./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor172229956 <...> DUID 00:04:76:8b:f6:84:a4:3b:36:39:6c:68:e7:10:38:dd:b7:2c forked to background, child pid 5499 [ 39.055726][ T5500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.065895][ T5500] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. execve("./syz-executor172229956", ["./syz-executor172229956"], 0x7fffb354e5c0 /* 10 vars */) = 0 brk(NULL) = 0x555582484000 brk(0x555582484d40) = 0x555582484d40 arch_prctl(ARCH_SET_FS, 0x5555824843c0) = 0 set_tid_address(0x555582484690) = 5830 set_robust_list(0x5555824846a0, 24) = 0 rseq(0x555582484ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor172229956", 4096) = 27 getrandom("\x5f\x4f\x01\x45\xd9\x13\x00\xc1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555582484d40 brk(0x5555824a5d40) = 0x5555824a5d40 brk(0x5555824a6000) = 0x5555824a6000 mprotect(0x7feaf9084000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5831 attached , child_tidptr=0x555582484690) = 5831 [pid 5831] set_robust_list(0x5555824846a0, 24 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... set_robust_list resumed>) = 0 [pid 5831] mkdir("./syzkaller.B4rj3Y", 0700./strace-static-x86_64: Process 5832 attached [pid 5830] <... clone resumed>, child_tidptr=0x555582484690) = 5832 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] set_robust_list(0x5555824846a0, 24) = 0 [pid 5832] mkdir("./syzkaller.VEE7bW", 0700 [pid 5831] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5833 attached [pid 5832] <... mkdir resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555582484690) = 5833 [pid 5833] set_robust_list(0x5555824846a0, 24 [pid 5832] chmod("./syzkaller.VEE7bW", 0777 [pid 5831] chmod("./syzkaller.B4rj3Y", 0777) = 0 [pid 5831] chdir("./syzkaller.B4rj3Y" [pid 5832] <... chmod resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... set_robust_list resumed>) = 0 [pid 5832] chdir("./syzkaller.VEE7bW") = 0 [pid 5831] <... chdir resumed>) = 0 [pid 5833] mkdir("./syzkaller.wfWNV1", 0700 [pid 5831] mkdir("./0", 0777./strace-static-x86_64: Process 5834 attached [pid 5832] mkdir("./0", 0777 [pid 5831] <... mkdir resumed>) = 0 [pid 5834] set_robust_list(0x5555824846a0, 24) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555582484690) = 5834 [pid 5834] mkdir("./syzkaller.cCpADJ", 0700 [pid 5832] <... mkdir resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] chmod("./syzkaller.wfWNV1", 0777 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5834] <... mkdir resumed>) = 0 [pid 5833] <... chmod resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5835 attached [pid 5833] chdir("./syzkaller.wfWNV1" [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5830] <... clone resumed>, child_tidptr=0x555582484690) = 5835 [pid 5835] set_robust_list(0x5555824846a0, 24 [pid 5833] <... chdir resumed>) = 0 [pid 5833] mkdir("./0", 0777 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5835] <... set_robust_list resumed>) = 0 [pid 5834] chmod("./syzkaller.cCpADJ", 0777 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5834] <... chmod resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5835] mkdir("./syzkaller.C1ofE6", 0700 [pid 5831] close(3 [pid 5832] close(3 [pid 5834] chdir("./syzkaller.cCpADJ" [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] <... close resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5835] <... mkdir resumed>) = 0 [pid 5834] <... chdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] mkdir("./0", 0777./strace-static-x86_64: Process 5836 attached [pid 5835] chmod("./syzkaller.C1ofE6", 0777 [pid 5834] <... mkdir resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5836] set_robust_list(0x5555824846a0, 24 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] close(3) = 0 [pid 5836] <... set_robust_list resumed>) = 0 [pid 5835] <... chmod resumed>) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5836] chdir("./0" [pid 5834] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5838 attached [pid 5835] chdir("./syzkaller.C1ofE6" [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5835] <... chdir resumed>) = 0 [pid 5838] set_robust_list(0x5555824846a0, 24 [pid 5834] close(3 [pid 5838] <... set_robust_list resumed>) = 0 [pid 5836] <... chdir resumed>) = 0 [pid 5834] <... close resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 5836 ./strace-static-x86_64: Process 5840 attached [pid 5838] chdir("./0" [pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] mkdir("./0", 0777 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 5838 [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 5840 [pid 5835] <... mkdir resumed>) = 0 [pid 5840] set_robust_list(0x5555824846a0, 24) = 0 [pid 5840] chdir("./0" [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5840] <... chdir resumed>) = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5840] setpgid(0, 0 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5840] <... setpgid resumed>) = 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5840] <... openat resumed>) = 3 [pid 5840] write(3, "1000", 4) = 4 [pid 5840] close(3) = 0 [pid 5840] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5842 attached ./strace-static-x86_64: Process 5841 attached [pid 5838] <... chdir resumed>) = 0 [pid 5836] <... prctl resumed>) = 0 [pid 5835] <... clone resumed>, child_tidptr=0x555582484690) = 5841 [pid 5842] set_robust_list(0x5555824846a0, 24 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5836] setpgid(0, 0 [pid 5834] <... clone resumed>, child_tidptr=0x555582484690) = 5842 [pid 5842] <... set_robust_list resumed>) = 0 [pid 5838] <... prctl resumed>) = 0 [pid 5836] <... setpgid resumed>) = 0 [pid 5838] setpgid(0, 0 [pid 5842] chdir("./0" [pid 5841] set_robust_list(0x5555824846a0, 24 executing program [pid 5840] write(1, "executing program\n", 18 [pid 5838] <... setpgid resumed>) = 0 [pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5841] <... set_robust_list resumed>) = 0 [pid 5840] <... write resumed>) = 18 [pid 5841] chdir("./0" [pid 5840] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5841] <... chdir resumed>) = 0 [pid 5840] <... futex resumed>) = 0 [pid 5842] <... chdir resumed>) = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5840] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5841] <... prctl resumed>) = 0 [pid 5840] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5838] <... openat resumed>) = 3 [pid 5841] setpgid(0, 0 [pid 5840] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5841] <... setpgid resumed>) = 0 [pid 5840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5838] write(3, "1000", 4 [pid 5836] <... openat resumed>) = 3 [pid 5842] <... prctl resumed>) = 0 [pid 5841] <... openat resumed>) = 3 [pid 5840] <... mmap resumed>) = 0x7feaf8f93000 [pid 5838] <... write resumed>) = 4 [pid 5836] write(3, "1000", 4 [pid 5842] setpgid(0, 0 [pid 5841] write(3, "1000", 4 [pid 5840] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5838] close(3 [pid 5836] <... write resumed>) = 4 [pid 5842] <... setpgid resumed>) = 0 [pid 5841] <... write resumed>) = 4 [pid 5840] <... mprotect resumed>) = 0 [pid 5838] <... close resumed>) = 0 [pid 5836] close(3 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5841] close(3 [pid 5840] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5838] symlink("/dev/binderfs", "./binderfs" [pid 5836] <... close resumed>) = 0 [pid 5842] <... openat resumed>) = 3 [pid 5841] <... close resumed>) = 0 [pid 5840] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5838] <... symlink resumed>) = 0 [pid 5836] symlink("/dev/binderfs", "./binderfs"executing program [pid 5842] write(3, "1000", 4 [pid 5841] symlink("/dev/binderfs", "./binderfs" [pid 5840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5838] write(1, "executing program\n", 18 [pid 5836] <... symlink resumed>) = 0 [pid 5842] <... write resumed>) = 4 [pid 5838] <... write resumed>) = 18 ./strace-static-x86_64: Process 5843 attached [pid 5842] close(3 [pid 5838] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] write(1, "executing program\n", 18 [pid 5843] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5842] <... close resumed>) = 0 [pid 5841] <... symlink resumed>) = 0 [pid 5840] <... clone3 resumed> => {parent_tid=[5843]}, 88) = 5843 [pid 5838] <... futex resumed>) = 0 executing program [pid 5843] <... rseq resumed>) = 0 [pid 5842] symlink("/dev/binderfs", "./binderfs" [pid 5841] write(1, "executing program\n", 18 [pid 5840] rt_sigprocmask(SIG_SETMASK, [], [pid 5838] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, executing program [pid 5836] <... write resumed>) = 18 [pid 5842] <... symlink resumed>) = 0 [pid 5838] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5836] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] write(1, "executing program\n", 18 [pid 5838] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], executing program [pid 5836] <... futex resumed>) = 0 [pid 5842] <... write resumed>) = 18 [pid 5838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5836] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5843] set_robust_list(0x7feaf8fb39a0, 24 [pid 5842] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5841] <... write resumed>) = 18 [pid 5840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5836] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5842] <... futex resumed>) = 0 [pid 5841] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... mmap resumed>) = 0x7feaf8f93000 [pid 5836] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5843] rt_sigprocmask(SIG_SETMASK, [], [pid 5842] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5841] <... futex resumed>) = 0 [pid 5840] <... futex resumed>) = 0 [pid 5838] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5842] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5841] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5840] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5838] <... mprotect resumed>) = 0 [pid 5836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5843] memfd_create("syzkaller", 0 [pid 5842] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5841] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5838] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5843] <... memfd_create resumed>) = 3 [pid 5842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5838] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5836] <... mmap resumed>) = 0x7feaf8f93000 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5841] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5836] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5845 attached [pid 5842] <... mmap resumed>) = 0x7feaf8f93000 [pid 5836] <... mprotect resumed>) = 0 [pid 5845] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5842] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5838] <... clone3 resumed> => {parent_tid=[5845]}, 88) = 5845 [pid 5836] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5845] <... rseq resumed>) = 0 [pid 5843] <... mmap resumed>) = 0x7feaf0a00000 [pid 5842] <... mprotect resumed>) = 0 [pid 5841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5838] rt_sigprocmask(SIG_SETMASK, [], [pid 5836] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5845] set_robust_list(0x7feaf8fb39a0, 24 [pid 5842] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 5846 attached [pid 5845] <... set_robust_list resumed>) = 0 [pid 5842] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5838] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5845] rt_sigprocmask(SIG_SETMASK, [], [pid 5842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5841] <... mmap resumed>) = 0x7feaf8f93000 [pid 5838] <... futex resumed>) = 0 [pid 5836] <... clone3 resumed> => {parent_tid=[5846]}, 88) = 5846 ./strace-static-x86_64: Process 5847 attached [pid 5846] <... rseq resumed>) = 0 [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5841] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5838] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5836] rt_sigprocmask(SIG_SETMASK, [], [pid 5847] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5846] set_robust_list(0x7feaf8fb39a0, 24 [pid 5845] memfd_create("syzkaller", 0 [pid 5842] <... clone3 resumed> => {parent_tid=[5847]}, 88) = 5847 [pid 5841] <... mprotect resumed>) = 0 [pid 5836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5847] <... rseq resumed>) = 0 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5842] rt_sigprocmask(SIG_SETMASK, [], [pid 5841] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5836] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] set_robust_list(0x7feaf8fb39a0, 24 [pid 5846] rt_sigprocmask(SIG_SETMASK, [], [pid 5845] <... memfd_create resumed>) = 3 [pid 5842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5841] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5836] <... futex resumed>) = 0 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5842] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5841] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5847] rt_sigprocmask(SIG_SETMASK, [], [pid 5845] <... mmap resumed>) = 0x7feaf0a00000 [pid 5842] <... futex resumed>) = 0 [pid 5836] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5848 attached [pid 5847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5846] memfd_create("syzkaller", 0 [pid 5842] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5848] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5847] memfd_create("syzkaller", 0 [pid 5846] <... memfd_create resumed>) = 3 [pid 5841] <... clone3 resumed> => {parent_tid=[5848]}, 88) = 5848 [pid 5848] <... rseq resumed>) = 0 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5841] rt_sigprocmask(SIG_SETMASK, [], [pid 5848] set_robust_list(0x7feaf8fb39a0, 24 [pid 5846] <... mmap resumed>) = 0x7feaf0a00000 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5841] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5841] <... futex resumed>) = 0 [pid 5841] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5847] <... memfd_create resumed>) = 3 [pid 5848] memfd_create("syzkaller", 0 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 5848] <... memfd_create resumed>) = 3 [pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... write resumed>) = 16777216 [pid 5847] munmap(0x7feaf0a00000, 138412032 [pid 5845] <... write resumed>) = 16777216 [pid 5848] <... write resumed>) = 16777216 [pid 5847] <... munmap resumed>) = 0 [pid 5846] <... write resumed>) = 16777216 [pid 5845] munmap(0x7feaf0a00000, 138412032 [pid 5847] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5843] <... write resumed>) = 16777216 [pid 5848] munmap(0x7feaf0a00000, 138412032 [pid 5847] <... openat resumed>) = 4 [pid 5846] munmap(0x7feaf0a00000, 138412032 [pid 5847] ioctl(4, LOOP_SET_FD, 3 [pid 5843] munmap(0x7feaf0a00000, 138412032 [pid 5846] <... munmap resumed>) = 0 [pid 5843] <... munmap resumed>) = 0 [pid 5848] <... munmap resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5845] <... munmap resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] close(3 [pid 5846] <... openat resumed>) = 4 [pid 5843] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] <... openat resumed>) = 4 [pid 5847] <... close resumed>) = 0 [pid 5846] ioctl(4, LOOP_SET_FD, 3 [pid 5845] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5843] <... openat resumed>) = 4 [pid 5848] ioctl(4, LOOP_SET_FD, 3 [pid 5847] close(4) = 0 [pid 5845] <... openat resumed>) = 4 [pid 5843] ioctl(4, LOOP_SET_FD, 3 [pid 5847] mkdir("./file1", 0777 [pid 5846] <... ioctl resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 syzkaller login: [ 64.683396][ T5847] loop3: detected capacity change from 0 to 32768 [ 64.717563][ T5846] loop1: detected capacity change from 0 to 32768 [ 64.717762][ T5843] loop0: detected capacity change from 0 to 32768 [pid 5847] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5843] <... ioctl resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5846] close(3 [pid 5845] ioctl(4, LOOP_SET_FD, 3 [pid 5848] close(3 [pid 5846] <... close resumed>) = 0 [pid 5843] close(3 [pid 5848] <... close resumed>) = 0 [pid 5846] close(4 [pid 5848] close(4 [pid 5843] <... close resumed>) = 0 [pid 5846] <... close resumed>) = 0 [pid 5846] mkdir("./file1", 0777 [pid 5843] close(4 [pid 5846] <... mkdir resumed>) = 0 [pid 5843] <... close resumed>) = 0 [pid 5846] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5843] mkdir("./file1", 0777) = 0 [pid 5843] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5848] <... close resumed>) = 0 [pid 5848] mkdir("./file1", 0777) = 0 [ 64.724896][ T5848] loop4: detected capacity change from 0 to 32768 [pid 5848] mount("/dev/loop4", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5845] <... ioctl resumed>) = 0 [pid 5845] close(3) = 0 [pid 5845] close(4) = 0 [pid 5845] mkdir("./file1", 0777) = 0 [ 64.773746][ T5845] loop2: detected capacity change from 0 to 32768 [ 64.939372][ T5843] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 64.940047][ T5846] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 64.948948][ T5843] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 64.970221][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 65.011987][ T5847] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 65.016274][ T5848] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 65.022568][ T5846] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 65.039078][ T5846] bcachefs (loop1): Version upgrade required: [ 65.039078][ T5846] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 65.039078][ T5846] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 65.039078][ T5846] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 65.066279][ T5845] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 65.122070][ T5846] bcachefs (loop1): dropping and reconstructing all alloc info [ 65.141641][ T5848] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 65.141642][ T5845] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 5845] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5843] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5843] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5843] ioctl(3, LOOP_CLR_FD) = 0 [ 65.198823][ T5843] bcachefs: bch2_fs_get_tree() error: EINVAL [ 65.214767][ T5847] bcachefs: bch2_fs_get_tree() error: EINVAL [ 65.223754][ T5846] bcachefs (loop1): check_topology... done [pid 5843] close(3 [pid 5847] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 65.257690][ T5846] bcachefs (loop1): accounting_read... [ 65.259074][ T5845] bcachefs: bch2_fs_get_tree() error: EINVAL [ 65.284434][ T5846] done [ 65.291826][ T5846] bcachefs (loop1): alloc_read... done [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5845] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 65.304151][ T5846] bcachefs (loop1): stripes_read... done [pid 5845] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5845] ioctl(3, LOOP_CLR_FD) = 0 [pid 5845] close(3 [pid 5848] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 65.353579][ T5846] bcachefs (loop1): snapshots_read... done [ 65.372816][ T5846] bcachefs (loop1): check_allocations... [ 65.373749][ T5848] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5848] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5843] <... close resumed>) = 0 [pid 5843] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5840] <... futex resumed>) = 0 [pid 5843] creat("./bus", 000 [pid 5840] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5840] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5843] <... creat resumed>) = 3 [pid 5848] close(3 [pid 5843] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5840] <... futex resumed>) = 0 [pid 5843] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5840] exit_group(0 [pid 5843] <... futex resumed>) = ? [pid 5840] <... exit_group resumed>) = ? [pid 5843] +++ exited with 0 +++ [pid 5840] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=36 /* 0.36 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5831] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./0/binderfs") = 0 [pid 5831] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./0/bus") = 0 [pid 5831] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./0/file1") = 0 [pid 5831] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./0") = 0 [pid 5831] mkdir("./1", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5885 attached [ 65.493985][ T5846] done [pid 5885] set_robust_list(0x5555824846a0, 24 [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 5885 [pid 5885] <... set_robust_list resumed>) = 0 [pid 5885] chdir("./1") = 0 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5885] setpgid(0, 0) = 0 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5885] write(3, "1000", 4) = 4 [pid 5885] close(3) = 0 executing program [pid 5885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5885] write(1, "executing program\n", 18) = 18 [pid 5885] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 65.521276][ T5846] bcachefs (loop1): going read-write [pid 5885] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 5885] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 5885] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 5886 attached => {parent_tid=[5886]}, 88) = 5886 [pid 5885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5885] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5886] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 5886] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 5886] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5886] memfd_create("syzkaller", 0) = 3 [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 5847] <... close resumed>) = 0 [pid 5847] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5842] <... futex resumed>) = 0 [pid 5847] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5842] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5847] creat("./bus", 000 [pid 5842] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5847] <... creat resumed>) = 3 [pid 5847] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5842] <... futex resumed>) = 0 [pid 5847] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5842] exit_group(0) = ? [pid 5847] <... futex resumed>) = ? [pid 5847] +++ exited with 0 +++ [pid 5842] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=41 /* 0.41 s */} --- [pid 5834] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5834] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5846] <... mount resumed>) = 0 [pid 5834] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5846] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5846] <... openat resumed>) = 3 [pid 5834] getdents64(3, [pid 5846] chdir("./file1") = 0 [pid 5834] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5848] <... close resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5834] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5846] <... openat resumed>) = 4 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 65.604823][ T5846] bcachefs (loop1): done starting filesystem [pid 5834] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5848] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] ioctl(4, LOOP_CLR_FD [pid 5845] <... close resumed>) = 0 [pid 5848] <... futex resumed>) = 1 [pid 5846] <... ioctl resumed>) = 0 [pid 5841] <... futex resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] close(4 [pid 5841] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] unlink("./0/binderfs" [pid 5848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5846] <... close resumed>) = 0 [pid 5841] <... futex resumed>) = 0 [pid 5841] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] creat("./bus", 000 [pid 5846] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... unlink resumed>) = 0 [pid 5846] <... futex resumed>) = 1 [pid 5834] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5846] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] <... creat resumed>) = 3 [pid 5836] <... futex resumed>) = 0 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] newfstatat(AT_FDCWD, "./0/bus", [pid 5845] <... futex resumed>) = 1 [pid 5834] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] <... futex resumed>) = 1 [pid 5848] <... futex resumed>) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5838] <... futex resumed>) = 0 [pid 5834] unlink("./0/bus" [pid 5846] creat("./bus", 000 [pid 5841] <... futex resumed>) = 0 [pid 5841] exit_group(0) = ? [pid 5834] <... unlink resumed>) = 0 [pid 5845] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./0/file1", [pid 5848] +++ exited with 0 +++ [pid 5845] <... futex resumed>) = 0 [pid 5841] +++ exited with 0 +++ [pid 5838] <... futex resumed>) = 1 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5845] creat("./bus", 000) = 3 [pid 5838] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5841, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5834] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5845] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] restart_syscall(<... resuming interrupted clone ...> [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5845] <... futex resumed>) = 1 [pid 5838] <... futex resumed>) = 0 [pid 5834] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5838] exit_group(0 [pid 5845] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5834] <... openat resumed>) = 4 [pid 5838] <... exit_group resumed>) = ? [pid 5834] newfstatat(4, "", [pid 5845] <... futex resumed>) = ? [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5845] +++ exited with 0 +++ [pid 5838] +++ exited with 0 +++ [pid 5835] <... restart_syscall resumed>) = 0 [pid 5834] getdents64(4, [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- [pid 5834] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5835] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] getdents64(4, [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... openat resumed>) = 3 [pid 5834] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] newfstatat(3, "", [pid 5834] close(4 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5835] getdents64(3, [pid 5834] <... close resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5835] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5834] rmdir("./0/file1" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5835] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5833] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] <... rmdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] unlink("./0/binderfs" [pid 5833] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5835] <... unlink resumed>) = 0 [pid 5834] getdents64(3, [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] unlink("./0/binderfs" [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] close(3 [pid 5833] <... unlink resumed>) = 0 [pid 5835] newfstatat(AT_FDCWD, "./0/bus", [pid 5833] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5846] <... creat resumed>) = 4 [pid 5835] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5846] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] rmdir("./0" [pid 5846] <... futex resumed>) = 1 [pid 5836] <... futex resumed>) = 0 [pid 5835] unlink("./0/bus" [pid 5833] newfstatat(AT_FDCWD, "./0/bus", [pid 5846] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5836] exit_group(0 [pid 5835] <... unlink resumed>) = 0 [pid 5834] <... rmdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5846] <... futex resumed>) = ? [pid 5836] <... exit_group resumed>) = ? [pid 5834] mkdir("./1", 0777 [pid 5846] +++ exited with 0 +++ [pid 5835] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] unlink("./0/bus" [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... unlink resumed>) = 0 [pid 5835] newfstatat(AT_FDCWD, "./0/file1", [pid 5833] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./0/file1", [pid 5836] +++ exited with 0 +++ [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... openat resumed>) = 4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5836, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=46 /* 0.46 s */} --- [pid 5835] newfstatat(4, "", [pid 5833] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5834] <... mkdir resumed>) = 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5835] getdents64(4, [pid 5833] newfstatat(4, "", [pid 5835] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, [pid 5833] getdents64(4, [pid 5835] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5835] close(4 [pid 5833] getdents64(4, [pid 5835] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5835] rmdir("./0/file1" [pid 5833] close(4 [pid 5835] <... rmdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5835] getdents64(3, [pid 5833] rmdir("./0/file1" [pid 5835] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5835] close(3 [pid 5833] getdents64(3, [pid 5835] <... close resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5835] rmdir("./0" [pid 5834] <... openat resumed>) = 3 [pid 5833] close(3 [pid 5835] <... rmdir resumed>) = 0 [pid 5834] ioctl(3, LOOP_CLR_FD [pid 5833] <... close resumed>) = 0 [pid 5835] mkdir("./1", 0777 [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] rmdir("./0" [pid 5835] <... mkdir resumed>) = 0 [pid 5834] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... close resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5833] mkdir("./1", 0777 [pid 5835] <... openat resumed>) = 3 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD [pid 5834] <... clone resumed>, child_tidptr=0x555582484690) = 5889 [pid 5832] newfstatat(3, "", [pid 5835] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] getdents64(3, [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... openat resumed>) = 3 [pid 5832] <... getdents64 resumed>0x555582485730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5890 attached ./strace-static-x86_64: Process 5889 attached [pid 5832] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5889] set_robust_list(0x5555824846a0, 24 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5889] <... set_robust_list resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5890] set_robust_list(0x5555824846a0, 24 [pid 5835] <... clone resumed>, child_tidptr=0x555582484690) = 5890 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5890] <... set_robust_list resumed>) = 0 [pid 5889] chdir("./1" [pid 5833] close(3 [pid 5832] unlink("./0/binderfs" [pid 5890] chdir("./1" [pid 5889] <... chdir resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5890] <... chdir resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5891 attached [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... unlink resumed>) = 0 [pid 5889] <... prctl resumed>) = 0 [pid 5832] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5890] <... prctl resumed>) = 0 [pid 5889] setpgid(0, 0 [pid 5890] setpgid(0, 0 [pid 5891] set_robust_list(0x5555824846a0, 24 [pid 5890] <... setpgid resumed>) = 0 [pid 5891] <... set_robust_list resumed>) = 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] chdir("./1" [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 5891 [pid 5890] <... openat resumed>) = 3 [pid 5891] <... chdir resumed>) = 0 [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5890] write(3, "1000", 4 [pid 5891] setpgid(0, 0 [pid 5890] <... write resumed>) = 4 [pid 5891] <... setpgid resumed>) = 0 [pid 5890] close(3 [pid 5889] <... setpgid resumed>) = 0 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5890] <... close resumed>) = 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] <... openat resumed>) = 3 [pid 5890] symlink("/dev/binderfs", "./binderfs"executing program [pid 5891] write(3, "1000", 4 [pid 5890] <... symlink resumed>) = 0 [pid 5889] <... openat resumed>) = 3 [pid 5889] write(3, "1000", 4) = 4 [pid 5890] write(1, "executing program\n", 18) = 18 [pid 5891] <... write resumed>) = 4 [pid 5890] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5889] close(3 [pid 5891] close(3 [pid 5890] <... futex resumed>) = 0 [pid 5889] <... close resumed>) = 0 [ 65.770639][ T5832] bcachefs (loop1): shutting down [ 65.780470][ T5832] bcachefs (loop1): going read-only [ 65.786097][ T5832] bcachefs (loop1): finished waiting for writes to stop [pid 5891] <... close resumed>) = 0 [pid 5890] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5891] symlink("/dev/binderfs", "./binderfs" [pid 5890] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5891] <... symlink resumed>) = 0 [pid 5890] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], executing program [pid 5891] write(1, "executing program\n", 18 [pid 5890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] <... write resumed>) = 18 [pid 5890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5891] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... mmap resumed>) = 0x7feaf8f93000 [pid 5891] <... futex resumed>) = 0 [pid 5890] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5891] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5890] <... mprotect resumed>) = 0 [pid 5891] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5890] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5891] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5890] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5891] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5890] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 5892 attached [pid 5891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5889] symlink("/dev/binderfs", "./binderfs" [pid 5891] <... mmap resumed>) = 0x7feaf8f93000 [pid 5890] <... clone3 resumed> => {parent_tid=[5892]}, 88) = 5892 [pid 5891] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITEexecuting program [pid 5890] rt_sigprocmask(SIG_SETMASK, [], [pid 5889] <... symlink resumed>) = 0 [pid 5892] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5891] <... mprotect resumed>) = 0 [pid 5890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5889] write(1, "executing program\n", 18 [pid 5892] <... rseq resumed>) = 0 [pid 5891] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5890] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5889] <... write resumed>) = 18 [pid 5892] set_robust_list(0x7feaf8fb39a0, 24 [pid 5891] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5890] <... futex resumed>) = 0 [pid 5889] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5892] <... set_robust_list resumed>) = 0 [pid 5891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5890] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5889] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5893 attached [pid 5892] rt_sigprocmask(SIG_SETMASK, [], [pid 5889] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] <... clone3 resumed> => {parent_tid=[5893]}, 88) = 5893 [pid 5889] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5892] memfd_create("syzkaller", 0 [pid 5891] rt_sigprocmask(SIG_SETMASK, [], [pid 5889] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5893] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5892] <... memfd_create resumed>) = 3 [pid 5889] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5893] <... rseq resumed>) = 0 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5892] <... mmap resumed>) = 0x7feaf0a00000 [pid 5891] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5889] <... mmap resumed>) = 0x7feaf8f93000 [pid 5891] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5889] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5891] <... futex resumed>) = 0 [pid 5889] <... mprotect resumed>) = 0 [pid 5891] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5889] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5893] set_robust_list(0x7feaf8fb39a0, 24 [pid 5889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5893] <... set_robust_list resumed>) = 0 [pid 5893] rt_sigprocmask(SIG_SETMASK, [], [pid 5889] <... clone3 resumed> => {parent_tid=[5894]}, 88) = 5894 ./strace-static-x86_64: Process 5894 attached [pid 5889] rt_sigprocmask(SIG_SETMASK, [], [pid 5894] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5893] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5889] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5889] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... rseq resumed>) = 0 [pid 5889] <... futex resumed>) = 0 [pid 5893] memfd_create("syzkaller", 0 [pid 5894] set_robust_list(0x7feaf8fb39a0, 24 [pid 5889] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5894] <... set_robust_list resumed>) = 0 [pid 5894] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5894] memfd_create("syzkaller", 0) = 3 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 5893] <... memfd_create resumed>) = 3 [ 65.812103][ T5832] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 65.931833][ T64] bcachefs (loop1): bch2_write_super(): fatal error loop1: Superblock write was silently dropped! (seq 0 expected 53) [ 65.958473][ T64] bcachefs (loop1): fatal error - emergency read only [ 65.965786][ T5832] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 65.997161][ T5832] bcachefs (loop1): unshutdown complete, journal seq 13 [ 66.005397][ T5832] bcachefs (loop1): done going read-only, filesystem not clean [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 66.090526][ T5832] bcachefs (loop1): shutdown complete [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5886] <... write resumed>) = 16777216 [pid 5886] munmap(0x7feaf0a00000, 138412032) = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5886] ioctl(4, LOOP_SET_FD, 3 [pid 5894] <... write resumed>) = 16777216 [pid 5886] <... ioctl resumed>) = 0 [pid 5886] close(3) = 0 [pid 5886] close(4) = 0 [pid 5886] mkdir("./file1", 0777) = 0 [pid 5886] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [ 66.286560][ T5886] loop0: detected capacity change from 0 to 32768 [pid 5894] munmap(0x7feaf0a00000, 138412032) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5894] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5894] close(3) = 0 [pid 5894] close(4) = 0 [pid 5894] mkdir("./file1", 0777) = 0 [pid 5894] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [ 66.367398][ T5894] loop3: detected capacity change from 0 to 32768 [pid 5892] <... write resumed>) = 16777216 [pid 5892] munmap(0x7feaf0a00000, 138412032) = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5893] <... write resumed>) = 16777216 [pid 5893] munmap(0x7feaf0a00000, 138412032 [pid 5892] ioctl(4, LOOP_SET_FD, 3 [pid 5893] <... munmap resumed>) = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5893] ioctl(4, LOOP_SET_FD, 3 [pid 5892] <... ioctl resumed>) = 0 [pid 5892] close(3) = 0 [pid 5892] close(4) = 0 [pid 5892] mkdir("./file1", 0777) = 0 [pid 5892] mount("/dev/loop4", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5893] <... ioctl resumed>) = 0 [pid 5893] close(3) = 0 [pid 5893] close(4) = 0 [pid 5893] mkdir("./file1", 0777) = 0 [ 66.468294][ T5892] loop4: detected capacity change from 0 to 32768 [ 66.479221][ T5893] loop2: detected capacity change from 0 to 32768 [ 66.781720][ T5886] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 66.781926][ T5894] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 66.790866][ T5892] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 66.821720][ T5886] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 66.837740][ T5893] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 66.871612][ T5893] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 66.880464][ T5892] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 66.902939][ T5894] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 66.966539][ T5886] bcachefs: bch2_fs_get_tree() error: EINVAL [ 66.980959][ T5894] bcachefs (loop3): Version upgrade required: [ 66.980959][ T5894] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 66.980959][ T5894] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [pid 5893] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5886] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 66.980959][ T5894] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [pid 5886] ioctl(3, LOOP_CLR_FD) = 0 [ 67.060163][ T5894] bcachefs (loop3): dropping and reconstructing all alloc info [pid 5886] close(3 [pid 5893] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 67.101420][ T5893] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5893] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5893] ioctl(3, LOOP_CLR_FD) = 0 [ 67.145929][ T5894] bcachefs (loop3): check_topology... done [ 67.159203][ T5894] bcachefs (loop3): accounting_read... [ 67.175870][ T5892] bcachefs: bch2_fs_get_tree() error: EINVAL [ 67.189275][ T5894] done [ 67.192102][ T5894] bcachefs (loop3): alloc_read... done [pid 5893] close(3 [pid 5892] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5892] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5892] ioctl(3, LOOP_CLR_FD) = 0 [ 67.223821][ T5894] bcachefs (loop3): stripes_read... done [pid 5892] close(3 [pid 5886] <... close resumed>) = 0 [pid 5886] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5886] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] <... futex resumed>) = 0 [ 67.266443][ T5894] bcachefs (loop3): snapshots_read... done [pid 5885] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... futex resumed>) = 0 [pid 5885] <... futex resumed>) = 1 [pid 5886] creat("./bus", 000 [pid 5885] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] <... creat resumed>) = 3 [pid 5886] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5886] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] <... futex resumed>) = 0 [pid 5885] exit_group(0 [pid 5886] <... futex resumed>) = ? [pid 5885] <... exit_group resumed>) = ? [pid 5886] +++ exited with 0 +++ [pid 5885] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=43 /* 0.43 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5893] <... close resumed>) = 0 [pid 5893] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5893] <... futex resumed>) = 1 [pid 5893] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5891] <... futex resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5891] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5893] <... futex resumed>) = 0 [pid 5891] <... futex resumed>) = 1 [pid 5831] <... openat resumed>) = 3 [pid 5893] creat("./bus", 000 [pid 5891] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] newfstatat(3, "", [pid 5893] <... creat resumed>) = 3 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5893] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5891] <... futex resumed>) = 0 [pid 5831] getdents64(3, [pid 5893] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5891] exit_group(0 [pid 5831] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5893] <... futex resumed>) = ? [pid 5891] <... exit_group resumed>) = ? [pid 5831] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5893] +++ exited with 0 +++ [pid 5891] +++ exited with 0 +++ [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./1/binderfs" [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] newfstatat(AT_FDCWD, "./1/bus", [pid 5833] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] unlink("./1/bus" [pid 5833] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5831] <... unlink resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] unlink("./1/binderfs" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... unlink resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./1/file1", [pid 5833] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./1/bus", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 67.287523][ T5894] bcachefs (loop3): check_allocations... done [pid 5833] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] unlink("./1/bus" [pid 5831] <... openat resumed>) = 4 [pid 5833] <... unlink resumed>) = 0 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5833] newfstatat(AT_FDCWD, "./1/file1", [pid 5832] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(4, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./0/file1", [pid 5831] close(4 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] rmdir("./1/file1" [pid 5833] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... rmdir resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 5832] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(3, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] getdents64(4, [pid 5832] newfstatat(4, "", [pid 5831] close(3 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 5832] getdents64(4, [pid 5831] rmdir("./1" [pid 5833] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5832] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] <... rmdir resumed>) = 0 [pid 5833] close(4 [pid 5832] getdents64(4, [pid 5833] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] rmdir("./1/file1" [pid 5832] close(4 [pid 5831] mkdir("./2", 0777 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./0/file1" [pid 5831] <... mkdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5832] getdents64(3, [pid 5833] rmdir("./1" [pid 5832] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] close(3 [pid 5831] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] mkdir("./2", 0777 [pid 5832] rmdir("./0" [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] close(3) = 0 [pid 5832] mkdir("./1", 0777) = 0 [pid 5894] <... mount resumed>) = 0 [pid 5892] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5927 attached [ 67.398698][ T5894] bcachefs (loop3): going read-write [ 67.417966][ T5894] bcachefs (loop3): done starting filesystem [pid 5894] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5892] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... openat resumed>) = 3 [pid 5927] set_robust_list(0x5555824846a0, 24 [pid 5894] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5927] <... set_robust_list resumed>) = 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] <... openat resumed>) = 3 [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 5927 [pid 5927] chdir("./2" [pid 5894] chdir("./file1" [pid 5892] <... futex resumed>) = 1 [pid 5890] <... futex resumed>) = 0 [pid 5833] close(3 [pid 5927] <... chdir resumed>) = 0 [pid 5894] <... chdir resumed>) = 0 [pid 5892] creat("./bus", 000 [pid 5890] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... close resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5890] <... futex resumed>) = 0 [pid 5890] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5929 attached ) = 0 [pid 5892] <... creat resumed>) = 3 ./strace-static-x86_64: Process 5928 attached [pid 5929] set_robust_list(0x5555824846a0, 24 [pid 5927] setpgid(0, 0 [pid 5894] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 5928 [pid 5929] <... set_robust_list resumed>) = 0 [pid 5927] <... setpgid resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 5929 [pid 5894] <... openat resumed>) = 4 [pid 5928] set_robust_list(0x5555824846a0, 24 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] ioctl(4, LOOP_CLR_FD [pid 5892] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5929] chdir("./1" [pid 5927] <... openat resumed>) = 3 [pid 5929] <... chdir resumed>) = 0 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5927] write(3, "1000", 4 [pid 5929] <... prctl resumed>) = 0 [pid 5927] <... write resumed>) = 4 [pid 5929] setpgid(0, 0 [pid 5928] <... set_robust_list resumed>) = 0 [pid 5894] <... ioctl resumed>) = 0 [pid 5892] <... futex resumed>) = 1 [pid 5890] <... futex resumed>) = 0 [pid 5929] <... setpgid resumed>) = 0 [pid 5928] chdir("./2" [pid 5927] close(3 [pid 5894] close(4 [pid 5892] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5890] exit_group(0 [pid 5928] <... chdir resumed>) = 0 [pid 5890] <... exit_group resumed>) = ? [pid 5892] <... futex resumed>) = ? [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5894] <... close resumed>) = 0 [pid 5892] +++ exited with 0 +++ [pid 5928] <... prctl resumed>) = 0 [pid 5894] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5928] setpgid(0, 0 [pid 5894] <... futex resumed>) = 1 [pid 5890] +++ exited with 0 +++ [pid 5889] <... futex resumed>) = 0 [pid 5928] <... setpgid resumed>) = 0 [pid 5894] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5889] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=39 /* 0.39 s */} --- [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5889] <... futex resumed>) = 0 [pid 5929] <... openat resumed>) = 3 [pid 5928] <... openat resumed>) = 3 [pid 5927] <... close resumed>) = 0 [pid 5894] creat("./bus", 000 [pid 5889] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5835] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5927] symlink("/dev/binderfs", "./binderfs" [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] <... symlink resumed>) = 0 [pid 5835] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", [pid 5927] write(1, "executing program\n", 18 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 executing program [pid 5927] <... write resumed>) = 18 [pid 5835] getdents64(3, [pid 5927] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5927] <... futex resumed>) = 0 [pid 5927] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5835] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5927] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5835] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5927] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5927] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5835] unlink("./1/binderfs" [pid 5929] write(3, "1000", 4 [pid 5928] write(3, "1000", 4 [pid 5927] <... mmap resumed>) = 0x7feaf8f93000 [pid 5894] <... creat resumed>) = 4 [pid 5835] <... unlink resumed>) = 0 [pid 5927] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5835] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] <... write resumed>) = 4 [pid 5928] <... write resumed>) = 4 [pid 5927] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5894] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5835] newfstatat(AT_FDCWD, "./1/bus", [pid 5927] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5835] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./1/bus" [pid 5927] <... clone3 resumed> => {parent_tid=[5930]}, 88) = 5930 [pid 5835] <... unlink resumed>) = 0 [pid 5927] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5930 attached [pid 5929] close(3 [pid 5928] close(3 [pid 5927] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5894] <... futex resumed>) = 1 [pid 5889] <... futex resumed>) = 0 [pid 5835] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5930] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5927] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5930] <... rseq resumed>) = 0 [pid 5927] <... futex resumed>) = 0 [pid 5835] newfstatat(AT_FDCWD, "./1/file1", [pid 5930] set_robust_list(0x7feaf8fb39a0, 24 [pid 5927] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5928] <... close resumed>) = 0 [pid 5894] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5889] exit_group(0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5930] <... set_robust_list resumed>) = 0 [pid 5929] <... close resumed>) = 0 [pid 5930] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5835] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5930] memfd_create("syzkaller", 0 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5929] symlink("/dev/binderfs", "./binderfs" [pid 5835] getdents64(4, [pid 5889] <... exit_group resumed>) = ? [pid 5930] <... memfd_create resumed>) = 3 [pid 5928] symlink("/dev/binderfs", "./binderfs" [pid 5894] <... futex resumed>) = ? [pid 5835] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5928] <... symlink resumed>) = 0 [pid 5835] getdents64(4, [pid 5930] <... mmap resumed>) = 0x7feaf0a00000 executing program executing program [pid 5929] <... symlink resumed>) = 0 [pid 5928] write(1, "executing program\n", 18 [pid 5894] +++ exited with 0 +++ [pid 5889] +++ exited with 0 +++ [pid 5835] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5929] write(1, "executing program\n", 18 [pid 5928] <... write resumed>) = 18 [pid 5929] <... write resumed>) = 18 [pid 5929] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=38 /* 0.38 s */} --- [pid 5929] <... futex resumed>) = 0 [pid 5928] <... futex resumed>) = 0 [pid 5834] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5928] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5929] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5928] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5834] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5929] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5928] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5929] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5928] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5834] newfstatat(3, "", [pid 5929] <... mmap resumed>) = 0x7feaf8f93000 [pid 5928] <... mmap resumed>) = 0x7feaf8f93000 [pid 5835] close(4 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5929] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5928] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5834] getdents64(3, [pid 5929] <... mprotect resumed>) = 0 [pid 5928] <... mprotect resumed>) = 0 [pid 5835] <... close resumed>) = 0 [pid 5834] <... getdents64 resumed>0x555582485730 /* 4 entries */, 32768) = 112 [pid 5928] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5835] rmdir("./1/file1" [pid 5834] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5928] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5929] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5929] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5834] newfstatat(AT_FDCWD, "./1/binderfs", ./strace-static-x86_64: Process 5931 attached ./strace-static-x86_64: Process 5932 attached [pid 5931] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5928] <... clone3 resumed> => {parent_tid=[5931]}, 88) = 5931 [pid 5835] <... rmdir resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5932] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5931] <... rseq resumed>) = 0 [pid 5929] <... clone3 resumed> => {parent_tid=[5932]}, 88) = 5932 [pid 5928] rt_sigprocmask(SIG_SETMASK, [], [pid 5834] unlink("./1/binderfs" [pid 5932] <... rseq resumed>) = 0 [pid 5931] set_robust_list(0x7feaf8fb39a0, 24 [pid 5929] rt_sigprocmask(SIG_SETMASK, [], [pid 5928] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5932] set_robust_list(0x7feaf8fb39a0, 24 [pid 5931] <... set_robust_list resumed>) = 0 [pid 5929] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5928] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] getdents64(3, [pid 5834] <... unlink resumed>) = 0 [pid 5932] <... set_robust_list resumed>) = 0 [pid 5931] rt_sigprocmask(SIG_SETMASK, [], [pid 5929] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... futex resumed>) = 0 [pid 5835] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5834] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5932] rt_sigprocmask(SIG_SETMASK, [], [pid 5931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5929] <... futex resumed>) = 0 [pid 5928] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5835] close(3) = 0 [pid 5932] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5931] memfd_create("syzkaller", 0 [pid 5929] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5835] rmdir("./1") = 0 [pid 5835] mkdir("./2", 0777 [pid 5932] memfd_create("syzkaller", 0 [pid 5835] <... mkdir resumed>) = 0 [pid 5931] <... memfd_create resumed>) = 3 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5932] <... memfd_create resumed>) = 3 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5931] <... mmap resumed>) = 0x7feaf0a00000 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5932] <... mmap resumed>) = 0x7feaf0a00000 [pid 5835] <... openat resumed>) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582484690) = 5933 ./strace-static-x86_64: Process 5933 attached [pid 5933] set_robust_list(0x5555824846a0, 24) = 0 [pid 5933] chdir("./2") = 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5933] close(3) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5933] write(1, "executing program\n", 18) = 18 [pid 5933] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 5933] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 5933] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [ 67.570370][ T5834] bcachefs (loop3): shutting down [ 67.577983][ T5834] bcachefs (loop3): going read-only [ 67.597601][ T5834] bcachefs (loop3): finished waiting for writes to stop [pid 5933] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5933] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 5934 attached => {parent_tid=[5934]}, 88) = 5934 [pid 5934] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5933] rt_sigprocmask(SIG_SETMASK, [], [pid 5934] <... rseq resumed>) = 0 [pid 5933] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5934] set_robust_list(0x7feaf8fb39a0, 24 [pid 5933] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] <... set_robust_list resumed>) = 0 [pid 5934] rt_sigprocmask(SIG_SETMASK, [], [pid 5933] <... futex resumed>) = 0 [pid 5934] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5933] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5934] memfd_create("syzkaller", 0) = 3 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 67.612612][ T5834] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 67.716712][ T12] bcachefs (loop3): bch2_write_super(): fatal error loop3: Superblock write was silently dropped! (seq 0 expected 53) [ 67.767100][ T12] bcachefs (loop3): fatal error - emergency read only [ 67.797404][ T5834] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 67.817592][ T5834] bcachefs (loop3): unshutdown complete, journal seq 14 [ 67.825616][ T5834] bcachefs (loop3): done going read-only, filesystem not clean [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 67.911151][ T5834] bcachefs (loop3): shutdown complete [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5932] <... write resumed>) = 16777216 [pid 5932] munmap(0x7feaf0a00000, 138412032) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5932] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5932] close(3) = 0 [pid 5932] close(4) = 0 [pid 5932] mkdir("./file1", 0777) = 0 [ 68.093227][ T5932] loop1: detected capacity change from 0 to 32768 [pid 5932] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5930] <... write resumed>) = 16777216 [pid 5930] munmap(0x7feaf0a00000, 138412032) = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5930] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5930] close(3) = 0 [pid 5930] close(4) = 0 [pid 5930] mkdir("./file1", 0777) = 0 [pid 5930] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5934] <... write resumed>) = 16777216 [ 68.194618][ T5930] loop0: detected capacity change from 0 to 32768 [pid 5934] munmap(0x7feaf0a00000, 138412032 [pid 5931] <... write resumed>) = 16777216 [pid 5934] <... munmap resumed>) = 0 [pid 5931] munmap(0x7feaf0a00000, 138412032 [pid 5934] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5931] <... munmap resumed>) = 0 [pid 5934] <... openat resumed>) = 4 [pid 5931] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5934] ioctl(4, LOOP_SET_FD, 3 [pid 5931] <... openat resumed>) = 4 [pid 5931] ioctl(4, LOOP_SET_FD, 3 [pid 5934] <... ioctl resumed>) = 0 [pid 5934] close(3) = 0 [pid 5934] close(4) = 0 [pid 5934] mkdir("./file1", 0777) = 0 [pid 5934] mount("/dev/loop4", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5931] <... ioctl resumed>) = 0 [pid 5931] close(3) = 0 [pid 5931] close(4) = 0 [pid 5931] mkdir("./file1", 0777) = 0 [ 68.273138][ T5934] loop4: detected capacity change from 0 to 32768 [ 68.273947][ T5931] loop2: detected capacity change from 0 to 32768 [ 68.623201][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 68.623553][ T5932] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 68.646451][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 68.653894][ T5932] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 68.664474][ T5931] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 68.685473][ T5934] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 68.694454][ T5930] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 68.702844][ T5932] bcachefs (loop1): Version upgrade required: [ 68.702844][ T5932] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 68.702844][ T5932] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 68.702844][ T5932] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 68.775100][ T5932] bcachefs (loop1): dropping and reconstructing all alloc info [ 68.798021][ T5932] bcachefs (loop1): check_topology... done [ 68.805207][ T5932] bcachefs (loop1): accounting_read... [ 68.806543][ T5931] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 68.845352][ T5932] done [ 68.848314][ T5932] bcachefs (loop1): alloc_read... done [ 68.856590][ T5932] bcachefs (loop1): stripes_read... done [ 68.862723][ T5932] bcachefs (loop1): snapshots_read... done [ 68.870785][ T5932] bcachefs (loop1): check_allocations... done [ 68.927539][ T5932] bcachefs (loop1): going read-write [pid 5931] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5932] <... mount resumed>) = 0 [pid 5930] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5932] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5932] chdir("./file1") = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5934] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5930] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5934] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5930] ioctl(3, LOOP_CLR_FD [pid 5934] <... openat resumed>) = 3 [pid 5932] ioctl(4, LOOP_CLR_FD [pid 5930] <... ioctl resumed>) = 0 [pid 5934] ioctl(3, LOOP_CLR_FD [pid 5930] close(3 [pid 5934] <... ioctl resumed>) = 0 [pid 5932] <... ioctl resumed>) = 0 [pid 5932] close(4) = 0 [pid 5932] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5932] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5929] <... futex resumed>) = 0 [pid 5929] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 0 [pid 5932] creat("./bus", 000 [pid 5934] close(3 [pid 5932] <... creat resumed>) = 4 [pid 5929] <... futex resumed>) = 1 [pid 5929] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5929] <... futex resumed>) = 0 [pid 5929] exit_group(0) = ? [pid 5932] +++ exited with 0 +++ [pid 5931] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5929] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=39 /* 0.39 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555582485730 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./1/binderfs") = 0 [pid 5832] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5931] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 68.981307][ T5930] bcachefs: bch2_fs_get_tree() error: EINVAL [ 69.000029][ T5932] bcachefs (loop1): done starting filesystem [ 69.006977][ T5934] bcachefs: bch2_fs_get_tree() error: EINVAL [ 69.018492][ T5931] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5931] ioctl(3, LOOP_CLR_FD) = 0 [ 69.077162][ T5832] bcachefs (loop1): shutting down [pid 5931] close(3 [pid 5834] <... umount2 resumed>) = 0 [pid 5834] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5930] <... close resumed>) = 0 [pid 5834] newfstatat(AT_FDCWD, "./1/file1", [pid 5930] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5930] <... futex resumed>) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5834] <... openat resumed>) = 4 [pid 5930] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5927] <... futex resumed>) = 0 [pid 5930] creat("./bus", 000 [pid 5927] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] <... creat resumed>) = 3 [pid 5834] newfstatat(4, "", [pid 5930] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5930] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] exit_group(0 [pid 5930] <... futex resumed>) = ? [pid 5927] <... exit_group resumed>) = ? [pid 5834] getdents64(4, [pid 5930] +++ exited with 0 +++ [pid 5834] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, [pid 5927] +++ exited with 0 +++ [ 69.099064][ T5832] bcachefs (loop1): going read-only [ 69.104355][ T5832] bcachefs (loop1): finished waiting for writes to stop [pid 5834] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5834] close(4 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 5834] <... close resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5834] rmdir("./1/file1") = 0 [pid 5834] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5834] close(3) = 0 [pid 5834] rmdir("./1") = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] mkdir("./2", 0777 [pid 5831] unlink("./2/binderfs" [pid 5834] <... mkdir resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... openat resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] ioctl(3, LOOP_CLR_FD [pid 5831] newfstatat(AT_FDCWD, "./2/bus", [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5831] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] close(3 [pid 5831] unlink("./2/bus" [pid 5834] <... close resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5966 attached ) = -1 EINVAL (Invalid argument) [pid 5966] set_robust_list(0x5555824846a0, 24 [pid 5834] <... clone resumed>, child_tidptr=0x555582484690) = 5966 [pid 5831] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5931] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./2/file1") = 0 [pid 5831] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./2") = 0 [pid 5831] mkdir("./3", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [pid 5966] <... set_robust_list resumed>) = 0 [pid 5966] chdir("./2" [pid 5931] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... chdir resumed>) = 0 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5931] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5928] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... prctl resumed>) = 0 [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] <... futex resumed>) = 0 [pid 5931] creat("./bus", 000 [pid 5928] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] setpgid(0, 0) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5931] <... creat resumed>) = 3 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5967 attached ) = 3 [pid 5931] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5967] set_robust_list(0x5555824846a0, 24 [pid 5966] write(3, "1000", 4 [pid 5931] <... futex resumed>) = 1 [pid 5928] <... futex resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 5967 [pid 5928] exit_group(0) = ? [pid 5966] <... write resumed>) = 4 [pid 5967] <... set_robust_list resumed>) = 0 [pid 5967] chdir("./3" [ 69.196557][ T5832] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [pid 5966] close(3 [pid 5967] <... chdir resumed>) = 0 [pid 5966] <... close resumed>) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs" [pid 5931] +++ exited with 0 +++ [pid 5928] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=44 /* 0.44 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5966] <... symlink resumed>) = 0 [pid 5967] <... prctl resumed>) = 0 [pid 5967] setpgid(0, 0) = 0 [pid 5966] write(1, "executing program\n", 18executing program [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5966] <... write resumed>) = 18 [pid 5967] <... openat resumed>) = 3 [pid 5966] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5967] write(3, "1000", 4 [pid 5966] <... futex resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5967] <... write resumed>) = 4 [pid 5966] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5833] getdents64(3, [pid 5967] close(3) = 0 executing program [pid 5967] symlink("/dev/binderfs", "./binderfs" [pid 5966] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5833] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5967] <... symlink resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5966] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./2/binderfs") = 0 [pid 5833] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./2/bus") = 0 [pid 5967] write(1, "executing program\n", 18 [pid 5966] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5967] <... write resumed>) = 18 [pid 5966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5967] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... mmap resumed>) = 0x7feaf8f93000 [pid 5833] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5967] <... futex resumed>) = 0 [pid 5966] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./2/file1" [pid 5966] <... mprotect resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5966] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5833] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./2" [pid 5967] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5966] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5967] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5966] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5833] <... rmdir resumed>) = 0 [pid 5967] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5833] mkdir("./3", 0777./strace-static-x86_64: Process 5968 attached [pid 5967] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 69.305093][ T12] bcachefs (loop1): bch2_write_super(): fatal error loop1: Superblock write was silently dropped! (seq 0 expected 53) [ 69.328145][ T12] bcachefs (loop1): fatal error - emergency read only [ 69.343749][ T5832] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [pid 5968] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5966] <... clone3 resumed> => {parent_tid=[5968]}, 88) = 5968 [pid 5968] <... rseq resumed>) = 0 [pid 5966] rt_sigprocmask(SIG_SETMASK, [], [pid 5968] set_robust_list(0x7feaf8fb39a0, 24 [pid 5967] <... mmap resumed>) = 0x7feaf8f93000 [pid 5966] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5968] <... set_robust_list resumed>) = 0 [pid 5966] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] rt_sigprocmask(SIG_SETMASK, [], [pid 5966] <... futex resumed>) = 0 [pid 5967] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5968] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5967] <... mprotect resumed>) = 0 [pid 5966] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5968] memfd_create("syzkaller", 0 [pid 5967] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5833] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5970 attached [pid 5967] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5968] <... memfd_create resumed>) = 3 [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 5970 [pid 5970] set_robust_list(0x5555824846a0, 24) = 0 [pid 5970] chdir("./3") = 0 [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5970] setpgid(0, 0) = 0 [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 5971 attached [pid 5968] <... mmap resumed>) = 0x7feaf0a00000 [pid 5934] <... close resumed>) = 0 [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5967] <... clone3 resumed> => {parent_tid=[5971]}, 88) = 5971 [pid 5967] rt_sigprocmask(SIG_SETMASK, [], [pid 5970] write(3, "1000", 4) = 4 [pid 5970] close(3) = 0 [pid 5970] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5971] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5967] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5934] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... rseq resumed>) = 0 [pid 5967] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] <... futex resumed>) = 1 [pid 5934] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5970] write(1, "executing program\n", 18 [pid 5967] <... futex resumed>) = 0 [pid 5971] set_robust_list(0x7feaf8fb39a0, 24) = 0 executing program [pid 5967] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5970] <... write resumed>) = 18 [pid 5970] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5970] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 5970] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 5970] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5970] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5970] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 5972 attached => {parent_tid=[5972]}, 88) = 5972 [pid 5970] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5970] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5970] <... futex resumed>) = 0 [pid 5972] <... rseq resumed>) = 0 [pid 5970] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5972] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 5971] rt_sigprocmask(SIG_SETMASK, [], [pid 5972] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5972] memfd_create("syzkaller", 0 [pid 5971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5933] <... futex resumed>) = 0 [pid 5972] <... memfd_create resumed>) = 3 [ 69.366943][ T5832] bcachefs (loop1): unshutdown complete, journal seq 13 [ 69.374905][ T5832] bcachefs (loop1): done going read-only, filesystem not clean [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 5971] memfd_create("syzkaller", 0 [pid 5933] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... memfd_create resumed>) = 3 [pid 5934] <... futex resumed>) = 0 [pid 5933] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5934] creat("./bus", 000) = 3 [pid 5934] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5934] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5933] exit_group(0 [pid 5971] <... mmap resumed>) = 0x7feaf0a00000 [pid 5934] <... futex resumed>) = ? [pid 5933] <... exit_group resumed>) = ? [pid 5934] +++ exited with 0 +++ [pid 5933] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=34 /* 0.34 s */} --- [pid 5835] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5835] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./2/binderfs") = 0 [pid 5835] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./2/bus") = 0 [pid 5835] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 69.434883][ T5832] bcachefs (loop1): shutdown complete [pid 5835] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./2/file1") = 0 [pid 5835] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./2") = 0 [pid 5835] mkdir("./3", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5973 attached , child_tidptr=0x555582484690) = 5973 [pid 5973] set_robust_list(0x5555824846a0, 24) = 0 [pid 5973] chdir("./3") = 0 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5973] setpgid(0, 0) = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [pid 5973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5973] write(1, "executing program\n", 18executing program ) = 18 [pid 5973] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 5973] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 5973] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5973] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 5974 attached => {parent_tid=[5974]}, 88) = 5974 [pid 5973] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5973] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5974] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 5974] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 5974] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5974] memfd_create("syzkaller", 0) = 3 [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5968] <... write resumed>) = 16777216 [pid 5968] munmap(0x7feaf0a00000, 138412032 [pid 5972] <... write resumed>) = 16777216 [pid 5968] <... munmap resumed>) = 0 [pid 5972] munmap(0x7feaf0a00000, 138412032 [pid 5971] <... write resumed>) = 16777216 [pid 5968] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5971] munmap(0x7feaf0a00000, 138412032 [pid 5968] <... openat resumed>) = 4 [pid 5968] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5974] <... write resumed>) = 16777216 [pid 5972] <... munmap resumed>) = 0 [pid 5971] <... munmap resumed>) = 0 [pid 5968] close(3 [pid 5974] munmap(0x7feaf0a00000, 138412032 [pid 5972] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5968] <... close resumed>) = 0 [pid 5972] <... openat resumed>) = 4 [pid 5971] <... openat resumed>) = 4 [pid 5968] close(4 [pid 5974] <... munmap resumed>) = 0 [pid 5972] ioctl(4, LOOP_SET_FD, 3 [pid 5971] ioctl(4, LOOP_SET_FD, 3 [pid 5968] <... close resumed>) = 0 [ 70.016940][ T5968] loop3: detected capacity change from 0 to 32768 [ 70.045777][ T5972] loop2: detected capacity change from 0 to 32768 [ 70.047644][ T5971] loop0: detected capacity change from 0 to 32768 [pid 5974] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5974] ioctl(4, LOOP_SET_FD, 3 [pid 5968] mkdir("./file1", 0777 [pid 5974] <... ioctl resumed>) = 0 [pid 5974] close(3) = 0 [pid 5968] <... mkdir resumed>) = 0 [pid 5974] close(4 [pid 5968] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5974] <... close resumed>) = 0 [pid 5974] mkdir("./file1", 0777) = 0 [pid 5974] mount("/dev/loop4", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5971] <... ioctl resumed>) = 0 [pid 5972] <... ioctl resumed>) = 0 [pid 5971] close(3 [pid 5972] close(3 [pid 5971] <... close resumed>) = 0 [pid 5972] <... close resumed>) = 0 [pid 5971] close(4 [pid 5972] close(4) = 0 [pid 5971] <... close resumed>) = 0 [pid 5972] mkdir("./file1", 0777 [pid 5971] mkdir("./file1", 0777) = 0 [ 70.061419][ T5974] loop4: detected capacity change from 0 to 32768 [pid 5971] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5972] <... mkdir resumed>) = 0 [ 70.378249][ T5974] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 70.399764][ T5974] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 70.408199][ T5974] bcachefs (loop4): Version upgrade required: [ 70.408199][ T5974] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 70.408199][ T5974] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 70.408199][ T5974] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 70.451542][ T5968] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 70.491263][ T5972] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 70.502240][ T5974] bcachefs (loop4): dropping and reconstructing all alloc info [ 70.510328][ T5971] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 70.510374][ T5972] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 70.519476][ T5971] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 70.526413][ T5968] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 70.556538][ T5974] bcachefs (loop4): check_topology... done [ 70.567961][ T5974] bcachefs (loop4): accounting_read... done [pid 5972] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5971] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5968] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5968] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5971] ioctl(3, LOOP_CLR_FD [pid 5968] <... openat resumed>) = 3 [pid 5971] <... ioctl resumed>) = 0 [pid 5968] ioctl(3, LOOP_CLR_FD [pid 5971] close(3 [pid 5968] <... ioctl resumed>) = 0 [ 70.631033][ T5974] bcachefs (loop4): alloc_read... done [ 70.646262][ T5968] bcachefs: bch2_fs_get_tree() error: EINVAL [ 70.653488][ T5971] bcachefs: bch2_fs_get_tree() error: EINVAL [ 70.656739][ T5974] bcachefs (loop4): stripes_read... done [ 70.697671][ T5974] bcachefs (loop4): snapshots_read... done [pid 5968] close(3 [pid 5972] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5972] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5972] ioctl(3, LOOP_CLR_FD) = 0 [ 70.703688][ T5974] bcachefs (loop4): check_allocations... [ 70.742210][ T5972] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5972] close(3 [pid 5832] <... umount2 resumed>) = 0 [ 70.839531][ T5974] done [pid 5832] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 70.871131][ T5974] bcachefs (loop4): going read-write [pid 5832] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5974] <... mount resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 5974] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5974] <... openat resumed>) = 3 [pid 5974] chdir("./file1" [pid 5832] getdents64(4, [pid 5974] <... chdir resumed>) = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5974] <... openat resumed>) = 4 [pid 5974] ioctl(4, LOOP_CLR_FD [pid 5832] getdents64(4, [pid 5974] <... ioctl resumed>) = 0 [pid 5974] close(4) = 0 [pid 5974] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5974] creat("./bus", 000 [pid 5973] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [ 70.902333][ T5974] bcachefs (loop4): done starting filesystem [pid 5832] close(4 [pid 5974] <... creat resumed>) = 4 [pid 5971] <... close resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5974] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] rmdir("./1/file1" [pid 5974] <... futex resumed>) = 1 [pid 5974] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] <... futex resumed>) = 0 [pid 5973] exit_group(0 [pid 5832] <... rmdir resumed>) = 0 [pid 5974] <... futex resumed>) = ? [pid 5973] <... exit_group resumed>) = ? [pid 5974] +++ exited with 0 +++ [pid 5973] +++ exited with 0 +++ [pid 5971] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] getdents64(3, [pid 5971] <... futex resumed>) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5967] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=35 /* 0.35 s */} --- [pid 5832] close(3 [pid 5967] <... futex resumed>) = 0 [pid 5835] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... close resumed>) = 0 [pid 5967] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5835] <... restart_syscall resumed>) = 0 [pid 5832] rmdir("./1" [pid 5971] creat("./bus", 000 [pid 5835] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... rmdir resumed>) = 0 [pid 5835] <... openat resumed>) = 3 [pid 5971] <... creat resumed>) = 3 [pid 5835] newfstatat(3, "", [pid 5832] mkdir("./2", 0777 [pid 5971] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555582485730 /* 4 entries */, 32768) = 112 [pid 5835] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./3/binderfs") = 0 [pid 5835] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5971] <... futex resumed>) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5971] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] exit_group(0 [pid 5968] <... close resumed>) = 0 [pid 5971] <... futex resumed>) = ? [pid 5967] <... exit_group resumed>) = ? [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5971] +++ exited with 0 +++ [pid 5832] <... openat resumed>) = 3 [pid 5968] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5966] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5966] <... futex resumed>) = 0 [pid 5968] creat("./bus", 000 [pid 5966] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5968] <... creat resumed>) = 3 [pid 5832] close(3 [pid 5968] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5968] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] exit_group(0 [pid 5968] <... futex resumed>) = ? [pid 5966] <... exit_group resumed>) = ? [pid 5968] +++ exited with 0 +++ [pid 5832] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5966] +++ exited with 0 +++ [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=34 /* 0.34 s */} --- [pid 5834] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 6006 attached [ 70.982644][ T5835] bcachefs (loop4): shutting down [ 70.990251][ T5835] bcachefs (loop4): going read-only [ 70.995610][ T5835] bcachefs (loop4): finished waiting for writes to stop [pid 5834] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5834] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./2/binderfs") = 0 [pid 5834] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./2/bus", [pid 6006] set_robust_list(0x5555824846a0, 24 [pid 5967] +++ exited with 0 +++ [pid 5834] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6006] <... set_robust_list resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=41 /* 0.41 s */} --- [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 6006 [pid 6006] chdir("./2" [pid 5831] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6006] <... chdir resumed>) = 0 [pid 5834] unlink("./2/bus" [pid 5831] newfstatat(AT_FDCWD, "./3/binderfs", [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6006] setpgid(0, 0 [pid 5831] unlink("./3/binderfs" [pid 6006] <... setpgid resumed>) = 0 [pid 5972] <... close resumed>) = 0 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5972] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... unlink resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5972] <... futex resumed>) = 1 [pid 6006] <... openat resumed>) = 3 [pid 6006] write(3, "1000", 4 [pid 5972] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6006] <... write resumed>) = 4 [pid 6006] close(3 [pid 5970] <... futex resumed>) = 0 [pid 5834] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6006] <... close resumed>) = 0 [pid 5970] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6006] symlink("/dev/binderfs", "./binderfs" [pid 5972] <... futex resumed>) = 0 [pid 5970] <... futex resumed>) = 1 [pid 5834] newfstatat(AT_FDCWD, "./2/file1", [pid 5831] newfstatat(AT_FDCWD, "./3/bus", [pid 6006] <... symlink resumed>) = 0 [pid 5972] creat("./bus", 000 [pid 5970] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5831] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6006] write(1, "executing program\n", 18 [pid 5972] <... creat resumed>) = 3 [pid 5834] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./3/bus" [pid 6006] <... write resumed>) = 18 [pid 5972] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5972] <... futex resumed>) = 1 [pid 5834] getdents64(4, [pid 5831] <... unlink resumed>) = 0 [pid 5834] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5972] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5834] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5834] close(4) = 0 [pid 5834] rmdir("./2/file1") = 0 [ 71.027162][ T5835] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [pid 5834] getdents64(3, [pid 6006] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] <... futex resumed>) = 0 [pid 5831] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6006] <... futex resumed>) = 0 [pid 5970] exit_group(0 [pid 6006] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5972] <... futex resumed>) = ? [pid 5970] <... exit_group resumed>) = ? [pid 5834] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5972] +++ exited with 0 +++ [pid 5831] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] close(3) = 0 [pid 5831] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] rmdir("./2" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5970] +++ exited with 0 +++ [pid 5834] <... rmdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] mkdir("./3", 0777 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5970, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=47 /* 0.47 s */} --- [pid 5831] <... openat resumed>) = 4 [pid 6006] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5834] <... mkdir resumed>) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5831] newfstatat(4, "", [pid 6006] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, [pid 5834] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5834] ioctl(3, LOOP_CLR_FD [pid 5831] close(4 [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5831] <... close resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5834] close(3 [pid 5831] rmdir("./3/file1" [pid 5834] <... close resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5833] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6008 attached ) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] <... clone resumed>, child_tidptr=0x555582484690) = 6008 [pid 5833] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5833] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6006] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5831] getdents64(3, [pid 6006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 6006] <... mmap resumed>) = 0x7feaf8f93000 [pid 6006] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5831] close(3 [pid 6008] set_robust_list(0x5555824846a0, 24 [pid 6006] <... mprotect resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 6008] <... set_robust_list resumed>) = 0 [pid 5833] unlink("./3/binderfs" [pid 6008] chdir("./3" [pid 6006] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5833] <... unlink resumed>) = 0 [pid 5831] rmdir("./3" [pid 5833] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6006] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./3/bus", [pid 5831] mkdir("./4", 0777 [pid 5833] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./3/bus") = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 6006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5833] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6008] <... chdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6006] <... clone3 resumed> => {parent_tid=[6009]}, 88) = 6009 ./strace-static-x86_64: Process 6009 attached [pid 6006] rt_sigprocmask(SIG_SETMASK, [], [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6006] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] newfstatat(AT_FDCWD, "./3/file1", [pid 5831] close(3 [pid 6006] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6006] <... futex resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 6008] <... prctl resumed>) = 0 [pid 6008] setpgid(0, 0 [pid 6006] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5833] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6008] <... setpgid resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6010 attached [pid 6009] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6008] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", [pid 6008] write(3, "1000", 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 6010 [pid 6010] set_robust_list(0x5555824846a0, 24 [pid 6008] <... write resumed>) = 4 [pid 5833] getdents64(4, [pid 6010] <... set_robust_list resumed>) = 0 [pid 6009] <... rseq resumed>) = 0 [pid 6008] close(3 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6010] chdir("./4" [pid 6009] set_robust_list(0x7feaf8fb39a0, 24 [pid 6008] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 6010] <... chdir resumed>) = 0 [pid 6009] <... set_robust_list resumed>) = 0 [pid 6008] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] close(4 [pid 6010] <... prctl resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 6010] setpgid(0, 0 [pid 6008] <... symlink resumed>) = 0 [pid 5833] rmdir("./3/file1" [pid 6010] <... setpgid resumed>) = 0 executing program [pid 6008] write(1, "executing program\n", 18 [pid 5833] <... rmdir resumed>) = 0 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6008] <... write resumed>) = 18 [pid 6008] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] <... openat resumed>) = 3 [pid 6009] rt_sigprocmask(SIG_SETMASK, [], [pid 6008] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5833] getdents64(3, [pid 6008] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5833] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 6008] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5833] close(3 [pid 6010] write(3, "1000", 4 [pid 6009] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6008] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] <... close resumed>) = 0 [pid 6010] <... write resumed>) = 4 [pid 6008] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6010] close(3 [pid 6009] memfd_create("syzkaller", 0 [pid 6008] <... mmap resumed>) = 0x7feaf8f93000 [pid 5833] rmdir("./3" [pid 6010] <... close resumed>) = 0 [pid 6008] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITEexecuting program [pid 6010] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... rmdir resumed>) = 0 [pid 6009] <... memfd_create resumed>) = 3 [pid 6010] <... symlink resumed>) = 0 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6008] <... mprotect resumed>) = 0 [pid 6010] write(1, "executing program\n", 18 [pid 6009] <... mmap resumed>) = 0x7feaf0a00000 [pid 6008] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5833] mkdir("./4", 0777 [pid 6010] <... write resumed>) = 18 [pid 6008] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 6010] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6011 attached [pid 6010] <... futex resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 6010] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6008] <... clone3 resumed> => {parent_tid=[6011]}, 88) = 6011 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6010] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6008] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 71.107147][ T3450] bcachefs (loop4): bch2_write_super(): fatal error loop4: Superblock write was silently dropped! (seq 0 expected 53) [ 71.143380][ T3450] bcachefs (loop4): fatal error - emergency read only [pid 6010] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6008] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] close(3 [pid 6010] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6008] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... close resumed>) = 0 [pid 6010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6008] <... futex resumed>) = 0 [pid 6010] <... mmap resumed>) = 0x7feaf8f93000 [pid 6008] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6011] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6011] set_robust_list(0x7feaf8fb39a0, 24 [pid 6010] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 6011] <... set_robust_list resumed>) = 0 [pid 6011] rt_sigprocmask(SIG_SETMASK, [], [pid 6010] <... mprotect resumed>) = 0 [pid 6011] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6010] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6011] memfd_create("syzkaller", 0 [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 6012 [pid 6011] <... memfd_create resumed>) = 3 [pid 6010] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 6011] <... mmap resumed>) = 0x7feaf0a00000 ./strace-static-x86_64: Process 6013 attached ./strace-static-x86_64: Process 6012 attached [pid 6013] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6010] <... clone3 resumed> => {parent_tid=[6013]}, 88) = 6013 [pid 6012] set_robust_list(0x5555824846a0, 24 [pid 6010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6010] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] set_robust_list(0x7feaf8fb39a0, 24 [pid 6010] <... futex resumed>) = 0 [pid 6013] <... set_robust_list resumed>) = 0 [pid 6010] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6013] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6013] memfd_create("syzkaller", 0) = 3 [pid 6013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 6012] <... set_robust_list resumed>) = 0 [pid 6012] chdir("./4") = 0 [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6012] setpgid(0, 0) = 0 [ 71.170936][ T5835] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 71.207417][ T5835] bcachefs (loop4): unshutdown complete, journal seq 13 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 6012] write(3, "1000", 4) = 4 [pid 6012] close(3) = 0 [pid 6012] symlink("/dev/binderfs", "./binderfs") = 0 [ 71.217845][ T5835] bcachefs (loop4): done going read-only, filesystem not clean [pid 6012] write(1, "executing program\n", 18) = 18 [pid 6012] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6012] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6012] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6012] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6012] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6012] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6014 attached [pid 6014] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6014] set_robust_list(0x7feaf8fb39a0, 24 [pid 6012] <... clone3 resumed> => {parent_tid=[6014]}, 88) = 6014 [pid 6014] <... set_robust_list resumed>) = 0 [pid 6012] rt_sigprocmask(SIG_SETMASK, [], [pid 6014] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6012] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6014] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6012] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6012] <... futex resumed>) = 0 [pid 6014] memfd_create("syzkaller", 0 [pid 6012] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6014] <... memfd_create resumed>) = 3 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 71.274259][ T5835] bcachefs (loop4): shutdown complete [pid 6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6011] <... write resumed>) = 16777216 [pid 6011] munmap(0x7feaf0a00000, 138412032 [pid 6013] <... write resumed>) = 16777216 [pid 6011] <... munmap resumed>) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6011] ioctl(4, LOOP_SET_FD, 3 [pid 6013] munmap(0x7feaf0a00000, 138412032 [pid 6011] <... ioctl resumed>) = 0 [pid 6013] <... munmap resumed>) = 0 [pid 6013] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6013] ioctl(4, LOOP_SET_FD, 3 [pid 6011] close(3) = 0 [pid 6011] close(4 [pid 6009] <... write resumed>) = 16777216 [pid 6009] munmap(0x7feaf0a00000, 138412032 [pid 6011] <... close resumed>) = 0 [pid 6011] mkdir("./file1", 0777 [pid 6013] <... ioctl resumed>) = 0 [pid 6011] <... mkdir resumed>) = 0 [pid 6013] close(3 [pid 6011] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6013] <... close resumed>) = 0 [pid 6013] close(4) = 0 [pid 6014] <... write resumed>) = 16777216 [pid 6009] <... munmap resumed>) = 0 [pid 6013] mkdir("./file1", 0777 [pid 6009] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6013] <... mkdir resumed>) = 0 [pid 6009] <... openat resumed>) = 4 [ 71.758003][ T6011] loop3: detected capacity change from 0 to 32768 [ 71.780390][ T6013] loop0: detected capacity change from 0 to 32768 [pid 6013] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6009] ioctl(4, LOOP_SET_FD, 3 [pid 6014] munmap(0x7feaf0a00000, 138412032 [pid 6009] <... ioctl resumed>) = 0 [pid 6009] close(3) = 0 [pid 6009] close(4) = 0 [pid 6014] <... munmap resumed>) = 0 [pid 6009] mkdir("./file1", 0777) = 0 [pid 6009] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6014] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6014] close(3) = 0 [pid 6014] close(4) = 0 [pid 6014] mkdir("./file1", 0777) = 0 [ 71.822763][ T6009] loop1: detected capacity change from 0 to 32768 [ 71.860970][ T6014] loop2: detected capacity change from 0 to 32768 [ 72.190866][ T6009] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 72.191170][ T6013] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 72.214618][ T6011] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 72.222057][ T6013] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 72.239690][ T6013] bcachefs (loop0): Version upgrade required: [ 72.239690][ T6013] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 72.239690][ T6013] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 72.239690][ T6013] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 72.255475][ T6011] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 72.311742][ T6009] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 72.330182][ T6013] bcachefs (loop0): dropping and reconstructing all alloc info [ 72.338213][ T6014] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 72.368638][ T6014] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 72.373506][ T6013] bcachefs (loop0): check_topology... done [ 72.389815][ T6013] bcachefs (loop0): accounting_read... done [ 72.458072][ T6013] bcachefs (loop0): alloc_read... done [ 72.476322][ T6013] bcachefs (loop0): stripes_read... done [ 72.497434][ T6013] bcachefs (loop0): snapshots_read... done [ 72.510219][ T6013] bcachefs (loop0): check_allocations... [ 72.520052][ T6011] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6014] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6011] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6009] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6011] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6011] ioctl(3, LOOP_CLR_FD) = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6011] close(3 [pid 6009] <... openat resumed>) = 3 [pid 6009] ioctl(3, LOOP_CLR_FD) = 0 [ 72.543489][ T6009] bcachefs: bch2_fs_get_tree() error: EINVAL [ 72.561915][ T6014] bcachefs: bch2_fs_get_tree() error: EINVAL [ 72.571922][ T6013] done [pid 6009] close(3 [pid 6014] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6014] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6014] ioctl(3, LOOP_CLR_FD) = 0 [pid 6014] close(3 [pid 6013] <... mount resumed>) = 0 [pid 6013] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5835] <... umount2 resumed>) = 0 [pid 6013] chdir("./file1" [pid 5835] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6013] <... chdir resumed>) = 0 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./3/file1", [pid 6013] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6013] ioctl(4, LOOP_CLR_FD) = 0 [ 72.599576][ T6013] bcachefs (loop0): going read-write [ 72.615783][ T6013] bcachefs (loop0): done starting filesystem [pid 6013] close(4 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6013] <... close resumed>) = 0 [pid 6013] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6013] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6013] creat("./bus", 000 [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6013] <... creat resumed>) = 4 [pid 5835] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6013] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6013] <... futex resumed>) = 1 [pid 6013] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6010] <... futex resumed>) = 0 [pid 6010] exit_group(0 [pid 5835] <... openat resumed>) = 4 [pid 6013] <... futex resumed>) = ? [pid 6010] <... exit_group resumed>) = ? [pid 5835] newfstatat(4, "", [pid 6013] +++ exited with 0 +++ [pid 6010] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6010, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=34 /* 0.34 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5835] close(4 [pid 5831] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] rmdir("./3/file1" [pid 5831] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] <... rmdir resumed>) = 0 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555582485730 /* 4 entries */, 32768) = 112 [pid 5831] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./4/binderfs") = 0 [pid 5831] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./3") = 0 [pid 5835] mkdir("./4", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6046 attached , child_tidptr=0x555582484690) = 6046 [pid 6046] set_robust_list(0x5555824846a0, 24) = 0 [pid 6046] chdir("./4") = 0 [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6046] setpgid(0, 0) = 0 [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6046] write(3, "1000", 4) = 4 [pid 6046] close(3) = 0 [pid 6046] symlink("/dev/binderfs", "./binderfs" [pid 6009] <... close resumed>) = 0 [pid 6009] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... symlink resumed>) = 0 [pid 6009] <... futex resumed>) = 1 [pid 6006] <... futex resumed>) = 0 [ 72.738269][ T5831] bcachefs (loop0): shutting down [ 72.743394][ T5831] bcachefs (loop0): going read-only [ 72.762265][ T5831] bcachefs (loop0): finished waiting for writes to stop [pid 6006] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 6046] write(1, "executing program\n", 18 [pid 6009] creat("./bus", 000 [pid 6006] <... futex resumed>) = 0 [pid 6046] <... write resumed>) = 18 [pid 6006] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6046] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] <... creat resumed>) = 3 [pid 6046] <... futex resumed>) = 0 [pid 6009] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6006] <... futex resumed>) = 0 [pid 6046] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6009] <... futex resumed>) = 1 [pid 6046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6006] exit_group(0 [pid 6009] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6009] <... futex resumed>) = ? [pid 6006] <... exit_group resumed>) = ? [pid 6009] +++ exited with 0 +++ [pid 6006] +++ exited with 0 +++ [pid 6046] <... mmap resumed>) = 0x7feaf8f93000 [pid 6046] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6006, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=41 /* 0.41 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6046] <... mprotect resumed>) = 0 [pid 6046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5832] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", ./strace-static-x86_64: Process 6048 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6046] <... clone3 resumed> => {parent_tid=[6048]}, 88) = 6048 [pid 5832] getdents64(3, [pid 6048] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6046] rt_sigprocmask(SIG_SETMASK, [], [pid 5832] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 6048] <... rseq resumed>) = 0 [pid 6046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6048] set_robust_list(0x7feaf8fb39a0, 24 [pid 6046] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6048] <... set_robust_list resumed>) = 0 [pid 6046] <... futex resumed>) = 0 [pid 6048] rt_sigprocmask(SIG_SETMASK, [], [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6046] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5832] newfstatat(AT_FDCWD, "./2/binderfs", [pid 6048] memfd_create("syzkaller", 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./2/binderfs") = 0 [pid 5832] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6048] <... memfd_create resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 72.824415][ T5831] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [pid 5832] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./2/bus") = 0 [pid 5832] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", [pid 6048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6048] <... mmap resumed>) = 0x7feaf0a00000 [pid 5832] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 6014] <... close resumed>) = 0 [pid 6011] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./2/file1" [pid 6014] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... rmdir resumed>) = 0 [pid 6008] <... futex resumed>) = 0 [pid 6014] <... futex resumed>) = 1 [pid 6012] <... futex resumed>) = 0 [pid 6011] <... futex resumed>) = 1 [pid 5832] getdents64(3, [pid 6014] creat("./bus", 000 [pid 6012] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6012] <... futex resumed>) = 0 [pid 6012] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... creat resumed>) = 3 [pid 6008] <... futex resumed>) = 0 [pid 6014] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] creat("./bus", 000 [pid 6008] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... futex resumed>) = 1 [pid 6012] <... futex resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 6012] exit_group(0) = ? [pid 5832] close(3) = 0 [pid 5832] rmdir("./2" [pid 6014] +++ exited with 0 +++ [pid 6012] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6012, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 6011] <... creat resumed>) = 3 [pid 5833] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5833] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./4/binderfs") = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5833] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] mkdir("./3", 0777 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... mkdir resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./4/bus", [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6011] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6011] <... futex resumed>) = 1 [pid 5833] unlink("./4/bus" [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6008] <... futex resumed>) = 0 [pid 6011] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6008] exit_group(0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6008] <... exit_group resumed>) = ? [pid 6011] <... futex resumed>) = ? [pid 5833] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(3 [pid 6011] +++ exited with 0 +++ [pid 6008] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... close resumed>) = 0 [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6008, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} --- [pid 5833] newfstatat(AT_FDCWD, "./4/file1", [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6049 attached ) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6049] set_robust_list(0x5555824846a0, 24 [pid 5834] <... openat resumed>) = 3 [pid 5833] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 6049 [pid 6049] <... set_robust_list resumed>) = 0 [pid 5834] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] getdents64(3, [pid 5833] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 6049] chdir("./3" [pid 5834] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 4 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6049] <... chdir resumed>) = 0 [pid 5834] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5833] newfstatat(4, "", [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5834] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6049] <... prctl resumed>) = 0 [pid 5834] unlink("./3/binderfs") = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6049] setpgid(0, 0 [pid 5834] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./4/file1") = 0 [pid 5833] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [ 72.928174][ T64] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [pid 5833] close(3) = 0 [pid 5833] rmdir("./4" [pid 6049] <... setpgid resumed>) = 0 [pid 5834] newfstatat(AT_FDCWD, "./3/bus", [pid 5833] <... rmdir resumed>) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5834] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] mkdir("./5", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5834] unlink("./3/bus" [pid 5833] <... openat resumed>) = 3 [pid 6049] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5834] <... unlink resumed>) = 0 [pid 6049] write(3, "1000", 4 [pid 5834] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6049] <... write resumed>) = 4 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6049] close(3 [pid 5834] newfstatat(AT_FDCWD, "./3/file1", [pid 6049] <... close resumed>) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs" [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6049] <... symlink resumed>) = 0 [pid 5834] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(3executing program [pid 6049] write(1, "executing program\n", 18 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... close resumed>) = 0 [pid 6049] <... write resumed>) = 18 [pid 5834] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6050 attached [pid 6049] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... openat resumed>) = 4 [pid 6049] <... futex resumed>) = 0 [pid 5834] newfstatat(4, "", [pid 6050] set_robust_list(0x5555824846a0, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 6050 [pid 6050] <... set_robust_list resumed>) = 0 [pid 6050] chdir("./5") = 0 [pid 6049] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6049] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5834] getdents64(4, [pid 6050] setpgid(0, 0) = 0 [pid 5834] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6049] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5834] getdents64(4, [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5834] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [ 72.986020][ T64] bcachefs (loop0): fatal error - emergency read only [pid 6049] <... mmap resumed>) = 0x7feaf8f93000 [pid 6048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5834] close(4 [pid 6049] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5834] <... close resumed>) = 0 [pid 6049] <... mprotect resumed>) = 0 [pid 5834] rmdir("./3/file1" [pid 6050] write(3, "1000", 4 [pid 5834] <... rmdir resumed>) = 0 [pid 6050] <... write resumed>) = 4 [pid 5834] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 6049] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6050] close(3executing program [pid 5834] close(3 [pid 6050] <... close resumed>) = 0 [pid 6050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6050] write(1, "executing program\n", 18) = 18 [pid 6050] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5834] <... close resumed>) = 0 [pid 6050] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 5834] rmdir("./3" [pid 6050] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5834] <... rmdir resumed>) = 0 [pid 6050] <... mmap resumed>) = 0x7feaf8f93000 [pid 6050] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6051 attached [pid 6051] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6050] <... clone3 resumed> => {parent_tid=[6051]}, 88) = 6051 [pid 6051] <... rseq resumed>) = 0 [pid 6049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5834] mkdir("./4", 0777 [pid 6051] set_robust_list(0x7feaf8fb39a0, 24 [pid 6050] rt_sigprocmask(SIG_SETMASK, [], [pid 6051] <... set_robust_list resumed>) = 0 [pid 6050] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6051] rt_sigprocmask(SIG_SETMASK, [], [pid 6050] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6052 attached [pid 6049] <... clone3 resumed> => {parent_tid=[6052]}, 88) = 6052 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6052] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6049] rt_sigprocmask(SIG_SETMASK, [], [pid 6052] <... rseq resumed>) = 0 [pid 6050] <... futex resumed>) = 0 [pid 6049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5834] <... openat resumed>) = 3 [pid 6052] set_robust_list(0x7feaf8fb39a0, 24 [pid 6050] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6049] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] ioctl(3, LOOP_CLR_FD [pid 6052] <... set_robust_list resumed>) = 0 [pid 6051] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6049] <... futex resumed>) = 0 [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6052] rt_sigprocmask(SIG_SETMASK, [], [pid 6051] memfd_create("syzkaller", 0 [pid 6049] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5834] close(3 [pid 6052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6051] <... memfd_create resumed>) = 3 [pid 5834] <... close resumed>) = 0 [pid 6051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6052] memfd_create("syzkaller", 0 [pid 6051] <... mmap resumed>) = 0x7feaf0a00000 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6052] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6053 attached [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 5834] <... clone resumed>, child_tidptr=0x555582484690) = 6053 [pid 6053] set_robust_list(0x5555824846a0, 24) = 0 [ 73.026430][ T5831] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 73.046489][ T5831] bcachefs (loop0): unshutdown complete, journal seq 14 [ 73.054682][ T5831] bcachefs (loop0): done going read-only, filesystem not clean [pid 6053] chdir("./4") = 0 [pid 6053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6053] setpgid(0, 0) = 0 [pid 6053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6053] write(3, "1000", 4) = 4 [pid 6053] close(3) = 0 [pid 6053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6053] write(1, "executing program\n", 18executing program ) = 18 [pid 6053] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6053] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6053] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [ 73.120661][ T5831] bcachefs (loop0): shutdown complete [pid 6053] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6053] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6053] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6054 attached => {parent_tid=[6054]}, 88) = 6054 [pid 6053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6053] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6053] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6054] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6054] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6054] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6054] memfd_create("syzkaller", 0) = 3 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 6052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6048] <... write resumed>) = 16777216 [pid 6048] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6048] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6048] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6048] close(3) = 0 [pid 6048] close(4) = 0 [pid 6048] mkdir("./file1", 0777) = 0 [ 73.382878][ T6048] loop4: detected capacity change from 0 to 32768 [pid 6048] mount("/dev/loop4", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6052] <... write resumed>) = 16777216 [pid 6052] munmap(0x7feaf0a00000, 138412032 [pid 6051] <... write resumed>) = 16777216 [pid 6052] <... munmap resumed>) = 0 [pid 6051] munmap(0x7feaf0a00000, 138412032 [pid 6052] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6052] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6052] close(3 [pid 6051] <... munmap resumed>) = 0 [pid 6052] <... close resumed>) = 0 [pid 6052] close(4) = 0 [pid 6052] mkdir("./file1", 0777) = 0 [pid 6051] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6051] ioctl(4, LOOP_SET_FD, 3 [pid 6052] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6051] <... ioctl resumed>) = 0 [pid 6051] close(3) = 0 [pid 6051] close(4) = 0 [pid 6051] mkdir("./file1", 0777) = 0 [ 73.576848][ T6052] loop1: detected capacity change from 0 to 32768 [ 73.604790][ T6051] loop2: detected capacity change from 0 to 32768 [pid 6051] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6054] <... write resumed>) = 16777216 [pid 6054] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6054] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6054] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6054] close(3) = 0 [pid 6054] close(4) = 0 [pid 6054] mkdir("./file1", 0777) = 0 [ 73.717589][ T6054] loop3: detected capacity change from 0 to 32768 [ 73.859165][ T6048] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 73.869039][ T6051] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 73.880432][ T6048] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 73.893275][ T6051] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 73.897683][ T6048] bcachefs (loop4): Version upgrade required: [ 73.897683][ T6048] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 73.897683][ T6048] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 73.897683][ T6048] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 73.907399][ T6048] bcachefs (loop4): dropping and reconstructing all alloc info [ 73.991463][ T6052] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 74.002138][ T6052] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 74.018802][ T6054] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 74.031056][ T6054] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 74.041185][ T6048] bcachefs (loop4): check_topology... done [ 74.062464][ T6048] bcachefs (loop4): accounting_read... done [ 74.082448][ T6048] bcachefs (loop4): alloc_read... done [ 74.091735][ T6048] bcachefs (loop4): stripes_read... done [ 74.102809][ T6048] bcachefs (loop4): snapshots_read... done [ 74.125116][ T6048] bcachefs (loop4): check_allocations... [ 74.155643][ T6052] bcachefs: bch2_fs_get_tree() error: EINVAL [ 74.167580][ T6048] done [ 74.182864][ T6048] bcachefs (loop4): going read-write [pid 6054] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6052] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6051] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6052] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6052] ioctl(3, LOOP_CLR_FD) = 0 [pid 6051] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6052] close(3 [pid 6051] <... openat resumed>) = 3 [pid 6051] ioctl(3, LOOP_CLR_FD) = 0 [pid 6048] <... mount resumed>) = 0 [pid 6051] close(3 [pid 6048] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6048] chdir("./file1") = 0 [pid 6048] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6048] ioctl(4, LOOP_CLR_FD) = 0 [pid 6048] close(4) = 0 [pid 6048] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6046] <... futex resumed>) = 0 [pid 6048] creat("./bus", 000 [ 74.205789][ T6051] bcachefs: bch2_fs_get_tree() error: EINVAL [ 74.215760][ T6048] bcachefs (loop4): done starting filesystem [pid 6046] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... creat resumed>) = 4 [pid 6046] <... futex resumed>) = 0 [pid 6046] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6046] <... futex resumed>) = 0 [pid 6046] exit_group(0) = ? [pid 6054] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6054] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6048] +++ exited with 0 +++ [pid 6046] +++ exited with 0 +++ [pid 6054] <... openat resumed>) = 3 [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6046, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=46 /* 0.46 s */} --- [pid 6054] ioctl(3, LOOP_CLR_FD [pid 5835] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6054] <... ioctl resumed>) = 0 [pid 6054] close(3 [pid 5835] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555582485730 /* 4 entries */, 32768) = 112 [ 74.276916][ T6054] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5835] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./4/binderfs") = 0 [pid 5831] <... umount2 resumed>) = 0 [pid 5835] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./4/file1") = 0 [pid 5831] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./4") = 0 [pid 5831] mkdir("./5", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582484690) = 6086 ./strace-static-x86_64: Process 6086 attached [pid 6086] set_robust_list(0x5555824846a0, 24) = 0 [pid 6086] chdir("./5") = 0 [pid 6086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6086] setpgid(0, 0) = 0 [pid 6086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6086] write(3, "1000", 4) = 4 [pid 6086] close(3) = 0 [pid 6086] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6086] write(1, "executing program\n", 18) = 18 [ 74.418648][ T5835] bcachefs (loop4): shutting down [ 74.423752][ T5835] bcachefs (loop4): going read-only [pid 6086] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6086] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6086] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6086] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6086] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} => {parent_tid=[6087]}, 88) = 6087 [pid 6086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6086] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6086] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6087 attached [pid 6087] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6087] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6052] <... close resumed>) = 0 [pid 6052] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6052] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] memfd_create("syzkaller", 0 [pid 6049] <... futex resumed>) = 0 [pid 6087] <... memfd_create resumed>) = 3 [pid 6049] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6049] <... futex resumed>) = 1 [ 74.459758][ T5835] bcachefs (loop4): finished waiting for writes to stop [pid 6052] <... futex resumed>) = 0 [pid 6087] <... mmap resumed>) = 0x7feaf0a00000 [pid 6049] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] creat("./bus", 000) = 3 [pid 6052] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... close resumed>) = 0 [pid 6052] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6052] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] exit_group(0 [pid 6052] <... futex resumed>) = ? [pid 6049] <... exit_group resumed>) = ? [pid 6052] +++ exited with 0 +++ [pid 6051] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 6051] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 6051] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6050] <... futex resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6050] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6051] creat("./bus", 000 [pid 5832] getdents64(3, [pid 6051] <... creat resumed>) = 3 [pid 5832] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 6051] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6051] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./3/binderfs") = 0 [pid 5832] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./3/bus") = 0 [pid 5832] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", [pid 6051] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] exit_group(0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6051] <... futex resumed>) = ? [pid 6050] <... exit_group resumed>) = ? [pid 5832] getdents64(4, [pid 6051] +++ exited with 0 +++ [pid 6050] +++ exited with 0 +++ [pid 5832] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6050, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} --- [pid 5832] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] close(4) = 0 [pid 5832] rmdir("./3/file1") = 0 [pid 5832] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./3") = 0 [pid 5832] mkdir("./4", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6088 attached [pid 5833] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6088] set_robust_list(0x5555824846a0, 24 [pid 5833] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 6088 [pid 6088] <... set_robust_list resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 6088] chdir("./4" [pid 5833] newfstatat(3, "", [pid 6088] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] getdents64(3, [pid 6088] <... prctl resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 6088] setpgid(0, 0 [pid 5833] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6088] <... setpgid resumed>) = 0 [ 74.534752][ T5835] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [pid 5833] newfstatat(AT_FDCWD, "./5/binderfs", [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./5/binderfs") = 0 [pid 6088] <... openat resumed>) = 3 [pid 5833] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6088] write(3, "1000", 4 [pid 6054] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6088] <... write resumed>) = 4 [pid 5833] newfstatat(AT_FDCWD, "./5/bus", [pid 6088] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6088] <... close resumed>) = 0 [pid 5833] unlink("./5/bus") = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6088] write(1, "executing program\n", 18 [pid 5833] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6088] <... write resumed>) = 18 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6088] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] newfstatat(AT_FDCWD, "./5/file1", [pid 6088] <... futex resumed>) = 0 [pid 6054] <... futex resumed>) = 1 [pid 6053] <... futex resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6053] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6054] creat("./bus", 000 [pid 6053] <... futex resumed>) = 0 [pid 5833] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6088] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6054] <... creat resumed>) = 3 [pid 6053] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6088] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6054] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6054] <... futex resumed>) = 1 [pid 6053] <... futex resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6054] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] exit_group(0 [pid 5833] newfstatat(4, "", [pid 6088] <... mmap resumed>) = 0x7feaf8f93000 [pid 6053] <... exit_group resumed>) = ? [pid 6088] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 6054] <... futex resumed>) = ? [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 6088] <... mprotect resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./5/file1" [pid 6088] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5833] <... rmdir resumed>) = 0 [pid 6088] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5833] getdents64(3, [pid 6088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5833] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 6088] <... clone3 resumed> => {parent_tid=[6089]}, 88) = 6089 [pid 5833] <... close resumed>) = 0 [pid 6088] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] rmdir("./5" [pid 6088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6088] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] mkdir("./6", 0777 [pid 6088] <... futex resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 6088] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6054] +++ exited with 0 +++ [pid 6053] +++ exited with 0 +++ [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6053, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=34 /* 0.34 s */} --- [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6089 attached [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6089] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6089] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6089] memfd_create("syzkaller", 0) = 3 [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 6090 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 ./strace-static-x86_64: Process 6090 attached [pid 6090] set_robust_list(0x5555824846a0, 24) = 0 [pid 6090] chdir("./6" [pid 5834] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 74.633862][ T3450] bcachefs (loop4): bch2_write_super(): fatal error loop4: Superblock write was silently dropped! (seq 0 expected 53) [pid 5834] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6090] <... chdir resumed>) = 0 [pid 5834] <... openat resumed>) = 3 [pid 5834] newfstatat(3, "", [pid 6090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6090] <... prctl resumed>) = 0 [pid 5834] getdents64(3, [pid 6090] setpgid(0, 0 [pid 5834] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 6090] <... setpgid resumed>) = 0 [pid 5834] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] <... openat resumed>) = 3 [pid 5834] newfstatat(AT_FDCWD, "./4/binderfs", [pid 6090] write(3, "1000", 4 [pid 5834] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6090] <... write resumed>) = 4 [pid 5834] unlink("./4/binderfs" [pid 6090] close(3 [pid 5834] <... unlink resumed>) = 0 [pid 6090] <... close resumed>) = 0 [pid 5834] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] symlink("/dev/binderfs", "./binderfs" [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] <... symlink resumed>) = 0 [pid 6087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 executing program [pid 5834] newfstatat(AT_FDCWD, "./4/bus", [pid 6090] write(1, "executing program\n", 18 [pid 5834] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6090] <... write resumed>) = 18 [pid 5834] unlink("./4/bus" [pid 6090] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5834] <... unlink resumed>) = 0 [ 74.677973][ T6007] bcachefs (loop4): unable to write journal to sufficient devices [ 74.704939][ T3450] bcachefs (loop4): fatal error - emergency read only [pid 6090] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 5834] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5834] newfstatat(AT_FDCWD, "./4/file1", ./strace-static-x86_64: Process 6091 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6090] <... clone3 resumed> => {parent_tid=[6091]}, 88) = 6091 [pid 5834] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6090] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] <... futex resumed>) = 0 [pid 6090] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5834] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6091] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5834] <... openat resumed>) = 4 [pid 6091] <... rseq resumed>) = 0 [pid 5834] newfstatat(4, "", [pid 6091] set_robust_list(0x7feaf8fb39a0, 24 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(4, [pid 6091] <... set_robust_list resumed>) = 0 [pid 5834] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, [pid 6091] rt_sigprocmask(SIG_SETMASK, [], [pid 5834] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5834] close(4 [pid 6091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5834] <... close resumed>) = 0 [pid 6091] memfd_create("syzkaller", 0 [pid 5834] rmdir("./4/file1" [pid 6091] <... memfd_create resumed>) = 3 [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5834] <... rmdir resumed>) = 0 [pid 6091] <... mmap resumed>) = 0x7feaf0a00000 [pid 5834] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5834] close(3) = 0 [pid 5834] rmdir("./4") = 0 [pid 5834] mkdir("./5", 0777) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5834] close(3) = 0 [ 74.722640][ T5835] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 74.746318][ T5835] bcachefs (loop4): unshutdown complete, journal seq 13 [ 74.754265][ T5835] bcachefs (loop4): done going read-only, filesystem not clean [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6092 attached , child_tidptr=0x555582484690) = 6092 [pid 6092] set_robust_list(0x5555824846a0, 24) = 0 [pid 6092] chdir("./5") = 0 [pid 6092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6092] setpgid(0, 0) = 0 [pid 6092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6092] write(3, "1000", 4 [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6092] <... write resumed>) = 4 [pid 6092] close(3) = 0 [pid 6092] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6092] write(1, "executing program\n", 18executing program ) = 18 [pid 6092] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6092] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6092] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6092] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6092] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6092] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6092] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6093 attached => {parent_tid=[6093]}, 88) = 6093 [pid 6093] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6092] rt_sigprocmask(SIG_SETMASK, [], [pid 6093] <... rseq resumed>) = 0 [pid 6092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6093] set_robust_list(0x7feaf8fb39a0, 24 [pid 6092] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... set_robust_list resumed>) = 0 [pid 6092] <... futex resumed>) = 0 [pid 6093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6092] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6093] memfd_create("syzkaller", 0) = 3 [pid 6093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 74.868308][ T5835] bcachefs (loop4): shutdown complete [pid 6091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6087] <... write resumed>) = 16777216 [pid 6087] munmap(0x7feaf0a00000, 138412032 [pid 6093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6087] <... munmap resumed>) = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6087] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6087] close(3) = 0 [pid 6087] close(4) = 0 [pid 6087] mkdir("./file1", 0777) = 0 [pid 6087] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6089] <... write resumed>) = 16777216 [ 75.131244][ T6087] loop0: detected capacity change from 0 to 32768 [pid 6089] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6089] close(3) = 0 [pid 6089] close(4) = 0 [pid 6089] mkdir("./file1", 0777) = 0 [ 75.208610][ T6089] loop1: detected capacity change from 0 to 32768 [pid 6089] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6091] <... write resumed>) = 16777216 [pid 6091] munmap(0x7feaf0a00000, 138412032 [pid 6093] <... write resumed>) = 16777216 [pid 6093] munmap(0x7feaf0a00000, 138412032 [pid 6091] <... munmap resumed>) = 0 [pid 6091] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6093] <... munmap resumed>) = 0 [pid 6091] <... openat resumed>) = 4 [pid 6093] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6091] ioctl(4, LOOP_SET_FD, 3 [pid 6093] ioctl(4, LOOP_SET_FD, 3 [pid 6091] <... ioctl resumed>) = 0 [pid 6091] close(3) = 0 [pid 6091] close(4) = 0 [pid 6091] mkdir("./file1", 0777 [pid 6093] <... ioctl resumed>) = 0 [pid 6093] close(3 [pid 6091] <... mkdir resumed>) = 0 [pid 6093] <... close resumed>) = 0 [pid 6091] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6093] close(4) = 0 [pid 6093] mkdir("./file1", 0777) = 0 [ 75.361172][ T6091] loop2: detected capacity change from 0 to 32768 [ 75.361291][ T6093] loop3: detected capacity change from 0 to 32768 [ 75.735939][ T6089] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 75.746435][ T6093] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 75.767781][ T6089] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 75.768681][ T6091] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 75.788222][ T6093] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 75.806745][ T6093] bcachefs (loop3): Version upgrade required: [ 75.806745][ T6093] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 75.806745][ T6093] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 75.806745][ T6093] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 75.856540][ T6091] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 75.878411][ T6087] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 75.895596][ T6087] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 6093] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6087] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6087] ioctl(3, LOOP_CLR_FD) = 0 [pid 6087] close(3 [pid 5835] <... umount2 resumed>) = 0 [pid 5835] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 75.961523][ T6093] bcachefs (loop3): dropping and reconstructing all alloc info [ 75.974434][ T6087] bcachefs: bch2_fs_get_tree() error: EINVAL [ 75.984889][ T6089] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6089] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5835] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6089] <... openat resumed>) = 3 [pid 6089] ioctl(3, LOOP_CLR_FD) = 0 [pid 5835] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] close(3 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./4/file1") = 0 [pid 5835] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./4") = 0 [pid 5835] mkdir("./5", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582484690) = 6123 ./strace-static-x86_64: Process 6123 attached [pid 6123] set_robust_list(0x5555824846a0, 24) = 0 [pid 6123] chdir("./5") = 0 [pid 6123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6123] setpgid(0, 0) = 0 [pid 6123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6123] write(3, "1000", 4) = 4 [pid 6123] close(3) = 0 [ 76.029853][ T6093] bcachefs (loop3): check_topology... done [ 76.035771][ T6093] bcachefs (loop3): accounting_read... done [pid 6123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6123] write(1, "executing program\n", 18executing program ) = 18 [ 76.092005][ T6093] bcachefs (loop3): alloc_read... done [ 76.107750][ T6091] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6123] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6123] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6091] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6123] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6091] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6091] <... openat resumed>) = 3 [pid 6123] <... mmap resumed>) = 0x7feaf8f93000 [pid 6123] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 6091] ioctl(3, LOOP_CLR_FD [pid 6123] <... mprotect resumed>) = 0 [pid 6091] <... ioctl resumed>) = 0 [pid 6123] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6091] close(3 [pid 6123] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6124 attached => {parent_tid=[6124]}, 88) = 6124 [ 76.132841][ T6093] bcachefs (loop3): stripes_read... done [ 76.151555][ T6093] bcachefs (loop3): snapshots_read... done [pid 6123] rt_sigprocmask(SIG_SETMASK, [], [pid 6124] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6124] set_robust_list(0x7feaf8fb39a0, 24 [pid 6123] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... set_robust_list resumed>) = 0 [pid 6123] <... futex resumed>) = 0 [pid 6124] rt_sigprocmask(SIG_SETMASK, [], [pid 6123] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6124] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6124] memfd_create("syzkaller", 0) = 3 [pid 6124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 6089] <... close resumed>) = 0 [pid 6089] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6089] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... futex resumed>) = 0 [pid 6088] <... futex resumed>) = 1 [pid 6089] creat("./bus", 000 [pid 6088] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... creat resumed>) = 3 [pid 6087] <... close resumed>) = 0 [ 76.177248][ T6093] bcachefs (loop3): check_allocations... done [pid 6089] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6089] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] exit_group(0) = ? [pid 6089] <... futex resumed>) = ? [pid 6089] +++ exited with 0 +++ [pid 6088] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6088, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 6087] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6087] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6086] <... futex resumed>) = 0 [pid 5832] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6086] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6087] <... futex resumed>) = 0 [pid 6086] <... futex resumed>) = 1 [pid 5832] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6087] creat("./bus", 000 [pid 6086] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... openat resumed>) = 3 [pid 5832] newfstatat(3, "", [pid 6087] <... creat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6087] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] getdents64(3, [pid 6087] <... futex resumed>) = 1 [pid 6086] <... futex resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [ 76.296537][ T6093] bcachefs (loop3): going read-write [pid 6087] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6086] exit_group(0 [pid 5832] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6086] <... exit_group resumed>) = ? [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6087] <... futex resumed>) = ? [pid 5832] unlink("./4/binderfs" [pid 6087] +++ exited with 0 +++ [pid 6086] +++ exited with 0 +++ [pid 5832] <... unlink resumed>) = 0 [pid 5832] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6086, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5832] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5832] unlink("./4/bus" [pid 5831] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... unlink resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6093] <... mount resumed>) = 0 [pid 5832] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 3 [pid 5831] newfstatat(3, "", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6093] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] newfstatat(AT_FDCWD, "./4/file1", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5831] getdents64(3, [pid 6093] <... openat resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6093] chdir("./file1" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./5/binderfs", [pid 6093] <... chdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6093] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5831] unlink("./5/binderfs" [pid 6093] <... openat resumed>) = 4 [pid 6093] ioctl(4, LOOP_CLR_FD [pid 5831] <... unlink resumed>) = 0 [pid 6093] <... ioctl resumed>) = 0 [pid 5831] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./5/bus", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5831] unlink("./5/bus" [pid 5832] newfstatat(4, "", [pid 5831] <... unlink resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] newfstatat(AT_FDCWD, "./5/file1", [ 76.333483][ T6093] bcachefs (loop3): done starting filesystem [pid 5832] getdents64(4, [pid 6093] close(4 [pid 5832] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] close(4 [pid 5831] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] rmdir("./4/file1" [pid 5831] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6093] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... openat resumed>) = 4 [pid 5832] getdents64(3, [pid 5831] newfstatat(4, "", [pid 5832] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] close(3 [pid 5831] getdents64(4, [pid 6093] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6093] <... futex resumed>) = 1 [pid 6092] <... futex resumed>) = 0 [pid 5832] rmdir("./4" [pid 5831] getdents64(4, [pid 6093] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6092] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6092] <... futex resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6092] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] mkdir("./5", 0777 [pid 5831] close(4 [pid 6093] creat("./bus", 000) = 4 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] rmdir("./5/file1" [pid 6093] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] <... rmdir resumed>) = 0 [pid 6093] <... futex resumed>) = 1 [pid 6093] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 6092] <... futex resumed>) = 0 [pid 5831] close(3 [pid 6092] exit_group(0 [pid 5832] <... openat resumed>) = 3 [pid 5831] <... close resumed>) = 0 [pid 6092] <... exit_group resumed>) = ? [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] rmdir("./5" [pid 6093] <... futex resumed>) = ? [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6093] +++ exited with 0 +++ [pid 6092] +++ exited with 0 +++ [pid 5832] close(3 [pid 5831] <... rmdir resumed>) = 0 [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6092, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 5832] <... close resumed>) = 0 [pid 5831] mkdir("./6", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5834] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... openat resumed>) = 3 [pid 5834] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6127 attached [pid 5834] newfstatat(3, "", [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 6127 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6127] set_robust_list(0x5555824846a0, 24 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6127] <... set_robust_list resumed>) = 0 [pid 5834] getdents64(3, [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5834] <... getdents64 resumed>0x555582485730 /* 4 entries */, 32768) = 112 [pid 5831] close(3 [pid 6127] chdir("./5" [pid 5834] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6127] <... chdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] newfstatat(AT_FDCWD, "./5/binderfs", ./strace-static-x86_64: Process 6128 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6128] set_robust_list(0x5555824846a0, 24) = 0 [pid 6128] chdir("./6") = 0 [pid 5834] unlink("./5/binderfs" [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 6128 [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5834] <... unlink resumed>) = 0 [pid 6128] setpgid(0, 0 [pid 5834] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6128] <... setpgid resumed>) = 0 [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6091] <... close resumed>) = 0 [pid 6128] <... openat resumed>) = 3 [pid 6128] write(3, "1000", 4 [pid 6091] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... write resumed>) = 4 [pid 6091] <... futex resumed>) = 1 [pid 6090] <... futex resumed>) = 0 [pid 6128] close(3 [pid 6091] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6090] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... close resumed>) = 0 [pid 6127] <... prctl resumed>) = 0 [pid 6091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6090] <... futex resumed>) = 0 [pid 6128] symlink("/dev/binderfs", "./binderfs" [pid 6091] creat("./bus", 000 [pid 6090] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... symlink resumed>) = 0 executing program [pid 6091] <... creat resumed>) = 3 [pid 6128] write(1, "executing program\n", 18) = 18 [pid 6127] setpgid(0, 0 [pid 6128] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6091] <... futex resumed>) = 1 [pid 6090] <... futex resumed>) = 0 [pid 6128] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6091] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6090] exit_group(0 [pid 6127] <... setpgid resumed>) = 0 [pid 6128] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6091] <... futex resumed>) = ? [pid 6090] <... exit_group resumed>) = ? [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6128] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6127] <... openat resumed>) = 3 [pid 6091] +++ exited with 0 +++ [pid 6090] +++ exited with 0 +++ [pid 6128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6127] write(3, "1000", 4 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6090, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 6128] <... mmap resumed>) = 0x7feaf8f93000 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6128] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6128] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6128] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6129 attached => {parent_tid=[6129]}, 88) = 6129 [pid 6128] rt_sigprocmask(SIG_SETMASK, [], [pid 6127] <... write resumed>) = 4 [pid 6128] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6127] close(3 [pid 6129] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5833] <... restart_syscall resumed>) = 0 [pid 6129] <... rseq resumed>) = 0 [pid 6128] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... close resumed>) = 0 [pid 6129] set_robust_list(0x7feaf8fb39a0, 24 [pid 6128] <... futex resumed>) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs" [pid 6129] <... set_robust_list resumed>) = 0 [pid 6127] <... symlink resumed>) = 0 [pid 6129] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6129] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6129] memfd_create("syzkaller", 0 [pid 5833] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 6129] <... memfd_create resumed>) = 3 [pid 5833] <... openat resumed>) = 3 [pid 6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] newfstatat(3, "", [pid 6129] <... mmap resumed>) = 0x7feaf0a00000 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6127] write(1, "executing program\n", 18 [pid 5833] getdents64(3, [pid 6128] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6127] <... write resumed>) = 18 [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 6127] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./6/binderfs") = 0 [pid 5833] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 76.452833][ T5834] bcachefs (loop3): shutting down [ 76.463396][ T5834] bcachefs (loop3): going read-only [ 76.487755][ T5834] bcachefs (loop3): finished waiting for writes to stop [pid 5833] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./6/bus") = 0 [pid 5833] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6127] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5833] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6127] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5833] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6127] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5833] getdents64(4, [pid 6127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6127] <... mmap resumed>) = 0x7feaf8f93000 [pid 6127] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5833] close(4 [pid 6127] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5833] <... close resumed>) = 0 [pid 6127] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5833] rmdir("./6/file1" [pid 6127] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5833] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, [pid 6127] <... clone3 resumed> => {parent_tid=[6130]}, 88) = 6130 ./strace-static-x86_64: Process 6130 attached [pid 6127] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 6130] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] close(3 [pid 6130] <... rseq resumed>) = 0 [pid 6127] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... close resumed>) = 0 [pid 6130] set_robust_list(0x7feaf8fb39a0, 24 [pid 6127] <... futex resumed>) = 0 [pid 5833] rmdir("./6" [pid 6130] <... set_robust_list resumed>) = 0 [pid 6127] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5833] <... rmdir resumed>) = 0 [pid 6130] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] mkdir("./7", 0777 [pid 6130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6130] memfd_create("syzkaller", 0 [pid 5833] <... openat resumed>) = 3 [ 76.498308][ T5834] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6130] <... memfd_create resumed>) = 3 [pid 6130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] close(3 [pid 6130] <... mmap resumed>) = 0x7feaf0a00000 [pid 5833] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582484690) = 6131 ./strace-static-x86_64: Process 6131 attached [pid 6131] set_robust_list(0x5555824846a0, 24) = 0 [pid 6131] chdir("./7") = 0 [pid 6131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6131] setpgid(0, 0) = 0 [pid 6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6131] write(3, "1000", 4executing program ) = 4 [pid 6131] close(3) = 0 [pid 6131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6131] write(1, "executing program\n", 18) = 18 [pid 6131] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6131] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6131] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6131] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6131] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6131] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6132 attached => {parent_tid=[6132]}, 88) = 6132 [pid 6131] rt_sigprocmask(SIG_SETMASK, [], [pid 6132] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6132] <... rseq resumed>) = 0 [pid 6131] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6132] set_robust_list(0x7feaf8fb39a0, 24 [pid 6131] <... futex resumed>) = 0 [pid 6132] <... set_robust_list resumed>) = 0 [pid 6132] rt_sigprocmask(SIG_SETMASK, [], [pid 6131] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6132] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6132] memfd_create("syzkaller", 0) = 3 [pid 6132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 76.617245][ T3450] bcachefs (loop3): bch2_write_super(): fatal error loop3: Superblock write was silently dropped! (seq 0 expected 53) [ 76.637336][ T3450] bcachefs (loop3): fatal error - emergency read only [ 76.656756][ T5834] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 76.679867][ T5834] bcachefs (loop3): unshutdown complete, journal seq 12 [ 76.697158][ T5834] bcachefs (loop3): done going read-only, filesystem not clean [pid 6129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6124] <... write resumed>) = 16777216 [ 76.743974][ T5834] bcachefs (loop3): shutdown complete [pid 6124] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6124] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6124] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6124] close(3) = 0 [pid 6124] close(4) = 0 [ 76.818183][ T6124] loop4: detected capacity change from 0 to 32768 [pid 6124] mkdir("./file1", 0777 [pid 6132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6124] <... mkdir resumed>) = 0 [pid 6124] mount("/dev/loop4", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6129] <... write resumed>) = 16777216 [pid 6129] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6129] ioctl(4, LOOP_SET_FD, 3 [pid 6130] <... write resumed>) = 16777216 [pid 6129] <... ioctl resumed>) = 0 [pid 6130] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6129] close(3 [pid 6130] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6129] <... close resumed>) = 0 [ 77.102704][ T6129] loop0: detected capacity change from 0 to 32768 [pid 6130] <... openat resumed>) = 4 [pid 6129] close(4) = 0 [pid 6130] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6132] <... write resumed>) = 16777216 [pid 6129] mkdir("./file1", 0777 [pid 6130] close(3 [pid 6132] munmap(0x7feaf0a00000, 138412032 [pid 6130] <... close resumed>) = 0 [pid 6129] <... mkdir resumed>) = 0 [pid 6130] close(4 [pid 6129] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6130] <... close resumed>) = 0 [pid 6130] mkdir("./file1", 0777) = 0 [ 77.147010][ T6130] loop1: detected capacity change from 0 to 32768 [pid 6130] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6132] <... munmap resumed>) = 0 [pid 6132] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6132] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6132] close(3) = 0 [pid 6132] close(4) = 0 [pid 6132] mkdir("./file1", 0777) = 0 [ 77.211217][ T6132] loop2: detected capacity change from 0 to 32768 [ 77.384827][ T6124] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 77.410195][ T6124] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 77.419373][ T6124] bcachefs (loop4): Version upgrade required: [ 77.419373][ T6124] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 77.419373][ T6124] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 77.419373][ T6124] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 77.497447][ T6124] bcachefs (loop4): dropping and reconstructing all alloc info [ 77.524783][ T6130] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 77.552498][ T6124] bcachefs (loop4): check_topology... done [ 77.558520][ T6124] bcachefs (loop4): accounting_read... done [ 77.565493][ T6124] bcachefs (loop4): alloc_read... done [ 77.569436][ T6130] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 77.576827][ T6129] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 77.581151][ T6124] bcachefs (loop4): stripes_read... [ 77.588585][ T6132] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 77.588736][ T6124] done [ 77.594121][ T6129] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 77.606663][ T6124] bcachefs (loop4): snapshots_read... done [ 77.629337][ T6124] bcachefs (loop4): check_allocations... [ 77.629374][ T6132] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 6132] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6130] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6130] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6130] ioctl(3, LOOP_CLR_FD) = 0 [ 77.735294][ T6124] done [ 77.743461][ T6130] bcachefs: bch2_fs_get_tree() error: EINVAL [ 77.747657][ T6124] bcachefs (loop4): going read-write [ 77.793830][ T6124] bcachefs (loop4): done starting filesystem [ 77.805653][ T6129] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6130] close(3 [pid 6124] <... mount resumed>) = 0 [pid 6129] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6124] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6124] chdir("./file1") = 0 [pid 6124] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6132] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6124] ioctl(4, LOOP_CLR_FD [pid 6129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6124] <... ioctl resumed>) = 0 [pid 6124] close(4) = 0 [pid 6124] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6123] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6123] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6129] ioctl(3, LOOP_CLR_FD [pid 6124] creat("./bus", 000 [pid 6132] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6129] <... ioctl resumed>) = 0 [ 77.835373][ T6132] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6129] close(3 [pid 6132] <... openat resumed>) = 3 [pid 6124] <... creat resumed>) = 4 [pid 6124] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6123] exit_group(0) = ? [pid 6124] +++ exited with 0 +++ [pid 6123] +++ exited with 0 +++ [pid 6132] ioctl(3, LOOP_CLR_FD [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6123, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=38 /* 0.38 s */} --- [pid 5835] restart_syscall(<... resuming interrupted clone ...> [pid 6132] <... ioctl resumed>) = 0 [pid 5835] <... restart_syscall resumed>) = 0 [pid 6132] close(3 [pid 5835] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555582485730 /* 4 entries */, 32768) = 112 [pid 5835] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./5/binderfs") = 0 [pid 5835] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] <... umount2 resumed>) = 0 [pid 5834] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5834] close(4) = 0 [pid 5834] rmdir("./5/file1") = 0 [pid 5834] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5834] close(3) = 0 [pid 5834] rmdir("./5") = 0 [pid 5834] mkdir("./6", 0777) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5834] close(3) = 0 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6164 attached [pid 6164] set_robust_list(0x5555824846a0, 24) = 0 [ 77.925629][ T5835] bcachefs (loop4): shutting down [ 77.937122][ T5835] bcachefs (loop4): going read-only [ 77.955617][ T5835] bcachefs (loop4): finished waiting for writes to stop [pid 6164] chdir("./6") = 0 [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5834] <... clone resumed>, child_tidptr=0x555582484690) = 6164 [pid 6164] setpgid(0, 0) = 0 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6164] write(3, "1000", 4) = 4 [pid 6164] close(3) = 0 [pid 6164] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6164] write(1, "executing program\n", 18) = 18 [pid 6164] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6164] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6164] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} => {parent_tid=[6165]}, 88) = 6165 [pid 6164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6165 attached [pid 6164] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... close resumed>) = 0 [pid 6130] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] <... futex resumed>) = 0 [pid 6164] <... futex resumed>) = 0 [pid 6127] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6130] <... futex resumed>) = 0 [pid 6127] <... futex resumed>) = 1 [pid 6127] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6165] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6130] creat("./bus", 000 [pid 6165] <... rseq resumed>) = 0 [pid 6165] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6130] <... creat resumed>) = 3 [pid 6165] memfd_create("syzkaller", 0 [pid 6130] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... memfd_create resumed>) = 3 [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6130] <... futex resumed>) = 1 [pid 6127] <... futex resumed>) = 0 [pid 6130] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6165] <... mmap resumed>) = 0x7feaf0a00000 [pid 6127] exit_group(0 [pid 6130] <... futex resumed>) = ? [pid 6127] <... exit_group resumed>) = ? [pid 6130] +++ exited with 0 +++ [pid 6127] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5832] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 78.017544][ T5835] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [pid 5832] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5832] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./5/binderfs") = 0 [pid 5832] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./5/bus") = 0 [pid 5832] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./5/file1") = 0 [pid 5832] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./5" [pid 6129] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5832] mkdir("./6", 0777 [pid 6129] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6128] <... futex resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 6129] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6128] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [ 78.120428][ T64] bcachefs (loop4): bch2_write_super(): fatal error loop4: Superblock write was silently dropped! (seq 0 expected 53) [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] <... openat resumed>) = 3 [pid 6129] creat("./bus", 000 [pid 6128] <... futex resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6129] <... creat resumed>) = 3 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6129] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6129] <... futex resumed>) = 0 [pid 5832] close(3 [pid 6129] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] <... close resumed>) = 0 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582484690) = 6166 [pid 6128] exit_group(0./strace-static-x86_64: Process 6166 attached ) = ? [pid 6132] <... close resumed>) = 0 [pid 6129] <... futex resumed>) = ? [pid 6166] set_robust_list(0x5555824846a0, 24) = 0 [pid 6166] chdir("./6") = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6129] +++ exited with 0 +++ [pid 6128] +++ exited with 0 +++ [pid 6166] <... prctl resumed>) = 0 [pid 6132] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6131] <... futex resumed>) = 0 [pid 6166] setpgid(0, 0 [pid 6132] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 78.173569][ T64] bcachefs (loop4): fatal error - emergency read only [ 78.193524][ T5835] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [pid 6131] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... setpgid resumed>) = 0 [pid 6132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... futex resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6128, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 6132] creat("./bus", 000 [pid 6131] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6132] <... creat resumed>) = 3 [pid 6166] <... openat resumed>) = 3 [pid 6132] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] write(3, "1000", 4 [pid 6132] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 6166] <... write resumed>) = 4 [pid 6132] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] exit_group(0 [pid 6166] close(3 [pid 6132] <... futex resumed>) = ? [pid 6131] <... exit_group resumed>) = ? [pid 6166] <... close resumed>) = 0 [pid 6132] +++ exited with 0 +++ [pid 6131] +++ exited with 0 +++ [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6166] symlink("/dev/binderfs", "./binderfs" [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6131, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=46 /* 0.46 s */} --- [pid 6166] <... symlink resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 executing program [pid 6166] write(1, "executing program\n", 18) = 18 [pid 6166] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5831] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6166] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5831] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6166] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5831] <... openat resumed>) = 3 [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 5831] newfstatat(3, "", [pid 6166] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5831] getdents64(3, [pid 6166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5833] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [pid 5831] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5833] newfstatat(3, "", [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5831] unlink("./6/binderfs" [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] <... unlink resumed>) = 0 [pid 6166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5833] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5831] newfstatat(AT_FDCWD, "./6/bus", [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6167 attached [pid 5833] unlink("./7/binderfs" [ 78.217833][ T5835] bcachefs (loop4): unshutdown complete, journal seq 15 [ 78.226763][ T5835] bcachefs (loop4): done going read-only, filesystem not clean [pid 5831] unlink("./6/bus" [pid 6167] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6166] <... clone3 resumed> => {parent_tid=[6167]}, 88) = 6167 [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5833] <... unlink resumed>) = 0 [pid 6167] <... rseq resumed>) = 0 [pid 6166] rt_sigprocmask(SIG_SETMASK, [], [pid 6167] set_robust_list(0x7feaf8fb39a0, 24 [pid 6166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... unlink resumed>) = 0 [pid 6166] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6166] <... futex resumed>) = 0 [pid 5831] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6166] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6167] <... set_robust_list resumed>) = 0 [pid 6167] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] newfstatat(AT_FDCWD, "./7/bus", [pid 6167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6167] memfd_create("syzkaller", 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./6/file1", [pid 6167] <... memfd_create resumed>) = 3 [pid 5833] unlink("./7/bus" [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6167] <... mmap resumed>) = 0x7feaf0a00000 [pid 5831] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5833] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] newfstatat(AT_FDCWD, "./7/file1", [pid 5831] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(4, "", [pid 5833] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(4, [pid 5833] <... openat resumed>) = 4 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5833] newfstatat(4, "", [pid 5831] getdents64(4, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 5833] getdents64(4, [pid 5831] <... close resumed>) = 0 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] rmdir("./6/file1" [pid 5833] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5833] close(4 [pid 5831] getdents64(3, [pid 5833] <... close resumed>) = 0 [pid 5831] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] rmdir("./7/file1") = 0 [pid 5831] close(3 [pid 5833] getdents64(3, [pid 5831] <... close resumed>) = 0 [ 78.267480][ T5835] bcachefs (loop4): shutdown complete [pid 5833] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5831] rmdir("./6" [pid 5833] close(3) = 0 [pid 5833] rmdir("./7" [pid 5831] <... rmdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5831] mkdir("./7", 0777 [pid 5833] mkdir("./8", 0777 [pid 5831] <... mkdir resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5831] close(3 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5831] <... close resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] close(3) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 6168 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6168 attached ./strace-static-x86_64: Process 6169 attached [pid 6169] set_robust_list(0x5555824846a0, 24 [pid 6168] set_robust_list(0x5555824846a0, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 6169 [pid 6169] <... set_robust_list resumed>) = 0 [pid 6168] <... set_robust_list resumed>) = 0 [pid 6169] chdir("./8" [pid 6168] chdir("./7" [pid 6169] <... chdir resumed>) = 0 [pid 6168] <... chdir resumed>) = 0 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6169] <... prctl resumed>) = 0 [pid 6168] <... prctl resumed>) = 0 [pid 6169] setpgid(0, 0 [pid 6168] setpgid(0, 0 [pid 6169] <... setpgid resumed>) = 0 [pid 6168] <... setpgid resumed>) = 0 [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program executing program [pid 6168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6168] write(3, "1000", 4) = 4 [pid 6168] close(3 [pid 6169] write(3, "1000", 4 [pid 6168] <... close resumed>) = 0 [pid 6169] <... write resumed>) = 4 [pid 6169] close(3 [pid 6168] symlink("/dev/binderfs", "./binderfs" [pid 6169] <... close resumed>) = 0 [pid 6168] <... symlink resumed>) = 0 [pid 6169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6168] write(1, "executing program\n", 18) = 18 [pid 6169] write(1, "executing program\n", 18) = 18 [pid 6168] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = 0 [pid 6168] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6168] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6169] <... futex resumed>) = 0 [pid 6168] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6169] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6169] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6168] <... mmap resumed>) = 0x7feaf8f93000 [pid 6169] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6168] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 6169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6168] <... mprotect resumed>) = 0 [pid 6169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6168] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6169] <... mmap resumed>) = 0x7feaf8f93000 [pid 6168] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6169] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 6168] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6170 attached [pid 6169] <... mprotect resumed>) = 0 [pid 6169] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6168] <... clone3 resumed> => {parent_tid=[6170]}, 88) = 6170 [pid 6168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6169] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6168] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 6168] <... futex resumed>) = 0 [pid 6170] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6168] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6171 attached [pid 6170] <... rseq resumed>) = 0 [pid 6169] <... clone3 resumed> => {parent_tid=[6171]}, 88) = 6171 [pid 6171] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6171] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6170] set_robust_list(0x7feaf8fb39a0, 24 [pid 6169] rt_sigprocmask(SIG_SETMASK, [], [pid 6170] <... set_robust_list resumed>) = 0 [pid 6169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6171] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6170] rt_sigprocmask(SIG_SETMASK, [], [pid 6169] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6169] <... futex resumed>) = 0 [pid 6171] memfd_create("syzkaller", 0 [pid 6170] memfd_create("syzkaller", 0 [pid 6169] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6171] <... memfd_create resumed>) = 3 [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6170] <... memfd_create resumed>) = 3 [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6171] <... mmap resumed>) = 0x7feaf0a00000 [pid 6170] <... mmap resumed>) = 0x7feaf0a00000 [pid 6167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6165] <... write resumed>) = 16777216 [pid 6165] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6165] <... openat resumed>) = 4 [pid 6165] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6165] close(3) = 0 [pid 6165] close(4) = 0 [pid 6165] mkdir("./file1", 0777) = 0 [ 78.647292][ T6165] loop3: detected capacity change from 0 to 32768 [pid 6165] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6167] <... write resumed>) = 16777216 [pid 6167] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6167] close(3) = 0 [pid 6167] close(4) = 0 [pid 6167] mkdir("./file1", 0777) = 0 [ 78.777586][ T6167] loop1: detected capacity change from 0 to 32768 [pid 6167] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6171] <... write resumed>) = 16777216 [pid 6170] <... write resumed>) = 16777216 [pid 6171] munmap(0x7feaf0a00000, 138412032 [pid 6170] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6171] <... munmap resumed>) = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6170] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6171] <... openat resumed>) = 4 [pid 6170] <... openat resumed>) = 4 [pid 6171] ioctl(4, LOOP_SET_FD, 3 [pid 6170] ioctl(4, LOOP_SET_FD, 3 [pid 6171] <... ioctl resumed>) = 0 [pid 6171] close(3) = 0 [pid 6170] <... ioctl resumed>) = 0 [pid 6171] close(4 [pid 6170] close(3 [pid 6171] <... close resumed>) = 0 [pid 6170] <... close resumed>) = 0 [pid 6170] close(4) = 0 [pid 6170] mkdir("./file1", 0777) = 0 [pid 6170] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6171] mkdir("./file1", 0777) = 0 [ 78.910376][ T6171] loop2: detected capacity change from 0 to 32768 [ 78.910502][ T6170] loop0: detected capacity change from 0 to 32768 [ 79.186978][ T6167] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 79.207027][ T6165] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 79.233234][ T6167] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 79.244367][ T6171] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 79.255812][ T6170] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 79.276561][ T6165] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 79.284940][ T6170] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 79.293451][ T6171] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 79.302713][ T6165] bcachefs (loop3): Version upgrade required: [ 79.302713][ T6165] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 79.302713][ T6165] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 79.302713][ T6165] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [pid 6171] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6167] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... umount2 resumed>) = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5835] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6167] <... openat resumed>) = 3 [pid 5835] newfstatat(AT_FDCWD, "./5/file1", [pid 6167] ioctl(3, LOOP_CLR_FD) = 0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6167] close(3 [pid 5835] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 79.404925][ T6165] bcachefs (loop3): dropping and reconstructing all alloc info [ 79.404999][ T6167] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5835] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./5/file1") = 0 [pid 5835] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./5" [pid 6171] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... rmdir resumed>) = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5835] mkdir("./6", 0777 [pid 6171] <... openat resumed>) = 3 [pid 5835] <... mkdir resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6171] ioctl(3, LOOP_CLR_FD [pid 5835] <... openat resumed>) = 3 [pid 6171] <... ioctl resumed>) = 0 [pid 5835] ioctl(3, LOOP_CLR_FD [pid 6171] close(3 [pid 5835] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [ 79.489502][ T6165] bcachefs (loop3): check_topology... done [ 79.502917][ T6171] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582484690) = 6201 ./strace-static-x86_64: Process 6201 attached [pid 6201] set_robust_list(0x5555824846a0, 24) = 0 [pid 6201] chdir("./6") = 0 [pid 6201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6201] setpgid(0, 0) = 0 [ 79.520634][ T6165] bcachefs (loop3): accounting_read... done [ 79.564367][ T6165] bcachefs (loop3): alloc_read... done [ 79.577484][ T6170] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6170] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6201] write(3, "1000", 4 [pid 6170] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6201] <... write resumed>) = 4 [pid 6170] <... openat resumed>) = 3 [pid 6201] close(3 [pid 6170] ioctl(3, LOOP_CLR_FD [pid 6201] <... close resumed>) = 0 [pid 6201] symlink("/dev/binderfs", "./binderfs" [pid 6170] <... ioctl resumed>) = 0 [pid 6201] <... symlink resumed>) = 0 [pid 6170] close(3 executing program [pid 6201] write(1, "executing program\n", 18) = 18 [pid 6201] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6201] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6201] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [ 79.593817][ T6165] bcachefs (loop3): stripes_read... done [ 79.606346][ T6165] bcachefs (loop3): snapshots_read... done [pid 6201] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6201] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6202 attached [pid 6202] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6201] <... clone3 resumed> => {parent_tid=[6202]}, 88) = 6202 [pid 6202] <... rseq resumed>) = 0 [pid 6202] set_robust_list(0x7feaf8fb39a0, 24 [pid 6201] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6201] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6201] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6202] <... set_robust_list resumed>) = 0 [pid 6202] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6202] memfd_create("syzkaller", 0) = 3 [pid 6202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 79.613035][ T6165] bcachefs (loop3): check_allocations... done [ 79.686100][ T6165] bcachefs (loop3): going read-write [pid 6167] <... close resumed>) = 0 [pid 6167] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 1 [pid 6167] creat("./bus", 000 [pid 6166] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... creat resumed>) = 3 [pid 6167] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] exit_group(0 [pid 6167] <... futex resumed>) = ? [pid 6166] <... exit_group resumed>) = ? [pid 6167] +++ exited with 0 +++ [pid 6166] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, [pid 6171] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5832] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./6/binderfs") = 0 [pid 5832] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6171] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] newfstatat(AT_FDCWD, "./6/bus", [pid 6171] <... futex resumed>) = 1 [pid 5832] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6171] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] <... futex resumed>) = 0 [pid 6165] <... mount resumed>) = 0 [pid 5832] unlink("./6/bus" [pid 6169] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5832] <... unlink resumed>) = 0 [pid 6171] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6165] <... openat resumed>) = 3 [pid 5832] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6171] creat("./bus", 000 [ 79.747910][ T6165] bcachefs (loop3): done starting filesystem [pid 6169] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6171] <... creat resumed>) = 3 [pid 6165] chdir("./file1" [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6171] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... chdir resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./6/file1", [pid 6171] <... futex resumed>) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6171] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] exit_group(0 [pid 6165] <... openat resumed>) = 4 [pid 5832] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6170] <... close resumed>) = 0 [pid 6171] <... futex resumed>) = ? [pid 6170] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... exit_group resumed>) = ? [pid 6165] ioctl(4, LOOP_CLR_FD [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6171] +++ exited with 0 +++ [pid 6170] <... futex resumed>) = 1 [pid 6169] +++ exited with 0 +++ [pid 6168] <... futex resumed>) = 0 [pid 6165] <... ioctl resumed>) = 0 [pid 6170] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] close(4 [pid 6170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... futex resumed>) = 0 [pid 6165] <... close resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 5832] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] creat("./bus", 000 [pid 6168] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... openat resumed>) = 4 [pid 6170] <... creat resumed>) = 3 [pid 6165] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(4, "", [pid 6170] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6170] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] getdents64(4, [pid 6168] <... futex resumed>) = 0 [pid 6165] <... futex resumed>) = 1 [pid 6164] <... futex resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6165] creat("./bus", 000 [pid 6164] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] getdents64(4, [pid 6168] exit_group(0 [pid 6164] <... futex resumed>) = 0 [pid 5832] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6164] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] close(4 [pid 6170] <... futex resumed>) = ? [pid 6168] <... exit_group resumed>) = ? [pid 5833] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 6170] +++ exited with 0 +++ [pid 6168] +++ exited with 0 +++ [pid 5833] newfstatat(3, "", [pid 5832] rmdir("./6/file1" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6168, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 6165] <... creat resumed>) = 4 [pid 5833] getdents64(3, [pid 5832] <... rmdir resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6165] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5832] getdents64(3, [pid 5831] <... restart_syscall resumed>) = 0 [pid 6165] <... futex resumed>) = 1 [pid 6164] <... futex resumed>) = 0 [pid 5833] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 6165] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] exit_group(0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] close(3 [pid 5833] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5831] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] unlink("./8/binderfs" [pid 5831] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... unlink resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5833] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(3, "", [pid 6165] <... futex resumed>) = ? [pid 6164] <... exit_group resumed>) = ? [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6165] +++ exited with 0 +++ [pid 5833] newfstatat(AT_FDCWD, "./8/bus", [pid 5831] getdents64(3, [pid 6164] +++ exited with 0 +++ [pid 5833] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] rmdir("./6" [pid 5831] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6164, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5833] unlink("./8/bus" [pid 5831] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] restart_syscall(<... resuming interrupted clone ...> [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] newfstatat(AT_FDCWD, "./8/file1", [pid 5831] unlink("./7/binderfs" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5833] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] mkdir("./7", 0777 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... restart_syscall resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] newfstatat(AT_FDCWD, "./7/bus", [pid 5832] <... mkdir resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5831] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] newfstatat(4, "", [pid 5832] <... openat resumed>) = 3 [pid 5831] unlink("./7/bus" [pid 5834] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5831] <... unlink resumed>) = 0 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(4, [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5831] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... openat resumed>) = 3 [pid 5834] newfstatat(3, "", [pid 5831] newfstatat(AT_FDCWD, "./7/file1", [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] getdents64(3, 0x555582485730 /* 4 entries */, 32768) = 112 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(4 [pid 5832] close(3 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5833] <... close resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./6/binderfs") = 0 [pid 5834] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] rmdir("./8/file1") = 0 [pid 5831] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(3, [pid 5831] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5831] newfstatat(4, "", [pid 5833] close(3) = 0 [pid 5832] <... close resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] rmdir("./8" [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... rmdir resumed>) = 0 [pid 5831] getdents64(4, [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 6205 ./strace-static-x86_64: Process 6205 attached [pid 6205] set_robust_list(0x5555824846a0, 24 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6205] <... set_robust_list resumed>) = 0 [pid 5833] mkdir("./9", 0777 [pid 5831] getdents64(4, [pid 6205] chdir("./7" [pid 5833] <... mkdir resumed>) = 0 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] close(4) = 0 [pid 5831] rmdir("./7/file1" [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 6206 [pid 5831] <... rmdir resumed>) = 0 [pid 5831] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./7"./strace-static-x86_64: Process 6206 attached [pid 6206] set_robust_list(0x5555824846a0, 24 [pid 5831] <... rmdir resumed>) = 0 [pid 6205] <... chdir resumed>) = 0 [pid 5831] mkdir("./8", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6206] <... set_robust_list resumed>) = 0 [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6206] chdir("./9" [pid 5831] close(3 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... close resumed>) = 0 [pid 6205] <... prctl resumed>) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6207 attached [pid 6205] setpgid(0, 0) = 0 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6206] <... chdir resumed>) = 0 [pid 6205] <... openat resumed>) = 3 [pid 6207] set_robust_list(0x5555824846a0, 24 [pid 6206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 6207 [pid 6206] <... prctl resumed>) = 0 [pid 6206] setpgid(0, 0) = 0 [pid 6205] write(3, "1000", 4 [pid 6207] <... set_robust_list resumed>) = 0 [pid 6207] chdir("./8" [pid 6205] <... write resumed>) = 4 [pid 6205] close(3 [pid 6207] <... chdir resumed>) = 0 [pid 6205] <... close resumed>) = 0 [pid 6207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6205] symlink("/dev/binderfs", "./binderfs" [pid 6207] <... prctl resumed>) = 0 [pid 6205] <... symlink resumed>) = 0 [pid 6206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6207] setpgid(0, 0) = 0 [pid 6207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6205] write(1, "executing program\n", 18executing program ) = 18 [pid 6205] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6207] <... openat resumed>) = 3 [pid 6205] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6207] write(3, "1000", 4 [pid 6205] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6207] <... write resumed>) = 4 [pid 6205] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6207] close(3 [pid 6205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6207] <... close resumed>) = 0 [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6207] symlink("/dev/binderfs", "./binderfs" [pid 6205] <... mmap resumed>) = 0x7feaf8f93000 executing program [pid 6207] <... symlink resumed>) = 0 [pid 6205] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 6207] write(1, "executing program\n", 18 [pid 6205] <... mprotect resumed>) = 0 [pid 6207] <... write resumed>) = 18 [pid 6205] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6206] write(3, "1000", 4 [pid 6207] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6207] <... futex resumed>) = 0 [pid 6206] <... write resumed>) = 4 [pid 6205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6208 attached [pid 6207] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6206] close(3 [pid 6207] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6205] <... clone3 resumed> => {parent_tid=[6208]}, 88) = 6208 [pid 6207] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6206] <... close resumed>) = 0 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], [pid 6207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6206] symlink("/dev/binderfs", "./binderfs" [pid 6207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6205] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 6208] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6207] <... mmap resumed>) = 0x7feaf8f93000 [pid 6205] <... futex resumed>) = 0 [pid 6208] <... rseq resumed>) = 0 [pid 6207] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 6205] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6208] set_robust_list(0x7feaf8fb39a0, 24 [pid 6207] <... mprotect resumed>) = 0 [pid 6208] <... set_robust_list resumed>) = 0 [pid 6207] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6208] rt_sigprocmask(SIG_SETMASK, [], [pid 6207] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6207] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6209 attached [pid 6208] memfd_create("syzkaller", 0 [pid 6206] <... symlink resumed>) = 0 [pid 6209] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6208] <... memfd_create resumed>) = 3 [pid 6207] <... clone3 resumed> => {parent_tid=[6209]}, 88) = 6209 [pid 6206] write(1, "executing program\n", 18 [pid 6209] <... rseq resumed>) = 0 [pid 6208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6207] rt_sigprocmask(SIG_SETMASK, [], [pid 6206] <... write resumed>) = 18 [pid 6209] set_robust_list(0x7feaf8fb39a0, 24 [pid 6208] <... mmap resumed>) = 0x7feaf0a00000 [pid 6207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6209] <... set_robust_list resumed>) = 0 [pid 6207] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] <... futex resumed>) = 0 [pid 6206] <... futex resumed>) = 0 [ 79.896534][ T5834] bcachefs (loop3): shutting down [ 79.901654][ T5834] bcachefs (loop3): going read-only [ 79.930388][ T5834] bcachefs (loop3): finished waiting for writes to stop [pid 6209] rt_sigprocmask(SIG_SETMASK, [], [pid 6207] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6206] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6206] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6209] memfd_create("syzkaller", 0 [pid 6206] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6209] <... memfd_create resumed>) = 3 [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 6206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6206] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6206] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6210 attached => {parent_tid=[6210]}, 88) = 6210 [pid 6206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6206] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6210] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6210] <... rseq resumed>) = 0 [pid 6210] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6210] memfd_create("syzkaller", 0) = 3 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 79.967224][ T5834] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 80.066346][ T3575] bcachefs (loop3): bch2_write_super(): fatal error loop3: Superblock write was silently dropped! (seq 0 expected 53) [ 80.107436][ T3575] bcachefs (loop3): fatal error - emergency read only [ 80.123973][ T5834] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 80.168991][ T5834] bcachefs (loop3): unshutdown complete, journal seq 14 [ 80.192350][ T5834] bcachefs (loop3): done going read-only, filesystem not clean [pid 6208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 80.259508][ T5834] bcachefs (loop3): shutdown complete [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6208] <... write resumed>) = 16777216 [pid 6208] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6208] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6208] close(3) = 0 [pid 6208] close(4 [pid 6202] <... write resumed>) = 16777216 [pid 6208] <... close resumed>) = 0 [pid 6202] munmap(0x7feaf0a00000, 138412032 [pid 6208] mkdir("./file1", 0777) = 0 [pid 6208] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6202] <... munmap resumed>) = 0 [pid 6202] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 80.373226][ T6208] loop1: detected capacity change from 0 to 32768 [pid 6202] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6202] close(3) = 0 [pid 6202] close(4) = 0 [pid 6202] mkdir("./file1", 0777) = 0 [ 80.413594][ T6202] loop4: detected capacity change from 0 to 32768 [pid 6202] mount("/dev/loop4", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6210] <... write resumed>) = 16777216 [pid 6210] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6209] <... write resumed>) = 16777216 [pid 6210] ioctl(4, LOOP_SET_FD, 3 [pid 6209] munmap(0x7feaf0a00000, 138412032 [pid 6210] <... ioctl resumed>) = 0 [pid 6210] close(3 [pid 6209] <... munmap resumed>) = 0 [pid 6210] <... close resumed>) = 0 [pid 6210] close(4 [pid 6209] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6210] <... close resumed>) = 0 [pid 6210] mkdir("./file1", 0777) = 0 [pid 6209] <... openat resumed>) = 4 [pid 6209] ioctl(4, LOOP_SET_FD, 3 [pid 6210] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6209] <... ioctl resumed>) = 0 [pid 6209] close(3) = 0 [pid 6209] close(4) = 0 [pid 6209] mkdir("./file1", 0777) = 0 [ 80.590453][ T6210] loop2: detected capacity change from 0 to 32768 [ 80.615211][ T6209] loop0: detected capacity change from 0 to 32768 [ 80.899816][ T6210] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 80.909399][ T6202] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 80.930766][ T6210] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 80.938983][ T6208] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 80.957020][ T6202] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 80.965221][ T6202] bcachefs (loop4): Version upgrade required: [ 80.965221][ T6202] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 80.965221][ T6202] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 80.965221][ T6202] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 80.973496][ T6208] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 81.049317][ T6209] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 81.071492][ T6202] bcachefs (loop4): dropping and reconstructing all alloc info [ 81.071566][ T6209] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 81.113795][ T6202] bcachefs (loop4): check_topology... done [ 81.137389][ T6202] bcachefs (loop4): accounting_read... done [pid 6209] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 5834] <... umount2 resumed>) = 0 [pid 5834] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 81.171506][ T6202] bcachefs (loop4): alloc_read... done [ 81.189951][ T6202] bcachefs (loop4): stripes_read... done [ 81.200939][ T6202] bcachefs (loop4): snapshots_read... done [pid 5834] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6209] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5834] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [ 81.224320][ T6202] bcachefs (loop4): check_allocations... [ 81.248722][ T6209] bcachefs: bch2_fs_get_tree() error: EINVAL [ 81.251679][ T6202] done [ 81.264045][ T6210] bcachefs: bch2_fs_get_tree() error: EINVAL [ 81.277422][ T6202] bcachefs (loop4): going read-write [ 81.283496][ T6208] bcachefs: bch2_fs_get_tree() error: EINVAL [ 81.293117][ T6202] bcachefs (loop4): done starting filesystem [pid 6210] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6209] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6208] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5834] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5834] close(4) = 0 [pid 6210] <... openat resumed>) = 3 [pid 5834] rmdir("./6/file1" [pid 6210] ioctl(3, LOOP_CLR_FD [pid 5834] <... rmdir resumed>) = 0 [pid 6210] <... ioctl resumed>) = 0 [pid 6210] close(3 [pid 6209] <... openat resumed>) = 3 [pid 5834] getdents64(3, [pid 6209] ioctl(3, LOOP_CLR_FD [pid 5834] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 6209] <... ioctl resumed>) = 0 [pid 5834] close(3 [pid 6209] close(3 [pid 5834] <... close resumed>) = 0 [pid 5834] rmdir("./6") = 0 [pid 5834] mkdir("./7", 0777) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5834] close(3) = 0 [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582484690) = 6242 ./strace-static-x86_64: Process 6242 attached [pid 6242] set_robust_list(0x5555824846a0, 24) = 0 [pid 6242] chdir("./7" [pid 6208] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6202] <... mount resumed>) = 0 [pid 6208] ioctl(3, LOOP_CLR_FD [pid 6202] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6208] <... ioctl resumed>) = 0 [pid 6208] close(3 [pid 6242] <... chdir resumed>) = 0 [pid 6202] <... openat resumed>) = 3 [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6242] setpgid(0, 0) = 0 [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6202] chdir("./file1") = 0 [pid 6202] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6242] write(3, "1000", 4) = 4 [pid 6242] close(3) = 0 [pid 6242] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6242] write(1, "executing program\n", 18) = 18 [pid 6242] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6202] <... openat resumed>) = 4 [pid 6242] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6242] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6242] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6242] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6202] ioctl(4, LOOP_CLR_FD [pid 6242] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} => {parent_tid=[6243]}, 88) = 6243 [pid 6242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6242] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6243 attached [pid 6202] <... ioctl resumed>) = 0 [pid 6202] close(4 [pid 6243] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6202] <... close resumed>) = 0 [pid 6243] <... rseq resumed>) = 0 [pid 6202] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6243] set_robust_list(0x7feaf8fb39a0, 24 [pid 6202] creat("./bus", 000 [pid 6201] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... set_robust_list resumed>) = 0 [pid 6201] <... futex resumed>) = 0 [pid 6243] rt_sigprocmask(SIG_SETMASK, [], [pid 6202] <... creat resumed>) = 4 [pid 6201] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6202] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6243] memfd_create("syzkaller", 0 [pid 6202] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] exit_group(0 [pid 6243] <... memfd_create resumed>) = 3 [pid 6202] <... futex resumed>) = ? [pid 6201] <... exit_group resumed>) = ? [pid 6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6202] +++ exited with 0 +++ [pid 6201] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6201, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=40 /* 0.40 s */} --- [pid 5835] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5835] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555582485730 /* 4 entries */, 32768) = 112 [pid 5835] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6243] <... mmap resumed>) = 0x7feaf0a00000 [pid 5835] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./6/binderfs") = 0 [ 81.468275][ T5835] bcachefs (loop4): shutting down [ 81.473368][ T5835] bcachefs (loop4): going read-only [ 81.506355][ T5835] bcachefs (loop4): finished waiting for writes to stop [pid 5835] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6209] <... close resumed>) = 0 [pid 6208] <... close resumed>) = 0 [pid 6209] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... futex resumed>) = 1 [pid 6208] <... futex resumed>) = 1 [pid 6209] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6208] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] <... futex resumed>) = 0 [pid 6205] <... futex resumed>) = 1 [pid 6208] <... futex resumed>) = 0 [pid 6208] creat("./bus", 000) = 3 [pid 6208] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6208] <... futex resumed>) = 0 [pid 6208] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6207] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] exit_group(0 [pid 6209] <... futex resumed>) = 0 [pid 6207] <... futex resumed>) = 1 [pid 6209] creat("./bus", 000) = 3 [pid 6209] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... close resumed>) = 0 [pid 6209] <... futex resumed>) = 0 [pid 6207] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6205] <... exit_group resumed>) = ? [pid 6208] <... futex resumed>) = ? [pid 6208] +++ exited with 0 +++ [ 81.542602][ T5835] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [pid 6209] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] +++ exited with 0 +++ [pid 6207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=36 /* 0.36 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6207] exit_group(0 [pid 6209] <... futex resumed>) = ? [pid 6207] <... exit_group resumed>) = ? [pid 6209] +++ exited with 0 +++ [pid 6207] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6207, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6210] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6206] <... futex resumed>) = 0 [pid 6206] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5831] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6210] creat("./bus", 000 [pid 5832] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6210] <... creat resumed>) = 3 [pid 5832] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6210] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] newfstatat(3, "", [pid 5831] <... openat resumed>) = 3 [pid 6210] <... futex resumed>) = 1 [pid 6206] <... futex resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] newfstatat(3, "", [pid 6210] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] exit_group(0 [pid 5832] getdents64(3, [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6210] <... futex resumed>) = ? [pid 6206] <... exit_group resumed>) = ? [pid 5832] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 6210] +++ exited with 0 +++ [pid 5832] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./8/binderfs" [pid 6206] +++ exited with 0 +++ [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... unlink resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6206, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 5832] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5831] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] unlink("./7/binderfs" [pid 5831] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] unlink("./8/bus" [pid 5832] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... unlink resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] newfstatat(AT_FDCWD, "./7/bus", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(AT_FDCWD, "./8/file1", [pid 5832] unlink("./7/bus" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] newfstatat(AT_FDCWD, "./7/file1", [pid 5831] <... openat resumed>) = 4 [pid 5833] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] newfstatat(4, "", [pid 5832] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(3, "", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] getdents64(4, [pid 5833] getdents64(3, [pid 5832] <... openat resumed>) = 4 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5832] newfstatat(4, "", [pid 5831] getdents64(4, [pid 5833] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(4, [pid 5831] close(4 [pid 5833] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5832] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] getdents64(4, [pid 5831] rmdir("./8/file1" [pid 5833] unlink("./9/binderfs" [pid 5832] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5832] close(4 [pid 5833] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5831] getdents64(3, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] rmdir("./7/file1" [pid 5831] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(AT_FDCWD, "./9/bus", [pid 5831] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... close resumed>) = 0 [pid 5833] unlink("./9/bus" [pid 5832] <... rmdir resumed>) = 0 [pid 5831] rmdir("./8" [pid 5833] <... unlink resumed>) = 0 [pid 5832] getdents64(3, [pid 5833] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... rmdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(AT_FDCWD, "./9/file1", [pid 5832] close(3 [pid 5831] mkdir("./9", 0777 [pid 5832] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] rmdir("./7" [pid 5831] <... mkdir resumed>) = 0 [pid 5833] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... rmdir resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] <... openat resumed>) = 4 [pid 5832] mkdir("./8", 0777 [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] newfstatat(4, "", [pid 5831] close(3 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5833] getdents64(4, [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6244 attached [pid 5833] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 6244 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./9/file1" [pid 6244] set_robust_list(0x5555824846a0, 24 [pid 5833] <... rmdir resumed>) = 0 [pid 6244] <... set_robust_list resumed>) = 0 [pid 5833] getdents64(3, [pid 6244] chdir("./9" [pid 5833] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6244] <... chdir resumed>) = 0 [pid 5833] close(3 [pid 6244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... close resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6244] <... prctl resumed>) = 0 [pid 5833] rmdir("./9" [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6244] setpgid(0, 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6244] <... setpgid resumed>) = 0 [ 81.630811][ T3575] bcachefs (loop4): bch2_write_super(): fatal error loop4: Superblock write was silently dropped! (seq 0 expected 53) [pid 5833] mkdir("./10", 0777 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] close(3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5832] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 ./strace-static-x86_64: Process 6245 attached [pid 6244] <... openat resumed>) = 3 [pid 6245] set_robust_list(0x5555824846a0, 24) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6245] chdir("./8"./strace-static-x86_64: Process 6246 attached ) = 0 [pid 6244] write(3, "1000", 4 [pid 6243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 6246 [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 6245 [pid 6246] set_robust_list(0x5555824846a0, 24 [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6244] <... write resumed>) = 4 [pid 6245] <... prctl resumed>) = 0 [pid 6244] close(3 [pid 6245] setpgid(0, 0executing program [pid 6246] <... set_robust_list resumed>) = 0 [pid 6245] <... setpgid resumed>) = 0 [pid 6244] <... close resumed>) = 0 [pid 6246] chdir("./10" [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6244] symlink("/dev/binderfs", "./binderfs" [pid 6245] <... openat resumed>) = 3 [pid 6245] write(3, "1000", 4 [pid 6244] <... symlink resumed>) = 0 [pid 6246] <... chdir resumed>) = 0 [pid 6244] write(1, "executing program\n", 18 [pid 6246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6244] <... write resumed>) = 18 [pid 6245] <... write resumed>) = 4 [pid 6244] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... prctl resumed>) = 0 [pid 6244] <... futex resumed>) = 0 [pid 6245] close(3 [pid 6244] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6246] setpgid(0, 0 [pid 6244] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6246] <... setpgid resumed>) = 0 [pid 6245] <... close resumed>) = 0 [pid 6244] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6245] symlink("/dev/binderfs", "./binderfs" [pid 6246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6244] <... rt_sigprocmask resumed>NULL, 8) = 0 executing program [pid 6245] <... symlink resumed>) = 0 [pid 6244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6245] write(1, "executing program\n", 18) = 18 [pid 6244] <... mmap resumed>) = 0x7feaf8f93000 [pid 6245] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 6246] <... openat resumed>) = 3 [pid 6246] write(3, "1000", 4 [pid 6245] <... futex resumed>) = 0 [pid 6244] <... mprotect resumed>) = 0 [pid 6245] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6245] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6244] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6246] <... write resumed>) = 4 [pid 6246] close(3 [pid 6245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6244] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6246] <... close resumed>) = 0 [pid 6245] <... mmap resumed>) = 0x7feaf8f93000 [pid 6244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 6245] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} => {parent_tid=[6247]}, 88) = 6247 [pid 6245] rt_sigprocmask(SIG_SETMASK, [], [pid 6246] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6248 attached [pid 6245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6245] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6244] <... clone3 resumed> => {parent_tid=[6248]}, 88) = 6248 [pid 6245] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6247 attached [pid 6246] <... symlink resumed>) = 0 [pid 6248] <... rseq resumed>) = 0 [pid 6244] rt_sigprocmask(SIG_SETMASK, [], [pid 6247] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6248] set_robust_list(0x7feaf8fb39a0, 24 [pid 6247] <... rseq resumed>) = 0 [pid 6247] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6247] memfd_create("syzkaller", 0 [pid 6248] <... set_robust_list resumed>) = 0 [pid 6247] <... memfd_create resumed>) = 3 [pid 6244] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6248] rt_sigprocmask(SIG_SETMASK, [], [pid 6244] <... futex resumed>) = 0 [pid 6248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6247] <... mmap resumed>) = 0x7feaf0a00000 [pid 6248] memfd_create("syzkaller", 0 [pid 6246] write(1, "executing program\n", 18 [pid 6244] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} executing program [pid 6248] <... memfd_create resumed>) = 3 [pid 6246] <... write resumed>) = 18 [pid 6248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 6246] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6246] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6246] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [ 81.672874][ T3575] bcachefs (loop4): fatal error - emergency read only [ 81.687298][ T5835] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 81.697793][ T5835] bcachefs (loop4): unshutdown complete, journal seq 13 [ 81.705720][ T5835] bcachefs (loop4): done going read-only, filesystem not clean [pid 6246] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6246] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6249 attached [pid 6249] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6249] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6249] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6246] <... clone3 resumed> => {parent_tid=[6249]}, 88) = 6249 [pid 6246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6246] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6249] <... futex resumed>) = 0 [pid 6246] <... futex resumed>) = 1 [pid 6249] memfd_create("syzkaller", 0) = 3 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 81.773245][ T5835] bcachefs (loop4): shutdown complete [pid 6246] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6243] <... write resumed>) = 16777216 [pid 6243] munmap(0x7feaf0a00000, 138412032 [pid 6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6243] <... munmap resumed>) = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6243] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6243] close(3) = 0 [pid 6243] close(4) = 0 [pid 6243] mkdir("./file1", 0777) = 0 [ 82.038893][ T3673] cfg80211: failed to load regulatory.db [ 82.063701][ T6243] loop3: detected capacity change from 0 to 32768 [pid 6243] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6247] <... write resumed>) = 16777216 [pid 6247] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6247] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6247] ioctl(4, LOOP_SET_FD, 3 [pid 6248] <... write resumed>) = 16777216 [pid 6248] munmap(0x7feaf0a00000, 138412032 [pid 6247] <... ioctl resumed>) = 0 [pid 6247] close(3 [pid 6249] <... write resumed>) = 16777216 [pid 6247] <... close resumed>) = 0 [pid 6247] close(4 [pid 6249] munmap(0x7feaf0a00000, 138412032 [pid 6248] <... munmap resumed>) = 0 [pid 6247] <... close resumed>) = 0 [pid 6247] mkdir("./file1", 0777) = 0 [pid 6247] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 82.247939][ T6247] loop1: detected capacity change from 0 to 32768 [pid 6248] ioctl(4, LOOP_SET_FD, 3 [pid 6249] <... munmap resumed>) = 0 [pid 6248] <... ioctl resumed>) = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6248] close(3 [pid 6249] <... openat resumed>) = 4 [pid 6248] <... close resumed>) = 0 [pid 6249] ioctl(4, LOOP_SET_FD, 3 [pid 6248] close(4) = 0 [pid 6248] mkdir("./file1", 0777) = 0 [pid 6248] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6249] <... ioctl resumed>) = 0 [pid 6249] close(3) = 0 [pid 6249] close(4) = 0 [pid 6249] mkdir("./file1", 0777) = 0 [ 82.289882][ T6248] loop0: detected capacity change from 0 to 32768 [ 82.307648][ T6249] loop2: detected capacity change from 0 to 32768 [ 82.652308][ T6243] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 82.658994][ T6249] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 82.683025][ T6243] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 82.686673][ T6248] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 82.691945][ T6243] bcachefs (loop3): Version upgrade required: [ 82.691945][ T6243] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 82.691945][ T6243] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 82.691945][ T6243] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 82.722399][ T6248] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 82.780373][ T6247] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 82.790956][ T6247] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 82.796753][ T6249] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 82.871982][ T6243] bcachefs (loop3): dropping and reconstructing all alloc info [pid 6249] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6248] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6249] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6248] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 82.935124][ T6248] bcachefs: bch2_fs_get_tree() error: EINVAL [ 82.952277][ T6249] bcachefs: bch2_fs_get_tree() error: EINVAL [ 82.959090][ T6243] bcachefs (loop3): check_topology... done [pid 6249] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6249] ioctl(3, LOOP_CLR_FD [pid 6248] <... openat resumed>) = 3 [pid 6248] ioctl(3, LOOP_CLR_FD) = 0 [pid 6248] close(3 [pid 6249] <... ioctl resumed>) = 0 [ 82.974882][ T6243] bcachefs (loop3): accounting_read... done [ 82.998466][ T6243] bcachefs (loop3): alloc_read... done [ 83.017041][ T6247] bcachefs: bch2_fs_get_tree() error: EINVAL [ 83.024374][ T6243] bcachefs (loop3): stripes_read... done [pid 6249] close(3 [pid 6247] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6247] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6247] ioctl(3, LOOP_CLR_FD) = 0 [pid 6247] close(3 [pid 5835] <... umount2 resumed>) = 0 [pid 5835] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 83.066603][ T6243] bcachefs (loop3): snapshots_read... done [pid 5835] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./6/file1") = 0 [pid 5835] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./6") = 0 [ 83.073234][ T6243] bcachefs (loop3): check_allocations... done [ 83.149248][ T6243] bcachefs (loop3): going read-write [pid 5835] mkdir("./7", 0777) = 0 [pid 6243] <... mount resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6243] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5835] <... openat resumed>) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6243] <... openat resumed>) = 3 [pid 6243] chdir("./file1" [pid 5835] close(3 [pid 6243] <... chdir resumed>) = 0 [pid 5835] <... close resumed>) = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6281 attached [pid 6243] <... openat resumed>) = 4 [pid 6243] ioctl(4, LOOP_CLR_FD [pid 5835] <... clone resumed>, child_tidptr=0x555582484690) = 6281 [pid 6243] <... ioctl resumed>) = 0 [pid 6281] set_robust_list(0x5555824846a0, 24 [pid 6243] close(4 [pid 6281] <... set_robust_list resumed>) = 0 [pid 6243] <... close resumed>) = 0 [pid 6281] chdir("./7" [pid 6243] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] <... chdir resumed>) = 0 [pid 6243] <... futex resumed>) = 1 [pid 6242] <... futex resumed>) = 0 [pid 6243] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6242] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] <... futex resumed>) = 0 [pid 6281] <... prctl resumed>) = 0 [pid 6243] creat("./bus", 000 [ 83.177585][ T6243] bcachefs (loop3): done starting filesystem [pid 6242] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6281] setpgid(0, 0 [pid 6243] <... creat resumed>) = 4 [pid 6281] <... setpgid resumed>) = 0 executing program [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6243] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] write(3, "1000", 4) = 4 [pid 6243] <... futex resumed>) = 1 [pid 6281] close(3 [pid 6242] <... futex resumed>) = 0 [pid 6281] <... close resumed>) = 0 [pid 6242] exit_group(0 [pid 6281] symlink("/dev/binderfs", "./binderfs" [pid 6242] <... exit_group resumed>) = ? [pid 6281] <... symlink resumed>) = 0 [pid 6281] write(1, "executing program\n", 18) = 18 [pid 6281] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6243] +++ exited with 0 +++ [pid 6242] +++ exited with 0 +++ [pid 6281] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6242, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- [pid 6281] <... mmap resumed>) = 0x7feaf8f93000 [pid 6281] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5834] restart_syscall(<... resuming interrupted clone ...> [pid 6281] <... mprotect resumed>) = 0 [pid 5834] <... restart_syscall resumed>) = 0 [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5834] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6282 attached ) = 3 [pid 6281] <... clone3 resumed> => {parent_tid=[6282]}, 88) = 6282 [pid 5834] newfstatat(3, "", [pid 6282] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6281] rt_sigprocmask(SIG_SETMASK, [], [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5834] getdents64(3, [pid 6282] <... rseq resumed>) = 0 [pid 6281] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... getdents64 resumed>0x555582485730 /* 4 entries */, 32768) = 112 [pid 5834] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./7/binderfs" [pid 6281] <... futex resumed>) = 0 [pid 5834] <... unlink resumed>) = 0 [pid 6282] set_robust_list(0x7feaf8fb39a0, 24 [pid 6281] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5834] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6282] <... set_robust_list resumed>) = 0 [pid 6282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6282] memfd_create("syzkaller", 0 [pid 6249] <... close resumed>) = 0 [pid 6282] <... memfd_create resumed>) = 3 [pid 6249] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6249] <... futex resumed>) = 1 [pid 6246] <... futex resumed>) = 0 [pid 6249] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6246] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] <... mmap resumed>) = 0x7feaf0a00000 [pid 6249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6246] <... futex resumed>) = 0 [pid 6249] creat("./bus", 000 [pid 6246] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6249] <... creat resumed>) = 3 [pid 6249] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6246] <... futex resumed>) = 0 [pid 6246] exit_group(0) = ? [pid 6249] +++ exited with 0 +++ [pid 6246] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6246, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=40 /* 0.40 s */} --- [pid 6248] <... close resumed>) = 0 [ 83.279874][ T5834] bcachefs (loop3): shutting down [ 83.287932][ T5834] bcachefs (loop3): going read-only [ 83.301229][ T5834] bcachefs (loop3): finished waiting for writes to stop [pid 6248] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", [pid 6248] <... futex resumed>) = 1 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5833] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./10/binderfs") = 0 [pid 5833] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./10/bus") = 0 [pid 6244] <... futex resumed>) = 0 [pid 5833] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6244] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6244] <... futex resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./10/file1", [pid 6244] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6248] creat("./bus", 000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6248] <... creat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./10/file1") = 0 [pid 5833] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./10") = 0 [pid 5833] mkdir("./11", 0777 [pid 6248] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6248] <... futex resumed>) = 1 [pid 6244] <... futex resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 6244] exit_group(0 [pid 6247] <... close resumed>) = 0 [pid 6244] <... exit_group resumed>) = ? [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6248] +++ exited with 0 +++ [pid 6244] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6244, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 5831] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6283 attached [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 6283 [pid 6283] set_robust_list(0x5555824846a0, 24 [pid 6247] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6247] <... futex resumed>) = 1 [pid 6245] <... futex resumed>) = 0 [pid 5831] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6283] <... set_robust_list resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6283] chdir("./11" [pid 5831] newfstatat(AT_FDCWD, "./9/binderfs", [pid 6283] <... chdir resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5831] unlink("./9/binderfs" [pid 6283] <... prctl resumed>) = 0 [pid 6247] creat("./bus", 000 [pid 6245] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] <... unlink resumed>) = 0 [pid 6245] <... futex resumed>) = 0 [pid 5831] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6247] <... creat resumed>) = 3 [pid 6245] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./9/bus" [ 83.326687][ T5834] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [pid 6247] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6245] <... futex resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 6245] exit_group(0 [pid 6247] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6247] <... futex resumed>) = ? [pid 6245] <... exit_group resumed>) = ? [pid 6247] +++ exited with 0 +++ [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", [pid 6245] +++ exited with 0 +++ [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6245, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=40 /* 0.40 s */} --- [pid 5831] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5831] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./9/file1") = 0 [pid 5831] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 6283] setpgid(0, 0 [pid 5831] close(3 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 6283] <... setpgid resumed>) = 0 [pid 5831] rmdir("./9" [pid 6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5831] <... rmdir resumed>) = 0 [pid 6283] <... openat resumed>) = 3 [pid 5832] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6283] write(3, "1000", 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] mkdir("./10", 0777 [pid 6283] <... write resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... mkdir resumed>) = 0 [pid 6283] close(3 [pid 5832] <... openat resumed>) = 3 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6283] <... close resumed>) = 0 [pid 5832] newfstatat(3, "", [pid 5831] <... openat resumed>) = 3 [pid 6283] symlink("/dev/binderfs", "./binderfs" [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 6283] <... symlink resumed>) = 0 [pid 5832] getdents64(3, [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6283] write(1, "executing program\n", 18executing program [pid 5832] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] close(3 [pid 6283] <... write resumed>) = 18 [pid 5832] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6283] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] <... close resumed>) = 0 [pid 6283] <... futex resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6283] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5832] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6283] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6284 attached [pid 6283] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5832] unlink("./8/binderfs" [pid 6283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555582484690) = 6284 [pid 6284] set_robust_list(0x5555824846a0, 24 [pid 6283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5832] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6283] <... mmap resumed>) = 0x7feaf8f93000 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6284] <... set_robust_list resumed>) = 0 [pid 6283] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5832] newfstatat(AT_FDCWD, "./8/bus", [pid 6284] chdir("./10" [pid 6283] <... mprotect resumed>) = 0 [pid 6283] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6284] <... chdir resumed>) = 0 [pid 6283] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5832] unlink("./8/bus"./strace-static-x86_64: Process 6285 attached [pid 6284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] <... unlink resumed>) = 0 [pid 6285] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6284] <... prctl resumed>) = 0 [pid 6283] <... clone3 resumed> => {parent_tid=[6285]}, 88) = 6285 [pid 5832] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6285] <... rseq resumed>) = 0 [pid 6284] setpgid(0, 0 [pid 6283] rt_sigprocmask(SIG_SETMASK, [], [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6285] set_robust_list(0x7feaf8fb39a0, 24 [pid 6284] <... setpgid resumed>) = 0 [pid 6283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] <... set_robust_list resumed>) = 0 [pid 6284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6283] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] newfstatat(AT_FDCWD, "./8/file1", [pid 6285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6285] memfd_create("syzkaller", 0) = 3 [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 6283] <... futex resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6284] <... openat resumed>) = 3 [pid 6283] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5832] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6284] write(3, "1000", 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6284] <... write resumed>) = 4 [pid 5832] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6284] close(3 [pid 5832] <... openat resumed>) = 4 [pid 5832] newfstatat(4, "", [pid 6284] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6284] symlink("/dev/binderfs", "./binderfs" [pid 5832] getdents64(4, [pid 6284] <... symlink resumed>) = 0 [pid 5832] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 executing program [pid 6284] write(1, "executing program\n", 18 [pid 5832] getdents64(4, [pid 6284] <... write resumed>) = 18 [pid 5832] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6284] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] close(4 [pid 6284] <... futex resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 6284] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5832] rmdir("./8/file1" [pid 6284] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5832] <... rmdir resumed>) = 0 [ 83.451347][ T12] bcachefs (loop3): bch2_write_super(): fatal error loop3: Superblock write was silently dropped! (seq 0 expected 53) [pid 6284] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5832] getdents64(3, [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5832] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 6284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5832] close(3 [pid 6284] <... mmap resumed>) = 0x7feaf8f93000 [pid 5832] <... close resumed>) = 0 [pid 6284] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5832] rmdir("./8" [pid 6284] <... mprotect resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 6284] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5832] mkdir("./9", 0777 [pid 6284] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} => {parent_tid=[6286]}, 88) = 6286 [pid 5832] <... mkdir resumed>) = 0 [pid 6284] rt_sigprocmask(SIG_SETMASK, [], [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5832] <... openat resumed>) = 3 [pid 6284] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6284] <... futex resumed>) = 0 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6284] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5832] close(3./strace-static-x86_64: Process 6286 attached ) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6287 attached [pid 6287] set_robust_list(0x5555824846a0, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 6287 [pid 6287] <... set_robust_list resumed>) = 0 [pid 6287] chdir("./9") = 0 [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6287] setpgid(0, 0) = 0 [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6287] write(3, "1000", 4 [ 83.496678][ T12] bcachefs (loop3): fatal error - emergency read only [ 83.516440][ T5834] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [pid 6286] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6287] <... write resumed>) = 4 [pid 6286] <... rseq resumed>) = 0 [pid 6286] set_robust_list(0x7feaf8fb39a0, 24 [pid 6287] close(3 [pid 6286] <... set_robust_list resumed>) = 0 [pid 6287] <... close resumed>) = 0 [pid 6287] symlink("/dev/binderfs", "./binderfs" [pid 6286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6286] memfd_create("syzkaller", 0) = 3 [pid 6286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 83.541019][ T5834] bcachefs (loop3): unshutdown complete, journal seq 14 [pid 6287] <... symlink resumed>) = 0 [pid 6287] write(1, "executing program\n", 18) = 18 executing program [pid 6287] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6287] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6287] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6287] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} => {parent_tid=[6288]}, 88) = 6288 [pid 6287] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6287] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6288 attached [pid 6288] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6288] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6288] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6288] memfd_create("syzkaller", 0) = 3 [pid 6288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 83.567170][ T5834] bcachefs (loop3): done going read-only, filesystem not clean [ 83.628770][ T5834] bcachefs (loop3): shutdown complete [pid 6282] <... write resumed>) = 16777216 [pid 6282] munmap(0x7feaf0a00000, 138412032 [pid 6285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6282] <... munmap resumed>) = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6282] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6282] close(3) = 0 [pid 6282] close(4) = 0 [pid 6282] mkdir("./file1", 0777) = 0 [pid 6282] mount("/dev/loop4", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [ 83.788268][ T6282] loop4: detected capacity change from 0 to 32768 [pid 6288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6286] <... write resumed>) = 16777216 [pid 6286] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6286] ioctl(4, LOOP_SET_FD, 3 [pid 6285] <... write resumed>) = 16777216 [pid 6285] munmap(0x7feaf0a00000, 138412032 [pid 6286] <... ioctl resumed>) = 0 [pid 6286] close(3 [pid 6288] <... write resumed>) = 16777216 [pid 6286] <... close resumed>) = 0 [pid 6285] <... munmap resumed>) = 0 [pid 6288] munmap(0x7feaf0a00000, 138412032 [pid 6286] close(4 [pid 6285] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6288] <... munmap resumed>) = 0 [pid 6286] <... close resumed>) = 0 [pid 6286] mkdir("./file1", 0777 [pid 6285] <... openat resumed>) = 4 [pid 6286] <... mkdir resumed>) = 0 [ 84.031298][ T6286] loop0: detected capacity change from 0 to 32768 [pid 6286] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6288] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6285] ioctl(4, LOOP_SET_FD, 3 [pid 6288] <... openat resumed>) = 4 [pid 6288] ioctl(4, LOOP_SET_FD, 3 [pid 6285] <... ioctl resumed>) = 0 [pid 6285] close(3) = 0 [pid 6285] close(4 [pid 6288] <... ioctl resumed>) = 0 [pid 6285] <... close resumed>) = 0 [pid 6285] mkdir("./file1", 0777 [pid 6288] close(3 [pid 6285] <... mkdir resumed>) = 0 [pid 6285] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6288] <... close resumed>) = 0 [pid 6288] close(4) = 0 [pid 6288] mkdir("./file1", 0777) = 0 [ 84.094364][ T6285] loop2: detected capacity change from 0 to 32768 [ 84.101915][ T6288] loop1: detected capacity change from 0 to 32768 [ 84.252916][ T6282] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 84.274301][ T6282] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 84.282476][ T6282] bcachefs (loop4): Version upgrade required: [ 84.282476][ T6282] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 84.282476][ T6282] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 84.282476][ T6282] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 84.305081][ T6286] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 84.363301][ T6282] bcachefs (loop4): dropping and reconstructing all alloc info [ 84.372831][ T6286] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 84.376611][ T6285] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 84.389140][ T6282] bcachefs (loop4): check_topology... done [ 84.400754][ T6282] bcachefs (loop4): accounting_read... [ 84.400983][ T6285] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 84.415440][ T6282] done [ 84.425142][ T6282] bcachefs (loop4): alloc_read... done [ 84.439457][ T6288] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 84.453078][ T6282] bcachefs (loop4): stripes_read... done [ 84.483933][ T6282] bcachefs (loop4): snapshots_read... done [ 84.490301][ T6282] bcachefs (loop4): check_allocations... [ 84.493466][ T6288] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 6288] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6286] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6286] ioctl(3, LOOP_CLR_FD) = 0 [ 84.546777][ T6286] bcachefs: bch2_fs_get_tree() error: EINVAL [ 84.569232][ T6282] done [ 84.616666][ T6282] bcachefs (loop4): going read-write [pid 6286] close(3 [pid 6285] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6285] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6282] <... mount resumed>) = 0 [pid 6285] <... openat resumed>) = 3 [pid 6282] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6285] ioctl(3, LOOP_CLR_FD [pid 6282] <... openat resumed>) = 3 [pid 6282] chdir("./file1" [pid 6285] <... ioctl resumed>) = 0 [pid 6282] <... chdir resumed>) = 0 [pid 6285] close(3 [pid 6282] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6288] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... umount2 resumed>) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6288] ioctl(3, LOOP_CLR_FD) = 0 [ 84.681307][ T6285] bcachefs: bch2_fs_get_tree() error: EINVAL [ 84.695947][ T6288] bcachefs: bch2_fs_get_tree() error: EINVAL [ 84.702317][ T6282] bcachefs (loop4): done starting filesystem [pid 6288] close(3 [pid 6282] <... openat resumed>) = 4 [pid 5834] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6282] ioctl(4, LOOP_CLR_FD [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6282] <... ioctl resumed>) = 0 [pid 5834] newfstatat(AT_FDCWD, "./7/file1", [pid 6282] close(4 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6282] <... close resumed>) = 0 [pid 5834] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6282] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6282] <... futex resumed>) = 1 [pid 6281] <... futex resumed>) = 0 [pid 5834] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6281] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] creat("./bus", 000 [pid 6281] <... futex resumed>) = 0 [pid 5834] <... openat resumed>) = 4 [pid 6281] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6282] <... creat resumed>) = 4 [pid 5834] newfstatat(4, "", [pid 6282] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6282] <... futex resumed>) = 1 [pid 6281] <... futex resumed>) = 0 [pid 5834] getdents64(4, [pid 6282] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6281] exit_group(0 [pid 5834] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5834] close(4) = 0 [pid 5834] rmdir("./7/file1" [pid 6282] <... futex resumed>) = ? [pid 6281] <... exit_group resumed>) = ? [pid 6282] +++ exited with 0 +++ [pid 6281] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} --- [pid 5835] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] <... rmdir resumed>) = 0 [pid 5835] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5834] close(3 [pid 5835] <... openat resumed>) = 3 [pid 5834] <... close resumed>) = 0 [pid 5835] newfstatat(3, "", [pid 5834] rmdir("./7" [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] <... rmdir resumed>) = 0 [pid 5835] getdents64(3, [pid 5834] mkdir("./8", 0777 [pid 6286] <... close resumed>) = 0 [pid 5835] <... getdents64 resumed>0x555582485730 /* 4 entries */, 32768) = 112 [pid 5834] <... mkdir resumed>) = 0 [pid 5835] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] <... openat resumed>) = 3 [pid 5835] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5834] ioctl(3, LOOP_CLR_FD [pid 5835] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5835] unlink("./7/binderfs" [pid 5834] close(3 [pid 5835] <... unlink resumed>) = 0 [pid 5834] <... close resumed>) = 0 [pid 5835] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6320 attached [pid 6286] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] set_robust_list(0x5555824846a0, 24 [pid 5834] <... clone resumed>, child_tidptr=0x555582484690) = 6320 [pid 6320] <... set_robust_list resumed>) = 0 [pid 6320] chdir("./8" [pid 6286] <... futex resumed>) = 1 [pid 6284] <... futex resumed>) = 0 [pid 6320] <... chdir resumed>) = 0 [pid 6284] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6284] <... futex resumed>) = 0 [pid 6320] <... prctl resumed>) = 0 [pid 6284] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6320] setpgid(0, 0) = 0 [pid 6286] creat("./bus", 000 [pid 6320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6286] <... creat resumed>) = 3 [pid 6320] write(3, "1000", 4 [pid 6286] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000executing program ) = 1 [pid 6284] <... futex resumed>) = 0 [pid 6284] exit_group(0 [pid 6320] <... write resumed>) = 4 [pid 6284] <... exit_group resumed>) = ? [pid 6320] close(3) = 0 [pid 6320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6320] write(1, "executing program\n", 18) = 18 [pid 6320] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6320] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6320] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6320] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6286] +++ exited with 0 +++ [pid 6284] +++ exited with 0 +++ [pid 6320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6284, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- ./strace-static-x86_64: Process 6321 attached [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 6321] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6320] <... clone3 resumed> => {parent_tid=[6321]}, 88) = 6321 [pid 6321] <... rseq resumed>) = 0 [pid 6320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 6320] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6320] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5831] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6321] set_robust_list(0x7feaf8fb39a0, 24 [pid 5831] <... openat resumed>) = 3 [pid 6321] <... set_robust_list resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 6321] rt_sigprocmask(SIG_SETMASK, [], [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5831] getdents64(3, [pid 6321] memfd_create("syzkaller", 0 [pid 5831] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5831] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./10/binderfs") = 0 [pid 5831] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6321] <... memfd_create resumed>) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] newfstatat(AT_FDCWD, "./10/bus", [pid 6321] <... mmap resumed>) = 0x7feaf0a00000 [pid 5831] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./10/bus") = 0 [pid 5831] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./10/file1") = 0 [pid 5831] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./10") = 0 [pid 5831] mkdir("./11", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6322 attached , child_tidptr=0x555582484690) = 6322 [ 84.868467][ T5835] bcachefs (loop4): shutting down [ 84.873628][ T5835] bcachefs (loop4): going read-only [pid 6322] set_robust_list(0x5555824846a0, 24) = 0 [pid 6322] chdir("./11") = 0 [pid 6322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6322] setpgid(0, 0) = 0 [pid 6322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 6322] write(3, "1000", 4) = 4 [pid 6322] close(3) = 0 [pid 6322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6322] write(1, "executing program\n", 18) = 18 [pid 6322] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6322] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6322] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6322] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6322] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} => {parent_tid=[6323]}, 88) = 6323 [pid 6322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6322] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6323 attached [pid 6322] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6285] <... close resumed>) = 0 [pid 6323] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6288] <... close resumed>) = 0 [ 84.921409][ T5835] bcachefs (loop4): finished waiting for writes to stop [pid 6288] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] <... rseq resumed>) = 0 [pid 6288] <... futex resumed>) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6323] set_robust_list(0x7feaf8fb39a0, 24 [pid 6288] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] <... set_robust_list resumed>) = 0 [pid 6288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 6288] creat("./bus", 000 [pid 6287] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6323] rt_sigprocmask(SIG_SETMASK, [], [pid 6288] <... creat resumed>) = 3 [pid 6285] <... futex resumed>) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6283] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6288] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... futex resumed>) = 0 [pid 6287] exit_group(0) = ? [pid 6288] <... futex resumed>) = ? [pid 6323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] creat("./bus", 000 [pid 6288] +++ exited with 0 +++ [pid 6287] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=36 /* 0.36 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 6285] <... creat resumed>) = 3 [pid 6323] memfd_create("syzkaller", 0 [pid 6285] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] <... memfd_create resumed>) = 3 [pid 6285] <... futex resumed>) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6285] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] exit_group(0 [pid 6323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6283] <... exit_group resumed>) = ? [pid 6285] <... futex resumed>) = ? [pid 6323] <... mmap resumed>) = 0x7feaf0a00000 [pid 5832] <... restart_syscall resumed>) = 0 [pid 6285] +++ exited with 0 +++ [pid 6283] +++ exited with 0 +++ [pid 5832] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6283, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} --- [pid 5833] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... openat resumed>) = 3 [pid 5832] <... openat resumed>) = 3 [pid 5833] newfstatat(3, "", [pid 5832] newfstatat(3, "", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, [pid 5832] getdents64(3, [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5832] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 5833] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5832] unlink("./9/binderfs" [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5833] unlink("./11/binderfs" [pid 5832] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./9/bus") = 0 [pid 5832] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [ 84.968134][ T5835] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [pid 5832] close(4) = 0 [pid 5832] rmdir("./9/file1") = 0 [pid 5832] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [pid 5832] close(3 [pid 5833] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./9") = 0 [pid 5832] mkdir("./10", 0777) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] newfstatat(AT_FDCWD, "./11/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5833] unlink("./11/bus") = 0 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] close(3 [pid 5833] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6324 attached [pid 6324] set_robust_list(0x5555824846a0, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 6324 [pid 6324] <... set_robust_list resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./11/file1", [pid 6324] chdir("./10" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6324] <... chdir resumed>) = 0 [pid 5833] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6324] <... prctl resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6324] setpgid(0, 0 [pid 5833] <... openat resumed>) = 4 [pid 6324] <... setpgid resumed>) = 0 [pid 5833] newfstatat(4, "", [pid 6324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 6324] <... openat resumed>) = 3 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6324] write(3, "1000", 4 [pid 5833] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6324] <... write resumed>) = 4 [pid 5833] close(4 [pid 6324] close(3 [pid 5833] <... close resumed>) = 0 [pid 6324] <... close resumed>) = 0 [pid 6324] symlink("/dev/binderfs", "./binderfs" [pid 5833] rmdir("./11/file1" [pid 6324] <... symlink resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 6324] write(1, "executing program\n", 18executing program [pid 5833] getdents64(3, 0x555582485730 /* 0 entries */, 32768) = 0 [ 85.077628][ T3450] bcachefs (loop4): bch2_write_super(): fatal error loop4: Superblock write was silently dropped! (seq 0 expected 53) [ 85.117329][ T6007] bcachefs (loop4): unable to write journal to sufficient devices [pid 5833] close(3 [pid 6324] <... write resumed>) = 18 [pid 5833] <... close resumed>) = 0 [pid 6324] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] rmdir("./11" [pid 6324] <... futex resumed>) = 0 [pid 6324] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5833] <... rmdir resumed>) = 0 [pid 6324] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5833] mkdir("./12", 0777 [pid 6324] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5833] <... mkdir resumed>) = 0 [pid 6324] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 85.117604][ T3450] bcachefs (loop4): fatal error - emergency read only [pid 6324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6324] <... mmap resumed>) = 0x7feaf8f93000 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6324] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6324] <... mprotect resumed>) = 0 [pid 5833] close(3 [pid 6324] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5833] <... close resumed>) = 0 [pid 6324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6324] <... clone3 resumed> => {parent_tid=[6326]}, 88) = 6326 [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 6325 ./strace-static-x86_64: Process 6326 attached [pid 6326] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053) = 0 [pid 6324] rt_sigprocmask(SIG_SETMASK, [], [pid 6326] set_robust_list(0x7feaf8fb39a0, 24) = 0 [pid 6326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6326] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6325 attached [pid 6325] set_robust_list(0x5555824846a0, 24) = 0 [pid 6325] chdir("./12" [pid 6324] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] <... chdir resumed>) = 0 [pid 6325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6325] setpgid(0, 0) = 0 [pid 6325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6324] <... futex resumed>) = 1 [pid 6326] <... futex resumed>) = 0 [pid 6326] memfd_create("syzkaller", 0) = 3 [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [pid 6324] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6325] <... openat resumed>) = 3 [pid 6325] write(3, "1000", 4) = 4 [pid 6325] close(3) = 0 [pid 6325] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6325] write(1, "executing program\n", 18) = 18 [pid 6325] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6325] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6325] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6327 attached [ 85.156605][ T5835] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 => {parent_tid=[6327]}, 88) = 6327 [pid 6325] rt_sigprocmask(SIG_SETMASK, [], [pid 6327] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6327] <... rseq resumed>) = 0 [pid 6325] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] set_robust_list(0x7feaf8fb39a0, 24 [pid 6325] <... futex resumed>) = 0 [pid 6327] <... set_robust_list resumed>) = 0 [pid 6325] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6327] memfd_create("syzkaller", 0) = 3 [pid 6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 85.206491][ T5835] bcachefs (loop4): unshutdown complete, journal seq 13 [ 85.214477][ T5835] bcachefs (loop4): done going read-only, filesystem not clean [ 85.296819][ T5835] bcachefs (loop4): shutdown complete [pid 6327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6321] <... write resumed>) = 16777216 [pid 6321] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6323] <... write resumed>) = 16777216 [pid 6321] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6321] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6321] close(3) = 0 [pid 6321] close(4) = 0 [pid 6323] munmap(0x7feaf0a00000, 138412032 [pid 6321] mkdir("./file1", 0777 [pid 6323] <... munmap resumed>) = 0 [pid 6321] <... mkdir resumed>) = 0 [pid 6321] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [ 85.507580][ T6321] loop3: detected capacity change from 0 to 32768 [pid 6323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6323] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6323] close(3) = 0 [pid 6323] close(4) = 0 [pid 6323] mkdir("./file1", 0777) = 0 [ 85.580061][ T6323] loop0: detected capacity change from 0 to 32768 [pid 6323] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6326] <... write resumed>) = 16777216 [pid 6326] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6326] ioctl(4, LOOP_SET_FD, 3 [pid 6327] <... write resumed>) = 16777216 [pid 6326] <... ioctl resumed>) = 0 [pid 6327] munmap(0x7feaf0a00000, 138412032 [pid 6326] close(3) = 0 [pid 6326] close(4 [pid 6327] <... munmap resumed>) = 0 [pid 6327] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6326] <... close resumed>) = 0 [pid 6327] <... openat resumed>) = 4 [pid 6326] mkdir("./file1", 0777) = 0 [pid 6326] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [ 85.684099][ T6326] loop1: detected capacity change from 0 to 32768 [pid 6327] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6327] close(3) = 0 [pid 6327] close(4) = 0 [pid 6327] mkdir("./file1", 0777) = 0 [ 85.744094][ T6327] loop2: detected capacity change from 0 to 32768 [ 86.099481][ T6323] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 86.106477][ T6321] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 86.132306][ T6321] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 86.134372][ T6327] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 86.162588][ T6326] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 86.167205][ T6323] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 86.180162][ T6323] bcachefs (loop0): Version upgrade required: [ 86.180162][ T6323] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 86.180162][ T6323] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 86.180162][ T6323] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 86.276343][ T6326] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 86.297044][ T6327] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 6327] mount("/dev/loop2", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6321] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6321] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6321] ioctl(3, LOOP_CLR_FD) = 0 [ 86.344763][ T6321] bcachefs: bch2_fs_get_tree() error: EINVAL [ 86.382233][ T6323] bcachefs (loop0): dropping and reconstructing all alloc info [pid 6321] close(3 [pid 6326] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 86.452295][ T6326] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6326] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6326] ioctl(3, LOOP_CLR_FD) = 0 [ 86.492325][ T6323] bcachefs (loop0): check_topology... done [ 86.500710][ T6323] bcachefs (loop0): accounting_read... [ 86.509969][ T6327] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6326] close(3 [pid 6327] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 6327] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6327] ioctl(3, LOOP_CLR_FD) = 0 [ 86.553734][ T6323] done [ 86.557280][ T6323] bcachefs (loop0): alloc_read... done [ 86.562831][ T6323] bcachefs (loop0): stripes_read... done [pid 6327] close(3 [pid 5835] <... umount2 resumed>) = 0 [pid 5835] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", [pid 6321] <... close resumed>) = 0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, [pid 6321] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6321] <... futex resumed>) = 1 [pid 6320] <... futex resumed>) = 0 [pid 5835] getdents64(4, [pid 6321] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6320] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6320] <... futex resumed>) = 0 [pid 5835] close(4 [pid 6321] creat("./bus", 000 [pid 6320] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5835] <... close resumed>) = 0 [pid 5835] rmdir("./7/file1" [pid 6321] <... creat resumed>) = 3 [pid 5835] <... rmdir resumed>) = 0 [ 86.600172][ T6323] bcachefs (loop0): snapshots_read... done [pid 5835] getdents64(3, [pid 6321] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 6321] <... futex resumed>) = 1 [pid 6320] <... futex resumed>) = 0 [pid 5835] close(3 [pid 6321] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6320] exit_group(0 [pid 5835] <... close resumed>) = 0 [pid 5835] rmdir("./7" [pid 6321] <... futex resumed>) = ? [pid 6320] <... exit_group resumed>) = ? [pid 6321] +++ exited with 0 +++ [pid 6320] +++ exited with 0 +++ [pid 5835] <... rmdir resumed>) = 0 [pid 5835] mkdir("./8", 0777 [pid 5834] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6320, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [pid 5834] restart_syscall(<... resuming interrupted clone ...> [pid 5835] <... mkdir resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5834] <... restart_syscall resumed>) = 0 [pid 5835] <... openat resumed>) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD [pid 5834] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6326] <... close resumed>) = 0 [pid 5835] close(3 [pid 5834] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6326] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... close resumed>) = 0 [pid 6326] <... futex resumed>) = 1 [pid 6324] <... futex resumed>) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] <... openat resumed>) = 3 [pid 6324] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] newfstatat(3, "", [pid 6324] <... futex resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6324] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] getdents64(3, ./strace-static-x86_64: Process 6357 attached [pid 6326] creat("./bus", 000 [pid 5835] <... clone resumed>, child_tidptr=0x555582484690) = 6357 [pid 5834] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 6326] <... creat resumed>) = 3 [pid 5834] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6357] set_robust_list(0x5555824846a0, 24 [pid 6326] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] unlink("./8/binderfs") = 0 [pid 5834] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] newfstatat(AT_FDCWD, "./8/bus", [pid 6357] <... set_robust_list resumed>) = 0 [pid 6326] <... futex resumed>) = 1 [pid 6324] <... futex resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6357] chdir("./8" [pid 6326] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] exit_group(0 [pid 5834] unlink("./8/bus" [pid 6357] <... chdir resumed>) = 0 [pid 6326] <... futex resumed>) = ? [pid 6324] <... exit_group resumed>) = ? [pid 5834] <... unlink resumed>) = 0 [pid 6357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6326] +++ exited with 0 +++ [pid 6324] +++ exited with 0 +++ [pid 5834] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6357] <... prctl resumed>) = 0 [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] setpgid(0, 0 [pid 5834] newfstatat(AT_FDCWD, "./8/file1", [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6324, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- [pid 6357] <... setpgid resumed>) = 0 [pid 5834] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5834] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5834] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5834] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] getdents64(4, 0x55558248d770 /* 2 entries */, 32768) = 48 [pid 5834] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6357] <... openat resumed>) = 3 [pid 6357] write(3, "1000", 4 [pid 5832] <... restart_syscall resumed>) = 0 [pid 6357] <... write resumed>) = 4 [pid 5832] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6357] close(3) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] symlink("/dev/binderfs", "./binderfs" [pid 5832] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6357] <... symlink resumed>) = 0 [pid 6357] write(1, "executing program\n", 18 [pid 5832] newfstatat(3, "", executing program [ 86.618294][ T6323] bcachefs (loop0): check_allocations... done [ 86.733049][ T6323] bcachefs (loop0): going read-write [pid 6357] <... write resumed>) = 18 [pid 5834] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6357] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] getdents64(3, 0x555582485730 /* 5 entries */, 32768) = 136 [pid 5832] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./10/binderfs") = 0 [pid 5832] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] <... close resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./10/bus", [pid 5834] rmdir("./8/file1" [pid 5832] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5834] <... rmdir resumed>) = 0 [pid 5832] unlink("./10/bus" [pid 6357] <... futex resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 6357] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 5832] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6357] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5832] newfstatat(AT_FDCWD, "./10/file1", [pid 6357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6357] <... mmap resumed>) = 0x7feaf8f93000 [pid 5832] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6357] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5834] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6357] <... mprotect resumed>) = 0 [pid 6327] <... close resumed>) = 0 [pid 6323] <... mount resumed>) = 0 [pid 5834] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5832] <... openat resumed>) = 4 [pid 6357] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5834] close(3 [pid 5832] newfstatat(4, "", [pid 5834] <... close resumed>) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5834] rmdir("./8" [pid 5832] getdents64(4, [pid 6357] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6327] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5834] <... rmdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 6327] <... futex resumed>) = 1 [pid 6325] <... futex resumed>) = 0 [pid 6323] <... openat resumed>) = 3 [pid 5834] mkdir("./9", 0777 [pid 5832] getdents64(4, ./strace-static-x86_64: Process 6360 attached [pid 6327] creat("./bus", 000 [pid 6325] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] chdir("./file1" [pid 5834] <... mkdir resumed>) = 0 [pid 5832] <... getdents64 resumed>0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6360] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6327] <... creat resumed>) = 3 [pid 6325] <... futex resumed>) = 0 [pid 6323] <... chdir resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5832] close(4 [pid 6360] <... rseq resumed>) = 0 [pid 6327] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... openat resumed>) = 3 [pid 5832] <... close resumed>) = 0 [pid 6360] set_robust_list(0x7feaf8fb39a0, 24 [pid 6325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5834] ioctl(3, LOOP_CLR_FD [pid 5832] rmdir("./10/file1" [pid 6360] <... set_robust_list resumed>) = 0 [pid 6325] exit_group(0 [pid 5834] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5832] <... rmdir resumed>) = 0 [pid 6360] rt_sigprocmask(SIG_SETMASK, [], [pid 6325] <... exit_group resumed>) = ? [pid 5834] close(3 [pid 5832] getdents64(3, [pid 6360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5834] <... close resumed>) = 0 [pid 5832] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 6360] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5834] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] close(3) = 0 ./strace-static-x86_64: Process 6361 attached [pid 6361] set_robust_list(0x5555824846a0, 24 [pid 6323] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5832] rmdir("./10" [pid 6361] <... set_robust_list resumed>) = 0 [pid 5834] <... clone resumed>, child_tidptr=0x555582484690) = 6361 [pid 5832] <... rmdir resumed>) = 0 [pid 6361] chdir("./9") = 0 [pid 6357] <... clone3 resumed> => {parent_tid=[6360]}, 88) = 6360 [pid 6327] <... futex resumed>) = ? [pid 6323] <... openat resumed>) = 4 [pid 5832] mkdir("./11", 0777 [pid 6357] rt_sigprocmask(SIG_SETMASK, [], [pid 6361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6327] +++ exited with 0 +++ [pid 6325] +++ exited with 0 +++ [pid 6323] ioctl(4, LOOP_CLR_FD [pid 5832] <... mkdir resumed>) = 0 [pid 6361] <... prctl resumed>) = 0 [pid 6357] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] <... ioctl resumed>) = 0 [pid 6361] setpgid(0, 0 [pid 6357] <... futex resumed>) = 1 [pid 6323] close(4 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6325, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 6361] <... setpgid resumed>) = 0 [pid 6323] <... close resumed>) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6361] write(3, "1000", 4) = 4 [pid 6361] close(3 [pid 6360] <... futex resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6361] <... close resumed>) = 0 [pid 6360] memfd_create("syzkaller", 0 [pid 5832] <... openat resumed>) = 3 [pid 6361] symlink("/dev/binderfs", "./binderfs" [pid 6360] <... memfd_create resumed>) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6361] <... symlink resumed>) = 0 [pid 6360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6357] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6323] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6360] <... mmap resumed>) = 0x7feaf0a00000 [pid 5832] close(3 [pid 6323] <... futex resumed>) = 1 [pid 6323] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] <... futex resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6362 attached [pid 6322] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... clone resumed>, child_tidptr=0x555582484690) = 6362 [pid 6323] <... futex resumed>) = 0 [pid 6322] <... futex resumed>) = 1 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 86.759002][ T6323] bcachefs (loop0): done starting filesystem [pid 6362] set_robust_list(0x5555824846a0, 24 [pid 6323] creat("./bus", 000 [pid 6322] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 5833] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6362] <... set_robust_list resumed>) = 0 [pid 6361] write(1, "executing program\n", 18 [pid 6323] <... creat resumed>) = 4 [pid 6323] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] chdir("./11" [pid 6361] <... write resumed>) = 18 [pid 6323] <... futex resumed>) = 1 [pid 6322] <... futex resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 6362] <... chdir resumed>) = 0 [pid 6361] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] futex(0x7feaf908a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] exit_group(0 [pid 5833] newfstatat(3, "", [pid 6362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6361] <... futex resumed>) = 0 [pid 6323] <... futex resumed>) = ? [pid 6322] <... exit_group resumed>) = ? [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6362] <... prctl resumed>) = 0 [pid 6361] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 5833] getdents64(3, [pid 6362] setpgid(0, 0 [pid 6361] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5833] <... getdents64 resumed>0x555582485730 /* 5 entries */, 32768) = 136 [pid 6362] <... setpgid resumed>) = 0 [pid 6361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5833] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6323] +++ exited with 0 +++ [pid 6322] +++ exited with 0 +++ [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6322, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=36 /* 0.36 s */} --- [pid 6362] <... openat resumed>) = 3 [pid 6361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6362] write(3, "1000", 4 [pid 6361] <... mmap resumed>) = 0x7feaf8f93000 [pid 5833] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6362] <... write resumed>) = 4 [pid 6361] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6362] close(3 [pid 6361] <... mprotect resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6362] <... close resumed>) = 0 [pid 6361] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5833] unlink("./12/binderfs" [pid 5831] <... openat resumed>) = 3 [pid 6361] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 6362] symlink("/dev/binderfs", "./binderfs" [pid 6361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5833] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6363 attached [pid 6362] <... symlink resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(3, executing program [pid 6362] write(1, "executing program\n", 18 [pid 6361] <... clone3 resumed> => {parent_tid=[6363]}, 88) = 6363 [pid 5833] newfstatat(AT_FDCWD, "./12/bus", [pid 5831] <... getdents64 resumed>0x555582485730 /* 4 entries */, 32768) = 112 [pid 6363] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6362] <... write resumed>) = 18 [pid 6361] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6363] <... rseq resumed>) = 0 [pid 6362] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] unlink("./12/bus" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6363] set_robust_list(0x7feaf8fb39a0, 24 [pid 6362] <... futex resumed>) = 0 [pid 6361] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... unlink resumed>) = 0 [pid 5831] newfstatat(AT_FDCWD, "./11/binderfs", [pid 6363] <... set_robust_list resumed>) = 0 [pid 6362] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, [pid 6361] <... futex resumed>) = 0 [pid 5833] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6363] rt_sigprocmask(SIG_SETMASK, [], [pid 6362] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6361] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] unlink("./11/binderfs" [pid 6363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5833] newfstatat(AT_FDCWD, "./12/file1", [pid 5831] <... unlink resumed>) = 0 [pid 6363] memfd_create("syzkaller", 0 [pid 6362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6363] <... memfd_create resumed>) = 3 [pid 6362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5833] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6362] <... mmap resumed>) = 0x7feaf8f93000 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6363] <... mmap resumed>) = 0x7feaf0a00000 [pid 6362] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE [pid 5833] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6362] <... mprotect resumed>) = 0 [pid 5833] <... openat resumed>) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6362] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5833] getdents64(4, [pid 6362] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5833] <... getdents64 resumed>0x55558248d770 /* 2 entries */, 32768) = 48 [pid 6362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0} [pid 5833] getdents64(4, 0x55558248d770 /* 0 entries */, 32768) = 0 [pid 6362] <... clone3 resumed> => {parent_tid=[6364]}, 88) = 6364 [pid 5833] close(4./strace-static-x86_64: Process 6364 attached [pid 6362] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] <... close resumed>) = 0 [pid 6362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] rmdir("./12/file1" [pid 6362] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... rmdir resumed>) = 0 [pid 6362] <... futex resumed>) = 0 [pid 5833] getdents64(3, [pid 6362] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5833] <... getdents64 resumed>0x555582485730 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./12" [pid 6364] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 5833] <... rmdir resumed>) = 0 [pid 6364] <... rseq resumed>) = 0 [pid 5833] mkdir("./13", 0777 [pid 6364] set_robust_list(0x7feaf8fb39a0, 24 [pid 5833] <... mkdir resumed>) = 0 [pid 6364] <... set_robust_list resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6364] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] <... openat resumed>) = 3 [pid 6364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6364] memfd_create("syzkaller", 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6364] <... memfd_create resumed>) = 3 [pid 5833] close(3 [pid 6364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... close resumed>) = 0 [pid 6364] <... mmap resumed>) = 0x7feaf0a00000 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6365 attached [pid 6365] set_robust_list(0x5555824846a0, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555582484690) = 6365 [pid 6365] <... set_robust_list resumed>) = 0 [pid 6365] chdir("./13") = 0 [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6365] setpgid(0, 0) = 0 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6365] write(3, "1000", 4) = 4 [ 86.896817][ T5831] bcachefs (loop0): shutting down [ 86.902327][ T5831] bcachefs (loop0): going read-only [ 86.926737][ T5831] bcachefs (loop0): finished waiting for writes to stop [pid 6365] close(3) = 0 [pid 6365] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6365] write(1, "executing program\n", 18) = 18 [pid 6365] futex(0x7feaf908a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] rt_sigaction(SIGRT_1, {sa_handler=0x7feaf9022fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feaf9014190}, NULL, 8) = 0 [pid 6365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feaf8f93000 [pid 6365] mprotect(0x7feaf8f94000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feaf8fb3990, parent_tid=0x7feaf8fb3990, exit_signal=0, stack=0x7feaf8f93000, stack_size=0x20300, tls=0x7feaf8fb36c0}./strace-static-x86_64: Process 6366 attached [pid 6366] rseq(0x7feaf8fb3fe0, 0x20, 0, 0x53053053 [pid 6365] <... clone3 resumed> => {parent_tid=[6366]}, 88) = 6366 [pid 6366] <... rseq resumed>) = 0 [pid 6365] rt_sigprocmask(SIG_SETMASK, [], [pid 6366] set_robust_list(0x7feaf8fb39a0, 24 [pid 6365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6366] <... set_robust_list resumed>) = 0 [pid 6365] futex(0x7feaf908a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6366] rt_sigprocmask(SIG_SETMASK, [], [pid 6365] <... futex resumed>) = 0 [pid 6366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6365] futex(0x7feaf908a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 86.956545][ T5831] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [pid 6366] memfd_create("syzkaller", 0) = 3 [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feaf0a00000 [ 87.018949][ T5831] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 87.055407][ T3575] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 87.076310][ T5831] bcachefs (loop0): unshutdown complete, journal seq 14 [ 87.108133][ T3575] bcachefs (loop0): fatal error - emergency read only [ 87.115497][ T3575] ------------[ cut here ]------------ [ 87.121280][ T3575] kernel BUG at fs/bcachefs/journal.h:375! [ 87.172587][ T3575] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 87.179601][ T3575] CPU: 1 UID: 0 PID: 3575 Comm: kworker/u8:10 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 87.190564][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.200643][ T3575] Workqueue: btree_update btree_interior_update_work [ 87.207369][ T3575] RIP: 0010:__bch2_trans_commit+0x9232/0x93c0 [ 87.213464][ T3575] Code: fd 90 0f 0b e8 7f 86 78 fd 90 0f 0b e8 77 86 78 fd 90 0f 0b e8 6f 86 78 fd 90 0f 0b e8 67 86 78 fd 90 0f 0b e8 5f 86 78 fd 90 <0f> 0b e8 57 86 78 fd 90 0f 0b e8 4f 86 78 fd 90 0f 0b e8 47 86 78 [ 87.233940][ T3575] RSP: 0018:ffffc9000cacf6c0 EFLAGS: 00010293 [ 87.240045][ T3575] RAX: ffffffff841c53a1 RBX: 0000000000000000 RCX: ffff888032805a00 [ 87.248051][ T3575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.256129][ T3575] RBP: ffffc9000cacf890 R08: ffffffff841bf6d8 R09: 1ffff1100d5d94a8 [ 87.264117][ T3575] R10: dffffc0000000000 R11: ffffed100d5d94a9 R12: ffff88806ae80000 [ 87.272116][ T3575] R13: ffff88806aeca500 R14: 0000000000000044 R15: ffff88807f9ac0d0 [ 87.280120][ T3575] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 87.289171][ T3575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.295784][ T3575] CR2: 00007feaf1719000 CR3: 000000007d914000 CR4: 00000000003526f0 [ 87.303784][ T3575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.311779][ T3575] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.319857][ T3575] Call Trace: [ 87.323159][ T3575] [ 87.326122][ T3575] ? __die_body+0x5f/0xb0 [ 87.330477][ T3575] ? die+0x9e/0xc0 [ 87.334215][ T3575] ? do_trap+0x15a/0x3a0 [ 87.335979][ T6360] loop4: detected capacity change from 0 to 32768 [ 87.338468][ T3575] ? __bch2_trans_commit+0x9232/0x93c0 [ 87.338498][ T3575] ? do_error_trap+0x1dc/0x2c0 [ 87.338518][ T3575] ? __bch2_trans_commit+0x9232/0x93c0 [ 87.360606][ T3575] ? __pfx_do_error_trap+0x10/0x10 [ 87.365749][ T3575] ? report_bug+0x3e8/0x500 [pid 6360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6360] <... write resumed>) = 16777216 [pid 6360] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6360] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6360] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6360] close(3) = 0 [pid 6360] close(4) = 0 [pid 6360] mkdir("./file1", 0777) = 0 [pid 6360] mount("/dev/loop4", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6363] <... write resumed>) = 16777216 [pid 6364] <... write resumed>) = 16777216 [ 87.370304][ T3575] ? handle_invalid_op+0x34/0x40 [ 87.375267][ T3575] ? __bch2_trans_commit+0x9232/0x93c0 [ 87.380754][ T3575] ? exc_invalid_op+0x38/0x50 [ 87.385457][ T3575] ? asm_exc_invalid_op+0x1a/0x20 [ 87.390520][ T3575] ? __bch2_trans_commit+0x3568/0x93c0 [ 87.396029][ T3575] ? __bch2_trans_commit+0x9231/0x93c0 [ 87.401525][ T3575] ? __bch2_trans_commit+0x9232/0x93c0 [ 87.407029][ T3575] ? __pfx___bch2_trans_commit+0x10/0x10 [ 87.412695][ T3575] ? bch2_dev_btree_bitmap_marked+0x2f/0xda0 [pid 6363] munmap(0x7feaf0a00000, 138412032 [pid 6364] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 87.418711][ T3575] ? __bch2_trans_jset_entry_alloc+0x2c7/0x4b0 [ 87.424902][ T3575] ? btree_interior_update_work+0x117a/0x2b10 [ 87.431094][ T3575] btree_interior_update_work+0x1492/0x2b10 [ 87.437028][ T3575] ? __pfx_btree_interior_update_work+0x10/0x10 [ 87.443315][ T3575] ? __pfx_lock_acquire+0x10/0x10 [ 87.448141][ T6363] loop3: detected capacity change from 0 to 32768 [ 87.448358][ T3575] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 87.460760][ T3575] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.465963][ T6364] loop1: detected capacity change from 0 to 32768 [ 87.467103][ T3575] ? process_scheduled_works+0x976/0x1850 [ 87.467132][ T3575] process_scheduled_works+0xa63/0x1850 [ 87.467159][ T3575] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.490821][ T3575] ? assign_work+0x364/0x3d0 [ 87.495443][ T3575] worker_thread+0x870/0xd30 [ 87.500067][ T3575] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 87.505986][ T3575] ? __kthread_parkme+0x169/0x1d0 [ 87.511041][ T3575] ? __pfx_worker_thread+0x10/0x10 [ 87.516178][ T3575] kthread+0x2f0/0x390 [pid 6364] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6363] <... munmap resumed>) = 0 [pid 6363] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6363] ioctl(4, LOOP_SET_FD, 3 [pid 6364] <... openat resumed>) = 4 [pid 6363] <... ioctl resumed>) = 0 [pid 6364] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6363] close(3) = 0 [pid 6363] close(4) = 0 [pid 6363] mkdir("./file1", 0777) = 0 [pid 6363] mount("/dev/loop3", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6364] close(3) = 0 [pid 6364] close(4) = 0 [pid 6364] mkdir("./file1", 0777) = 0 [ 87.520285][ T3575] ? __pfx_worker_thread+0x10/0x10 [ 87.525432][ T3575] ? __pfx_kthread+0x10/0x10 [ 87.530053][ T3575] ret_from_fork+0x4b/0x80 [ 87.534494][ T3575] ? __pfx_kthread+0x10/0x10 [ 87.539101][ T3575] ret_from_fork_asm+0x1a/0x30 [ 87.543900][ T3575] [ 87.546933][ T3575] Modules linked in: [ 87.550992][ T3575] ---[ end trace 0000000000000000 ]--- [ 87.559959][ T3575] RIP: 0010:__bch2_trans_commit+0x9232/0x93c0 [pid 6364] mount("/dev/loop1", "./file1", "bcachefs", MS_SYNCHRONOUS|MS_I_VERSION, "acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reco"... [pid 6366] <... write resumed>) = 16777216 [pid 6366] munmap(0x7feaf0a00000, 138412032) = 0 [pid 6366] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 87.566521][ T3575] Code: fd 90 0f 0b e8 7f 86 78 fd 90 0f 0b e8 77 86 78 fd 90 0f 0b e8 6f 86 78 fd 90 0f 0b e8 67 86 78 fd 90 0f 0b e8 5f 86 78 fd 90 <0f> 0b e8 57 86 78 fd 90 0f 0b e8 4f 86 78 fd 90 0f 0b e8 47 86 78 [ 87.586487][ T3575] RSP: 0018:ffffc9000cacf6c0 EFLAGS: 00010293 [ 87.592788][ T3575] RAX: ffffffff841c53a1 RBX: 0000000000000000 RCX: ffff888032805a00 [ 87.602180][ T3575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.610574][ T3575] RBP: ffffc9000cacf890 R08: ffffffff841bf6d8 R09: 1ffff1100d5d94a8 [pid 6366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6366] close(3) = 0 [pid 6366] close(4) = 0 [pid 6366] mkdir("./file1", 0777) = 0 [ 87.611998][ T6366] loop2: detected capacity change from 0 to 32768 [ 87.619261][ T3575] R10: dffffc0000000000 R11: ffffed100d5d94a9 R12: ffff88806ae80000 [ 87.634291][ T3575] R13: ffff88806aeca500 R14: 0000000000000044 R15: ffff88807f9ac0d0 [ 87.642962][ T3575] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 87.652286][ T3575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.659045][ T3575] CR2: 00007feaf1719000 CR3: 0000000033a9e000 CR4: 00000000003526f0 [ 87.667100][ T3575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.675126][ T3575] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.683160][ T3575] Kernel panic - not syncing: Fatal exception [ 87.689553][ T3575] Kernel Offset: disabled [ 87.693882][ T3575] Rebooting in 86400 seconds..