./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2725989260 <...> DUID 00:04:7c:7c:42:18:3f:30:8d:b4:e2:57:c6:a5:0a:a4:65:8b forked to background, child pid 5500 [ 48.601371][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.613403][ T5501] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. execve("./syz-executor2725989260", ["./syz-executor2725989260"], 0x7fffe5274d20 /* 10 vars */) = 0 brk(NULL) = 0x55556eb47000 brk(0x55556eb47e00) = 0x55556eb47e00 arch_prctl(ARCH_SET_FS, 0x55556eb47480) = 0 set_tid_address(0x55556eb47750) = 5831 set_robust_list(0x55556eb47760, 24) = 0 rseq(0x55556eb47da0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2725989260", 4096) = 28 getrandom("\x2d\x24\x30\xc6\x3a\x9f\xb6\x42", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556eb47e00 brk(0x55556eb68e00) = 0x55556eb68e00 brk(0x55556eb69000) = 0x55556eb69000 mprotect(0x7f6f1a55a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 24) = 24 close(3) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f6f1a4a82f0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6f1a4b0eb0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f6f1a4a82f0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6f1a4b0eb0}, NULL, 8) = 0 mkdir("./syzkaller.Qwym0x", 0700) = 0 chmod("./syzkaller.Qwym0x", 0777) = 0 chdir("./syzkaller.Qwym0x") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5832 attached [pid 5832] set_robust_list(0x55556eb47760, 24 [pid 5831] <... clone resumed>, child_tidptr=0x55556eb47750) = 5832 [pid 5832] <... set_robust_list resumed>) = 0 [pid 5832] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5832] getppid() = 0 [pid 5832] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5832] unshare(CLONE_NEWNS) = 0 [pid 5832] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5832] unshare(CLONE_NEWIPC) = 0 [pid 5832] unshare(CLONE_NEWCGROUP) = 0 [pid 5832] unshare(CLONE_NEWUTS) = 0 [pid 5832] unshare(CLONE_SYSVSEM) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "16777216", 8) = 8 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "536870912", 9) = 9 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "1024", 4) = 4 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "8192", 4) = 4 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "1024", 4) = 4 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "1024", 4) = 4 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5832] close(3) = 0 [pid 5832] getpid() = 1 [pid 5832] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5835] set_robust_list(0x55556eb47760, 24 [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 2 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5835] chdir("./0") = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5835] setpgid(0, 0) = 0 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1000", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5835] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5835] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5835] write(1, "executing program\n", 18) = 18 [pid 5835] memfd_create("syzkaller", 0) = 3 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5835] munmap(0x7f6f12000000, 138412032) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5835] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5835] close(3) = 0 [pid 5835] close(4) = 0 [pid 5835] mkdir("./file1", 0777) = 0 syzkaller login: [ 75.932867][ T5835] loop0: detected capacity change from 0 to 32768 [ 76.026204][ T5835] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 76.047075][ T5835] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 76.055671][ T5835] bcachefs (loop0): Version upgrade required: [ 76.055671][ T5835] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 76.055671][ T5835] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 76.055671][ T5835] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 76.129564][ T5835] bcachefs (loop0): dropping and reconstructing all alloc info [ 76.148150][ T5835] bcachefs (loop0): accounting_read... done [ 76.154966][ T5835] bcachefs (loop0): alloc_read... done [ 76.160544][ T5835] bcachefs (loop0): stripes_read... done [ 76.166798][ T5835] bcachefs (loop0): snapshots_read... done [pid 5835] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5835] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5835] chdir("./file1") = 0 [ 76.173322][ T5835] bcachefs (loop0): check_allocations... done [ 76.199699][ T5835] bcachefs (loop0): going read-write [ 76.210593][ T5835] bcachefs (loop0): done starting filesystem [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5835] ioctl(4, LOOP_CLR_FD) = 0 [pid 5835] close(4) = 0 [pid 5835] mkdir("./bus", 0777) = 0 [pid 5835] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5835] close(3) = 0 [pid 5835] close(4) = -1 EBADF (Bad file descriptor) [pid 5835] close(5) = -1 EBADF (Bad file descriptor) [pid 5835] close(6) = -1 EBADF (Bad file descriptor) [pid 5835] close(7) = -1 EBADF (Bad file descriptor) [pid 5835] close(8) = -1 EBADF (Bad file descriptor) [pid 5835] close(9) = -1 EBADF (Bad file descriptor) [pid 5835] close(10) = -1 EBADF (Bad file descriptor) [pid 5835] close(11) = -1 EBADF (Bad file descriptor) [pid 5835] close(12) = -1 EBADF (Bad file descriptor) [pid 5835] close(13) = -1 EBADF (Bad file descriptor) [pid 5835] close(14) = -1 EBADF (Bad file descriptor) [pid 5835] close(15) = -1 EBADF (Bad file descriptor) [pid 5835] close(16) = -1 EBADF (Bad file descriptor) [pid 5835] close(17) = -1 EBADF (Bad file descriptor) [pid 5835] close(18) = -1 EBADF (Bad file descriptor) [pid 5835] close(19) = -1 EBADF (Bad file descriptor) [pid 5835] close(20) = -1 EBADF (Bad file descriptor) [pid 5835] close(21) = -1 EBADF (Bad file descriptor) [pid 5835] close(22) = -1 EBADF (Bad file descriptor) [pid 5835] close(23) = -1 EBADF (Bad file descriptor) [pid 5835] close(24) = -1 EBADF (Bad file descriptor) [pid 5835] close(25) = -1 EBADF (Bad file descriptor) [pid 5835] close(26) = -1 EBADF (Bad file descriptor) [pid 5835] close(27) = -1 EBADF (Bad file descriptor) [pid 5835] close(28) = -1 EBADF (Bad file descriptor) [pid 5835] close(29) = -1 EBADF (Bad file descriptor) [pid 5835] exit_group(0) = ? [pid 5835] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [ 76.508275][ T5835] syz-executor272 (5835) used greatest stack depth: 18416 bytes left [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./0/binderfs") = 0 [ 76.629665][ T5832] bcachefs (loop0): shutting down [ 76.635182][ T5832] bcachefs (loop0): going read-only [ 76.640586][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 76.650117][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 76.677005][ T35] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 76.690533][ T35] bcachefs (loop0): fatal error - emergency read only [ 76.698355][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 76.708330][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 76.716380][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 76.739823][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./0/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./0") = 0 [pid 5832] mkdir("./1", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5846 attached [pid 5846] set_robust_list(0x55556eb47760, 24) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 3 [pid 5846] chdir("./1") = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5846] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5846] write(1, "executing program\n", 18executing program ) = 18 [pid 5846] memfd_create("syzkaller", 0) = 3 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5846] munmap(0x7f6f12000000, 138412032) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5846] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5846] close(3) = 0 [pid 5846] close(4) = 0 [pid 5846] mkdir("./file1", 0777) = 0 [ 78.316777][ T5846] loop0: detected capacity change from 0 to 32768 [ 78.410176][ T5846] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 78.430306][ T5846] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 78.438521][ T5846] bcachefs (loop0): Version upgrade required: [ 78.438521][ T5846] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 78.438521][ T5846] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 78.438521][ T5846] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 78.510999][ T5846] bcachefs (loop0): dropping and reconstructing all alloc info [ 78.528399][ T5846] bcachefs (loop0): accounting_read... done [ 78.535582][ T5846] bcachefs (loop0): alloc_read... done [ 78.541156][ T5846] bcachefs (loop0): stripes_read... done [ 78.547005][ T5846] bcachefs (loop0): snapshots_read... done [pid 5846] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5846] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5846] chdir("./file1") = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 78.553052][ T5846] bcachefs (loop0): check_allocations... done [ 78.573970][ T5846] bcachefs (loop0): going read-write [ 78.583102][ T5846] bcachefs (loop0): done starting filesystem [pid 5846] ioctl(4, LOOP_CLR_FD) = 0 [pid 5846] close(4) = 0 [pid 5846] mkdir("./bus", 0777) = 0 [pid 5846] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5846] close(3) = 0 [pid 5846] close(4) = -1 EBADF (Bad file descriptor) [pid 5846] close(5) = -1 EBADF (Bad file descriptor) [pid 5846] close(6) = -1 EBADF (Bad file descriptor) [pid 5846] close(7) = -1 EBADF (Bad file descriptor) [pid 5846] close(8) = -1 EBADF (Bad file descriptor) [pid 5846] close(9) = -1 EBADF (Bad file descriptor) [pid 5846] close(10) = -1 EBADF (Bad file descriptor) [pid 5846] close(11) = -1 EBADF (Bad file descriptor) [pid 5846] close(12) = -1 EBADF (Bad file descriptor) [pid 5846] close(13) = -1 EBADF (Bad file descriptor) [pid 5846] close(14) = -1 EBADF (Bad file descriptor) [pid 5846] close(15) = -1 EBADF (Bad file descriptor) [pid 5846] close(16) = -1 EBADF (Bad file descriptor) [pid 5846] close(17) = -1 EBADF (Bad file descriptor) [pid 5846] close(18) = -1 EBADF (Bad file descriptor) [pid 5846] close(19) = -1 EBADF (Bad file descriptor) [pid 5846] close(20) = -1 EBADF (Bad file descriptor) [pid 5846] close(21) = -1 EBADF (Bad file descriptor) [pid 5846] close(22) = -1 EBADF (Bad file descriptor) [pid 5846] close(23) = -1 EBADF (Bad file descriptor) [pid 5846] close(24) = -1 EBADF (Bad file descriptor) [pid 5846] close(25) = -1 EBADF (Bad file descriptor) [pid 5846] close(26) = -1 EBADF (Bad file descriptor) [pid 5846] close(27) = -1 EBADF (Bad file descriptor) [pid 5846] close(28) = -1 EBADF (Bad file descriptor) [pid 5846] close(29) = -1 EBADF (Bad file descriptor) [pid 5846] exit_group(0) = ? [pid 5846] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5832] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./1/binderfs") = 0 [ 78.985586][ T5832] bcachefs (loop0): shutting down [ 78.990644][ T5832] bcachefs (loop0): going read-only [ 78.996252][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 79.004754][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 79.028889][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 79.042316][ T1100] bcachefs (loop0): fatal error - emergency read only [ 79.049484][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 79.059565][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 79.067441][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 79.085583][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./1/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./1") = 0 [pid 5832] mkdir("./2", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached [pid 5857] set_robust_list(0x55556eb47760, 24 [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 4 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5857] chdir("./2") = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0) = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5857] write(3, "1000", 4) = 4 [pid 5857] close(3) = 0 [pid 5857] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5857] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5857] write(1, "executing program\n", 18) = 18 [pid 5857] memfd_create("syzkaller", 0) = 3 [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5857] munmap(0x7f6f12000000, 138412032) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5857] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5857] close(3) = 0 [pid 5857] close(4) = 0 [pid 5857] mkdir("./file1", 0777) = 0 [ 80.588274][ T5857] loop0: detected capacity change from 0 to 32768 [ 80.665084][ T5857] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 80.685266][ T5857] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 80.693446][ T5857] bcachefs (loop0): Version upgrade required: [ 80.693446][ T5857] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 80.693446][ T5857] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 80.693446][ T5857] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 80.765576][ T5857] bcachefs (loop0): dropping and reconstructing all alloc info [ 80.781566][ T5857] bcachefs (loop0): accounting_read... done [ 80.788124][ T5857] bcachefs (loop0): alloc_read... done [ 80.793771][ T5857] bcachefs (loop0): stripes_read... done [ 80.799491][ T5857] bcachefs (loop0): snapshots_read... done [pid 5857] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5857] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5857] chdir("./file1") = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 80.805521][ T5857] bcachefs (loop0): check_allocations... done [ 80.826453][ T5857] bcachefs (loop0): going read-write [ 80.835564][ T5857] bcachefs (loop0): done starting filesystem [pid 5857] ioctl(4, LOOP_CLR_FD) = 0 [pid 5857] close(4) = 0 [pid 5857] mkdir("./bus", 0777) = 0 [pid 5857] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5857] close(3) = 0 [pid 5857] close(4) = -1 EBADF (Bad file descriptor) [pid 5857] close(5) = -1 EBADF (Bad file descriptor) [pid 5857] close(6) = -1 EBADF (Bad file descriptor) [pid 5857] close(7) = -1 EBADF (Bad file descriptor) [pid 5857] close(8) = -1 EBADF (Bad file descriptor) [pid 5857] close(9) = -1 EBADF (Bad file descriptor) [pid 5857] close(10) = -1 EBADF (Bad file descriptor) [pid 5857] close(11) = -1 EBADF (Bad file descriptor) [pid 5857] close(12) = -1 EBADF (Bad file descriptor) [pid 5857] close(13) = -1 EBADF (Bad file descriptor) [pid 5857] close(14) = -1 EBADF (Bad file descriptor) [pid 5857] close(15) = -1 EBADF (Bad file descriptor) [pid 5857] close(16) = -1 EBADF (Bad file descriptor) [pid 5857] close(17) = -1 EBADF (Bad file descriptor) [pid 5857] close(18) = -1 EBADF (Bad file descriptor) [pid 5857] close(19) = -1 EBADF (Bad file descriptor) [pid 5857] close(20) = -1 EBADF (Bad file descriptor) [pid 5857] close(21) = -1 EBADF (Bad file descriptor) [pid 5857] close(22) = -1 EBADF (Bad file descriptor) [pid 5857] close(23) = -1 EBADF (Bad file descriptor) [pid 5857] close(24) = -1 EBADF (Bad file descriptor) [pid 5857] close(25) = -1 EBADF (Bad file descriptor) [pid 5857] close(26) = -1 EBADF (Bad file descriptor) [pid 5857] close(27) = -1 EBADF (Bad file descriptor) [pid 5857] close(28) = -1 EBADF (Bad file descriptor) [pid 5857] close(29) = -1 EBADF (Bad file descriptor) [pid 5857] exit_group(0) = ? [pid 5857] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5832] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [ 81.151761][ T5857] syz-executor272 (5857) used greatest stack depth: 17968 bytes left [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./2/binderfs") = 0 [ 81.280520][ T5832] bcachefs (loop0): shutting down [ 81.285785][ T5832] bcachefs (loop0): going read-only [ 81.290993][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 81.298596][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 81.323343][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 81.336843][ T1100] bcachefs (loop0): fatal error - emergency read only [ 81.344338][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 81.354207][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 81.361925][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 81.379761][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./2/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./2") = 0 [pid 5832] mkdir("./3", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5868 attached [pid 5868] set_robust_list(0x55556eb47760, 24 [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 5 [pid 5868] <... set_robust_list resumed>) = 0 [pid 5868] chdir("./3") = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5868] setpgid(0, 0) = 0 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5868] write(3, "1000", 4) = 4 [pid 5868] close(3) = 0 [pid 5868] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5868] write(1, "executing program\n", 18executing program ) = 18 [pid 5868] memfd_create("syzkaller", 0) = 3 [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5868] munmap(0x7f6f12000000, 138412032) = 0 [pid 5868] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5868] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5868] close(3) = 0 [pid 5868] close(4) = 0 [pid 5868] mkdir("./file1", 0777) = 0 [ 82.899884][ T5868] loop0: detected capacity change from 0 to 32768 [ 82.977094][ T5868] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 82.997217][ T5868] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 83.005437][ T5868] bcachefs (loop0): Version upgrade required: [ 83.005437][ T5868] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 83.005437][ T5868] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 83.005437][ T5868] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 83.077404][ T5868] bcachefs (loop0): dropping and reconstructing all alloc info [ 83.093912][ T5868] bcachefs (loop0): accounting_read... done [ 83.100151][ T5868] bcachefs (loop0): alloc_read... done [ 83.105848][ T5868] bcachefs (loop0): stripes_read... done [ 83.111590][ T5868] bcachefs (loop0): snapshots_read... done [pid 5868] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5868] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5868] chdir("./file1") = 0 [ 83.117714][ T5868] bcachefs (loop0): check_allocations... done [ 83.138110][ T5868] bcachefs (loop0): going read-write [ 83.146734][ T5868] bcachefs (loop0): done starting filesystem [pid 5868] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5868] ioctl(4, LOOP_CLR_FD) = 0 [pid 5868] close(4) = 0 [pid 5868] mkdir("./bus", 0777) = 0 [pid 5868] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5868] close(3) = 0 [pid 5868] close(4) = -1 EBADF (Bad file descriptor) [pid 5868] close(5) = -1 EBADF (Bad file descriptor) [pid 5868] close(6) = -1 EBADF (Bad file descriptor) [pid 5868] close(7) = -1 EBADF (Bad file descriptor) [pid 5868] close(8) = -1 EBADF (Bad file descriptor) [pid 5868] close(9) = -1 EBADF (Bad file descriptor) [pid 5868] close(10) = -1 EBADF (Bad file descriptor) [pid 5868] close(11) = -1 EBADF (Bad file descriptor) [pid 5868] close(12) = -1 EBADF (Bad file descriptor) [pid 5868] close(13) = -1 EBADF (Bad file descriptor) [pid 5868] close(14) = -1 EBADF (Bad file descriptor) [pid 5868] close(15) = -1 EBADF (Bad file descriptor) [pid 5868] close(16) = -1 EBADF (Bad file descriptor) [pid 5868] close(17) = -1 EBADF (Bad file descriptor) [pid 5868] close(18) = -1 EBADF (Bad file descriptor) [pid 5868] close(19) = -1 EBADF (Bad file descriptor) [pid 5868] close(20) = -1 EBADF (Bad file descriptor) [pid 5868] close(21) = -1 EBADF (Bad file descriptor) [pid 5868] close(22) = -1 EBADF (Bad file descriptor) [pid 5868] close(23) = -1 EBADF (Bad file descriptor) [pid 5868] close(24) = -1 EBADF (Bad file descriptor) [pid 5868] close(25) = -1 EBADF (Bad file descriptor) [pid 5868] close(26) = -1 EBADF (Bad file descriptor) [pid 5868] close(27) = -1 EBADF (Bad file descriptor) [pid 5868] close(28) = -1 EBADF (Bad file descriptor) [pid 5868] close(29) = -1 EBADF (Bad file descriptor) [pid 5868] exit_group(0) = ? [pid 5868] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./3/binderfs") = 0 [ 83.617194][ T5832] bcachefs (loop0): shutting down [ 83.622408][ T5832] bcachefs (loop0): going read-only [ 83.627660][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 83.635618][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 83.660135][ T35] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 83.673690][ T35] bcachefs (loop0): fatal error - emergency read only [ 83.681103][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 83.691040][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 83.698888][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 83.718890][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./3/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./3") = 0 [pid 5832] mkdir("./4", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5880 attached [pid 5880] set_robust_list(0x55556eb47760, 24) = 0 [pid 5880] chdir("./4" [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 6 [pid 5880] <... chdir resumed>) = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5880] write(3, "1000", 4) = 4 [pid 5880] close(3) = 0 [pid 5880] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5880] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5880] write(1, "executing program\n", 18) = 18 [pid 5880] memfd_create("syzkaller", 0) = 3 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5880] munmap(0x7f6f12000000, 138412032) = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5880] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5880] close(3) = 0 [pid 5880] close(4) = 0 [pid 5880] mkdir("./file1", 0777) = 0 [ 85.180504][ T5880] loop0: detected capacity change from 0 to 32768 [ 85.273705][ T5880] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 85.293713][ T5880] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 85.301821][ T5880] bcachefs (loop0): Version upgrade required: [ 85.301821][ T5880] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 85.301821][ T5880] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 85.301821][ T5880] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 85.374853][ T5880] bcachefs (loop0): dropping and reconstructing all alloc info [ 85.391489][ T5880] bcachefs (loop0): accounting_read... done [ 85.398003][ T5880] bcachefs (loop0): alloc_read... done [ 85.403845][ T5880] bcachefs (loop0): stripes_read... done [ 85.409604][ T5880] bcachefs (loop0): snapshots_read... done [pid 5880] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5880] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5880] chdir("./file1") = 0 [ 85.415666][ T5880] bcachefs (loop0): check_allocations... done [ 85.435560][ T5880] bcachefs (loop0): going read-write [ 85.444859][ T5880] bcachefs (loop0): done starting filesystem [pid 5880] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5880] ioctl(4, LOOP_CLR_FD) = 0 [pid 5880] close(4) = 0 [pid 5880] mkdir("./bus", 0777) = 0 [pid 5880] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5880] close(3) = 0 [pid 5880] close(4) = -1 EBADF (Bad file descriptor) [pid 5880] close(5) = -1 EBADF (Bad file descriptor) [pid 5880] close(6) = -1 EBADF (Bad file descriptor) [pid 5880] close(7) = -1 EBADF (Bad file descriptor) [pid 5880] close(8) = -1 EBADF (Bad file descriptor) [pid 5880] close(9) = -1 EBADF (Bad file descriptor) [pid 5880] close(10) = -1 EBADF (Bad file descriptor) [pid 5880] close(11) = -1 EBADF (Bad file descriptor) [pid 5880] close(12) = -1 EBADF (Bad file descriptor) [pid 5880] close(13) = -1 EBADF (Bad file descriptor) [pid 5880] close(14) = -1 EBADF (Bad file descriptor) [pid 5880] close(15) = -1 EBADF (Bad file descriptor) [pid 5880] close(16) = -1 EBADF (Bad file descriptor) [pid 5880] close(17) = -1 EBADF (Bad file descriptor) [pid 5880] close(18) = -1 EBADF (Bad file descriptor) [pid 5880] close(19) = -1 EBADF (Bad file descriptor) [pid 5880] close(20) = -1 EBADF (Bad file descriptor) [pid 5880] close(21) = -1 EBADF (Bad file descriptor) [pid 5880] close(22) = -1 EBADF (Bad file descriptor) [pid 5880] close(23) = -1 EBADF (Bad file descriptor) [pid 5880] close(24) = -1 EBADF (Bad file descriptor) [pid 5880] close(25) = -1 EBADF (Bad file descriptor) [pid 5880] close(26) = -1 EBADF (Bad file descriptor) [pid 5880] close(27) = -1 EBADF (Bad file descriptor) [pid 5880] close(28) = -1 EBADF (Bad file descriptor) [pid 5880] close(29) = -1 EBADF (Bad file descriptor) [pid 5880] exit_group(0) = ? [pid 5880] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5832] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./4/binderfs") = 0 [ 85.854823][ T5832] bcachefs (loop0): shutting down [ 85.859887][ T5832] bcachefs (loop0): going read-only [ 85.865483][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 85.873080][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 85.897675][ T35] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 85.910965][ T35] bcachefs (loop0): fatal error - emergency read only [ 85.918276][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 85.928134][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 85.935993][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 85.954887][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./4/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./4") = 0 [pid 5832] mkdir("./5", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 87.035649][ T9] cfg80211: failed to load regulatory.db [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5892 attached [pid 5892] set_robust_list(0x55556eb47760, 24 [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 7 [pid 5892] <... set_robust_list resumed>) = 0 [pid 5892] chdir("./5") = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 [pid 5892] close(3) = 0 [pid 5892] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5892] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5892] write(1, "executing program\n", 18) = 18 [pid 5892] memfd_create("syzkaller", 0) = 3 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5892] munmap(0x7f6f12000000, 138412032) = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5892] close(3) = 0 [pid 5892] close(4) = 0 [pid 5892] mkdir("./file1", 0777) = 0 [ 87.389188][ T5892] loop0: detected capacity change from 0 to 32768 [ 87.469578][ T5892] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 87.490425][ T5892] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 87.498593][ T5892] bcachefs (loop0): Version upgrade required: [ 87.498593][ T5892] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 87.498593][ T5892] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 87.498593][ T5892] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 87.570606][ T5892] bcachefs (loop0): dropping and reconstructing all alloc info [ 87.586819][ T5892] bcachefs (loop0): accounting_read... done [ 87.593139][ T5892] bcachefs (loop0): alloc_read... done [ 87.598743][ T5892] bcachefs (loop0): stripes_read... done [ 87.604567][ T5892] bcachefs (loop0): snapshots_read... done [pid 5892] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5892] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5892] chdir("./file1") = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 87.610541][ T5892] bcachefs (loop0): check_allocations... done [ 87.631518][ T5892] bcachefs (loop0): going read-write [ 87.640339][ T5892] bcachefs (loop0): done starting filesystem [pid 5892] ioctl(4, LOOP_CLR_FD) = 0 [pid 5892] close(4) = 0 [pid 5892] mkdir("./bus", 0777) = 0 [pid 5892] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5892] close(3) = 0 [pid 5892] close(4) = -1 EBADF (Bad file descriptor) [pid 5892] close(5) = -1 EBADF (Bad file descriptor) [pid 5892] close(6) = -1 EBADF (Bad file descriptor) [pid 5892] close(7) = -1 EBADF (Bad file descriptor) [pid 5892] close(8) = -1 EBADF (Bad file descriptor) [pid 5892] close(9) = -1 EBADF (Bad file descriptor) [pid 5892] close(10) = -1 EBADF (Bad file descriptor) [pid 5892] close(11) = -1 EBADF (Bad file descriptor) [pid 5892] close(12) = -1 EBADF (Bad file descriptor) [pid 5892] close(13) = -1 EBADF (Bad file descriptor) [pid 5892] close(14) = -1 EBADF (Bad file descriptor) [pid 5892] close(15) = -1 EBADF (Bad file descriptor) [pid 5892] close(16) = -1 EBADF (Bad file descriptor) [pid 5892] close(17) = -1 EBADF (Bad file descriptor) [pid 5892] close(18) = -1 EBADF (Bad file descriptor) [pid 5892] close(19) = -1 EBADF (Bad file descriptor) [pid 5892] close(20) = -1 EBADF (Bad file descriptor) [pid 5892] close(21) = -1 EBADF (Bad file descriptor) [pid 5892] close(22) = -1 EBADF (Bad file descriptor) [pid 5892] close(23) = -1 EBADF (Bad file descriptor) [pid 5892] close(24) = -1 EBADF (Bad file descriptor) [pid 5892] close(25) = -1 EBADF (Bad file descriptor) [pid 5892] close(26) = -1 EBADF (Bad file descriptor) [pid 5892] close(27) = -1 EBADF (Bad file descriptor) [pid 5892] close(28) = -1 EBADF (Bad file descriptor) [pid 5892] close(29) = -1 EBADF (Bad file descriptor) [pid 5892] exit_group(0) = ? [pid 5892] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5832] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./5/binderfs") = 0 [ 88.042664][ T5832] bcachefs (loop0): shutting down [ 88.047731][ T5832] bcachefs (loop0): going read-only [ 88.053295][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 88.061238][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 88.084278][ T62] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 88.097401][ T62] bcachefs (loop0): fatal error - emergency read only [ 88.104679][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 88.114533][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 88.122424][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 88.139949][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./5/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./5") = 0 [pid 5832] mkdir("./6", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5903 attached [pid 5903] set_robust_list(0x55556eb47760, 24) = 0 [pid 5903] chdir("./6") = 0 [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 8 [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5903] setpgid(0, 0) = 0 [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5903] write(3, "1000", 4) = 4 [pid 5903] close(3) = 0 [pid 5903] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5903] write(1, "executing program\n", 18executing program ) = 18 [pid 5903] memfd_create("syzkaller", 0) = 3 [pid 5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5903] munmap(0x7f6f12000000, 138412032) = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5903] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5903] close(3) = 0 [pid 5903] close(4) = 0 [pid 5903] mkdir("./file1", 0777) = 0 [ 89.625006][ T5903] loop0: detected capacity change from 0 to 32768 [ 89.691729][ T5903] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 89.712088][ T5903] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 89.720164][ T5903] bcachefs (loop0): Version upgrade required: [ 89.720164][ T5903] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 89.720164][ T5903] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 89.720164][ T5903] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 89.792253][ T5903] bcachefs (loop0): dropping and reconstructing all alloc info [ 89.809776][ T5903] bcachefs (loop0): accounting_read... done [ 89.816101][ T5903] bcachefs (loop0): alloc_read... done [ 89.821646][ T5903] bcachefs (loop0): stripes_read... done [ 89.827421][ T5903] bcachefs (loop0): snapshots_read... done [pid 5903] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5903] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5903] chdir("./file1") = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 89.833490][ T5903] bcachefs (loop0): check_allocations... done [ 89.853965][ T5903] bcachefs (loop0): going read-write [ 89.862321][ T5903] bcachefs (loop0): done starting filesystem [pid 5903] ioctl(4, LOOP_CLR_FD) = 0 [pid 5903] close(4) = 0 [pid 5903] mkdir("./bus", 0777) = 0 [pid 5903] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5903] close(3) = 0 [pid 5903] close(4) = -1 EBADF (Bad file descriptor) [pid 5903] close(5) = -1 EBADF (Bad file descriptor) [pid 5903] close(6) = -1 EBADF (Bad file descriptor) [pid 5903] close(7) = -1 EBADF (Bad file descriptor) [pid 5903] close(8) = -1 EBADF (Bad file descriptor) [pid 5903] close(9) = -1 EBADF (Bad file descriptor) [pid 5903] close(10) = -1 EBADF (Bad file descriptor) [pid 5903] close(11) = -1 EBADF (Bad file descriptor) [pid 5903] close(12) = -1 EBADF (Bad file descriptor) [pid 5903] close(13) = -1 EBADF (Bad file descriptor) [pid 5903] close(14) = -1 EBADF (Bad file descriptor) [pid 5903] close(15) = -1 EBADF (Bad file descriptor) [pid 5903] close(16) = -1 EBADF (Bad file descriptor) [pid 5903] close(17) = -1 EBADF (Bad file descriptor) [pid 5903] close(18) = -1 EBADF (Bad file descriptor) [pid 5903] close(19) = -1 EBADF (Bad file descriptor) [pid 5903] close(20) = -1 EBADF (Bad file descriptor) [pid 5903] close(21) = -1 EBADF (Bad file descriptor) [pid 5903] close(22) = -1 EBADF (Bad file descriptor) [pid 5903] close(23) = -1 EBADF (Bad file descriptor) [pid 5903] close(24) = -1 EBADF (Bad file descriptor) [pid 5903] close(25) = -1 EBADF (Bad file descriptor) [pid 5903] close(26) = -1 EBADF (Bad file descriptor) [pid 5903] close(27) = -1 EBADF (Bad file descriptor) [pid 5903] close(28) = -1 EBADF (Bad file descriptor) [pid 5903] close(29) = -1 EBADF (Bad file descriptor) [pid 5903] exit_group(0) = ? [pid 5903] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5832] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./6/binderfs") = 0 [ 90.263155][ T5832] bcachefs (loop0): shutting down [ 90.268309][ T5832] bcachefs (loop0): going read-only [ 90.273989][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 90.282161][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 90.305075][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 90.318244][ T1100] bcachefs (loop0): fatal error - emergency read only [ 90.325672][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 90.335648][ T5832] bcachefs (loop0): unshutdown complete, journal seq 14 [ 90.343505][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 90.361143][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./6/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./6") = 0 [pid 5832] mkdir("./7", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5914 attached , child_tidptr=0x55556eb47750) = 9 [pid 5914] set_robust_list(0x55556eb47760, 24) = 0 [pid 5914] chdir("./7") = 0 [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5914] write(3, "1000", 4) = 4 [pid 5914] close(3) = 0 [pid 5914] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5914] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5914] write(1, "executing program\n", 18executing program ) = 18 [pid 5914] memfd_create("syzkaller", 0) = 3 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5914] munmap(0x7f6f12000000, 138412032) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5914] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5914] close(3) = 0 [pid 5914] close(4) = 0 [pid 5914] mkdir("./file1", 0777) = 0 [ 91.825032][ T5914] loop0: detected capacity change from 0 to 32768 [ 91.911672][ T5914] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 91.931700][ T5914] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 91.939866][ T5914] bcachefs (loop0): Version upgrade required: [ 91.939866][ T5914] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 91.939866][ T5914] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 91.939866][ T5914] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 92.012058][ T5914] bcachefs (loop0): dropping and reconstructing all alloc info [ 92.028652][ T5914] bcachefs (loop0): accounting_read... done [ 92.034878][ T5914] bcachefs (loop0): alloc_read... done [ 92.040449][ T5914] bcachefs (loop0): stripes_read... done [ 92.046210][ T5914] bcachefs (loop0): snapshots_read... done [pid 5914] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5914] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5914] chdir("./file1") = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5914] ioctl(4, LOOP_CLR_FD) = 0 [pid 5914] close(4) = 0 [ 92.052235][ T5914] bcachefs (loop0): check_allocations... done [ 92.071635][ T5914] bcachefs (loop0): going read-write [ 92.080656][ T5914] bcachefs (loop0): done starting filesystem [pid 5914] mkdir("./bus", 0777) = 0 [pid 5914] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5914] close(3) = 0 [pid 5914] close(4) = -1 EBADF (Bad file descriptor) [pid 5914] close(5) = -1 EBADF (Bad file descriptor) [pid 5914] close(6) = -1 EBADF (Bad file descriptor) [pid 5914] close(7) = -1 EBADF (Bad file descriptor) [pid 5914] close(8) = -1 EBADF (Bad file descriptor) [pid 5914] close(9) = -1 EBADF (Bad file descriptor) [pid 5914] close(10) = -1 EBADF (Bad file descriptor) [pid 5914] close(11) = -1 EBADF (Bad file descriptor) [pid 5914] close(12) = -1 EBADF (Bad file descriptor) [pid 5914] close(13) = -1 EBADF (Bad file descriptor) [pid 5914] close(14) = -1 EBADF (Bad file descriptor) [pid 5914] close(15) = -1 EBADF (Bad file descriptor) [pid 5914] close(16) = -1 EBADF (Bad file descriptor) [pid 5914] close(17) = -1 EBADF (Bad file descriptor) [pid 5914] close(18) = -1 EBADF (Bad file descriptor) [pid 5914] close(19) = -1 EBADF (Bad file descriptor) [pid 5914] close(20) = -1 EBADF (Bad file descriptor) [pid 5914] close(21) = -1 EBADF (Bad file descriptor) [pid 5914] close(22) = -1 EBADF (Bad file descriptor) [pid 5914] close(23) = -1 EBADF (Bad file descriptor) [pid 5914] close(24) = -1 EBADF (Bad file descriptor) [pid 5914] close(25) = -1 EBADF (Bad file descriptor) [pid 5914] close(26) = -1 EBADF (Bad file descriptor) [pid 5914] close(27) = -1 EBADF (Bad file descriptor) [pid 5914] close(28) = -1 EBADF (Bad file descriptor) [pid 5914] close(29) = -1 EBADF (Bad file descriptor) [pid 5914] exit_group(0) = ? [pid 5914] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./7/binderfs") = 0 [ 92.534730][ T5832] bcachefs (loop0): shutting down [ 92.539867][ T5832] bcachefs (loop0): going read-only [ 92.545475][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 92.554091][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 92.576474][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 92.589539][ T1100] bcachefs (loop0): fatal error - emergency read only [ 92.596796][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 92.606659][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 92.614540][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 92.631780][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./7/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./7") = 0 [pid 5832] mkdir("./8", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5925 attached , child_tidptr=0x55556eb47750) = 10 [pid 5925] set_robust_list(0x55556eb47760, 24) = 0 [pid 5925] chdir("./8") = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5925] write(1, "executing program\n", 18) = 18 [pid 5925] memfd_create("syzkaller", 0) = 3 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5925] munmap(0x7f6f12000000, 138412032) = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5925] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5925] close(3) = 0 [pid 5925] close(4) = 0 [pid 5925] mkdir("./file1", 0777) = 0 [ 94.146839][ T5925] loop0: detected capacity change from 0 to 32768 [ 94.234493][ T5925] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 94.254533][ T5925] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 94.262808][ T5925] bcachefs (loop0): Version upgrade required: [ 94.262808][ T5925] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 94.262808][ T5925] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 94.262808][ T5925] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 94.335106][ T5925] bcachefs (loop0): dropping and reconstructing all alloc info [ 94.351669][ T5925] bcachefs (loop0): accounting_read... done [ 94.358007][ T5925] bcachefs (loop0): alloc_read... done [ 94.363691][ T5925] bcachefs (loop0): stripes_read... done [ 94.369374][ T5925] bcachefs (loop0): snapshots_read... done [pid 5925] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5925] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5925] chdir("./file1") = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5925] ioctl(4, LOOP_CLR_FD) = 0 [pid 5925] close(4) = 0 [ 94.375382][ T5925] bcachefs (loop0): check_allocations... done [ 94.395882][ T5925] bcachefs (loop0): going read-write [ 94.404291][ T5925] bcachefs (loop0): done starting filesystem [pid 5925] mkdir("./bus", 0777) = 0 [pid 5925] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5925] close(3) = 0 [pid 5925] close(4) = -1 EBADF (Bad file descriptor) [pid 5925] close(5) = -1 EBADF (Bad file descriptor) [pid 5925] close(6) = -1 EBADF (Bad file descriptor) [pid 5925] close(7) = -1 EBADF (Bad file descriptor) [pid 5925] close(8) = -1 EBADF (Bad file descriptor) [pid 5925] close(9) = -1 EBADF (Bad file descriptor) [pid 5925] close(10) = -1 EBADF (Bad file descriptor) [pid 5925] close(11) = -1 EBADF (Bad file descriptor) [pid 5925] close(12) = -1 EBADF (Bad file descriptor) [pid 5925] close(13) = -1 EBADF (Bad file descriptor) [pid 5925] close(14) = -1 EBADF (Bad file descriptor) [pid 5925] close(15) = -1 EBADF (Bad file descriptor) [pid 5925] close(16) = -1 EBADF (Bad file descriptor) [pid 5925] close(17) = -1 EBADF (Bad file descriptor) [pid 5925] close(18) = -1 EBADF (Bad file descriptor) [pid 5925] close(19) = -1 EBADF (Bad file descriptor) [pid 5925] close(20) = -1 EBADF (Bad file descriptor) [pid 5925] close(21) = -1 EBADF (Bad file descriptor) [pid 5925] close(22) = -1 EBADF (Bad file descriptor) [pid 5925] close(23) = -1 EBADF (Bad file descriptor) [pid 5925] close(24) = -1 EBADF (Bad file descriptor) [pid 5925] close(25) = -1 EBADF (Bad file descriptor) [pid 5925] close(26) = -1 EBADF (Bad file descriptor) [pid 5925] close(27) = -1 EBADF (Bad file descriptor) [pid 5925] close(28) = -1 EBADF (Bad file descriptor) [pid 5925] close(29) = -1 EBADF (Bad file descriptor) [pid 5925] exit_group(0) = ? [pid 5925] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./8/binderfs") = 0 [ 94.746372][ T5832] bcachefs (loop0): shutting down [ 94.751451][ T5832] bcachefs (loop0): going read-only [ 94.757044][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 94.764745][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 94.787834][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 94.801064][ T1100] bcachefs (loop0): fatal error - emergency read only [ 94.808447][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 94.818174][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 94.826169][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 94.843364][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./8/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./8") = 0 [pid 5832] mkdir("./9", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5936 attached [pid 5936] set_robust_list(0x55556eb47760, 24) = 0 [pid 5936] chdir("./9" [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 11 [pid 5936] <... chdir resumed>) = 0 [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5936] setpgid(0, 0) = 0 [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5936] write(3, "1000", 4) = 4 [pid 5936] close(3) = 0 [pid 5936] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5936] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5936] write(1, "executing program\n", 18executing program ) = 18 [pid 5936] memfd_create("syzkaller", 0) = 3 [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5936] munmap(0x7f6f12000000, 138412032) = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5936] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5936] close(3) = 0 [pid 5936] close(4) = 0 [pid 5936] mkdir("./file1", 0777) = 0 [ 96.321590][ T5936] loop0: detected capacity change from 0 to 32768 [ 96.404888][ T5936] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 96.425362][ T5936] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 96.434049][ T5936] bcachefs (loop0): Version upgrade required: [ 96.434049][ T5936] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 96.434049][ T5936] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 96.434049][ T5936] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 96.507175][ T5936] bcachefs (loop0): dropping and reconstructing all alloc info [ 96.523980][ T5936] bcachefs (loop0): accounting_read... done [ 96.530133][ T5936] bcachefs (loop0): alloc_read... done [ 96.536061][ T5936] bcachefs (loop0): stripes_read... done [ 96.541805][ T5936] bcachefs (loop0): snapshots_read... done [pid 5936] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5936] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5936] chdir("./file1") = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5936] ioctl(4, LOOP_CLR_FD) = 0 [pid 5936] close(4) = 0 [pid 5936] mkdir("./bus", 0777) = 0 [pid 5936] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5936] close(3) = 0 [pid 5936] close(4) = -1 EBADF (Bad file descriptor) [pid 5936] close(5) = -1 EBADF (Bad file descriptor) [pid 5936] close(6) = -1 EBADF (Bad file descriptor) [pid 5936] close(7) = -1 EBADF (Bad file descriptor) [pid 5936] close(8) = -1 EBADF (Bad file descriptor) [pid 5936] close(9) = -1 EBADF (Bad file descriptor) [pid 5936] close(10) = -1 EBADF (Bad file descriptor) [pid 5936] close(11) = -1 EBADF (Bad file descriptor) [pid 5936] close(12) = -1 EBADF (Bad file descriptor) [pid 5936] close(13) = -1 EBADF (Bad file descriptor) [pid 5936] close(14) = -1 EBADF (Bad file descriptor) [pid 5936] close(15) = -1 EBADF (Bad file descriptor) [pid 5936] close(16) = -1 EBADF (Bad file descriptor) [pid 5936] close(17) = -1 EBADF (Bad file descriptor) [pid 5936] close(18) = -1 EBADF (Bad file descriptor) [pid 5936] close(19) = -1 EBADF (Bad file descriptor) [pid 5936] close(20) = -1 EBADF (Bad file descriptor) [pid 5936] close(21) = -1 EBADF (Bad file descriptor) [pid 5936] close(22) = -1 EBADF (Bad file descriptor) [pid 5936] close(23) = -1 EBADF (Bad file descriptor) [pid 5936] close(24) = -1 EBADF (Bad file descriptor) [pid 5936] close(25) = -1 EBADF (Bad file descriptor) [pid 5936] close(26) = -1 EBADF (Bad file descriptor) [pid 5936] close(27) = -1 EBADF (Bad file descriptor) [pid 5936] close(28) = -1 EBADF (Bad file descriptor) [pid 5936] close(29) = -1 EBADF (Bad file descriptor) [pid 5936] exit_group(0) = ? [pid 5936] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [ 96.547849][ T5936] bcachefs (loop0): check_allocations... done [ 96.567396][ T5936] bcachefs (loop0): going read-write [ 96.576567][ T5936] bcachefs (loop0): done starting filesystem [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./9/binderfs") = 0 [ 96.630861][ T5832] bcachefs (loop0): shutting down [ 96.636160][ T5832] bcachefs (loop0): going read-only [ 96.641392][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 96.650281][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 96.673546][ T62] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 96.686950][ T62] bcachefs (loop0): fatal error - emergency read only [ 96.694224][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 96.704068][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 96.711653][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 96.730162][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./9/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./9") = 0 [pid 5832] mkdir("./10", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5947 attached , child_tidptr=0x55556eb47750) = 12 [pid 5947] set_robust_list(0x55556eb47760, 24) = 0 [pid 5947] chdir("./10") = 0 [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5947] setpgid(0, 0) = 0 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5947] write(3, "1000", 4) = 4 [pid 5947] close(3) = 0 [pid 5947] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5947] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5947] write(1, "executing program\n", 18) = 18 [pid 5947] memfd_create("syzkaller", 0) = 3 [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5947] munmap(0x7f6f12000000, 138412032) = 0 [pid 5947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5947] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5947] close(3) = 0 [pid 5947] close(4) = 0 [pid 5947] mkdir("./file1", 0777) = 0 [ 98.210972][ T5947] loop0: detected capacity change from 0 to 32768 [ 98.274803][ T5947] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 98.295552][ T5947] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 98.303726][ T5947] bcachefs (loop0): Version upgrade required: [ 98.303726][ T5947] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 98.303726][ T5947] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 98.303726][ T5947] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 98.376286][ T5947] bcachefs (loop0): dropping and reconstructing all alloc info [ 98.392587][ T5947] bcachefs (loop0): accounting_read... done [ 98.398713][ T5947] bcachefs (loop0): alloc_read... done [ 98.404303][ T5947] bcachefs (loop0): stripes_read... done [ 98.410011][ T5947] bcachefs (loop0): snapshots_read... done [pid 5947] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5947] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5947] chdir("./file1") = 0 [pid 5947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 98.416014][ T5947] bcachefs (loop0): check_allocations... done [ 98.436048][ T5947] bcachefs (loop0): going read-write [ 98.444652][ T5947] bcachefs (loop0): done starting filesystem [pid 5947] ioctl(4, LOOP_CLR_FD) = 0 [pid 5947] close(4) = 0 [pid 5947] mkdir("./bus", 0777) = 0 [pid 5947] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5947] close(3) = 0 [pid 5947] close(4) = -1 EBADF (Bad file descriptor) [pid 5947] close(5) = -1 EBADF (Bad file descriptor) [pid 5947] close(6) = -1 EBADF (Bad file descriptor) [pid 5947] close(7) = -1 EBADF (Bad file descriptor) [pid 5947] close(8) = -1 EBADF (Bad file descriptor) [pid 5947] close(9) = -1 EBADF (Bad file descriptor) [pid 5947] close(10) = -1 EBADF (Bad file descriptor) [pid 5947] close(11) = -1 EBADF (Bad file descriptor) [pid 5947] close(12) = -1 EBADF (Bad file descriptor) [pid 5947] close(13) = -1 EBADF (Bad file descriptor) [pid 5947] close(14) = -1 EBADF (Bad file descriptor) [pid 5947] close(15) = -1 EBADF (Bad file descriptor) [pid 5947] close(16) = -1 EBADF (Bad file descriptor) [pid 5947] close(17) = -1 EBADF (Bad file descriptor) [pid 5947] close(18) = -1 EBADF (Bad file descriptor) [pid 5947] close(19) = -1 EBADF (Bad file descriptor) [pid 5947] close(20) = -1 EBADF (Bad file descriptor) [pid 5947] close(21) = -1 EBADF (Bad file descriptor) [pid 5947] close(22) = -1 EBADF (Bad file descriptor) [pid 5947] close(23) = -1 EBADF (Bad file descriptor) [pid 5947] close(24) = -1 EBADF (Bad file descriptor) [pid 5947] close(25) = -1 EBADF (Bad file descriptor) [pid 5947] close(26) = -1 EBADF (Bad file descriptor) [pid 5947] close(27) = -1 EBADF (Bad file descriptor) [pid 5947] close(28) = -1 EBADF (Bad file descriptor) [pid 5947] close(29) = -1 EBADF (Bad file descriptor) [pid 5947] exit_group(0) = ? [pid 5947] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5832] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./10/binderfs") = 0 [ 98.897610][ T5832] bcachefs (loop0): shutting down [ 98.902915][ T5832] bcachefs (loop0): going read-only [ 98.908134][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 98.916429][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 98.939868][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 98.953259][ T1100] bcachefs (loop0): fatal error - emergency read only [ 98.960404][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 98.970363][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 98.978264][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 98.996003][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./10/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./10") = 0 [pid 5832] mkdir("./11", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5958 attached , child_tidptr=0x55556eb47750) = 13 [pid 5958] set_robust_list(0x55556eb47760, 24) = 0 [pid 5958] chdir("./11") = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5958] write(3, "1000", 4) = 4 [pid 5958] close(3) = 0 [pid 5958] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5958] write(1, "executing program\n", 18executing program ) = 18 [pid 5958] memfd_create("syzkaller", 0) = 3 [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5958] munmap(0x7f6f12000000, 138412032) = 0 [pid 5958] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5958] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5958] close(3) = 0 [pid 5958] close(4) = 0 [pid 5958] mkdir("./file1", 0777) = 0 [ 100.447313][ T5958] loop0: detected capacity change from 0 to 32768 [ 100.516023][ T5958] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 100.536302][ T5958] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 100.544463][ T5958] bcachefs (loop0): Version upgrade required: [ 100.544463][ T5958] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 100.544463][ T5958] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 100.544463][ T5958] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 100.616851][ T5958] bcachefs (loop0): dropping and reconstructing all alloc info [ 100.633819][ T5958] bcachefs (loop0): accounting_read... done [ 100.640000][ T5958] bcachefs (loop0): alloc_read... done [ 100.645586][ T5958] bcachefs (loop0): stripes_read... done [ 100.651292][ T5958] bcachefs (loop0): snapshots_read... done [pid 5958] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5958] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5958] chdir("./file1") = 0 [ 100.657331][ T5958] bcachefs (loop0): check_allocations... done [ 100.677733][ T5958] bcachefs (loop0): going read-write [ 100.687133][ T5958] bcachefs (loop0): done starting filesystem [pid 5958] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5958] ioctl(4, LOOP_CLR_FD) = 0 [pid 5958] close(4) = 0 [pid 5958] mkdir("./bus", 0777) = 0 [pid 5958] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5958] close(3) = 0 [pid 5958] close(4) = -1 EBADF (Bad file descriptor) [pid 5958] close(5) = -1 EBADF (Bad file descriptor) [pid 5958] close(6) = -1 EBADF (Bad file descriptor) [pid 5958] close(7) = -1 EBADF (Bad file descriptor) [pid 5958] close(8) = -1 EBADF (Bad file descriptor) [pid 5958] close(9) = -1 EBADF (Bad file descriptor) [pid 5958] close(10) = -1 EBADF (Bad file descriptor) [pid 5958] close(11) = -1 EBADF (Bad file descriptor) [pid 5958] close(12) = -1 EBADF (Bad file descriptor) [pid 5958] close(13) = -1 EBADF (Bad file descriptor) [pid 5958] close(14) = -1 EBADF (Bad file descriptor) [pid 5958] close(15) = -1 EBADF (Bad file descriptor) [pid 5958] close(16) = -1 EBADF (Bad file descriptor) [pid 5958] close(17) = -1 EBADF (Bad file descriptor) [pid 5958] close(18) = -1 EBADF (Bad file descriptor) [pid 5958] close(19) = -1 EBADF (Bad file descriptor) [pid 5958] close(20) = -1 EBADF (Bad file descriptor) [pid 5958] close(21) = -1 EBADF (Bad file descriptor) [pid 5958] close(22) = -1 EBADF (Bad file descriptor) [pid 5958] close(23) = -1 EBADF (Bad file descriptor) [pid 5958] close(24) = -1 EBADF (Bad file descriptor) [pid 5958] close(25) = -1 EBADF (Bad file descriptor) [pid 5958] close(26) = -1 EBADF (Bad file descriptor) [pid 5958] close(27) = -1 EBADF (Bad file descriptor) [pid 5958] close(28) = -1 EBADF (Bad file descriptor) [pid 5958] close(29) = -1 EBADF (Bad file descriptor) [pid 5958] exit_group(0) = ? [pid 5958] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./11/binderfs") = 0 [ 101.168058][ T5832] bcachefs (loop0): shutting down [ 101.173290][ T5832] bcachefs (loop0): going read-only [ 101.178515][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 101.186352][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 101.208687][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 101.221830][ T1100] bcachefs (loop0): fatal error - emergency read only [ 101.229722][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 101.239529][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 101.247478][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 101.265364][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./11/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./11") = 0 [pid 5832] mkdir("./12", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5969 attached [pid 5969] set_robust_list(0x55556eb47760, 24) = 0 [pid 5969] chdir("./12" [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 14 [pid 5969] <... chdir resumed>) = 0 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5969] setpgid(0, 0) = 0 [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5969] write(3, "1000", 4) = 4 [pid 5969] close(3) = 0 [pid 5969] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5969] write(1, "executing program\n", 18) = 18 [pid 5969] memfd_create("syzkaller", 0) = 3 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5969] munmap(0x7f6f12000000, 138412032) = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5969] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5969] close(3) = 0 [pid 5969] close(4) = 0 [pid 5969] mkdir("./file1", 0777) = 0 [ 102.765916][ T5969] loop0: detected capacity change from 0 to 32768 [ 102.856856][ T5969] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 102.876915][ T5969] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 102.885063][ T5969] bcachefs (loop0): Version upgrade required: [ 102.885063][ T5969] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 102.885063][ T5969] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 102.885063][ T5969] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 102.957015][ T5969] bcachefs (loop0): dropping and reconstructing all alloc info [ 102.973089][ T5969] bcachefs (loop0): accounting_read... done [ 102.979263][ T5969] bcachefs (loop0): alloc_read... done [ 102.985262][ T5969] bcachefs (loop0): stripes_read... done [ 102.990983][ T5969] bcachefs (loop0): snapshots_read... done [pid 5969] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5969] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5969] chdir("./file1") = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 102.996967][ T5969] bcachefs (loop0): check_allocations... done [ 103.016470][ T5969] bcachefs (loop0): going read-write [ 103.025195][ T5969] bcachefs (loop0): done starting filesystem [pid 5969] ioctl(4, LOOP_CLR_FD) = 0 [pid 5969] close(4) = 0 [pid 5969] mkdir("./bus", 0777) = 0 [pid 5969] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5969] close(3) = 0 [pid 5969] close(4) = -1 EBADF (Bad file descriptor) [pid 5969] close(5) = -1 EBADF (Bad file descriptor) [pid 5969] close(6) = -1 EBADF (Bad file descriptor) [pid 5969] close(7) = -1 EBADF (Bad file descriptor) [pid 5969] close(8) = -1 EBADF (Bad file descriptor) [pid 5969] close(9) = -1 EBADF (Bad file descriptor) [pid 5969] close(10) = -1 EBADF (Bad file descriptor) [pid 5969] close(11) = -1 EBADF (Bad file descriptor) [pid 5969] close(12) = -1 EBADF (Bad file descriptor) [pid 5969] close(13) = -1 EBADF (Bad file descriptor) [pid 5969] close(14) = -1 EBADF (Bad file descriptor) [pid 5969] close(15) = -1 EBADF (Bad file descriptor) [pid 5969] close(16) = -1 EBADF (Bad file descriptor) [pid 5969] close(17) = -1 EBADF (Bad file descriptor) [pid 5969] close(18) = -1 EBADF (Bad file descriptor) [pid 5969] close(19) = -1 EBADF (Bad file descriptor) [pid 5969] close(20) = -1 EBADF (Bad file descriptor) [pid 5969] close(21) = -1 EBADF (Bad file descriptor) [pid 5969] close(22) = -1 EBADF (Bad file descriptor) [pid 5969] close(23) = -1 EBADF (Bad file descriptor) [pid 5969] close(24) = -1 EBADF (Bad file descriptor) [pid 5969] close(25) = -1 EBADF (Bad file descriptor) [pid 5969] close(26) = -1 EBADF (Bad file descriptor) [pid 5969] close(27) = -1 EBADF (Bad file descriptor) [pid 5969] close(28) = -1 EBADF (Bad file descriptor) [pid 5969] close(29) = -1 EBADF (Bad file descriptor) [pid 5969] exit_group(0) = ? [pid 5969] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5832] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./12/binderfs") = 0 [ 103.255149][ T5832] bcachefs (loop0): shutting down [ 103.260217][ T5832] bcachefs (loop0): going read-only [ 103.265692][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 103.273250][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 103.296862][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 103.310004][ T1100] bcachefs (loop0): fatal error - emergency read only [ 103.317253][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 103.327061][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 103.334964][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 103.353384][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./12/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./12") = 0 [pid 5832] mkdir("./13", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5980 attached , child_tidptr=0x55556eb47750) = 15 [pid 5980] set_robust_list(0x55556eb47760, 24) = 0 [pid 5980] chdir("./13") = 0 [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5980] setpgid(0, 0) = 0 [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5980] write(3, "1000", 4) = 4 [pid 5980] close(3) = 0 [pid 5980] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5980] write(1, "executing program\n", 18executing program ) = 18 [pid 5980] memfd_create("syzkaller", 0) = 3 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5980] munmap(0x7f6f12000000, 138412032) = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5980] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5980] close(3) = 0 [pid 5980] close(4) = 0 [pid 5980] mkdir("./file1", 0777) = 0 [ 104.854551][ T5980] loop0: detected capacity change from 0 to 32768 [ 104.924467][ T5980] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 104.944595][ T5980] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 104.952860][ T5980] bcachefs (loop0): Version upgrade required: [ 104.952860][ T5980] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 104.952860][ T5980] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 104.952860][ T5980] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 105.025287][ T5980] bcachefs (loop0): dropping and reconstructing all alloc info [ 105.042647][ T5980] bcachefs (loop0): accounting_read... done [ 105.048769][ T5980] bcachefs (loop0): alloc_read... done [ 105.054632][ T5980] bcachefs (loop0): stripes_read... done [ 105.060344][ T5980] bcachefs (loop0): snapshots_read... done [pid 5980] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5980] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5980] chdir("./file1") = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5980] ioctl(4, LOOP_CLR_FD) = 0 [ 105.066526][ T5980] bcachefs (loop0): check_allocations... done [ 105.087017][ T5980] bcachefs (loop0): going read-write [ 105.095454][ T5980] bcachefs (loop0): done starting filesystem [pid 5980] close(4) = 0 [pid 5980] mkdir("./bus", 0777) = 0 [pid 5980] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5980] close(3) = 0 [pid 5980] close(4) = -1 EBADF (Bad file descriptor) [pid 5980] close(5) = -1 EBADF (Bad file descriptor) [pid 5980] close(6) = -1 EBADF (Bad file descriptor) [pid 5980] close(7) = -1 EBADF (Bad file descriptor) [pid 5980] close(8) = -1 EBADF (Bad file descriptor) [pid 5980] close(9) = -1 EBADF (Bad file descriptor) [pid 5980] close(10) = -1 EBADF (Bad file descriptor) [pid 5980] close(11) = -1 EBADF (Bad file descriptor) [pid 5980] close(12) = -1 EBADF (Bad file descriptor) [pid 5980] close(13) = -1 EBADF (Bad file descriptor) [pid 5980] close(14) = -1 EBADF (Bad file descriptor) [pid 5980] close(15) = -1 EBADF (Bad file descriptor) [pid 5980] close(16) = -1 EBADF (Bad file descriptor) [pid 5980] close(17) = -1 EBADF (Bad file descriptor) [pid 5980] close(18) = -1 EBADF (Bad file descriptor) [pid 5980] close(19) = -1 EBADF (Bad file descriptor) [pid 5980] close(20) = -1 EBADF (Bad file descriptor) [pid 5980] close(21) = -1 EBADF (Bad file descriptor) [pid 5980] close(22) = -1 EBADF (Bad file descriptor) [pid 5980] close(23) = -1 EBADF (Bad file descriptor) [pid 5980] close(24) = -1 EBADF (Bad file descriptor) [pid 5980] close(25) = -1 EBADF (Bad file descriptor) [pid 5980] close(26) = -1 EBADF (Bad file descriptor) [pid 5980] close(27) = -1 EBADF (Bad file descriptor) [pid 5980] close(28) = -1 EBADF (Bad file descriptor) [pid 5980] close(29) = -1 EBADF (Bad file descriptor) [pid 5980] exit_group(0) = ? [pid 5980] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./13/binderfs") = 0 [ 105.485990][ T5832] bcachefs (loop0): shutting down [ 105.491065][ T5832] bcachefs (loop0): going read-only [ 105.496572][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 105.504142][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 105.526896][ T35] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 105.539772][ T35] bcachefs (loop0): fatal error - emergency read only [ 105.547625][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 105.557725][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 105.565637][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 105.583875][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./13/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./13") = 0 [pid 5832] mkdir("./14", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5991 attached , child_tidptr=0x55556eb47750) = 16 [pid 5991] set_robust_list(0x55556eb47760, 24) = 0 [pid 5991] chdir("./14") = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5991] setpgid(0, 0) = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5991] write(3, "1000", 4) = 4 [pid 5991] close(3) = 0 [pid 5991] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5991] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5991] write(1, "executing program\n", 18executing program ) = 18 [pid 5991] memfd_create("syzkaller", 0) = 3 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5991] munmap(0x7f6f12000000, 138412032) = 0 [pid 5991] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5991] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5991] close(3) = 0 [pid 5991] close(4) = 0 [pid 5991] mkdir("./file1", 0777) = 0 [ 107.028516][ T5991] loop0: detected capacity change from 0 to 32768 [ 107.112935][ T5991] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 107.133137][ T5991] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 107.141210][ T5991] bcachefs (loop0): Version upgrade required: [ 107.141210][ T5991] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 107.141210][ T5991] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 107.141210][ T5991] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 107.213496][ T5991] bcachefs (loop0): dropping and reconstructing all alloc info [ 107.229793][ T5991] bcachefs (loop0): accounting_read... done [ 107.236022][ T5991] bcachefs (loop0): alloc_read... done [ 107.241569][ T5991] bcachefs (loop0): stripes_read... done [ 107.247332][ T5991] bcachefs (loop0): snapshots_read... done [pid 5991] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 5991] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5991] chdir("./file1") = 0 [pid 5991] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5991] ioctl(4, LOOP_CLR_FD) = 0 [pid 5991] close(4) = 0 [pid 5991] mkdir("./bus", 0777) = 0 [pid 5991] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5991] close(3) = 0 [pid 5991] close(4) = -1 EBADF (Bad file descriptor) [pid 5991] close(5) = -1 EBADF (Bad file descriptor) [ 107.253367][ T5991] bcachefs (loop0): check_allocations... done [ 107.275382][ T5991] bcachefs (loop0): going read-write [ 107.284851][ T5991] bcachefs (loop0): done starting filesystem [pid 5991] close(6) = -1 EBADF (Bad file descriptor) [pid 5991] close(7) = -1 EBADF (Bad file descriptor) [pid 5991] close(8) = -1 EBADF (Bad file descriptor) [pid 5991] close(9) = -1 EBADF (Bad file descriptor) [pid 5991] close(10) = -1 EBADF (Bad file descriptor) [pid 5991] close(11) = -1 EBADF (Bad file descriptor) [pid 5991] close(12) = -1 EBADF (Bad file descriptor) [pid 5991] close(13) = -1 EBADF (Bad file descriptor) [pid 5991] close(14) = -1 EBADF (Bad file descriptor) [pid 5991] close(15) = -1 EBADF (Bad file descriptor) [pid 5991] close(16) = -1 EBADF (Bad file descriptor) [pid 5991] close(17) = -1 EBADF (Bad file descriptor) [pid 5991] close(18) = -1 EBADF (Bad file descriptor) [pid 5991] close(19) = -1 EBADF (Bad file descriptor) [pid 5991] close(20) = -1 EBADF (Bad file descriptor) [pid 5991] close(21) = -1 EBADF (Bad file descriptor) [pid 5991] close(22) = -1 EBADF (Bad file descriptor) [pid 5991] close(23) = -1 EBADF (Bad file descriptor) [pid 5991] close(24) = -1 EBADF (Bad file descriptor) [pid 5991] close(25) = -1 EBADF (Bad file descriptor) [pid 5991] close(26) = -1 EBADF (Bad file descriptor) [pid 5991] close(27) = -1 EBADF (Bad file descriptor) [pid 5991] close(28) = -1 EBADF (Bad file descriptor) [pid 5991] close(29) = -1 EBADF (Bad file descriptor) [pid 5991] exit_group(0) = ? [pid 5991] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5832] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./14/binderfs") = 0 [ 107.671866][ T5832] bcachefs (loop0): shutting down [ 107.677300][ T5832] bcachefs (loop0): going read-only [ 107.682665][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 107.690206][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 107.713227][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 107.726497][ T1100] bcachefs (loop0): fatal error - emergency read only [ 107.733777][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 107.743556][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 107.751136][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 107.768605][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./14/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./14") = 0 [pid 5832] mkdir("./15", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6002 attached , child_tidptr=0x55556eb47750) = 17 [pid 6002] set_robust_list(0x55556eb47760, 24) = 0 [pid 6002] chdir("./15") = 0 [pid 6002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6002] setpgid(0, 0) = 0 [pid 6002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6002] write(3, "1000", 4) = 4 [pid 6002] close(3) = 0 [pid 6002] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6002] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6002] write(1, "executing program\n", 18) = 18 [pid 6002] memfd_create("syzkaller", 0) = 3 [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6002] munmap(0x7f6f12000000, 138412032) = 0 [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6002] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6002] close(3) = 0 [pid 6002] close(4) = 0 [pid 6002] mkdir("./file1", 0777) = 0 [ 109.238483][ T6002] loop0: detected capacity change from 0 to 32768 [ 109.315828][ T6002] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 109.335826][ T6002] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 109.344002][ T6002] bcachefs (loop0): Version upgrade required: [ 109.344002][ T6002] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 109.344002][ T6002] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 109.344002][ T6002] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 109.416842][ T6002] bcachefs (loop0): dropping and reconstructing all alloc info [ 109.435871][ T6002] bcachefs (loop0): accounting_read... done [ 109.442081][ T6002] bcachefs (loop0): alloc_read... done [ 109.447633][ T6002] bcachefs (loop0): stripes_read... done [ 109.453412][ T6002] bcachefs (loop0): snapshots_read... done [pid 6002] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6002] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6002] chdir("./file1") = 0 [pid 6002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6002] ioctl(4, LOOP_CLR_FD) = 0 [ 109.459439][ T6002] bcachefs (loop0): check_allocations... done [ 109.479302][ T6002] bcachefs (loop0): going read-write [ 109.488478][ T6002] bcachefs (loop0): done starting filesystem [pid 6002] close(4) = 0 [pid 6002] mkdir("./bus", 0777) = 0 [pid 6002] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6002] close(3) = 0 [pid 6002] close(4) = -1 EBADF (Bad file descriptor) [pid 6002] close(5) = -1 EBADF (Bad file descriptor) [pid 6002] close(6) = -1 EBADF (Bad file descriptor) [pid 6002] close(7) = -1 EBADF (Bad file descriptor) [pid 6002] close(8) = -1 EBADF (Bad file descriptor) [pid 6002] close(9) = -1 EBADF (Bad file descriptor) [pid 6002] close(10) = -1 EBADF (Bad file descriptor) [pid 6002] close(11) = -1 EBADF (Bad file descriptor) [pid 6002] close(12) = -1 EBADF (Bad file descriptor) [pid 6002] close(13) = -1 EBADF (Bad file descriptor) [pid 6002] close(14) = -1 EBADF (Bad file descriptor) [pid 6002] close(15) = -1 EBADF (Bad file descriptor) [pid 6002] close(16) = -1 EBADF (Bad file descriptor) [pid 6002] close(17) = -1 EBADF (Bad file descriptor) [pid 6002] close(18) = -1 EBADF (Bad file descriptor) [pid 6002] close(19) = -1 EBADF (Bad file descriptor) [pid 6002] close(20) = -1 EBADF (Bad file descriptor) [pid 6002] close(21) = -1 EBADF (Bad file descriptor) [pid 6002] close(22) = -1 EBADF (Bad file descriptor) [pid 6002] close(23) = -1 EBADF (Bad file descriptor) [pid 6002] close(24) = -1 EBADF (Bad file descriptor) [pid 6002] close(25) = -1 EBADF (Bad file descriptor) [pid 6002] close(26) = -1 EBADF (Bad file descriptor) [pid 6002] close(27) = -1 EBADF (Bad file descriptor) [pid 6002] close(28) = -1 EBADF (Bad file descriptor) [pid 6002] close(29) = -1 EBADF (Bad file descriptor) [pid 6002] exit_group(0) = ? [pid 6002] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./15/binderfs") = 0 [ 109.913237][ T5832] bcachefs (loop0): shutting down [ 109.918309][ T5832] bcachefs (loop0): going read-only [ 109.923916][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 109.931370][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 109.954400][ T35] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 109.967861][ T35] bcachefs (loop0): fatal error - emergency read only [ 109.975726][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 109.985604][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 109.993455][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 110.013544][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./15/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./15") = 0 [pid 5832] mkdir("./16", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6015 attached , child_tidptr=0x55556eb47750) = 18 [pid 6015] set_robust_list(0x55556eb47760, 24) = 0 [pid 6015] chdir("./16") = 0 [pid 6015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6015] setpgid(0, 0) = 0 [pid 6015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6015] write(3, "1000", 4) = 4 [pid 6015] close(3) = 0 [pid 6015] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6015] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6015] write(1, "executing program\n", 18) = 18 [pid 6015] memfd_create("syzkaller", 0) = 3 [pid 6015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6015] munmap(0x7f6f12000000, 138412032) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6015] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6015] close(3) = 0 [pid 6015] close(4) = 0 [pid 6015] mkdir("./file1", 0777) = 0 [ 111.458969][ T6015] loop0: detected capacity change from 0 to 32768 [ 111.537775][ T6015] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 111.559380][ T6015] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 111.567541][ T6015] bcachefs (loop0): Version upgrade required: [ 111.567541][ T6015] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 111.567541][ T6015] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 111.567541][ T6015] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 111.639712][ T6015] bcachefs (loop0): dropping and reconstructing all alloc info [ 111.656213][ T6015] bcachefs (loop0): accounting_read... done [ 111.662554][ T6015] bcachefs (loop0): alloc_read... done [ 111.668143][ T6015] bcachefs (loop0): stripes_read... done [ 111.673935][ T6015] bcachefs (loop0): snapshots_read... done [pid 6015] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6015] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6015] chdir("./file1") = 0 [ 111.679947][ T6015] bcachefs (loop0): check_allocations... done [ 111.699701][ T6015] bcachefs (loop0): going read-write [ 111.708874][ T6015] bcachefs (loop0): done starting filesystem [pid 6015] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6015] ioctl(4, LOOP_CLR_FD) = 0 [pid 6015] close(4) = 0 [pid 6015] mkdir("./bus", 0777) = 0 [pid 6015] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6015] close(3) = 0 [pid 6015] close(4) = -1 EBADF (Bad file descriptor) [pid 6015] close(5) = -1 EBADF (Bad file descriptor) [pid 6015] close(6) = -1 EBADF (Bad file descriptor) [pid 6015] close(7) = -1 EBADF (Bad file descriptor) [pid 6015] close(8) = -1 EBADF (Bad file descriptor) [pid 6015] close(9) = -1 EBADF (Bad file descriptor) [pid 6015] close(10) = -1 EBADF (Bad file descriptor) [pid 6015] close(11) = -1 EBADF (Bad file descriptor) [pid 6015] close(12) = -1 EBADF (Bad file descriptor) [pid 6015] close(13) = -1 EBADF (Bad file descriptor) [pid 6015] close(14) = -1 EBADF (Bad file descriptor) [pid 6015] close(15) = -1 EBADF (Bad file descriptor) [pid 6015] close(16) = -1 EBADF (Bad file descriptor) [pid 6015] close(17) = -1 EBADF (Bad file descriptor) [pid 6015] close(18) = -1 EBADF (Bad file descriptor) [pid 6015] close(19) = -1 EBADF (Bad file descriptor) [pid 6015] close(20) = -1 EBADF (Bad file descriptor) [pid 6015] close(21) = -1 EBADF (Bad file descriptor) [pid 6015] close(22) = -1 EBADF (Bad file descriptor) [pid 6015] close(23) = -1 EBADF (Bad file descriptor) [pid 6015] close(24) = -1 EBADF (Bad file descriptor) [pid 6015] close(25) = -1 EBADF (Bad file descriptor) [pid 6015] close(26) = -1 EBADF (Bad file descriptor) [pid 6015] close(27) = -1 EBADF (Bad file descriptor) [pid 6015] close(28) = -1 EBADF (Bad file descriptor) [pid 6015] close(29) = -1 EBADF (Bad file descriptor) [pid 6015] exit_group(0) = ? [pid 6015] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./16/binderfs") = 0 [ 112.078245][ T5832] bcachefs (loop0): shutting down [ 112.083778][ T5832] bcachefs (loop0): going read-only [ 112.089016][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 112.097240][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 112.120373][ T62] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 112.133528][ T62] bcachefs (loop0): fatal error - emergency read only [ 112.140926][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 112.150731][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 112.158570][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 112.176500][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./16/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./16") = 0 [pid 5832] mkdir("./17", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6029 attached , child_tidptr=0x55556eb47750) = 19 [pid 6029] set_robust_list(0x55556eb47760, 24) = 0 [pid 6029] chdir("./17") = 0 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6029] write(3, "1000", 4) = 4 [pid 6029] close(3) = 0 [pid 6029] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6029] write(1, "executing program\n", 18) = 18 [pid 6029] memfd_create("syzkaller", 0) = 3 [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6029] munmap(0x7f6f12000000, 138412032) = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6029] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6029] close(3) = 0 [pid 6029] close(4) = 0 [pid 6029] mkdir("./file1", 0777) = 0 [ 113.588496][ T6029] loop0: detected capacity change from 0 to 32768 [ 113.656629][ T6029] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 113.676810][ T6029] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 113.685285][ T6029] bcachefs (loop0): Version upgrade required: [ 113.685285][ T6029] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 113.685285][ T6029] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 113.685285][ T6029] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 113.757794][ T6029] bcachefs (loop0): dropping and reconstructing all alloc info [ 113.774239][ T6029] bcachefs (loop0): accounting_read... done [ 113.780412][ T6029] bcachefs (loop0): alloc_read... done [ 113.786045][ T6029] bcachefs (loop0): stripes_read... done [ 113.791759][ T6029] bcachefs (loop0): snapshots_read... done [pid 6029] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6029] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6029] chdir("./file1") = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6029] ioctl(4, LOOP_CLR_FD) = 0 [pid 6029] close(4) = 0 [pid 6029] mkdir("./bus", 0777) = 0 [pid 6029] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [ 113.797878][ T6029] bcachefs (loop0): check_allocations... done [ 113.826743][ T6029] bcachefs (loop0): going read-write [ 113.835649][ T6029] bcachefs (loop0): done starting filesystem [pid 6029] close(3) = 0 [pid 6029] close(4) = -1 EBADF (Bad file descriptor) [pid 6029] close(5) = -1 EBADF (Bad file descriptor) [pid 6029] close(6) = -1 EBADF (Bad file descriptor) [pid 6029] close(7) = -1 EBADF (Bad file descriptor) [pid 6029] close(8) = -1 EBADF (Bad file descriptor) [pid 6029] close(9) = -1 EBADF (Bad file descriptor) [pid 6029] close(10) = -1 EBADF (Bad file descriptor) [pid 6029] close(11) = -1 EBADF (Bad file descriptor) [pid 6029] close(12) = -1 EBADF (Bad file descriptor) [pid 6029] close(13) = -1 EBADF (Bad file descriptor) [pid 6029] close(14) = -1 EBADF (Bad file descriptor) [pid 6029] close(15) = -1 EBADF (Bad file descriptor) [pid 6029] close(16) = -1 EBADF (Bad file descriptor) [pid 6029] close(17) = -1 EBADF (Bad file descriptor) [pid 6029] close(18) = -1 EBADF (Bad file descriptor) [pid 6029] close(19) = -1 EBADF (Bad file descriptor) [pid 6029] close(20) = -1 EBADF (Bad file descriptor) [pid 6029] close(21) = -1 EBADF (Bad file descriptor) [pid 6029] close(22) = -1 EBADF (Bad file descriptor) [pid 6029] close(23) = -1 EBADF (Bad file descriptor) [pid 6029] close(24) = -1 EBADF (Bad file descriptor) [pid 6029] close(25) = -1 EBADF (Bad file descriptor) [pid 6029] close(26) = -1 EBADF (Bad file descriptor) [pid 6029] close(27) = -1 EBADF (Bad file descriptor) [pid 6029] close(28) = -1 EBADF (Bad file descriptor) [pid 6029] close(29) = -1 EBADF (Bad file descriptor) [pid 6029] exit_group(0) = ? [pid 6029] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./17/binderfs") = 0 [ 114.246193][ T5832] bcachefs (loop0): shutting down [ 114.251274][ T5832] bcachefs (loop0): going read-only [ 114.256771][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 114.264271][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 114.287431][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 114.300556][ T1100] bcachefs (loop0): fatal error - emergency read only [ 114.307835][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 114.317665][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 114.325546][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 114.344084][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./17/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./17") = 0 [pid 5832] mkdir("./18", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6041 attached [pid 6041] set_robust_list(0x55556eb47760, 24) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 20 [pid 6041] chdir("./18") = 0 [pid 6041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6041] setpgid(0, 0) = 0 [pid 6041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6041] write(3, "1000", 4) = 4 [pid 6041] close(3) = 0 [pid 6041] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6041] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6041] write(1, "executing program\n", 18) = 18 [pid 6041] memfd_create("syzkaller", 0) = 3 [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6041] munmap(0x7f6f12000000, 138412032) = 0 [pid 6041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6041] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6041] close(3) = 0 [pid 6041] close(4) = 0 [pid 6041] mkdir("./file1", 0777) = 0 [ 115.798936][ T6041] loop0: detected capacity change from 0 to 32768 [ 115.871230][ T6041] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 115.891831][ T6041] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 115.900474][ T6041] bcachefs (loop0): Version upgrade required: [ 115.900474][ T6041] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 115.900474][ T6041] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 115.900474][ T6041] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 115.973364][ T6041] bcachefs (loop0): dropping and reconstructing all alloc info [ 115.989637][ T6041] bcachefs (loop0): accounting_read... done [ 115.995877][ T6041] bcachefs (loop0): alloc_read... done [ 116.001432][ T6041] bcachefs (loop0): stripes_read... done [ 116.007199][ T6041] bcachefs (loop0): snapshots_read... done [pid 6041] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6041] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6041] chdir("./file1") = 0 [ 116.013326][ T6041] bcachefs (loop0): check_allocations... done [ 116.033593][ T6041] bcachefs (loop0): going read-write [ 116.044156][ T6041] bcachefs (loop0): done starting filesystem [pid 6041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6041] ioctl(4, LOOP_CLR_FD) = 0 [pid 6041] close(4) = 0 [pid 6041] mkdir("./bus", 0777) = 0 [pid 6041] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6041] close(3) = 0 [pid 6041] close(4) = -1 EBADF (Bad file descriptor) [pid 6041] close(5) = -1 EBADF (Bad file descriptor) [pid 6041] close(6) = -1 EBADF (Bad file descriptor) [pid 6041] close(7) = -1 EBADF (Bad file descriptor) [pid 6041] close(8) = -1 EBADF (Bad file descriptor) [pid 6041] close(9) = -1 EBADF (Bad file descriptor) [pid 6041] close(10) = -1 EBADF (Bad file descriptor) [pid 6041] close(11) = -1 EBADF (Bad file descriptor) [pid 6041] close(12) = -1 EBADF (Bad file descriptor) [pid 6041] close(13) = -1 EBADF (Bad file descriptor) [pid 6041] close(14) = -1 EBADF (Bad file descriptor) [pid 6041] close(15) = -1 EBADF (Bad file descriptor) [pid 6041] close(16) = -1 EBADF (Bad file descriptor) [pid 6041] close(17) = -1 EBADF (Bad file descriptor) [pid 6041] close(18) = -1 EBADF (Bad file descriptor) [pid 6041] close(19) = -1 EBADF (Bad file descriptor) [pid 6041] close(20) = -1 EBADF (Bad file descriptor) [pid 6041] close(21) = -1 EBADF (Bad file descriptor) [pid 6041] close(22) = -1 EBADF (Bad file descriptor) [pid 6041] close(23) = -1 EBADF (Bad file descriptor) [pid 6041] close(24) = -1 EBADF (Bad file descriptor) [pid 6041] close(25) = -1 EBADF (Bad file descriptor) [pid 6041] close(26) = -1 EBADF (Bad file descriptor) [pid 6041] close(27) = -1 EBADF (Bad file descriptor) [pid 6041] close(28) = -1 EBADF (Bad file descriptor) [pid 6041] close(29) = -1 EBADF (Bad file descriptor) [pid 6041] exit_group(0) = ? [pid 6041] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./18/binderfs") = 0 [ 116.437695][ T5832] bcachefs (loop0): shutting down [ 116.443058][ T5832] bcachefs (loop0): going read-only [ 116.448290][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 116.456366][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 116.479910][ T62] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 116.493081][ T62] bcachefs (loop0): fatal error - emergency read only [ 116.500172][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 116.510058][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 116.517832][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 116.536201][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./18/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./18") = 0 [pid 5832] mkdir("./19", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6052 attached [pid 6052] set_robust_list(0x55556eb47760, 24) = 0 [pid 6052] chdir("./19" [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 21 [pid 6052] <... chdir resumed>) = 0 [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6052] setpgid(0, 0) = 0 [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6052] write(3, "1000", 4) = 4 [pid 6052] close(3) = 0 [pid 6052] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6052] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6052] write(1, "executing program\n", 18) = 18 [pid 6052] memfd_create("syzkaller", 0) = 3 [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6052] munmap(0x7f6f12000000, 138412032) = 0 [pid 6052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6052] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6052] close(3) = 0 [pid 6052] close(4) = 0 [pid 6052] mkdir("./file1", 0777) = 0 [ 117.955889][ T6052] loop0: detected capacity change from 0 to 32768 [ 118.027222][ T6052] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 118.047979][ T6052] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 118.056151][ T6052] bcachefs (loop0): Version upgrade required: [ 118.056151][ T6052] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 118.056151][ T6052] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 118.056151][ T6052] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 118.128307][ T6052] bcachefs (loop0): dropping and reconstructing all alloc info [ 118.144303][ T6052] bcachefs (loop0): accounting_read... done [ 118.150413][ T6052] bcachefs (loop0): alloc_read... done [ 118.156195][ T6052] bcachefs (loop0): stripes_read... done [ 118.161906][ T6052] bcachefs (loop0): snapshots_read... done [pid 6052] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6052] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6052] chdir("./file1") = 0 [pid 6052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 118.168066][ T6052] bcachefs (loop0): check_allocations... done [ 118.187755][ T6052] bcachefs (loop0): going read-write [ 118.196720][ T6052] bcachefs (loop0): done starting filesystem [pid 6052] ioctl(4, LOOP_CLR_FD) = 0 [pid 6052] close(4) = 0 [pid 6052] mkdir("./bus", 0777) = 0 [pid 6052] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6052] close(3) = 0 [pid 6052] close(4) = -1 EBADF (Bad file descriptor) [pid 6052] close(5) = -1 EBADF (Bad file descriptor) [pid 6052] close(6) = -1 EBADF (Bad file descriptor) [pid 6052] close(7) = -1 EBADF (Bad file descriptor) [pid 6052] close(8) = -1 EBADF (Bad file descriptor) [pid 6052] close(9) = -1 EBADF (Bad file descriptor) [pid 6052] close(10) = -1 EBADF (Bad file descriptor) [pid 6052] close(11) = -1 EBADF (Bad file descriptor) [pid 6052] close(12) = -1 EBADF (Bad file descriptor) [pid 6052] close(13) = -1 EBADF (Bad file descriptor) [pid 6052] close(14) = -1 EBADF (Bad file descriptor) [pid 6052] close(15) = -1 EBADF (Bad file descriptor) [pid 6052] close(16) = -1 EBADF (Bad file descriptor) [pid 6052] close(17) = -1 EBADF (Bad file descriptor) [pid 6052] close(18) = -1 EBADF (Bad file descriptor) [pid 6052] close(19) = -1 EBADF (Bad file descriptor) [pid 6052] close(20) = -1 EBADF (Bad file descriptor) [pid 6052] close(21) = -1 EBADF (Bad file descriptor) [pid 6052] close(22) = -1 EBADF (Bad file descriptor) [pid 6052] close(23) = -1 EBADF (Bad file descriptor) [pid 6052] close(24) = -1 EBADF (Bad file descriptor) [pid 6052] close(25) = -1 EBADF (Bad file descriptor) [pid 6052] close(26) = -1 EBADF (Bad file descriptor) [pid 6052] close(27) = -1 EBADF (Bad file descriptor) [pid 6052] close(28) = -1 EBADF (Bad file descriptor) [pid 6052] close(29) = -1 EBADF (Bad file descriptor) [pid 6052] exit_group(0) = ? [pid 6052] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./19/binderfs") = 0 [ 118.578332][ T5832] bcachefs (loop0): shutting down [ 118.583751][ T5832] bcachefs (loop0): going read-only [ 118.589062][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 118.596930][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 118.619704][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 118.632533][ T1100] bcachefs (loop0): fatal error - emergency read only [ 118.639661][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 118.649756][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 118.657614][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 118.675786][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./19/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./19") = 0 [pid 5832] mkdir("./20", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6063 attached [pid 6063] set_robust_list(0x55556eb47760, 24) = 0 [pid 6063] chdir("./20" [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 22 [pid 6063] <... chdir resumed>) = 0 [pid 6063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6063] setpgid(0, 0) = 0 [pid 6063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6063] write(3, "1000", 4) = 4 [pid 6063] close(3) = 0 [pid 6063] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6063] write(1, "executing program\n", 18executing program ) = 18 [pid 6063] memfd_create("syzkaller", 0) = 3 [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6063] munmap(0x7f6f12000000, 138412032) = 0 [pid 6063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6063] close(3) = 0 [pid 6063] close(4) = 0 [pid 6063] mkdir("./file1", 0777) = 0 [ 120.070928][ T6063] loop0: detected capacity change from 0 to 32768 [ 120.141132][ T6063] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 120.161668][ T6063] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 120.170443][ T6063] bcachefs (loop0): Version upgrade required: [ 120.170443][ T6063] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 120.170443][ T6063] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 120.170443][ T6063] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 120.242925][ T6063] bcachefs (loop0): dropping and reconstructing all alloc info [ 120.260173][ T6063] bcachefs (loop0): accounting_read... done [ 120.266422][ T6063] bcachefs (loop0): alloc_read... done [ 120.272038][ T6063] bcachefs (loop0): stripes_read... done [ 120.277758][ T6063] bcachefs (loop0): snapshots_read... done [pid 6063] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6063] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6063] chdir("./file1") = 0 [pid 6063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6063] ioctl(4, LOOP_CLR_FD) = 0 [ 120.283846][ T6063] bcachefs (loop0): check_allocations... done [ 120.304233][ T6063] bcachefs (loop0): going read-write [ 120.313517][ T6063] bcachefs (loop0): done starting filesystem [pid 6063] close(4) = 0 [pid 6063] mkdir("./bus", 0777) = 0 [pid 6063] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6063] close(3) = 0 [pid 6063] close(4) = -1 EBADF (Bad file descriptor) [pid 6063] close(5) = -1 EBADF (Bad file descriptor) [pid 6063] close(6) = -1 EBADF (Bad file descriptor) [pid 6063] close(7) = -1 EBADF (Bad file descriptor) [pid 6063] close(8) = -1 EBADF (Bad file descriptor) [pid 6063] close(9) = -1 EBADF (Bad file descriptor) [pid 6063] close(10) = -1 EBADF (Bad file descriptor) [pid 6063] close(11) = -1 EBADF (Bad file descriptor) [pid 6063] close(12) = -1 EBADF (Bad file descriptor) [pid 6063] close(13) = -1 EBADF (Bad file descriptor) [pid 6063] close(14) = -1 EBADF (Bad file descriptor) [pid 6063] close(15) = -1 EBADF (Bad file descriptor) [pid 6063] close(16) = -1 EBADF (Bad file descriptor) [pid 6063] close(17) = -1 EBADF (Bad file descriptor) [pid 6063] close(18) = -1 EBADF (Bad file descriptor) [pid 6063] close(19) = -1 EBADF (Bad file descriptor) [pid 6063] close(20) = -1 EBADF (Bad file descriptor) [pid 6063] close(21) = -1 EBADF (Bad file descriptor) [pid 6063] close(22) = -1 EBADF (Bad file descriptor) [pid 6063] close(23) = -1 EBADF (Bad file descriptor) [pid 6063] close(24) = -1 EBADF (Bad file descriptor) [pid 6063] close(25) = -1 EBADF (Bad file descriptor) [pid 6063] close(26) = -1 EBADF (Bad file descriptor) [pid 6063] close(27) = -1 EBADF (Bad file descriptor) [pid 6063] close(28) = -1 EBADF (Bad file descriptor) [pid 6063] close(29) = -1 EBADF (Bad file descriptor) [pid 6063] exit_group(0) = ? [pid 6063] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./20/binderfs") = 0 [ 120.635806][ T5832] bcachefs (loop0): shutting down [ 120.640986][ T5832] bcachefs (loop0): going read-only [ 120.646543][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 120.654444][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 120.677738][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 120.690872][ T1100] bcachefs (loop0): fatal error - emergency read only [ 120.698200][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 120.708331][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 120.716196][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 120.734227][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./20/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./20") = 0 [pid 5832] mkdir("./21", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6074 attached [pid 6074] set_robust_list(0x55556eb47760, 24 [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 23 [pid 6074] <... set_robust_list resumed>) = 0 [pid 6074] chdir("./21") = 0 [pid 6074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6074] setpgid(0, 0) = 0 [pid 6074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6074] write(3, "1000", 4) = 4 [pid 6074] close(3) = 0 [pid 6074] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6074] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6074] write(1, "executing program\n", 18) = 18 [pid 6074] memfd_create("syzkaller", 0) = 3 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6074] munmap(0x7f6f12000000, 138412032) = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6074] close(3) = 0 [pid 6074] close(4) = 0 [pid 6074] mkdir("./file1", 0777) = 0 [ 122.115676][ T6074] loop0: detected capacity change from 0 to 32768 [ 122.210505][ T6074] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 122.230676][ T6074] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 122.239098][ T6074] bcachefs (loop0): Version upgrade required: [ 122.239098][ T6074] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 122.239098][ T6074] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 122.239098][ T6074] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 122.311737][ T6074] bcachefs (loop0): dropping and reconstructing all alloc info [ 122.327961][ T6074] bcachefs (loop0): accounting_read... done [ 122.334480][ T6074] bcachefs (loop0): alloc_read... done [ 122.340028][ T6074] bcachefs (loop0): stripes_read... done [ 122.345800][ T6074] bcachefs (loop0): snapshots_read... done [pid 6074] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6074] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6074] chdir("./file1") = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 122.351793][ T6074] bcachefs (loop0): check_allocations... done [ 122.372748][ T6074] bcachefs (loop0): going read-write [ 122.382172][ T6074] bcachefs (loop0): done starting filesystem [pid 6074] ioctl(4, LOOP_CLR_FD) = 0 [pid 6074] close(4) = 0 [pid 6074] mkdir("./bus", 0777) = 0 [pid 6074] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6074] close(3) = 0 [pid 6074] close(4) = -1 EBADF (Bad file descriptor) [pid 6074] close(5) = -1 EBADF (Bad file descriptor) [pid 6074] close(6) = -1 EBADF (Bad file descriptor) [pid 6074] close(7) = -1 EBADF (Bad file descriptor) [pid 6074] close(8) = -1 EBADF (Bad file descriptor) [pid 6074] close(9) = -1 EBADF (Bad file descriptor) [pid 6074] close(10) = -1 EBADF (Bad file descriptor) [pid 6074] close(11) = -1 EBADF (Bad file descriptor) [pid 6074] close(12) = -1 EBADF (Bad file descriptor) [pid 6074] close(13) = -1 EBADF (Bad file descriptor) [pid 6074] close(14) = -1 EBADF (Bad file descriptor) [pid 6074] close(15) = -1 EBADF (Bad file descriptor) [pid 6074] close(16) = -1 EBADF (Bad file descriptor) [pid 6074] close(17) = -1 EBADF (Bad file descriptor) [pid 6074] close(18) = -1 EBADF (Bad file descriptor) [pid 6074] close(19) = -1 EBADF (Bad file descriptor) [pid 6074] close(20) = -1 EBADF (Bad file descriptor) [pid 6074] close(21) = -1 EBADF (Bad file descriptor) [pid 6074] close(22) = -1 EBADF (Bad file descriptor) [pid 6074] close(23) = -1 EBADF (Bad file descriptor) [pid 6074] close(24) = -1 EBADF (Bad file descriptor) [pid 6074] close(25) = -1 EBADF (Bad file descriptor) [pid 6074] close(26) = -1 EBADF (Bad file descriptor) [pid 6074] close(27) = -1 EBADF (Bad file descriptor) [pid 6074] close(28) = -1 EBADF (Bad file descriptor) [pid 6074] close(29) = -1 EBADF (Bad file descriptor) [pid 6074] exit_group(0) = ? [pid 6074] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./21/binderfs") = 0 [ 122.813534][ T5832] bcachefs (loop0): shutting down [ 122.818598][ T5832] bcachefs (loop0): going read-only [ 122.824127][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 122.831594][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 122.854782][ T62] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 122.868013][ T62] bcachefs (loop0): fatal error - emergency read only [ 122.875385][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 122.885216][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 122.893084][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 122.910184][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./21/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./21") = 0 [pid 5832] mkdir("./22", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6085 attached [pid 6085] set_robust_list(0x55556eb47760, 24 [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 24 [pid 6085] <... set_robust_list resumed>) = 0 [pid 6085] chdir("./22") = 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6085] setpgid(0, 0) = 0 [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6085] write(3, "1000", 4) = 4 [pid 6085] close(3) = 0 [pid 6085] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6085] write(1, "executing program\n", 18) = 18 [pid 6085] memfd_create("syzkaller", 0) = 3 [pid 6085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6085] munmap(0x7f6f12000000, 138412032) = 0 [pid 6085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6085] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6085] close(3) = 0 [pid 6085] close(4) = 0 [pid 6085] mkdir("./file1", 0777) = 0 [ 124.289629][ T6085] loop0: detected capacity change from 0 to 32768 [ 124.366856][ T6085] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 124.387096][ T6085] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 124.395497][ T6085] bcachefs (loop0): Version upgrade required: [ 124.395497][ T6085] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 124.395497][ T6085] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 124.395497][ T6085] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 124.467915][ T6085] bcachefs (loop0): dropping and reconstructing all alloc info [ 124.484759][ T6085] bcachefs (loop0): accounting_read... done [ 124.490921][ T6085] bcachefs (loop0): alloc_read... done [ 124.496587][ T6085] bcachefs (loop0): stripes_read... done [ 124.502556][ T6085] bcachefs (loop0): snapshots_read... done [pid 6085] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6085] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6085] chdir("./file1") = 0 [ 124.508554][ T6085] bcachefs (loop0): check_allocations... done [ 124.528663][ T6085] bcachefs (loop0): going read-write [ 124.538143][ T6085] bcachefs (loop0): done starting filesystem [pid 6085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6085] ioctl(4, LOOP_CLR_FD) = 0 [pid 6085] close(4) = 0 [pid 6085] mkdir("./bus", 0777) = 0 [pid 6085] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6085] close(3) = 0 [pid 6085] close(4) = -1 EBADF (Bad file descriptor) [pid 6085] close(5) = -1 EBADF (Bad file descriptor) [pid 6085] close(6) = -1 EBADF (Bad file descriptor) [pid 6085] close(7) = -1 EBADF (Bad file descriptor) [pid 6085] close(8) = -1 EBADF (Bad file descriptor) [pid 6085] close(9) = -1 EBADF (Bad file descriptor) [pid 6085] close(10) = -1 EBADF (Bad file descriptor) [pid 6085] close(11) = -1 EBADF (Bad file descriptor) [pid 6085] close(12) = -1 EBADF (Bad file descriptor) [pid 6085] close(13) = -1 EBADF (Bad file descriptor) [pid 6085] close(14) = -1 EBADF (Bad file descriptor) [pid 6085] close(15) = -1 EBADF (Bad file descriptor) [pid 6085] close(16) = -1 EBADF (Bad file descriptor) [pid 6085] close(17) = -1 EBADF (Bad file descriptor) [pid 6085] close(18) = -1 EBADF (Bad file descriptor) [pid 6085] close(19) = -1 EBADF (Bad file descriptor) [pid 6085] close(20) = -1 EBADF (Bad file descriptor) [pid 6085] close(21) = -1 EBADF (Bad file descriptor) [pid 6085] close(22) = -1 EBADF (Bad file descriptor) [pid 6085] close(23) = -1 EBADF (Bad file descriptor) [pid 6085] close(24) = -1 EBADF (Bad file descriptor) [pid 6085] close(25) = -1 EBADF (Bad file descriptor) [pid 6085] close(26) = -1 EBADF (Bad file descriptor) [pid 6085] close(27) = -1 EBADF (Bad file descriptor) [pid 6085] close(28) = -1 EBADF (Bad file descriptor) [pid 6085] close(29) = -1 EBADF (Bad file descriptor) [pid 6085] exit_group(0) = ? [pid 6085] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5832] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./22/binderfs") = 0 [ 124.977305][ T5832] bcachefs (loop0): shutting down [ 124.982567][ T5832] bcachefs (loop0): going read-only [ 124.987790][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 124.995657][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 125.018510][ T35] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 125.031651][ T35] bcachefs (loop0): fatal error - emergency read only [ 125.039159][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 125.048942][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 125.056818][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 125.074994][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./22/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./22/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./22") = 0 [pid 5832] mkdir("./23", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6096 attached [pid 6096] set_robust_list(0x55556eb47760, 24) = 0 [pid 6096] chdir("./23" [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 25 [pid 6096] <... chdir resumed>) = 0 [pid 6096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6096] setpgid(0, 0) = 0 [pid 6096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6096] write(3, "1000", 4) = 4 [pid 6096] close(3) = 0 [pid 6096] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6096] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6096] write(1, "executing program\n", 18) = 18 [pid 6096] memfd_create("syzkaller", 0) = 3 [pid 6096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6096] munmap(0x7f6f12000000, 138412032) = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6096] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6096] close(3) = 0 [pid 6096] close(4) = 0 [pid 6096] mkdir("./file1", 0777) = 0 [ 126.460547][ T6096] loop0: detected capacity change from 0 to 32768 [ 126.544079][ T6096] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 126.564341][ T6096] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 126.572527][ T6096] bcachefs (loop0): Version upgrade required: [ 126.572527][ T6096] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 126.572527][ T6096] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 126.572527][ T6096] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 126.644626][ T6096] bcachefs (loop0): dropping and reconstructing all alloc info [ 126.660899][ T6096] bcachefs (loop0): accounting_read... done [ 126.667274][ T6096] bcachefs (loop0): alloc_read... done [ 126.672918][ T6096] bcachefs (loop0): stripes_read... done [ 126.678634][ T6096] bcachefs (loop0): snapshots_read... done [pid 6096] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6096] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6096] chdir("./file1") = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6096] ioctl(4, LOOP_CLR_FD) = 0 [pid 6096] close(4) = 0 [pid 6096] mkdir("./bus", 0777) = 0 [pid 6096] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6096] close(3) = 0 [pid 6096] close(4) = -1 EBADF (Bad file descriptor) [pid 6096] close(5) = -1 EBADF (Bad file descriptor) [pid 6096] close(6) = -1 EBADF (Bad file descriptor) [pid 6096] close(7) = -1 EBADF (Bad file descriptor) [ 126.684921][ T6096] bcachefs (loop0): check_allocations... done [ 126.705956][ T6096] bcachefs (loop0): going read-write [ 126.715211][ T6096] bcachefs (loop0): done starting filesystem [pid 6096] close(8) = -1 EBADF (Bad file descriptor) [pid 6096] close(9) = -1 EBADF (Bad file descriptor) [pid 6096] close(10) = -1 EBADF (Bad file descriptor) [pid 6096] close(11) = -1 EBADF (Bad file descriptor) [pid 6096] close(12) = -1 EBADF (Bad file descriptor) [pid 6096] close(13) = -1 EBADF (Bad file descriptor) [pid 6096] close(14) = -1 EBADF (Bad file descriptor) [pid 6096] close(15) = -1 EBADF (Bad file descriptor) [pid 6096] close(16) = -1 EBADF (Bad file descriptor) [pid 6096] close(17) = -1 EBADF (Bad file descriptor) [pid 6096] close(18) = -1 EBADF (Bad file descriptor) [pid 6096] close(19) = -1 EBADF (Bad file descriptor) [pid 6096] close(20) = -1 EBADF (Bad file descriptor) [pid 6096] close(21) = -1 EBADF (Bad file descriptor) [pid 6096] close(22) = -1 EBADF (Bad file descriptor) [pid 6096] close(23) = -1 EBADF (Bad file descriptor) [pid 6096] close(24) = -1 EBADF (Bad file descriptor) [pid 6096] close(25) = -1 EBADF (Bad file descriptor) [pid 6096] close(26) = -1 EBADF (Bad file descriptor) [pid 6096] close(27) = -1 EBADF (Bad file descriptor) [pid 6096] close(28) = -1 EBADF (Bad file descriptor) [pid 6096] close(29) = -1 EBADF (Bad file descriptor) [pid 6096] exit_group(0) = ? [pid 6096] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5832] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./23/binderfs") = 0 [ 127.040153][ T5832] bcachefs (loop0): shutting down [ 127.045326][ T5832] bcachefs (loop0): going read-only [ 127.050751][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 127.058594][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 127.082786][ T1100] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 127.095986][ T1100] bcachefs (loop0): fatal error - emergency read only [ 127.103580][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 127.113554][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 127.121157][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 127.139389][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./23/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./23") = 0 [pid 5832] mkdir("./24", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6107 attached [pid 6107] set_robust_list(0x55556eb47760, 24) = 0 [pid 6107] chdir("./24" [pid 5832] <... clone resumed>, child_tidptr=0x55556eb47750) = 26 [pid 6107] <... chdir resumed>) = 0 [pid 6107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6107] setpgid(0, 0) = 0 [pid 6107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6107] write(3, "1000", 4) = 4 [pid 6107] close(3) = 0 [pid 6107] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6107] write(1, "executing program\n", 18executing program ) = 18 [pid 6107] memfd_create("syzkaller", 0) = 3 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6107] munmap(0x7f6f12000000, 138412032) = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6107] close(3) = 0 [pid 6107] close(4) = 0 [pid 6107] mkdir("./file1", 0777) = 0 [ 128.607823][ T6107] loop0: detected capacity change from 0 to 32768 [ 128.692562][ T6107] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 128.712931][ T6107] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 128.721019][ T6107] bcachefs (loop0): Version upgrade required: [ 128.721019][ T6107] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 128.721019][ T6107] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 128.721019][ T6107] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 128.793504][ T6107] bcachefs (loop0): dropping and reconstructing all alloc info [ 128.810710][ T6107] bcachefs (loop0): accounting_read... done [ 128.816950][ T6107] bcachefs (loop0): alloc_read... done [ 128.822539][ T6107] bcachefs (loop0): stripes_read... done [ 128.828228][ T6107] bcachefs (loop0): snapshots_read... done [pid 6107] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6107] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6107] chdir("./file1") = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6107] ioctl(4, LOOP_CLR_FD) = 0 [pid 6107] close(4) = 0 [ 128.834496][ T6107] bcachefs (loop0): check_allocations... done [ 128.855372][ T6107] bcachefs (loop0): going read-write [ 128.864299][ T6107] bcachefs (loop0): done starting filesystem [pid 6107] mkdir("./bus", 0777) = 0 [pid 6107] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6107] close(3) = 0 [pid 6107] close(4) = -1 EBADF (Bad file descriptor) [pid 6107] close(5) = -1 EBADF (Bad file descriptor) [pid 6107] close(6) = -1 EBADF (Bad file descriptor) [pid 6107] close(7) = -1 EBADF (Bad file descriptor) [pid 6107] close(8) = -1 EBADF (Bad file descriptor) [pid 6107] close(9) = -1 EBADF (Bad file descriptor) [pid 6107] close(10) = -1 EBADF (Bad file descriptor) [pid 6107] close(11) = -1 EBADF (Bad file descriptor) [pid 6107] close(12) = -1 EBADF (Bad file descriptor) [pid 6107] close(13) = -1 EBADF (Bad file descriptor) [pid 6107] close(14) = -1 EBADF (Bad file descriptor) [pid 6107] close(15) = -1 EBADF (Bad file descriptor) [pid 6107] close(16) = -1 EBADF (Bad file descriptor) [pid 6107] close(17) = -1 EBADF (Bad file descriptor) [pid 6107] close(18) = -1 EBADF (Bad file descriptor) [pid 6107] close(19) = -1 EBADF (Bad file descriptor) [pid 6107] close(20) = -1 EBADF (Bad file descriptor) [pid 6107] close(21) = -1 EBADF (Bad file descriptor) [pid 6107] close(22) = -1 EBADF (Bad file descriptor) [pid 6107] close(23) = -1 EBADF (Bad file descriptor) [pid 6107] close(24) = -1 EBADF (Bad file descriptor) [pid 6107] close(25) = -1 EBADF (Bad file descriptor) [pid 6107] close(26) = -1 EBADF (Bad file descriptor) [pid 6107] close(27) = -1 EBADF (Bad file descriptor) [pid 6107] close(28) = -1 EBADF (Bad file descriptor) [pid 6107] close(29) = -1 EBADF (Bad file descriptor) [pid 6107] exit_group(0) = ? [pid 6107] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5832] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./24/binderfs") = 0 [ 129.246638][ T5832] bcachefs (loop0): shutting down [ 129.251696][ T5832] bcachefs (loop0): going read-only [ 129.257470][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 129.265304][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 129.288697][ T62] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 129.301767][ T62] bcachefs (loop0): fatal error - emergency read only [ 129.309076][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 129.318975][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 129.326909][ T5832] bcachefs (loop0): done going read-only, filesystem not clean [ 129.345213][ T5832] bcachefs (loop0): shutdown complete [pid 5832] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5832] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x55556eb50830 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x55556eb50830 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./24/file1") = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./24") = 0 [pid 5832] mkdir("./25", 0777) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6118 attached , child_tidptr=0x55556eb47750) = 27 [pid 6118] set_robust_list(0x55556eb47760, 24) = 0 [pid 6118] chdir("./25") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4) = 4 [pid 6118] close(3) = 0 [pid 6118] read(200, 0x7ffe3b6cdde0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 6118] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6118] write(1, "executing program\n", 18) = 18 [pid 6118] memfd_create("syzkaller", 0) = 3 [pid 6118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6f12000000 [pid 6118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6118] munmap(0x7f6f12000000, 138412032) = 0 [pid 6118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6118] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6118] close(3) = 0 [pid 6118] close(4) = 0 [pid 6118] mkdir("./file1", 0777) = 0 [ 130.738998][ T6118] loop0: detected capacity change from 0 to 32768 [ 130.808029][ T6118] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,no_data_io [ 130.828647][ T6118] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 130.837178][ T6118] bcachefs (loop0): Version upgrade required: [ 130.837178][ T6118] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 130.837178][ T6118] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 130.837178][ T6118] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 130.909061][ T6118] bcachefs (loop0): dropping and reconstructing all alloc info [ 130.924840][ T6118] bcachefs (loop0): accounting_read... done [ 130.931058][ T6118] bcachefs (loop0): alloc_read... done [ 130.936851][ T6118] bcachefs (loop0): stripes_read... done [ 130.942656][ T6118] bcachefs (loop0): snapshots_read... done [pid 6118] mount("/dev/loop0", "./file1", "bcachefs", MS_I_VERSION, "data_checksum=xxhash,direct_io,norecovery,read_only,Gournal_flush_disabled,norecovery,btree_node_mem"...) = 0 [pid 6118] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6118] chdir("./file1") = 0 [pid 6118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6118] ioctl(4, LOOP_CLR_FD) = 0 [pid 6118] close(4) = 0 [pid 6118] mkdir("./bus", 0777) = 0 [pid 6118] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6118] close(3) = 0 [pid 6118] close(4) = -1 EBADF (Bad file descriptor) [pid 6118] close(5) = -1 EBADF (Bad file descriptor) [pid 6118] close(6) = -1 EBADF (Bad file descriptor) [pid 6118] close(7) = -1 EBADF (Bad file descriptor) [pid 6118] close(8) = -1 EBADF (Bad file descriptor) [pid 6118] close(9) = -1 EBADF (Bad file descriptor) [pid 6118] close(10) = -1 EBADF (Bad file descriptor) [pid 6118] close(11) = -1 EBADF (Bad file descriptor) [pid 6118] close(12) = -1 EBADF (Bad file descriptor) [pid 6118] close(13) = -1 EBADF (Bad file descriptor) [pid 6118] close(14) = -1 EBADF (Bad file descriptor) [pid 6118] close(15) = -1 EBADF (Bad file descriptor) [pid 6118] close(16) = -1 EBADF (Bad file descriptor) [pid 6118] close(17) = -1 EBADF (Bad file descriptor) [pid 6118] close(18) = -1 EBADF (Bad file descriptor) [pid 6118] close(19) = -1 EBADF (Bad file descriptor) [pid 6118] close(20) = -1 EBADF (Bad file descriptor) [pid 6118] close(21) = -1 EBADF (Bad file descriptor) [ 130.948667][ T6118] bcachefs (loop0): check_allocations... done [ 130.968691][ T6118] bcachefs (loop0): going read-write [ 130.977874][ T6118] bcachefs (loop0): done starting filesystem [pid 6118] close(22) = -1 EBADF (Bad file descriptor) [pid 6118] close(23) = -1 EBADF (Bad file descriptor) [pid 6118] close(24) = -1 EBADF (Bad file descriptor) [pid 6118] close(25) = -1 EBADF (Bad file descriptor) [pid 6118] close(26) = -1 EBADF (Bad file descriptor) [pid 6118] close(27) = -1 EBADF (Bad file descriptor) [pid 6118] close(28) = -1 EBADF (Bad file descriptor) [pid 6118] close(29) = -1 EBADF (Bad file descriptor) [pid 6118] exit_group(0) = ? [pid 6118] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x55556eb487f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./25/binderfs") = 0 [ 131.235253][ T5832] bcachefs (loop0): shutting down [ 131.240337][ T5832] bcachefs (loop0): going read-only [ 131.245926][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 131.254080][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 131.274816][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 131.287119][ T3490] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 53) [ 131.293102][ T5832] bcachefs (loop0): unshutdown complete, journal seq 13 [ 131.307148][ T3490] bcachefs (loop0): fatal error - emergency read only [ 131.314639][ T3490] ------------[ cut here ]------------ [ 131.320206][ T3490] kernel BUG at fs/bcachefs/journal.h:375! [ 131.326359][ T3490] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 131.333345][ T3490] CPU: 1 UID: 0 PID: 3490 Comm: kworker/u8:10 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0 [ 131.344277][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 131.354330][ T3490] Workqueue: btree_update btree_interior_update_work [ 131.361020][ T3490] RIP: 0010:__bch2_trans_commit+0x9232/0x93c0 [ 131.367100][ T3490] Code: fd 90 0f 0b e8 6f 86 78 fd 90 0f 0b e8 67 86 78 fd 90 0f 0b e8 5f 86 78 fd 90 0f 0b e8 57 86 78 fd 90 0f 0b e8 4f 86 78 fd 90 <0f> 0b e8 47 86 78 fd 90 0f 0b e8 3f 86 78 fd 90 0f 0b e8 37 86 78 [ 131.386725][ T3490] RSP: 0018:ffffc9000c16f6c0 EFLAGS: 00010293 [ 131.392819][ T3490] RAX: ffffffff841c53b1 RBX: 0000000000000000 RCX: ffff88803259da00 [ 131.400792][ T3490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.408801][ T3490] RBP: ffffc9000c16f890 R08: ffffffff841bf6e8 R09: 1ffff1100e4194a8 [ 131.416806][ T3490] R10: dffffc0000000000 R11: ffffed100e4194a9 R12: ffff888072080000 [ 131.424790][ T3490] R13: ffff8880720ca500 R14: 000000000000004f R15: ffff8880332bc0d0 [ 131.432778][ T3490] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 131.441810][ T3490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.448417][ T3490] CR2: 000055556eb507f8 CR3: 0000000078992000 CR4: 00000000003526f0 [ 131.456423][ T3490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.464408][ T3490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.472386][ T3490] Call Trace: [ 131.475672][ T3490] [ 131.478635][ T3490] ? __die_body+0x5f/0xb0 [ 131.482975][ T3490] ? die+0x9e/0xc0 [ 131.486705][ T3490] ? do_trap+0x15a/0x3a0 [ 131.490966][ T3490] ? __bch2_trans_commit+0x9232/0x93c0 [ 131.496449][ T3490] ? do_error_trap+0x1dc/0x2c0 [ 131.501250][ T3490] ? __bch2_trans_commit+0x9232/0x93c0 [ 131.506723][ T3490] ? __pfx_do_error_trap+0x10/0x10 [ 131.511870][ T3490] ? report_bug+0x3e8/0x500 [ 131.516409][ T3490] ? handle_invalid_op+0x34/0x40 [ 131.521364][ T3490] ? __bch2_trans_commit+0x9232/0x93c0 [ 131.526848][ T3490] ? exc_invalid_op+0x38/0x50 [ 131.531545][ T3490] ? asm_exc_invalid_op+0x1a/0x20 [ 131.536582][ T3490] ? __bch2_trans_commit+0x3568/0x93c0 [ 131.542054][ T3490] ? __bch2_trans_commit+0x9231/0x93c0 [ 131.547527][ T3490] ? __bch2_trans_commit+0x9232/0x93c0 [ 131.553015][ T3490] ? __pfx___bch2_trans_commit+0x10/0x10 [ 131.558659][ T3490] ? bch2_dev_btree_bitmap_marked+0x2f/0xda0 [ 131.564654][ T3490] ? __bch2_trans_jset_entry_alloc+0x2c7/0x4b0 [ 131.570823][ T3490] ? btree_interior_update_work+0x117a/0x2b10 [ 131.576928][ T3490] btree_interior_update_work+0x1492/0x2b10 [ 131.582859][ T3490] ? __pfx_btree_interior_update_work+0x10/0x10 [ 131.589126][ T3490] ? __pfx_lock_acquire+0x10/0x10 [ 131.594170][ T3490] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 131.600170][ T3490] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.606518][ T3490] ? process_scheduled_works+0x976/0x1850 [ 131.612269][ T3490] process_scheduled_works+0xa63/0x1850 [ 131.617863][ T3490] ? __pfx_process_scheduled_works+0x10/0x10 [ 131.623879][ T3490] ? assign_work+0x364/0x3d0 [ 131.628491][ T3490] worker_thread+0x870/0xd30 [ 131.633114][ T3490] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 131.639038][ T3490] ? __kthread_parkme+0x169/0x1d0 [ 131.644087][ T3490] ? __pfx_worker_thread+0x10/0x10 [ 131.649214][ T3490] kthread+0x2f0/0x390 [ 131.653287][ T3490] ? __pfx_worker_thread+0x10/0x10 [ 131.658421][ T3490] ? __pfx_kthread+0x10/0x10 [ 131.663019][ T3490] ret_from_fork+0x4b/0x80 [ 131.667450][ T3490] ? __pfx_kthread+0x10/0x10 [ 131.672044][ T3490] ret_from_fork_asm+0x1a/0x30 [ 131.676825][ T3490] [ 131.679861][ T3490] Modules linked in: [ 131.684028][ T3490] ---[ end trace 0000000000000000 ]--- [ 131.689513][ T3490] RIP: 0010:__bch2_trans_commit+0x9232/0x93c0 [ 131.695703][ T3490] Code: fd 90 0f 0b e8 6f 86 78 fd 90 0f 0b e8 67 86 78 fd 90 0f 0b e8 5f 86 78 fd 90 0f 0b e8 57 86 78 fd 90 0f 0b e8 4f 86 78 fd 90 <0f> 0b e8 47 86 78 fd 90 0f 0b e8 3f 86 78 fd 90 0f 0b e8 37 86 78 [ 131.715407][ T3490] RSP: 0018:ffffc9000c16f6c0 EFLAGS: 00010293 [ 131.721488][ T3490] RAX: ffffffff841c53b1 RBX: 0000000000000000 RCX: ffff88803259da00 [ 131.729647][ T3490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.737661][ T3490] RBP: ffffc9000c16f890 R08: ffffffff841bf6e8 R09: 1ffff1100e4194a8 [ 131.745677][ T3490] R10: dffffc0000000000 R11: ffffed100e4194a9 R12: ffff888072080000 [ 131.753740][ T3490] R13: ffff8880720ca500 R14: 000000000000004f R15: ffff8880332bc0d0 [ 131.761715][ T3490] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 131.770682][ T3490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.777334][ T3490] CR2: 000055556eb507f8 CR3: 0000000078992000 CR4: 00000000003526f0 [ 131.785364][ T3490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.793381][ T3490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.801352][ T3490] Kernel panic - not syncing: Fatal exception [ 131.807861][ T3490] Kernel Offset: disabled [ 131.812192][ T3490] Rebooting in 86400 seconds..