6214] exit_group(0) = ? [pid 6214] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6212, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6214, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5834] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5834] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./9/binderfs") = 0 [pid 5834] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5834] close(4) = 0 [pid 5834] rmdir("./9/file0") = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [ 114.868425][ T6213] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [ 114.886422][ T6210] bcachefs: bch2_fs_get_tree() error: EINVAL [ 115.036726][ T6213] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 5834] close(3) = 0 [pid 5834] rmdir("./9") = 0 [pid 5834] mkdir("./10", 0777) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5834] close(3) = 0 [pid 5835] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] newfstatat(3, "", [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 6252 attached [pid 5835] getdents64(3, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6252] set_robust_list(0x555592c38660, 24) = 0 [pid 6252] chdir("./10") = 0 [pid 6252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6252] setpgid(0, 0) = 0 [pid 6252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6252] write(3, "1000", 4 [pid 5835] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5834] <... clone resumed>, child_tidptr=0x555592c38650) = 6252 [pid 5833] getdents64(3, [pid 6252] <... write resumed>) = 4 [pid 5835] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 6252] close(3 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6252] <... close resumed>) = 0 [pid 6252] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6252] write(1, "executing program\n", 18) = 18 [pid 6252] memfd_create("syzkaller", 0) = 3 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 5835] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 115.036794][ T6213] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 115.042545][ T6209] bcachefs: bch2_fs_get_tree() error: EINVAL [ 115.046361][ T6212] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 115.046421][ T6212] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 115.116055][ T6214] loop2: detected capacity change from 0 to 32768 [pid 5833] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./5/binderfs") = 0 [pid 5835] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] unlink("./9/binderfs") = 0 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] newfstatat(AT_FDCWD, "./5/file0", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] newfstatat(AT_FDCWD, "./9/file0", [pid 5835] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] newfstatat(4, "", [pid 5833] <... openat resumed>) = 4 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] newfstatat(4, "", [pid 5835] getdents64(4, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5835] getdents64(4, [pid 5833] <... getdents64 resumed>0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5835] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(4, [pid 5835] close(4 [pid 5833] <... getdents64 resumed>0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5835] <... close resumed>) = 0 [pid 5833] close(4 [pid 5835] rmdir("./5/file0" [pid 5833] <... close resumed>) = 0 [pid 5835] <... rmdir resumed>) = 0 [pid 5833] rmdir("./9/file0" [pid 5835] getdents64(3, [pid 5833] <... rmdir resumed>) = 0 [pid 5835] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(3, [pid 5835] close(3 [pid 5833] <... getdents64 resumed>0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5835] <... close resumed>) = 0 [pid 5833] close(3 [pid 5835] rmdir("./5" [pid 5833] <... close resumed>) = 0 [pid 5835] <... rmdir resumed>) = 0 [pid 5833] rmdir("./9" [pid 5835] mkdir("./6", 0777 [pid 5833] <... rmdir resumed>) = 0 [pid 5835] <... mkdir resumed>) = 0 [pid 5833] mkdir("./10", 0777 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5833] <... mkdir resumed>) = 0 [pid 5835] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5835] ioctl(3, LOOP_CLR_FD [pid 5833] <... openat resumed>) = 3 [pid 5835] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] ioctl(3, LOOP_CLR_FD [ 115.122130][ T6214] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [ 115.207714][ T6214] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 115.207782][ T6214] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 115.232835][ T6213] bcachefs: bch2_fs_get_tree() error: EINVAL [ 115.332240][ T6212] bcachefs: bch2_fs_get_tree() error: EINVAL [ 115.352993][ T6214] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5835] close(3 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5835] <... close resumed>) = 0 [pid 5833] close(3 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... close resumed>) = 0 ./strace-static-x86_64: Process 6253 attached [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6253] set_robust_list(0x555592c38660, 24 [pid 5835] <... clone resumed>, child_tidptr=0x555592c38650) = 6253 [pid 6253] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555592c38650) = 6254 [pid 6253] chdir("./6") = 0 [pid 6253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6253] setpgid(0, 0) = 0 [pid 6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6253] write(3, "1000", 4) = 4 [pid 6253] close(3) = 0 [ 115.763647][ T6165] done [pid 6253] symlink("/dev/binderfs", "./binderfs"executing program ./strace-static-x86_64: Process 6254 attached ) = 0 [pid 6253] write(1, "executing program\n", 18) = 18 [pid 6253] memfd_create("syzkaller", 0) = 3 [pid 6253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 6254] set_robust_list(0x555592c38660, 24) = 0 [pid 6254] chdir("./10") = 0 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6254] setpgid(0, 0) = 0 [ 115.783433][ T6165] bcachefs (loop1): check_extents... done [ 115.803360][ T6165] bcachefs (loop1): check_dirents... [ 115.804622][ T6165] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6254] write(3, "1000", 4) = 4 [pid 6254] close(3) = 0 [pid 6254] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6254] write(1, "executing program\n", 18) = 18 [pid 6254] memfd_create("syzkaller", 0) = 3 [pid 6254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 115.804652][ T6165] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 115.877003][ T6165] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 6250] <... write resumed>) = 16777216 [pid 6250] munmap(0x7f8019600000, 138412032 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6250] <... munmap resumed>) = 0 [pid 6250] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6250] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6250] close(3) = 0 [pid 6250] close(4) = 0 [pid 6250] mkdir("./file0", 0777) = 0 [ 115.877034][ T6165] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 115.941879][ T6250] loop0: detected capacity change from 0 to 32768 [ 115.979330][ T6250] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [pid 6250] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6251] <... write resumed>) = 16777216 [pid 6253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 116.013319][ T6165] hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 4330382808765833931 [pid 6251] munmap(0x7f8019600000, 138412032) = 0 [pid 6254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6251] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6251] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6251] close(3) = 0 [ 116.013350][ T6165] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 116.059802][ T6250] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 6251] close(4) = 0 [pid 6251] mkdir("./file0", 0777) = 0 [ 116.059874][ T6250] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 6251] mount("/dev/loop5", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6252] <... write resumed>) = 16777216 [ 116.131959][ T6251] loop5: detected capacity change from 0 to 32768 [ 116.182864][ T6251] bcachefs (/dev/loop5): error reading default superblock: checksum error, type none: got should be [pid 6252] munmap(0x7f8019600000, 138412032) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6252] close(3) = 0 [pid 6252] close(4) = 0 [pid 6252] mkdir("./file0", 0777) = 0 [pid 6252] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6250] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6250] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6250] ioctl(3, LOOP_CLR_FD) = 0 [ 116.228441][ T6165] dirent points to inode that does not point back: [ 116.228465][ T6165] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg [ 116.228490][ T6165] inum: 536870912:4294967295 [pid 6250] close(3 [pid 6254] <... write resumed>) = 16777216 [ 116.228511][ T6165] mode=100755 [ 116.228526][ T6165] flags=(15300000) [pid 6254] munmap(0x7f8019600000, 138412032) = 0 [pid 6254] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6254] close(3) = 0 [pid 6254] close(4) = 0 [pid 6254] mkdir("./file0", 0777) = 0 [ 116.228541][ T6165] journal_seq=18 [ 116.228556][ T6165] hash_seed=8469d717004af4ef [ 116.228572][ T6165] hash_type=siphash [ 116.228587][ T6165] bi_size=10 [ 116.228601][ T6165] bi_sectors=8 [ 116.228616][ T6165] bi_version=0 [ 116.228630][ T6165] bi_atime=2780562352 [ 116.228646][ T6165] bi_ctime=2780562352 [ 116.228662][ T6165] bi_mtime=2780562352 [ 116.228677][ T6165] bi_otime=2780562352 [ 116.228693][ T6165] bi_uid=0 [ 116.228707][ T6165] bi_gid=0 [ 116.228721][ T6165] bi_nlink=0 [ 116.228735][ T6165] bi_generation=0 [ 116.228750][ T6165] bi_dev=0 [ 116.228764][ T6165] bi_data_checksum=0 [ 116.228779][ T6165] bi_compression=0 [ 116.228794][ T6165] bi_project=0 [ 116.228809][ T6165] bi_background_compression=0 [ 116.228825][ T6165] bi_data_replicas=0 [ 116.228840][ T6165] bi_promote_target=0 [ 116.228856][ T6165] bi_foreground_target=0 [ 116.228872][ T6165] bi_background_target=0 [ 116.228887][ T6165] bi_erasure_code=0 [ 116.228903][ T6165] bi_fields_set=0 [ 116.228918][ T6165] bi_dir=0 [ 116.228932][ T6165] bi_dir_offset=4330382808765833931 [ 116.228949][ T6165] bi_subvol=0 [ 116.228963][ T6165] bi_parent_subvol=0 [ 116.228979][ T6165] bi_nocow=0 [ 116.228993][ T6165] bi_depth=0 [ 116.229007][ T6165] bi_inodes_32bit=0, fixing [ 116.252742][ T6252] loop3: detected capacity change from 0 to 32768 [ 116.264511][ T6250] bcachefs: bch2_fs_get_tree() error: EINVAL [ 116.265097][ T6252] bcachefs (/dev/loop3): error reading default superblock: checksum error, type none: got should be [pid 6254] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 6253] <... write resumed>) = 16777216 [pid 6253] munmap(0x7f8019600000, 138412032) = 0 [pid 6253] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6253] ioctl(4, LOOP_SET_FD, 3 [pid 6250] <... close resumed>) = 0 [pid 6250] exit_group(0) = ? [pid 6250] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6250, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=37 /* 0.37 s */} --- [ 116.318833][ T6251] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 116.318902][ T6251] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 116.381002][ T6254] loop2: detected capacity change from 0 to 32768 [ 116.413314][ T6252] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 116.413382][ T6252] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 116.421701][ T6254] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6253] <... ioctl resumed>) = 0 [pid 6252] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6251] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... restart_syscall resumed>) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6251] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6252] <... openat resumed>) = 3 [pid 6251] <... openat resumed>) = 3 [pid 6252] ioctl(3, LOOP_CLR_FD [pid 6251] ioctl(3, LOOP_CLR_FD [pid 6253] close(3 [pid 6252] <... ioctl resumed>) = 0 [pid 6252] close(3 [pid 6251] <... ioctl resumed>) = 0 [pid 5831] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6253] <... close resumed>) = 0 [pid 6251] close(3 [pid 6253] close(4 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6253] <... close resumed>) = 0 [pid 6253] mkdir("./file0", 0777 [pid 5831] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6253] <... mkdir resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [ 116.587409][ T6253] loop4: detected capacity change from 0 to 32768 [ 116.617400][ T6252] bcachefs: bch2_fs_get_tree() error: EINVAL [ 116.619243][ T6251] bcachefs: bch2_fs_get_tree() error: EINVAL [ 116.630061][ T6165] inode 536870912:4294967295 has wrong backpointer: [ 116.630082][ T6165] got 0:4330382808765833931 [ 116.630099][ T6165] should be 4096:4330382808765833931, fixing [pid 6253] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_STRICTATIME, "\x65\x72\x72\x6f\x72\x73\x3d\x63\x6f\x6e\x74\x69\x6e\x75\x65\x2c\x65\x72\x72\x6f\x72\x5f\x73\x61\x66\x65\x2c\x6a\x6f\x75\x72\x6e\x61\x6c\x5f\x74\x72\x61\x6e\x73\x61\x63\x74\x69\x6f\x6e\x5f\x6e\x61\x6d\x65\x73\x6f\x6e\x5f\x75\x70\x67\x72\x61\x64\x65\x3d\x6e\x6f\x6e\x65\x2c\x73\x6d\x61\x63\x6b\x66\x73\x68\x61\x74\x3d\x2a\x2c\x6f\x62\x6a\x5f\x74\x79\x70\x65\x3d\x28\xaa\x29" [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./10/binderfs") = 0 [pid 5831] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./10/file0") = 0 [pid 5831] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [ 116.655686][ T6253] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 116.667529][ T6165] dirent points to inode that does not point back: [ 116.667551][ T6165] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg [ 116.667575][ T6165] inum: 536870912:4294967295 [ 116.667591][ T6165] mode=100755 [pid 5831] rmdir("./10") = 0 [pid 5831] mkdir("./11", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6283 attached [pid 6283] set_robust_list(0x555592c38660, 24) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555592c38650) = 6283 [pid 6283] chdir("./11") = 0 [pid 6283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6283] setpgid(0, 0) = 0 [pid 6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6283] write(3, "1000", 4) = 4 [ 116.667605][ T6165] flags=(15300000) [ 116.667620][ T6165] journal_seq=18 [ 116.667634][ T6165] hash_seed=8469d717004af4ef [ 116.667650][ T6165] hash_type=siphash [ 116.667666][ T6165] bi_size=10 [ 116.667680][ T6165] bi_sectors=8 [ 116.667694][ T6165] bi_version=0 [pid 6283] close(3) = 0 [pid 6283] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6283] write(1, "executing program\n", 18) = 18 [pid 6283] memfd_create("syzkaller", 0) = 3 [pid 6283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 116.667709][ T6165] bi_atime=2780562352 [ 116.667724][ T6165] bi_ctime=2780562352 [ 116.667739][ T6165] bi_mtime=2780562352 [ 116.667754][ T6165] bi_otime=2780562352 [ 116.667769][ T6165] bi_uid=0 [ 116.667783][ T6165] bi_gid=0 [ 116.667797][ T6165] bi_nlink=0 [pid 6252] <... close resumed>) = 0 [pid 6252] exit_group(0) = ? [pid 6252] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6252, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5834] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5834] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 116.667811][ T6165] bi_generation=0 [ 116.667826][ T6165] bi_dev=0 [ 116.667840][ T6165] bi_data_checksum=0 [ 116.667855][ T6165] bi_compression=0 [ 116.667870][ T6165] bi_project=0 [ 116.667884][ T6165] bi_background_compression=0 [ 116.667901][ T6165] bi_data_replicas=0 [ 116.667916][ T6165] bi_promote_target=0 [ 116.667931][ T6165] bi_foreground_target=0 [ 116.667946][ T6165] bi_background_target=0 [ 116.667962][ T6165] bi_erasure_code=0 [ 116.667976][ T6165] bi_fields_set=0 [ 116.667991][ T6165] bi_dir=0 [ 116.668005][ T6165] bi_dir_offset=4330382808765833931 [ 116.668021][ T6165] bi_subvol=0 [ 116.668035][ T6165] bi_parent_subvol=0 [ 116.668050][ T6165] bi_nocow=0 [pid 5834] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5834] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./10/binderfs") = 0 [pid 5834] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5834] close(4) = 0 [pid 5834] rmdir("./10/file0") = 0 [pid 5834] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5834] close(3) = 0 [pid 5834] rmdir("./10") = 0 [pid 5834] mkdir("./11", 0777) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5834] close(3) = 0 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6291 [pid 5832] kill(-6165, SIGKILL) = 0 [pid 5832] kill(6165, SIGKILL) = 0 ./strace-static-x86_64: Process 6291 attached [ 116.668064][ T6165] bi_depth=0 [ 116.668078][ T6165] bi_inodes_32bit=0, fixing [ 116.724451][ T6254] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 116.724526][ T6254] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 116.863772][ T6253] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 116.956600][ T6165] inode 536870912:4294967295 has wrong backpointer: [pid 6291] set_robust_list(0x555592c38660, 24) = 0 [pid 6291] chdir("./11") = 0 [pid 6291] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6291] setpgid(0, 0) = 0 [pid 6283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 116.956625][ T6165] got 0:4330382808765833931 [ 116.956642][ T6165] should be 4096:4330382808765833931, fixing [pid 6291] write(3, "1000", 4) = 4 [pid 6291] close(3) = 0 [pid 6291] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6251] <... close resumed>) = 0 [pid 6291] write(1, "executing program\n", 18executing program ) = 18 [pid 6291] memfd_create("syzkaller", 0) = 3 [pid 6254] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [pid 6251] exit_group(0) = ? [pid 6251] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...> [pid 6254] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6254] ioctl(3, LOOP_CLR_FD) = 0 [pid 6254] close(3 [pid 5836] <... restart_syscall resumed>) = 0 [pid 5836] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 4 entries */, 32768) = 112 [pid 5836] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./5/binderfs") = 0 [pid 5836] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x555592c41730 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x555592c41730 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [ 117.020525][ T6253] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 5836] rmdir("./5/file0") = 0 [pid 5836] getdents64(3, 0x555592c396f0 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./5") = 0 [pid 5836] mkdir("./6", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555592c38650) = 6292 ./strace-static-x86_64: Process 6292 attached [pid 6292] set_robust_list(0x555592c38660, 24) = 0 [pid 6292] chdir("./6") = 0 [pid 6292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 117.048406][ T6254] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6292] setpgid(0, 0) = 0 [pid 6292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 117.122086][ T6165] hash table key at wrong offset: btree dirents inode 4096 offset 8130059955150870709, hashed to 6728544935518790663 [pid 6292] write(3, "1000", 4) = 4 [pid 6292] close(3) = 0 [pid 6292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6292] write(1, "executing program\n", 18executing program ) = 18 [pid 6292] memfd_create("syzkaller", 0) = 3 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8019600000 [ 117.122118][ T6165] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 117.198465][ T6165] bcachefs (loop1): fsck counted subdirectories wrong for inum 4096:4294967295: got 1 should be 2 [ 117.234103][ T6165] directory 4096:4294967295 with wrong i_size: got 0, should be 288, fixing [pid 6291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6253] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6253] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6283] <... write resumed>) = 16777216 [pid 6253] <... openat resumed>) = 3 [pid 6253] ioctl(3, LOOP_CLR_FD) = 0 [ 117.261995][ T6165] done [ 117.272784][ T6165] bcachefs (loop1): resume_logged_ops... done [ 117.279673][ T6253] bcachefs: bch2_fs_get_tree() error: EINVAL [ 117.289459][ T6165] bcachefs (loop1): delete_dead_inodes... done [pid 6253] close(3 [pid 6283] munmap(0x7f8019600000, 138412032) = 0 [pid 6283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4