./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor334404532
<...>
Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts.
execve("./syz-executor334404532", ["./syz-executor334404532"], 0x7fffaf0d24f0 /* 10 vars */) = 0
brk(NULL) = 0x55557822d000
brk(0x55557822dd00) = 0x55557822dd00
arch_prctl(ARCH_SET_FS, 0x55557822d380) = 0
set_tid_address(0x55557822d650) = 5081
set_robust_list(0x55557822d660, 24) = 0
rseq(0x55557822dca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor334404532", 4096) = 27
getrandom("\x2c\xf1\x83\x66\x84\x96\x8d\xcf", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55557822dd00
brk(0x55557824ed00) = 0x55557824ed00
brk(0x55557824f000) = 0x55557824f000
mprotect(0x7fa2d3b61000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getrandom("\x13\x74\xa9\xd2\x92\x27\xd3\x2f", 8, GRND_NONBLOCK) = 8
mkdir("./syzkaller.nV9Ict", 0700) = 0
chmod("./syzkaller.nV9Ict", 0777) = 0
chdir("./syzkaller.nV9Ict") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5082 attached
, child_tidptr=0x55557822d650) = 5082
[pid 5082] set_robust_list(0x55557822d660, 24) = 0
[pid 5082] chdir("./0") = 0
[pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5082] setpgid(0, 0) = 0
[pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5082] write(3, "1000", 4) = 4
[pid 5082] close(3) = 0
[pid 5082] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5082] write(1, "executing program\n", 18executing program
) = 18
[pid 5082] memfd_create("syzkaller", 0) = 3
[pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2cb600000
[pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5082] munmap(0x7fa2cb600000, 138412032) = 0
[pid 5082] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5082] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5082] close(3) = 0
[pid 5082] close(4) = 0
[pid 5082] mkdir("./file1", 0777) = 0
syzkaller login: [ 81.316411][ T5082] loop0: detected capacity change from 0 to 32768
[ 81.341891][ T5082] bcachefs (/dev/loop0): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81)
[ 81.402248][ T5082] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 81.417872][ T5082] bcachefs (loop0): recovering from clean shutdown, journal seq 13
[pid 5082] mount("/dev/loop0", "./file1", "bcachefs", MS_NOSUID|MS_SYNCHRONOUS|MS_RELATIME, "\xff") = 0
[pid 5082] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 5082] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5082] ioctl(4, LOOP_CLR_FD) = 0
[ 81.444399][ T5082] bcachefs (loop0): alloc_read... done
[ 81.450540][ T5082] bcachefs (loop0): stripes_read... done
[ 81.456399][ T5082] bcachefs (loop0): snapshots_read... done
[ 81.466022][ T5082] bcachefs (loop0): journal_replay... done
[ 81.472179][ T5082] bcachefs (loop0): resume_logged_ops... done
[ 81.478685][ T5082] bcachefs (loop0): going read-write
[ 81.488879][ T5082] bcachefs (loop0): done starting filesystem
[pid 5082] close(4) = 0
[pid 5082] exit_group(0) = ?
[pid 5082] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x55557822e6f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
[ 81.586318][ T5081] bcachefs (loop0): shutting down
[ 81.591595][ T5081] bcachefs (loop0): going read-only
[ 81.597327][ T5081] bcachefs (loop0): finished waiting for writes to stop
[ 81.606817][ T5081] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13
[ 81.616025][ T5081] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13
[ 81.626677][ T5081] ------------[ cut here ]------------
[ 81.632167][ T5081] journal shutdown error: cur seq 13 but last empty seq 14
[ 81.632589][ T5081] WARNING: CPU: 0 PID: 5081 at fs/bcachefs/journal.c:1191 bch2_fs_journal_stop+0x5f3/0x630
[ 81.650176][ T5081] Modules linked in:
[ 81.654118][ T5081] CPU: 0 PID: 5081 Comm: syz-executor334 Not tainted 6.10.0-rc7-syzkaller-00244-g975f3b6da180 #0
[ 81.664774][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 81.674986][ T5081] RIP: 0010:bch2_fs_journal_stop+0x5f3/0x630
[ 81.681166][ T5081] Code: 44 24 18 42 80 3c 20 00 48 8b 5c 24 20 74 08 48 89 df e8 20 a2 c7 fd 48 8b 13 48 c7 c7 a0 34 13 8c 4c 89 f6 e8 8e 51 27 fd 90 <0f> 0b 90 90 e9 e4 fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 7f fc ff
[ 81.701031][ T5081] RSP: 0018:ffffc90003cc7780 EFLAGS: 00010246
[ 81.707364][ T5081] RAX: 9ce99195b516ba00 RBX: ffff8880772caaa0 RCX: ffff88801ab3bc00
[ 81.715445][ T5081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 81.723566][ T5081] RBP: ffffc90003cc78c0 R08: ffffffff815857a2 R09: 1ffff1101728519a
[ 81.731725][ T5081] R10: dffffc0000000000 R11: ffffed101728519b R12: dffffc0000000000
[ 81.739802][ T5081] R13: ffff8880772ca440 R14: 000000000000000d R15: 1ffff1100ee59488
[ 81.747873][ T5081] FS: 000055557822d380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[ 81.757002][ T5081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 81.763599][ T5081] CR2: 00007ffd538a8b68 CR3: 000000002bf54000 CR4: 00000000003506f0
[ 81.771662][ T5081] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 81.779867][ T5081] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 81.788025][ T5081] Call Trace:
[ 81.791351][ T5081]
[ 81.794319][ T5081] ? __warn+0x163/0x4e0
[ 81.798777][ T5081] ? bch2_fs_journal_stop+0x5f3/0x630
[ 81.804330][ T5081] ? report_bug+0x2b3/0x500
[ 81.808950][ T5081] ? bch2_fs_journal_stop+0x5f3/0x630
[ 81.814400][ T5081] ? handle_bug+0x3e/0x70
[ 81.818904][ T5081] ? exc_invalid_op+0x1a/0x50
[ 81.823726][ T5081] ? asm_exc_invalid_op+0x1a/0x20
[ 81.828859][ T5081] ? __warn_printk+0x292/0x360
[ 81.833775][ T5081] ? bch2_fs_journal_stop+0x5f3/0x630
[ 81.839319][ T5081] ? __pfx_bch2_fs_journal_stop+0x10/0x10
[ 81.847468][ T5081] ? __pfx___bch2_print+0x10/0x10
[ 81.853050][ T5081] ? __bch2_btree_flush_all+0x6dc/0x700
[ 81.858725][ T5081] ? __bch2_btree_flush_all+0x6f/0x700
[ 81.864262][ T5081] __bch2_fs_read_only+0x30c/0x430
[ 81.869516][ T5081] bch2_fs_read_only+0xb52/0x1210
[ 81.874640][ T5081] ? __pfx_bch2_fs_read_only+0x10/0x10
[ 81.880316][ T5081] ? __down_write_common+0x162/0x200
[ 81.885713][ T5081] ? __pfx___bch2_print+0x10/0x10
[ 81.890760][ T5081] ? __pfx___down_write_common+0x10/0x10
[ 81.896699][ T5081] ? hook_sb_delete+0xa5e/0xb90
[ 81.901609][ T5081] ? evict+0x577/0x630
[ 81.906224][ T5081] __bch2_fs_stop+0x105/0x540
[ 81.910954][ T5081] ? __pfx_hook_sb_delete+0x10/0x10
[ 81.916258][ T5081] ? __pfx___bch2_fs_stop+0x10/0x10
[ 81.921501][ T5081] ? __pfx_evict_inodes+0x10/0x10
[ 81.926698][ T5081] ? __pfx_bch2_put_super+0x10/0x10
[ 81.931939][ T5081] generic_shutdown_super+0x136/0x2d0
[ 81.937618][ T5081] bch2_kill_sb+0x41/0x50
[ 81.942001][ T5081] deactivate_locked_super+0xc4/0x130
[ 81.947494][ T5081] cleanup_mnt+0x41f/0x4b0
[ 81.952068][ T5081] ? lockdep_hardirqs_on+0x99/0x150
[ 81.957391][ T5081] task_work_run+0x24f/0x310
[ 81.962046][ T5081] ? __pfx_task_work_run+0x10/0x10
[ 81.967281][ T5081] ? path_umount+0x284/0xf70
[ 81.971993][ T5081] ptrace_notify+0x2d2/0x380
[ 81.976697][ T5081] ? __pfx_path_umount+0x10/0x10
[ 81.981681][ T5081] ? user_path_at_empty+0x4c/0x60
[ 81.986786][ T5081] ? __pfx_ptrace_notify+0x10/0x10
[ 81.991982][ T5081] ? __x64_sys_umount+0x126/0x170
[ 81.997145][ T5081] ? __pfx___x64_sys_umount+0x10/0x10
[ 82.002651][ T5081] syscall_exit_work+0xc6/0x190
[ 82.007591][ T5081] syscall_exit_to_user_mode+0x273/0x360
[ 82.013729][ T5081] do_syscall_64+0x100/0x230
[ 82.018436][ T5081] ? clear_bhb_loop+0x35/0x90
[ 82.023174][ T5081] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 82.029220][ T5081] RIP: 0033:0x7fa2d3adf307
[ 82.033780][ T5081] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 82.053621][ T5081] RSP: 002b:00007ffd538a9318 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 82.062159][ T5081] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa2d3adf307
[ 82.070244][ T5081] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd538a93d0
[ 82.078325][ T5081] RBP: 00007ffd538a93d0 R08: 0000000000000000 R09: 0000000000000000
[ 82.086436][ T5081] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffd538aa430
[ 82.094457][ T5081] R13: 000055557822e6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 82.102541][ T5081]
[ 82.105735][ T5081] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 82.113128][ T5081] CPU: 0 PID: 5081 Comm: syz-executor334 Not tainted 6.10.0-rc7-syzkaller-00244-g975f3b6da180 #0
[ 82.123724][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 82.133790][ T5081] Call Trace:
[ 82.137099][ T5081]
[ 82.140037][ T5081] dump_stack_lvl+0x241/0x360
[ 82.144804][ T5081] ? __pfx_dump_stack_lvl+0x10/0x10
[ 82.150093][ T5081] ? __pfx__printk+0x10/0x10
[ 82.154810][ T5081] ? vscnprintf+0x5d/0x90
[ 82.159201][ T5081] panic+0x349/0x860
[ 82.163145][ T5081] ? __warn+0x172/0x4e0
[ 82.167379][ T5081] ? __pfx_panic+0x10/0x10
[ 82.171947][ T5081] __warn+0x346/0x4e0
[ 82.175966][ T5081] ? bch2_fs_journal_stop+0x5f3/0x630
[ 82.181364][ T5081] report_bug+0x2b3/0x500
[ 82.185714][ T5081] ? bch2_fs_journal_stop+0x5f3/0x630
[ 82.191101][ T5081] handle_bug+0x3e/0x70
[ 82.195274][ T5081] exc_invalid_op+0x1a/0x50
[ 82.199797][ T5081] asm_exc_invalid_op+0x1a/0x20
[ 82.204659][ T5081] RIP: 0010:bch2_fs_journal_stop+0x5f3/0x630
[ 82.210675][ T5081] Code: 44 24 18 42 80 3c 20 00 48 8b 5c 24 20 74 08 48 89 df e8 20 a2 c7 fd 48 8b 13 48 c7 c7 a0 34 13 8c 4c 89 f6 e8 8e 51 27 fd 90 <0f> 0b 90 90 e9 e4 fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 7f fc ff
[ 82.230303][ T5081] RSP: 0018:ffffc90003cc7780 EFLAGS: 00010246
[ 82.236388][ T5081] RAX: 9ce99195b516ba00 RBX: ffff8880772caaa0 RCX: ffff88801ab3bc00
[ 82.244389][ T5081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 82.252380][ T5081] RBP: ffffc90003cc78c0 R08: ffffffff815857a2 R09: 1ffff1101728519a
[ 82.260370][ T5081] R10: dffffc0000000000 R11: ffffed101728519b R12: dffffc0000000000
[ 82.268375][ T5081] R13: ffff8880772ca440 R14: 000000000000000d R15: 1ffff1100ee59488
[ 82.276401][ T5081] ? __warn_printk+0x292/0x360
[ 82.281217][ T5081] ? __pfx_bch2_fs_journal_stop+0x10/0x10
[ 82.287056][ T5081] ? __pfx___bch2_print+0x10/0x10
[ 82.292103][ T5081] ? __bch2_btree_flush_all+0x6dc/0x700
[ 82.297671][ T5081] ? __bch2_btree_flush_all+0x6f/0x700
[ 82.303364][ T5081] __bch2_fs_read_only+0x30c/0x430
[ 82.308567][ T5081] bch2_fs_read_only+0xb52/0x1210
[ 82.313637][ T5081] ? __pfx_bch2_fs_read_only+0x10/0x10
[ 82.319222][ T5081] ? __down_write_common+0x162/0x200
[ 82.324547][ T5081] ? __pfx___bch2_print+0x10/0x10
[ 82.329684][ T5081] ? __pfx___down_write_common+0x10/0x10
[ 82.335342][ T5081] ? hook_sb_delete+0xa5e/0xb90
[ 82.340310][ T5081] ? evict+0x577/0x630
[ 82.344405][ T5081] __bch2_fs_stop+0x105/0x540
[ 82.349106][ T5081] ? __pfx_hook_sb_delete+0x10/0x10
[ 82.354321][ T5081] ? __pfx___bch2_fs_stop+0x10/0x10
[ 82.359540][ T5081] ? __pfx_evict_inodes+0x10/0x10
[ 82.364588][ T5081] ? __pfx_bch2_put_super+0x10/0x10
[ 82.369808][ T5081] generic_shutdown_super+0x136/0x2d0
[ 82.375214][ T5081] bch2_kill_sb+0x41/0x50
[ 82.379580][ T5081] deactivate_locked_super+0xc4/0x130
[ 82.384979][ T5081] cleanup_mnt+0x41f/0x4b0
[ 82.389592][ T5081] ? lockdep_hardirqs_on+0x99/0x150
[ 82.394822][ T5081] task_work_run+0x24f/0x310
[ 82.399453][ T5081] ? __pfx_task_work_run+0x10/0x10
[ 82.404586][ T5081] ? path_umount+0x284/0xf70
[ 82.409227][ T5081] ptrace_notify+0x2d2/0x380
[ 82.413867][ T5081] ? __pfx_path_umount+0x10/0x10
[ 82.418933][ T5081] ? user_path_at_empty+0x4c/0x60
[ 82.424003][ T5081] ? __pfx_ptrace_notify+0x10/0x10
[ 82.429525][ T5081] ? __x64_sys_umount+0x126/0x170
[ 82.434591][ T5081] ? __pfx___x64_sys_umount+0x10/0x10
[ 82.440083][ T5081] syscall_exit_work+0xc6/0x190
[ 82.444963][ T5081] syscall_exit_to_user_mode+0x273/0x360
[ 82.450629][ T5081] do_syscall_64+0x100/0x230
[ 82.455247][ T5081] ? clear_bhb_loop+0x35/0x90
[ 82.459960][ T5081] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 82.465899][ T5081] RIP: 0033:0x7fa2d3adf307
[ 82.470337][ T5081] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 82.489980][ T5081] RSP: 002b:00007ffd538a9318 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 82.498434][ T5081] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa2d3adf307
[ 82.506422][ T5081] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd538a93d0
[ 82.514409][ T5081] RBP: 00007ffd538a93d0 R08: 0000000000000000 R09: 0000000000000000
[ 82.522424][ T5081] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffd538aa430
[ 82.530684][ T5081] R13: 000055557822e6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 82.538693][ T5081]
[ 82.542293][ T5081] Kernel Offset: disabled
[ 82.546715][ T5081] Rebooting in 86400 seconds..