./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2068753891 <...> Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. execve("./syz-executor2068753891", ["./syz-executor2068753891"], 0x7ffeefd738c0 /* 10 vars */) = 0 brk(NULL) = 0x555575691000 brk(0x555575691d40) = 0x555575691d40 arch_prctl(ARCH_SET_FS, 0x5555756913c0) = 0 set_tid_address(0x555575691690) = 5832 set_robust_list(0x5555756916a0, 24) = 0 rseq(0x555575691ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2068753891", 4096) = 28 getrandom("\x6f\x9e\xee\xcb\x9d\xe9\xdd\xf3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555575691d40 brk(0x5555756b2d40) = 0x5555756b2d40 brk(0x5555756b3000) = 0x5555756b3000 mprotect(0x7fb41c7b0000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5833 attached [pid 5833] set_robust_list(0x5555756916a0, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555575691690) = 5833 [pid 5833] <... set_robust_list resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5835 attached [pid 5833] mkdir("./syzkaller.nMuH0m", 0700 [pid 5832] <... clone resumed>, child_tidptr=0x555575691690) = 5835 [pid 5835] set_robust_list(0x5555756916a0, 24) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5835] mkdir("./syzkaller.RTDDU1", 0700 [pid 5833] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5836 attached [pid 5835] <... mkdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555575691690) = 5836 [pid 5833] chmod("./syzkaller.nMuH0m", 0777) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5836] set_robust_list(0x5555756916a0, 24 [pid 5835] chmod("./syzkaller.RTDDU1", 0777 [pid 5833] chdir("./syzkaller.nMuH0m" [pid 5836] <... set_robust_list resumed>) = 0 [pid 5833] <... chdir resumed>) = 0 [pid 5835] <... chmod resumed>) = 0 [pid 5836] mkdir("./syzkaller.23h31B", 0700 [pid 5835] chdir("./syzkaller.RTDDU1" [pid 5833] mkdir("./0", 0777 [pid 5835] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5837 attached [pid 5836] <... mkdir resumed>) = 0 [pid 5835] mkdir("./0", 0777 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555575691690) = 5837 [pid 5837] set_robust_list(0x5555756916a0, 24 [pid 5836] chmod("./syzkaller.23h31B", 0777 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5836] <... chmod resumed>) = 0 [pid 5835] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5837] <... set_robust_list resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5838 attached [pid 5837] mkdir("./syzkaller.IiOoTN", 0700 [pid 5836] chdir("./syzkaller.23h31B" [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5836] <... chdir resumed>) = 0 [pid 5838] set_robust_list(0x5555756916a0, 24 [pid 5835] <... openat resumed>) = 3 [pid 5833] close(3 [pid 5832] <... clone resumed>, child_tidptr=0x555575691690) = 5838 [pid 5838] <... set_robust_list resumed>) = 0 [pid 5835] ioctl(3, LOOP_CLR_FD [pid 5838] mkdir("./syzkaller.6Xolct", 0700 [pid 5835] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5837] <... mkdir resumed>) = 0 [pid 5838] <... mkdir resumed>) = 0 [pid 5836] mkdir("./0", 0777 [pid 5835] close(3 [pid 5833] <... close resumed>) = 0 [pid 5837] chmod("./syzkaller.IiOoTN", 0777 [pid 5838] chmod("./syzkaller.6Xolct", 0777 [pid 5837] <... chmod resumed>) = 0 [pid 5836] <... mkdir resumed>) = 0 [pid 5835] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5837] chdir("./syzkaller.IiOoTN" [pid 5838] <... chmod resumed>) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5838] chdir("./syzkaller.6Xolct"./strace-static-x86_64: Process 5840 attached ./strace-static-x86_64: Process 5839 attached [pid 5837] <... chdir resumed>) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5840] set_robust_list(0x5555756916a0, 24 [pid 5839] set_robust_list(0x5555756916a0, 24 [pid 5838] <... chdir resumed>) = 0 [pid 5837] mkdir("./0", 0777 [pid 5836] <... openat resumed>) = 3 [pid 5839] <... set_robust_list resumed>) = 0 [pid 5837] <... mkdir resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555575691690) = 5839 [pid 5840] <... set_robust_list resumed>) = 0 [pid 5839] chdir("./0" [pid 5838] mkdir("./0", 0777 [pid 5836] ioctl(3, LOOP_CLR_FD [pid 5835] <... clone resumed>, child_tidptr=0x555575691690) = 5840 [pid 5840] chdir("./0" [pid 5839] <... chdir resumed>) = 0 [pid 5836] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5840] <... chdir resumed>) = 0 [pid 5839] <... prctl resumed>) = 0 [pid 5838] <... mkdir resumed>) = 0 [pid 5837] <... openat resumed>) = 3 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5836] close(3) = 0 [pid 5839] setpgid(0, 0) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5840] <... prctl resumed>) = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5842 attached [pid 5837] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5837] close(3 [pid 5839] <... openat resumed>) = 3 [pid 5837] <... close resumed>) = 0 [pid 5842] set_robust_list(0x5555756916a0, 24 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached [pid 5842] <... set_robust_list resumed>) = 0 [pid 5839] write(3, "1000", 4 [pid 5842] chdir("./0" [pid 5839] <... write resumed>) = 4 [pid 5839] close(3 [pid 5836] <... clone resumed>, child_tidptr=0x555575691690) = 5842 [pid 5842] <... chdir resumed>) = 0 [pid 5839] <... close resumed>) = 0 [pid 5843] set_robust_list(0x5555756916a0, 24 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5839] symlink("/dev/binderfs", "./binderfs" [pid 5843] <... set_robust_list resumed>) = 0 [pid 5842] <... prctl resumed>) = 0 [pid 5839] <... symlink resumed>) = 0 [pid 5843] chdir("./0" [pid 5842] setpgid(0, 0 [pid 5837] <... clone resumed>, child_tidptr=0x555575691690) = 5843 [pid 5842] <... setpgid resumed>) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5843] <... chdir resumed>) = 0 [pid 5840] setpgid(0, 0 [pid 5839] write(1, "executing program\n", 18 executing program [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5842] <... openat resumed>) = 3 [pid 5840] <... setpgid resumed>) = 0 [pid 5839] <... write resumed>) = 18 [pid 5838] <... openat resumed>) = 3 [pid 5843] <... prctl resumed>) = 0 [pid 5843] setpgid(0, 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5838] ioctl(3, LOOP_CLR_FD [pid 5843] <... setpgid resumed>) = 0 [pid 5838] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5840] <... openat resumed>) = 3 [pid 5838] close(3 [pid 5840] write(3, "1000", 4 [pid 5838] <... close resumed>) = 0 [pid 5840] <... write resumed>) = 4 [pid 5839] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5839] <... futex resumed>) = 0 [pid 5839] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, [pid 5842] write(3, "1000", 4 [pid 5839] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5842] <... write resumed>) = 4 [pid 5839] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5843] <... openat resumed>) = 3 [pid 5842] close(3 [pid 5839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5840] close(3 [pid 5839] <... mmap resumed>) = 0x7fb41c6b3000 [pid 5843] write(3, "1000", 4 [pid 5840] <... close resumed>) = 0 [pid 5839] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE [pid 5840] symlink("/dev/binderfs", "./binderfs" [pid 5838] <... clone resumed>, child_tidptr=0x555575691690) = 5844 ./strace-static-x86_64: Process 5844 attached [pid 5843] <... write resumed>) = 4 [pid 5842] <... close resumed>) = 0 [pid 5839] <... mprotect resumed>) = 0 [pid 5843] close(3 [pid 5842] symlink("/dev/binderfs", "./binderfs" [pid 5840] <... symlink resumed>) = 0 [pid 5839] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5844] set_robust_list(0x5555756916a0, 24 [pid 5843] <... close resumed>) = 0 [pid 5842] <... symlink resumed>) = 0 [pid 5840] write(1, "executing program\n", 18 [pid 5839] <... rt_sigprocmask resumed>[], 8) = 0 executing program [pid 5844] <... set_robust_list resumed>) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs" [pid 5842] write(1, "executing program\n", 18 [pid 5840] <... write resumed>) = 18 [pid 5839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} [pid 5840] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 5844] chdir("./0" [pid 5843] <... symlink resumed>) = 0 [pid 5842] <... write resumed>) = 18 [pid 5840] <... futex resumed>) = 0 [pid 5842] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5845 attached [pid 5842] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, [pid 5840] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, [pid 5845] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5843] write(1, "executing program\n", 18executing program [pid 5842] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5840] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5839] <... clone3 resumed> => {parent_tid=[5845]}, 88) = 5845 [pid 5845] <... rseq resumed>) = 0 [pid 5844] <... chdir resumed>) = 0 [pid 5843] <... write resumed>) = 18 [pid 5842] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5840] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5845] set_robust_list(0x7fb41c6d39a0, 24 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5843] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] rt_sigprocmask(SIG_SETMASK, [], [pid 5845] <... set_robust_list resumed>) = 0 [pid 5844] <... prctl resumed>) = 0 [pid 5843] <... futex resumed>) = 0 [pid 5842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5845] rt_sigprocmask(SIG_SETMASK, [], [pid 5844] setpgid(0, 0 [pid 5843] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, [pid 5842] <... mmap resumed>) = 0x7fb41c6b3000 [pid 5839] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... setpgid resumed>) = 0 [pid 5843] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5842] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE [pid 5840] <... mmap resumed>) = 0x7fb41c6b3000 [pid 5839] <... futex resumed>) = 0 [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5843] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5842] <... mprotect resumed>) = 0 [pid 5839] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5845] memfd_create("syzkaller", 0 [pid 5844] <... openat resumed>) = 3 [pid 5843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5842] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5845] <... memfd_create resumed>) = 3 [pid 5844] write(3, "1000", 4 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5842] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5840] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5844] <... write resumed>) = 4 [pid 5843] <... mmap resumed>) = 0x7fb41c6b3000 [pid 5842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 5846 attached [pid 5845] <... mmap resumed>) = 0x7fb414200000 [pid 5844] close(3 [pid 5843] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE [pid 5840] <... mprotect resumed>) = 0 [pid 5846] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5844] <... close resumed>) = 0 [pid 5843] <... mprotect resumed>) = 0 [pid 5842] <... clone3 resumed> => {parent_tid=[5846]}, 88) = 5846 [pid 5846] <... rseq resumed>) = 0 [pid 5844] symlink("/dev/binderfs", "./binderfs" [pid 5843] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5842] rt_sigprocmask(SIG_SETMASK, [], [pid 5846] set_robust_list(0x7fb41c6d39a0, 24 [pid 5844] <... symlink resumed>) = 0 [pid 5843] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5840] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5846] <... set_robust_list resumed>) = 0 [pid 5843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} [pid 5846] rt_sigprocmask(SIG_SETMASK, [], [pid 5842] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000executing program ./strace-static-x86_64: Process 5847 attached [pid 5846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5844] write(1, "executing program\n", 18 [pid 5840] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5846] memfd_create("syzkaller", 0 [pid 5844] <... write resumed>) = 18 [pid 5843] <... clone3 resumed> => {parent_tid=[5847]}, 88) = 5847 [pid 5842] <... futex resumed>) = 0 [pid 5840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} [pid 5842] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5844] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5848 attached NULL, 8) = 0 [pid 5844] <... futex resumed>) = 0 [pid 5843] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, [pid 5843] <... futex resumed>) = 0 [pid 5846] <... memfd_create resumed>) = 3 [pid 5844] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5843] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5844] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5846] <... mmap resumed>) = 0x7fb414200000 [pid 5844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5848] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5847] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5844] <... mmap resumed>) = 0x7fb41c6b3000 [pid 5840] <... clone3 resumed> => {parent_tid=[5848]}, 88) = 5848 [pid 5848] <... rseq resumed>) = 0 [pid 5847] <... rseq resumed>) = 0 [pid 5848] set_robust_list(0x7fb41c6d39a0, 24 [pid 5840] rt_sigprocmask(SIG_SETMASK, [], [pid 5847] set_robust_list(0x7fb41c6d39a0, 24 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5840] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] rt_sigprocmask(SIG_SETMASK, [], [pid 5840] <... futex resumed>) = 0 [pid 5848] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5844] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5848] memfd_create("syzkaller", 0 [pid 5844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 5849 attached [pid 5847] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5840] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5848] <... memfd_create resumed>) = 3 [pid 5844] <... clone3 resumed> => {parent_tid=[5849]}, 88) = 5849 [pid 5844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5844] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5844] <... futex resumed>) = 0 [pid 5849] <... rseq resumed>) = 0 [pid 5844] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5849] set_robust_list(0x7fb41c6d39a0, 24 [pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] memfd_create("syzkaller", 0 [pid 5849] <... set_robust_list resumed>) = 0 [pid 5848] <... mmap resumed>) = 0x7fb414200000 [pid 5849] rt_sigprocmask(SIG_SETMASK, [], [pid 5847] <... memfd_create resumed>) = 3 [pid 5849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5849] memfd_create("syzkaller", 0) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5846] <... write resumed>) = 16777216 [pid 5846] munmap(0x7fb414200000, 138412032) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5846] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] <... write resumed>) = 16777216 [pid 5849] <... write resumed>) = 16777216 [pid 5848] <... write resumed>) = 16777216 [pid 5847] munmap(0x7fb414200000, 138412032 [pid 5846] close(3 [pid 5845] <... write resumed>) = 16777216 [pid 5846] <... close resumed>) = 0 [pid 5849] munmap(0x7fb414200000, 138412032 [pid 5848] munmap(0x7fb414200000, 138412032 [pid 5846] close(4 [pid 5845] munmap(0x7fb414200000, 138412032 [pid 5846] <... close resumed>) = 0 [pid 5846] mkdir("./file0", 0777) = 0 [ 90.788267][ T5846] loop2: detected capacity change from 0 to 32768 [ 90.834877][ T5846] ======================================================= [ 90.834877][ T5846] WARNING: The mand mount option has been deprecated and [ 90.834877][ T5846] and is ignored by this kernel. Remove the mand [ 90.834877][ T5846] option from the mount to silence this warning. [ 90.834877][ T5846] ======================================================= [pid 5846] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5849] <... munmap resumed>) = 0 [pid 5848] <... munmap resumed>) = 0 [pid 5847] <... munmap resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5845] <... munmap resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 5847] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... openat resumed>) = 4 [pid 5847] ioctl(4, LOOP_SET_FD, 3 [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] <... ioctl resumed>) = 0 [pid 5849] close(3 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5849] <... close resumed>) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5849] close(4) = 0 [pid 5848] ioctl(4, LOOP_SET_FD, 3 [pid 5849] mkdir("./file0", 0777 [pid 5845] <... openat resumed>) = 4 [pid 5845] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... mkdir resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5847] close(3) = 0 [pid 5847] close(4) = 0 [pid 5847] mkdir("./file0", 0777 [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3) = 0 [pid 5848] close(4) = 0 [pid 5848] mkdir("./file0", 0777) = 0 [pid 5848] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5847] <... mkdir resumed>) = 0 [pid 5845] <... ioctl resumed>) = 0 [pid 5849] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5847] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5845] close(3) = 0 [pid 5845] close(4) = 0 [pid 5845] mkdir("./file0", 0777) = 0 [ 90.889592][ T5849] loop4: detected capacity change from 0 to 32768 [ 90.889941][ T5847] loop3: detected capacity change from 0 to 32768 [ 90.906401][ T5848] loop1: detected capacity change from 0 to 32768 [ 90.914412][ T5845] loop0: detected capacity change from 0 to 32768 [ 91.136816][ T5846] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 91.136845][ T5846] allowing incompatible features above 0.0: (unknown version) [ 91.136858][ T5846] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 91.203143][ T5848] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 5845] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5848] <... mount resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5848] chdir("./file0") = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5848] ioctl(4, LOOP_CLR_FD) = 0 [pid 5848] close(4) = 0 [pid 5848] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5848] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5840] <... futex resumed>) = 0 [pid 5840] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] <... futex resumed>) = 0 [pid 5840] <... futex resumed>) = 1 [pid 5848] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [ 91.203171][ T5848] allowing incompatible features above 0.0: (unknown version) [ 91.203184][ T5848] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [pid 5840] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 91.203215][ T5848] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 91.203578][ T5848] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 91.278837][ T5849] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 5848] <... mount resumed>) = 0 [ 91.278866][ T5849] allowing incompatible features above 0.0: (unknown version) [ 91.278880][ T5849] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 91.278911][ T5849] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 91.279048][ T5849] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 91.292033][ T5848] bcachefs (loop1): accounting_read... done [ 91.293906][ T5848] bcachefs (loop1): alloc_read... done [ 91.295468][ T5848] bcachefs (loop1): snapshots_read... done [ 91.336765][ T5848] bcachefs (loop1): journal_replay... done [ 91.339007][ T5848] bcachefs (loop1): resume_logged_ops... done [ 91.340036][ T5848] bcachefs (loop1): delete_dead_inodes... [ 91.351424][ T5845] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 91.351448][ T5845] allowing incompatible features above 0.0: (unknown version) [pid 5845] <... mount resumed>) = 0 [ 91.351461][ T5845] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 91.351489][ T5845] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 91.351606][ T5845] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 91.352255][ T5848] done [ 91.356094][ T5848] bcachefs (loop1): done starting filesystem [pid 5848] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5840] exit_group(0) = ? [ 91.401760][ T5847] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 91.401790][ T5847] allowing incompatible features above 0.0: (unknown version) [ 91.401806][ T5847] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 91.401840][ T5847] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 91.401980][ T5847] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 91.408838][ T5848] bcachefs (loop1): going read-write [pid 5849] <... mount resumed>) = 0 [pid 5848] <... futex resumed>) = ? [pid 5845] <... openat resumed>) = 3 [pid 5849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] chdir("./file0") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5849] ioctl(4, LOOP_CLR_FD) = 0 [pid 5849] close(4) = 0 [pid 5849] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 91.412212][ T5849] bcachefs (loop4): accounting_read... [ 91.416676][ T5845] bcachefs (loop0): accounting_read... [ 91.433241][ T5849] done [ 91.433259][ T5849] bcachefs (loop4): alloc_read... [ 91.434040][ T5845] done [ 91.434054][ T5845] bcachefs (loop0): alloc_read... [ 91.435740][ T5849] done [ 91.435754][ T5849] bcachefs (loop4): snapshots_read... [ 91.438974][ T5845] done [ 91.438988][ T5845] bcachefs (loop0): snapshots_read... done [ 91.447965][ T5849] done [ 91.466087][ T5845] bcachefs (loop0): journal_replay... [pid 5849] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] +++ exited with 0 +++ [pid 5845] chdir("./file0" [pid 5844] <... futex resumed>) = 0 [pid 5840] +++ exited with 0 +++ [pid 5845] <... chdir resumed>) = 0 [pid 5844] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5844] <... futex resumed>) = 1 [pid 5845] <... openat resumed>) = 4 [pid 5844] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] ioctl(4, LOOP_CLR_FD) = 0 [ 91.469554][ T5849] bcachefs (loop4): journal_replay... done [ 91.471477][ T5845] done [ 91.472895][ T5849] bcachefs (loop4): resume_logged_ops... [ 91.473663][ T5845] bcachefs (loop0): resume_logged_ops... done [ 91.520001][ T5845] bcachefs (loop0): delete_dead_inodes... [ 91.520505][ T5849] done [ 91.520520][ T5849] bcachefs (loop4): delete_dead_inodes... [ 91.542430][ T5845] done [ 91.544097][ T5849] done [ 91.560252][ T5847] bcachefs (loop3): accounting_read... [pid 5845] close(4 [pid 5835] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5845] <... close resumed>) = 0 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5845] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5845] <... futex resumed>) = 1 [pid 5845] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] <... openat resumed>) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 91.570329][ T5846] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 91.614290][ T5845] bcachefs (loop0): done starting filesystem [ 91.626673][ T5867] bcachefs (loop1): backpointer doesn't match extent it points to: [ 91.647022][ T5846] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 91.654552][ T5849] bcachefs (loop4): done starting filesystem [ 91.662728][ T5867] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 91.687717][ T5847] done [ 91.705974][ T5867] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 91.750435][ T5847] bcachefs (loop3): alloc_read... [ 91.870528][ T5867] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 91.875327][ T24] cfg80211: failed to load regulatory.db [pid 5835] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5839] <... futex resumed>) = 0 [pid 5849] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5839] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] <... futex resumed>) = 0 [pid 5839] <... futex resumed>) = 1 [pid 5845] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [ 91.924926][ T5849] bcachefs (loop4): going read-write [ 91.928006][ T5847] done [ 91.933142][ T5835] bcachefs (loop1): shutting down [ 91.939270][ T5835] bcachefs (loop1): going read-only [ 91.945143][ T5845] bcachefs (loop0): going read-write [ 91.952052][ T5835] bcachefs (loop1): finished waiting for writes to stop [ 91.957928][ T5846] bcachefs (loop2): accounting_read... done [ 91.966986][ T5847] bcachefs (loop3): snapshots_read... done [pid 5839] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 91.968298][ T5867] bcachefs (loop1): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 91.986423][ T5846] bcachefs (loop2): alloc_read... done [ 91.993067][ T5846] bcachefs (loop2): snapshots_read... done [ 92.004679][ T5847] bcachefs (loop3): journal_replay... done [ 92.023364][ T5846] bcachefs (loop2): journal_replay... done [ 92.042936][ T5867] scheduling recovery pass check_extents_to_backpointers (17) [ 92.045609][ T5847] bcachefs (loop3): resume_logged_ops... [ 92.052963][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 15 [ 92.069419][ T5846] bcachefs (loop2): resume_logged_ops... done [pid 5845] <... mount resumed>) = 0 [ 92.075539][ T5847] done [ 92.080075][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 15 [ 92.082589][ T5846] bcachefs (loop2): delete_dead_inodes... [ 92.091908][ T5847] bcachefs (loop3): delete_dead_inodes... [ 92.094540][ T5883] bcachefs (loop4): backpointer doesn't match extent it points to: [ 92.098615][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 16 [ 92.105433][ T5883] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 92.113950][ T5835] bcachefs (loop1): marking filesystem clean [ 92.120658][ T5885] bcachefs (loop0): backpointer doesn't match extent it points to: [ 92.137427][ T5883] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 92.141042][ T5847] done [pid 5845] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] <... mount resumed>) = 0 [pid 5849] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5849] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] exit_group(0) = ? [pid 5845] <... futex resumed>) = ? [pid 5844] exit_group(0) = ? [pid 5849] <... futex resumed>) = ? [pid 5849] +++ exited with 0 +++ [pid 5845] +++ exited with 0 +++ [pid 5839] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=38 /* 0.38 s */} --- [pid 5844] +++ exited with 0 +++ [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=32 /* 0.32 s */} --- [pid 5838] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5838] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5838] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 92.148345][ T5883] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 92.189601][ T5846] done [ 92.192596][ T5883] bcachefs (loop4): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 92.192630][ T5883] scheduling recovery pass check_extents_to_backpointers (17) [ 92.209126][ T5838] bcachefs (loop4): shutting down [ 92.220262][ T5885] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 92.220285][ T5885] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 92.220306][ T5885] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 5838] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5846] <... mount resumed>) = 0 [pid 5846] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5846] chdir("./file0") = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5846] ioctl(4, LOOP_CLR_FD) = 0 [pid 5846] close(4) = 0 [pid 5847] <... mount resumed>) = 0 [pid 5846] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5842] <... futex resumed>) = 0 [ 92.223001][ T5885] bcachefs (loop0): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 92.252991][ T5838] bcachefs (loop4): going read-only [ 92.272283][ T5846] bcachefs (loop2): done starting filesystem [ 92.289275][ T5838] bcachefs (loop4): finished waiting for writes to stop [ 92.298148][ T5885] scheduling recovery pass check_extents_to_backpointers (17) [ 92.306007][ T5847] bcachefs (loop3): done starting filesystem [ 92.321902][ T5846] bcachefs (loop2): going read-write [pid 5842] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = 0 [pid 5842] <... futex resumed>) = 1 [pid 5846] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5842] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] chdir("./file0") = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5847] ioctl(4, LOOP_CLR_FD) = 0 [pid 5847] close(4) = 0 [pid 5847] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5847] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] <... futex resumed>) = 0 [pid 5843] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5847] <... futex resumed>) = 0 [pid 5843] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 92.322897][ T5835] bcachefs (loop1): shutdown complete [ 92.339767][ T5838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 15 [ 92.355463][ T5833] bcachefs (loop0): shutting down [ 92.362210][ T5833] bcachefs (loop0): going read-only [ 92.368636][ T5847] bcachefs (loop3): going read-write [pid 5847] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5842] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5843] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 92.374404][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 92.395788][ T5838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 92.409705][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 15 [ 92.421609][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 92.443583][ T5838] bcachefs (loop4): clean shutdown complete, journal seq 16 [ 92.453013][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 16 [pid 5846] <... mount resumed>) = 0 [ 92.479188][ T5900] bcachefs (loop2): backpointer doesn't match extent it points to: [ 92.479228][ T5900] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 92.479244][ T5900] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5846] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5842] exit_group(0) = ? [pid 5846] <... futex resumed>) = ? [pid 5847] <... mount resumed>) = 0 [pid 5847] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5847] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] exit_group(0 [pid 5847] <... futex resumed>) = ? [pid 5843] <... exit_group resumed>) = ? [pid 5847] +++ exited with 0 +++ [pid 5843] +++ exited with 0 +++ [ 92.479260][ T5900] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 92.486302][ T5838] bcachefs (loop4): marking filesystem clean [ 92.508799][ T5900] bcachefs (loop2): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 92.525690][ T5833] bcachefs (loop0): marking filesystem clean [pid 5846] +++ exited with 0 +++ [pid 5842] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=50 /* 0.50 s */} --- [pid 5837] restart_syscall(<... resuming interrupted clone ...> [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=62 /* 0.62 s */} --- [pid 5837] <... restart_syscall resumed>) = 0 [pid 5836] restart_syscall(<... resuming interrupted clone ...> [pid 5837] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5836] <... restart_syscall resumed>) = 0 [pid 5837] <... openat resumed>) = 3 [pid 5837] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5837] getdents64(3, [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5837] <... getdents64 resumed>0x555575692730 /* 4 entries */, 32768) = 112 [pid 5836] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5837] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] <... openat resumed>) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 92.596962][ T5900] scheduling recovery pass check_extents_to_backpointers (17) [ 92.612234][ T5904] bcachefs (loop3): backpointer doesn't match extent it points to: [ 92.612252][ T5904] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 92.612269][ T5904] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 92.612288][ T5904] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 92.641580][ T5837] bcachefs (loop3): shutting down [ 92.641613][ T5837] bcachefs (loop3): going read-only [ 92.641640][ T5837] bcachefs (loop3): finished waiting for writes to stop [ 92.713703][ T5836] bcachefs (loop2): shutting down [ 92.713732][ T5836] bcachefs (loop2): going read-only [ 92.713759][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 92.718104][ T5838] bcachefs (loop4): shutdown complete [ 92.718686][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 14 [ 92.718837][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 92.723391][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 15 [ 92.724091][ T5836] bcachefs (loop2): marking filesystem clean [ 92.771105][ T5833] bcachefs (loop0): shutdown complete [ 92.773763][ T5837] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 92.837750][ T5837] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 92.850167][ T5837] bcachefs (loop3): clean shutdown complete, journal seq 14 [ 92.859120][ T5837] bcachefs (loop3): marking filesystem clean [ 92.907851][ T5836] bcachefs (loop2): shutdown complete [pid 5836] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... umount2 resumed>) = 0 [pid 5835] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./0/file0") = 0 [pid 5835] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./0/binderfs") = 0 [pid 5835] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [ 93.008529][ T5837] bcachefs (loop3): shutdown complete [pid 5835] rmdir("./0") = 0 [pid 5835] mkdir("./1", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5907 attached [pid 5907] set_robust_list(0x5555756916a0, 24 [pid 5835] <... clone resumed>, child_tidptr=0x555575691690) = 5907 [pid 5907] <... set_robust_list resumed>) = 0 [pid 5907] chdir("./1") = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5907] setpgid(0, 0) = 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5907] write(3, "1000", 4) = 4 [pid 5907] close(3) = 0 [pid 5907] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5907] write(1, "executing program\n", 18) = 18 [pid 5907] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5907] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5907] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 5907] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 5908 attached [pid 5908] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5907] <... clone3 resumed> => {parent_tid=[5908]}, 88) = 5908 [pid 5908] <... rseq resumed>) = 0 [pid 5907] rt_sigprocmask(SIG_SETMASK, [], [pid 5908] set_robust_list(0x7fb41c6d39a0, 24 [pid 5907] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5907] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5907] <... futex resumed>) = 0 [pid 5908] memfd_create("syzkaller", 0) = 3 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5907] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5833] <... umount2 resumed>) = 0 [pid 5833] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./0/file0") = 0 [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5833] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./0/binderfs") = 0 [pid 5833] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./0") = 0 [pid 5833] mkdir("./1", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5909 attached [pid 5909] set_robust_list(0x5555756916a0, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555575691690) = 5909 [pid 5909] <... set_robust_list resumed>) = 0 [pid 5909] chdir("./1") = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5909] write(3, "1000", 4) = 4 [pid 5909] close(3) = 0 [pid 5909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5909] write(1, "executing program\n", 18executing program ) = 18 [pid 5909] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5909] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5909] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 5909] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5909] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5909] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 5910 attached => {parent_tid=[5910]}, 88) = 5910 [pid 5910] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5909] rt_sigprocmask(SIG_SETMASK, [], [pid 5910] <... rseq resumed>) = 0 [pid 5909] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5910] set_robust_list(0x7fb41c6d39a0, 24 [pid 5909] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... set_robust_list resumed>) = 0 [pid 5910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5909] <... futex resumed>) = 0 [pid 5909] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5910] memfd_create("syzkaller", 0) = 3 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5908] <... write resumed>) = 16777216 [pid 5908] munmap(0x7fb414200000, 138412032) = 0 [pid 5908] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5908] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5908] close(3) = 0 [pid 5908] close(4) = 0 [pid 5908] mkdir("./file0", 0777) = 0 [ 93.557791][ T5908] loop1: detected capacity change from 0 to 32768 [pid 5908] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5836] <... umount2 resumed>) = 0 [pid 5836] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./0/file0") = 0 [pid 5836] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./0/binderfs") = 0 [pid 5836] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./0") = 0 [pid 5836] mkdir("./1", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575691690) = 5912 ./strace-static-x86_64: Process 5912 attached [pid 5912] set_robust_list(0x5555756916a0, 24) = 0 [pid 5912] chdir("./1") = 0 [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5912] setpgid(0, 0) = 0 [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5912] write(3, "1000", 4) = 4 [pid 5912] close(3) = 0 [pid 5912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5912] write(1, "executing program\n", 18executing program ) = 18 [pid 5912] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5912] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5912] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 5912] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5912] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5912] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 5913 attached => {parent_tid=[5913]}, 88) = 5913 [pid 5912] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5912] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5913] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5912] <... futex resumed>) = 0 [pid 5913] <... rseq resumed>) = 0 [pid 5912] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5913] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 5913] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5913] memfd_create("syzkaller", 0) = 3 [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5838] <... umount2 resumed>) = 0 [pid 5838] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5838] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5838] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5838] close(4) = 0 [pid 5838] rmdir("./0/file0") = 0 [pid 5838] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] unlink("./0/binderfs") = 0 [pid 5838] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5838] close(3) = 0 [pid 5838] rmdir("./0") = 0 [pid 5838] mkdir("./1", 0777) = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5838] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5838] close(3) = 0 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575691690) = 5914 ./strace-static-x86_64: Process 5914 attached [pid 5914] set_robust_list(0x5555756916a0, 24) = 0 [pid 5914] chdir("./1") = 0 [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5914] write(3, "1000", 4) = 4 [pid 5914] close(3) = 0 [pid 5914] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5914] write(1, "executing program\n", 18executing program ) = 18 [pid 5914] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5914] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5914] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5914] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 5914] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5914] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5914] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 5915 attached [pid 5915] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5914] <... clone3 resumed> => {parent_tid=[5915]}, 88) = 5915 [pid 5915] <... rseq resumed>) = 0 [pid 5914] rt_sigprocmask(SIG_SETMASK, [], [pid 5915] set_robust_list(0x7fb41c6d39a0, 24 [pid 5914] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5915] <... set_robust_list resumed>) = 0 [pid 5915] rt_sigprocmask(SIG_SETMASK, [], [pid 5914] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5914] <... futex resumed>) = 0 [pid 5915] memfd_create("syzkaller", 0 [pid 5914] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5915] <... memfd_create resumed>) = 3 [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5910] <... write resumed>) = 16777216 [pid 5910] munmap(0x7fb414200000, 138412032 [pid 5913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5910] <... munmap resumed>) = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5910] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5910] close(3) = 0 [pid 5910] close(4) = 0 [pid 5910] mkdir("./file0", 0777) = 0 [ 94.130973][ T5910] loop0: detected capacity change from 0 to 32768 [pid 5910] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5913] <... write resumed>) = 16777216 [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5913] munmap(0x7fb414200000, 138412032) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5913] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5913] close(3) = 0 [pid 5913] close(4) = 0 [pid 5913] mkdir("./file0", 0777) = 0 [ 94.355840][ T5913] loop2: detected capacity change from 0 to 32768 [ 94.445202][ T5910] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 94.445231][ T5910] allowing incompatible features above 0.0: (unknown version) [ 94.445244][ T5910] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 94.503344][ T5908] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 94.503372][ T5908] allowing incompatible features above 0.0: (unknown version) [ 94.503386][ T5908] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 94.503416][ T5908] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 94.503561][ T5908] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 94.562657][ T5913] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 94.643476][ T5913] allowing incompatible features above 0.0: (unknown version) [ 94.651503][ T5913] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 94.652806][ T5910] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 94.666060][ T5913] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 94.697559][ T5913] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 94.718631][ T5908] bcachefs (loop1): accounting_read... [ 94.726610][ T5910] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 94.756885][ T5908] done [ 94.759713][ T5908] bcachefs (loop1): alloc_read... done [ 94.767845][ T5908] bcachefs (loop1): snapshots_read... done [pid 5913] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5915] <... write resumed>) = 16777216 [pid 5915] munmap(0x7fb414200000, 138412032) = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 94.792142][ T5913] bcachefs (loop2): accounting_read... [ 94.798988][ T5908] bcachefs (loop1): journal_replay... done [ 94.825762][ T5910] bcachefs (loop0): accounting_read... [pid 5915] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5915] close(3) = 0 [pid 5915] close(4) = 0 [pid 5915] mkdir("./file0", 0777) = 0 [ 94.826916][ T5908] bcachefs (loop1): resume_logged_ops... [ 94.844333][ T5915] loop4: detected capacity change from 0 to 32768 [ 94.844387][ T5913] done [ 94.864857][ T5910] done [ 94.865276][ T5908] done [ 94.867647][ T5910] bcachefs (loop0): alloc_read... [ 94.870412][ T5908] bcachefs (loop1): delete_dead_inodes... done [ 94.889911][ T5913] bcachefs (loop2): alloc_read... [ 94.889929][ T5910] done [pid 5915] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5908] <... mount resumed>) = 0 [pid 5837] <... umount2 resumed>) = 0 [pid 5837] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 94.893666][ T5913] done [ 94.897389][ T5910] bcachefs (loop0): snapshots_read... done [ 94.912316][ T5908] bcachefs (loop1): done starting filesystem [ 94.920219][ T5913] bcachefs (loop2): snapshots_read... done [pid 5908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5837] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5837] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5908] <... openat resumed>) = 3 [pid 5837] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5908] chdir("./file0") = 0 [pid 5908] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5908] ioctl(4, LOOP_CLR_FD [pid 5837] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5908] <... ioctl resumed>) = 0 [pid 5837] close(4 [pid 5908] close(4 [pid 5837] <... close resumed>) = 0 [pid 5908] <... close resumed>) = 0 [pid 5908] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5837] rmdir("./0/file0" [pid 5908] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5908] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5907] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5837] <... rmdir resumed>) = 0 [pid 5907] <... futex resumed>) = 0 [pid 5907] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5837] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] unlink("./0/binderfs") = 0 [pid 5837] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5837] close(3) = 0 [ 94.959545][ T5913] bcachefs (loop2): journal_replay... [ 94.960317][ T5910] bcachefs (loop0): journal_replay... [ 94.974098][ T5913] done [ 94.982970][ T5908] bcachefs (loop1): going read-write [ 94.993276][ T5910] done [pid 5837] rmdir("./0") = 0 [pid 5907] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5837] mkdir("./1", 0777) = 0 [ 95.005896][ T5910] bcachefs (loop0): resume_logged_ops... done [ 95.008600][ T5915] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5837] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5837] close(3) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575691690) = 5924 ./strace-static-x86_64: Process 5924 attached [pid 5924] set_robust_list(0x5555756916a0, 24) = 0 [pid 5924] chdir("./1") = 0 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] setpgid(0, 0) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5924] write(3, "1000", 4) = 4 [pid 5924] close(3) = 0 [pid 5924] symlink("/dev/binderfs", "./binderfs") = 0 [ 95.019198][ T5910] bcachefs (loop0): delete_dead_inodes... [ 95.059036][ T5913] bcachefs (loop2): resume_logged_ops... [ 95.065805][ T5910] done [ 95.075899][ T5913] done [ 95.078710][ T5913] bcachefs (loop2): delete_dead_inodes... done executing program [pid 5924] write(1, "executing program\n", 18) = 18 [pid 5924] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5924] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 5924] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5924] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 95.110050][ T5915] allowing incompatible features above 0.0: (unknown version) [ 95.117217][ T5910] bcachefs (loop0): done starting filesystem [ 95.125290][ T5915] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 95.133185][ T5913] bcachefs (loop2): done starting filesystem [ 95.143750][ T5915] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [pid 5924] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} [pid 5910] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5928 attached [pid 5924] <... clone3 resumed> => {parent_tid=[5928]}, 88) = 5928 [pid 5910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5908] <... mount resumed>) = 0 [pid 5910] <... openat resumed>) = 3 [pid 5908] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5924] rt_sigprocmask(SIG_SETMASK, [], [pid 5910] chdir("./file0" [pid 5908] <... futex resumed>) = 0 [pid 5928] <... rseq resumed>) = 0 [pid 5924] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5910] <... chdir resumed>) = 0 [pid 5908] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] exit_group(0 [pid 5928] set_robust_list(0x7fb41c6d39a0, 24 [pid 5924] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5908] <... futex resumed>) = ? [pid 5907] <... exit_group resumed>) = ? [pid 5928] <... set_robust_list resumed>) = 0 [pid 5924] <... futex resumed>) = 0 [pid 5910] <... openat resumed>) = 4 [pid 5908] +++ exited with 0 +++ [pid 5907] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 5928] rt_sigprocmask(SIG_SETMASK, [], [pid 5924] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5910] ioctl(4, LOOP_CLR_FD [pid 5835] restart_syscall(<... resuming interrupted clone ...> [pid 5928] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5928] memfd_create("syzkaller", 0 [pid 5910] <... ioctl resumed>) = 0 [pid 5835] <... restart_syscall resumed>) = 0 [ 95.148059][ T5927] bcachefs (loop1): backpointer doesn't match extent it points to: [ 95.153915][ T5915] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [pid 5928] <... memfd_create resumed>) = 3 [pid 5910] close(4 [pid 5835] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5835] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5913] <... mount resumed>) = 0 [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5910] <... close resumed>) = 0 [pid 5910] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5913] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5910] <... futex resumed>) = 1 [pid 5913] chdir("./file0" [pid 5928] <... mmap resumed>) = 0x7fb414200000 [pid 5913] <... chdir resumed>) = 0 [pid 5910] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] <... futex resumed>) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5909] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5913] ioctl(4, LOOP_CLR_FD) = 0 [pid 5910] <... futex resumed>) = 0 [pid 5909] <... futex resumed>) = 1 [pid 5913] close(4 [pid 5910] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5909] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5913] <... close resumed>) = 0 [ 95.202477][ T5927] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 95.219027][ T5835] bcachefs (loop1): shutting down [ 95.224527][ T5835] bcachefs (loop1): going read-only [ 95.245388][ T5910] bcachefs (loop0): going read-write [pid 5913] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5913] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5912] <... futex resumed>) = 0 [pid 5912] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5913] <... futex resumed>) = 0 [pid 5912] <... futex resumed>) = 1 [pid 5913] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5912] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 95.251624][ T5835] bcachefs (loop1): finished waiting for writes to stop [ 95.268589][ T5913] bcachefs (loop2): going read-write [ 95.276771][ T5927] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5912] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 95.306089][ T5915] bcachefs (loop4): accounting_read... [ 95.306251][ T5927] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 95.341641][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 95.352965][ T5915] done [ 95.355920][ T5915] bcachefs (loop4): alloc_read... done [ 95.379568][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 95.384887][ T5915] bcachefs (loop4): snapshots_read... done [pid 5910] <... mount resumed>) = 0 [pid 5910] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5909] exit_group(0) = ? [pid 5913] <... mount resumed>) = 0 [pid 5910] +++ exited with 0 +++ [pid 5909] +++ exited with 0 +++ [pid 5913] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=43 /* 0.43 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5913] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5912] exit_group(0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5913] <... futex resumed>) = ? [pid 5912] <... exit_group resumed>) = ? [pid 5913] +++ exited with 0 +++ [pid 5912] +++ exited with 0 +++ [pid 5833] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5912, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=49 /* 0.49 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...> [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] <... restart_syscall resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", [pid 5836] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] getdents64(3, [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x555575692730 /* 4 entries */, 32768) = 112 [pid 5836] getdents64(3, [pid 5833] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] <... getdents64 resumed>0x555575692730 /* 4 entries */, 32768) = 112 [ 95.426038][ T5915] bcachefs (loop4): journal_replay... done [ 95.438248][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 14 [ 95.448344][ T5915] bcachefs (loop4): resume_logged_ops... [pid 5836] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5915] <... mount resumed>) = 0 [pid 5915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5915] chdir("./file0") = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5915] ioctl(4, LOOP_CLR_FD) = 0 [pid 5915] close(4) = 0 [pid 5915] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 95.452040][ T5943] bcachefs (loop0): backpointer doesn't match extent it points to: [ 95.452058][ T5943] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 95.452075][ T5943] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5915] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5914] <... futex resumed>) = 0 [pid 5914] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] <... futex resumed>) = 0 [pid 5914] <... futex resumed>) = 1 [ 95.452095][ T5943] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 95.467943][ T5910] syz-executor206 (5910) used greatest stack depth: 19896 bytes left [ 95.469046][ T5946] bcachefs (loop2): backpointer doesn't match extent it points to: [ 95.469063][ T5946] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 95.469081][ T5946] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 95.469101][ T5946] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 95.470715][ T5915] done [ 95.470731][ T5915] bcachefs (loop4): delete_dead_inodes... done [ 95.487832][ T5946] bcachefs (loop2): Detected missing backpointers in bucket 34, now have 1/128 with missing [pid 5928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5915] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [ 95.487852][ T5946] scheduling recovery pass check_extents_to_backpointers (17) [ 95.488605][ T5835] bcachefs (loop1): marking filesystem clean [ 95.490707][ T5833] bcachefs (loop0): shutting down [ 95.490722][ T5833] bcachefs (loop0): going read-only [ 95.490748][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 95.491474][ T5915] bcachefs (loop4): done starting filesystem [ 95.499263][ T5836] bcachefs (loop2): shutting down [ 95.560988][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [pid 5914] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 95.612585][ T5836] bcachefs (loop2): going read-only [ 95.633047][ T5915] bcachefs (loop4): going read-write [ 95.705408][ T5835] bcachefs (loop1): shutdown complete [ 95.705796][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 95.720505][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 95.730933][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 15 [ 95.744388][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 14 [ 95.765504][ T5833] bcachefs (loop0): marking filesystem clean [pid 5915] <... mount resumed>) = 0 [pid 5915] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5915] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5914] exit_group(0) = ? [pid 5915] <... futex resumed>) = ? [ 95.788358][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 95.815032][ T5955] bcachefs (loop4): backpointer doesn't match extent it points to: [ 95.815051][ T5955] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 95.815069][ T5955] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5915] +++ exited with 0 +++ [pid 5914] +++ exited with 0 +++ [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5914, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=45 /* 0.45 s */} --- [pid 5838] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5838] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 95.815089][ T5955] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 95.836169][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 16 [ 95.864193][ T5955] bcachefs (loop4): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 95.900085][ T5955] scheduling recovery pass check_extents_to_backpointers (17) [ 95.913245][ T5836] bcachefs (loop2): marking filesystem clean [ 95.926919][ T5833] bcachefs (loop0): shutdown complete [ 95.945474][ T5838] bcachefs (loop4): shutting down [ 95.950549][ T5838] bcachefs (loop4): going read-only [ 95.964756][ T5838] bcachefs (loop4): finished waiting for writes to stop [ 95.985238][ T5838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 15 [ 96.004132][ T5838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [pid 5838] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5928] <... write resumed>) = 16777216 [ 96.028072][ T5836] bcachefs (loop2): shutdown complete [ 96.046413][ T5838] bcachefs (loop4): clean shutdown complete, journal seq 16 [ 96.054312][ T5838] bcachefs (loop4): marking filesystem clean [pid 5928] munmap(0x7fb414200000, 138412032) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5928] ioctl(4, LOOP_SET_FD, 3) = 0 [ 96.207003][ T5838] bcachefs (loop4): shutdown complete [ 96.211457][ T5928] loop3: detected capacity change from 0 to 32768 [pid 5928] close(3) = 0 [pid 5928] close(4) = 0 [pid 5928] mkdir("./file0", 0777) = 0 [ 96.383316][ T5928] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 96.383342][ T5928] allowing incompatible features above 0.0: (unknown version) [ 96.383353][ T5928] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 96.474820][ T5928] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [pid 5928] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5833] <... umount2 resumed>) = 0 [pid 5833] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 96.483268][ T5928] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [pid 5833] newfstatat(AT_FDCWD, "./1/file0", [pid 5835] <... umount2 resumed>) = 0 [pid 5835] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] newfstatat(AT_FDCWD, "./1/file0", [pid 5833] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 4 [pid 5835] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5835] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5835] close(4) = 0 [pid 5833] getdents64(4, [pid 5835] rmdir("./1/file0" [pid 5833] <... getdents64 resumed>0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5835] <... rmdir resumed>) = 0 [pid 5833] close(4 [pid 5835] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... close resumed>) = 0 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] rmdir("./1/file0" [pid 5835] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5833] <... rmdir resumed>) = 0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] unlink("./1/binderfs") = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5833] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5835] close(3) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] rmdir("./1" [pid 5833] unlink("./1/binderfs" [pid 5835] <... rmdir resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5835] mkdir("./2", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5833] getdents64(3, [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... getdents64 resumed>0x555575692730 /* 0 entries */, 32768) = 0 [pid 5833] close(3./strace-static-x86_64: Process 5958 attached [pid 5835] <... clone resumed>, child_tidptr=0x555575691690) = 5958 [pid 5833] <... close resumed>) = 0 [pid 5958] set_robust_list(0x5555756916a0, 24) = 0 [pid 5958] chdir("./2") = 0 [pid 5833] rmdir("./1" [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... rmdir resumed>) = 0 [pid 5958] <... prctl resumed>) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] mkdir("./2", 0777 [pid 5958] <... openat resumed>) = 3 [pid 5958] write(3, "1000", 4 [pid 5833] <... mkdir resumed>) = 0 [pid 5958] <... write resumed>) = 4 [pid 5958] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FDexecuting program [pid 5958] write(1, "executing program\n", 18 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] close(3 [pid 5958] <... write resumed>) = 18 [pid 5833] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5959 attached [pid 5958] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, [pid 5959] set_robust_list(0x5555756916a0, 24 [pid 5958] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555575691690) = 5959 [pid 5959] <... set_robust_list resumed>) = 0 [pid 5958] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5959] chdir("./2" [pid 5958] <... mmap resumed>) = 0x7fb41c6b3000 [pid 5959] <... chdir resumed>) = 0 [pid 5958] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 96.588636][ T5928] bcachefs (loop3): accounting_read... done [ 96.623195][ T5928] bcachefs (loop3): alloc_read... done [pid 5959] setpgid(0, 0 [pid 5958] <... mprotect resumed>) = 0 [pid 5959] <... setpgid resumed>) = 0 [pid 5958] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5958] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 5960 attached => {parent_tid=[5960]}, 88) = 5960 [pid 5959] <... openat resumed>) = 3 [pid 5958] rt_sigprocmask(SIG_SETMASK, [], [pid 5959] write(3, "1000", 4 [pid 5958] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5960] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5958] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] <... rseq resumed>) = 0 [pid 5959] <... write resumed>) = 4 [pid 5958] <... futex resumed>) = 0 [pid 5960] set_robust_list(0x7fb41c6d39a0, 24 [pid 5959] close(3 [pid 5958] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5960] <... set_robust_list resumed>) = 0 [pid 5959] <... close resumed>) = 0 [pid 5960] rt_sigprocmask(SIG_SETMASK, [], [pid 5959] symlink("/dev/binderfs", "./binderfs" [pid 5960] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5960] memfd_create("syzkaller", 0 [pid 5959] <... symlink resumed>) = 0 executing program [pid 5960] <... memfd_create resumed>) = 3 [pid 5959] write(1, "executing program\n", 18 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5959] <... write resumed>) = 18 [pid 5959] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5959] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5959] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5836] <... umount2 resumed>) = 0 [pid 5836] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5959] <... mmap resumed>) = 0x7fb41c6b3000 [pid 5959] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5959] <... mprotect resumed>) = 0 [pid 5836] newfstatat(AT_FDCWD, "./1/file0", [pid 5959] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5836] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5959] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5836] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5959] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", ./strace-static-x86_64: Process 5961 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5959] <... clone3 resumed> => {parent_tid=[5961]}, 88) = 5961 [ 96.664088][ T5928] bcachefs (loop3): snapshots_read... done [ 96.712316][ T5928] bcachefs (loop3): journal_replay... done [pid 5836] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./1/file0") = 0 [pid 5836] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5961] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5836] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5961] <... rseq resumed>) = 0 [pid 5836] unlink("./1/binderfs" [pid 5961] set_robust_list(0x7fb41c6d39a0, 24 [pid 5836] <... unlink resumed>) = 0 [pid 5961] <... set_robust_list resumed>) = 0 [pid 5961] rt_sigprocmask(SIG_SETMASK, [], [pid 5836] getdents64(3, [pid 5961] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5836] <... getdents64 resumed>0x555575692730 /* 0 entries */, 32768) = 0 [pid 5961] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5836] close(3) = 0 [pid 5836] rmdir("./1" [pid 5959] rt_sigprocmask(SIG_SETMASK, [], [pid 5836] <... rmdir resumed>) = 0 [pid 5959] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5959] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5836] mkdir("./2", 0777 [pid 5959] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5836] <... mkdir resumed>) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5961] <... futex resumed>) = 0 [pid 5836] <... openat resumed>) = 3 [pid 5961] memfd_create("syzkaller", 0 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5836] close(3 [pid 5961] <... memfd_create resumed>) = 3 [pid 5836] <... close resumed>) = 0 [pid 5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5961] <... mmap resumed>) = 0x7fb414200000 [pid 5836] <... clone resumed>, child_tidptr=0x555575691690) = 5962 ./strace-static-x86_64: Process 5962 attached [pid 5962] set_robust_list(0x5555756916a0, 24) = 0 [pid 5962] chdir("./2") = 0 [pid 5962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5962] setpgid(0, 0) = 0 [pid 5962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5962] write(3, "1000", 4) = 4 [pid 5962] close(3) = 0 [pid 5962] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5962] write(1, "executing program\n", 18) = 18 [pid 5962] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5962] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5962] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 5962] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5962] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5962] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 5963 attached [pid 5928] <... mount resumed>) = 0 [pid 5963] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5962] <... clone3 resumed> => {parent_tid=[5963]}, 88) = 5963 [pid 5928] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5962] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5962] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5962] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5928] <... openat resumed>) = 3 [pid 5963] <... rseq resumed>) = 0 [pid 5928] chdir("./file0" [pid 5963] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 5928] <... chdir resumed>) = 0 [pid 5963] rt_sigprocmask(SIG_SETMASK, [], [pid 5928] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5963] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5928] <... openat resumed>) = 4 [pid 5963] memfd_create("syzkaller", 0 [pid 5928] ioctl(4, LOOP_CLR_FD [pid 5963] <... memfd_create resumed>) = 3 [pid 5928] <... ioctl resumed>) = 0 [ 96.732172][ T5928] bcachefs (loop3): resume_logged_ops... done [ 96.754881][ T5928] bcachefs (loop3): delete_dead_inodes... done [ 96.775590][ T5928] bcachefs (loop3): done starting filesystem [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5928] close(4 [pid 5963] <... mmap resumed>) = 0x7fb414200000 [pid 5928] <... close resumed>) = 0 [pid 5928] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5924] <... futex resumed>) = 0 [pid 5924] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5928] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 96.853644][ T5928] bcachefs (loop3): going read-write [pid 5928] <... mount resumed>) = 0 [pid 5928] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] exit_group(0 [pid 5928] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5924] <... exit_group resumed>) = ? [pid 5928] +++ exited with 0 +++ [pid 5924] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=40 /* 0.40 s */} --- [pid 5837] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5837] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5837] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 96.996034][ T5971] bcachefs (loop3): backpointer doesn't match extent it points to: [ 96.996056][ T5971] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 5960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 96.996074][ T5971] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 96.996093][ T5971] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 5963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5838] <... umount2 resumed>) = 0 [pid 5838] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5838] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5838] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5838] close(4) = 0 [pid 5838] rmdir("./1/file0") = 0 [pid 5838] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] unlink("./1/binderfs") = 0 [pid 5838] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5838] close(3) = 0 [pid 5838] rmdir("./1") = 0 [pid 5960] <... write resumed>) = 16777216 [ 97.046372][ T5837] bcachefs (loop3): shutting down [ 97.046394][ T5837] bcachefs (loop3): going read-only [ 97.046437][ T5837] bcachefs (loop3): finished waiting for writes to stop [pid 5960] munmap(0x7fb414200000, 138412032 [pid 5838] mkdir("./2", 0777) = 0 [pid 5960] <... munmap resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5960] ioctl(4, LOOP_SET_FD, 3 [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5838] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5838] close(3) = 0 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5973 attached [pid 5973] set_robust_list(0x5555756916a0, 24 [pid 5838] <... clone resumed>, child_tidptr=0x555575691690) = 5973 [pid 5973] <... set_robust_list resumed>) = 0 [pid 5960] <... ioctl resumed>) = 0 [ 97.286076][ T5837] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 97.295852][ T5837] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 97.313213][ T5960] loop1: detected capacity change from 0 to 32768 [ 97.323037][ T5837] bcachefs (loop3): clean shutdown complete, journal seq 14 [pid 5973] chdir("./2") = 0 [pid 5960] close(3) = 0 [pid 5960] close(4) = 0 [pid 5960] mkdir("./file0", 0777) = 0 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5973] setpgid(0, 0 [pid 5960] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5973] <... setpgid resumed>) = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [pid 5973] symlink("/dev/binderfs", "./binderfs") = 0 [ 97.346513][ T5837] bcachefs (loop3): marking filesystem clean executing program [pid 5973] write(1, "executing program\n", 18) = 18 [pid 5973] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5973] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 5973] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5973] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 5975 attached => {parent_tid=[5975]}, 88) = 5975 [pid 5973] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5973] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5975] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5973] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5975] <... rseq resumed>) = 0 [pid 5975] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 5975] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5975] memfd_create("syzkaller", 0) = 3 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 97.490346][ T5837] bcachefs (loop3): shutdown complete [ 97.490488][ T5960] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 5963] <... write resumed>) = 16777216 [pid 5963] munmap(0x7fb414200000, 138412032) = 0 [pid 5963] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5963] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5963] close(3) = 0 [pid 5963] close(4) = 0 [pid 5963] mkdir("./file0", 0777) = 0 [ 97.582465][ T5960] allowing incompatible features above 0.0: (unknown version) [ 97.591657][ T5960] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 97.606892][ T5963] loop2: detected capacity change from 0 to 32768 [pid 5963] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5961] <... write resumed>) = 16777216 [ 97.639105][ T5960] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 97.673380][ T5960] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [pid 5961] munmap(0x7fb414200000, 138412032) = 0 [pid 5975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5961] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5961] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5961] close(3) = 0 [pid 5961] close(4) = 0 [pid 5961] mkdir("./file0", 0777) = 0 [ 97.745479][ T5960] bcachefs (loop1): accounting_read... [ 97.746146][ T5961] loop0: detected capacity change from 0 to 32768 [ 97.761585][ T5960] done [ 97.764398][ T5960] bcachefs (loop1): alloc_read... done [ 97.783493][ T5960] bcachefs (loop1): snapshots_read... done [ 97.824448][ T5960] bcachefs (loop1): journal_replay... done [ 97.888187][ T5960] bcachefs (loop1): resume_logged_ops... done [ 97.891104][ T5963] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 97.917704][ T5963] allowing incompatible features above 0.0: (unknown version) [ 97.929010][ T5963] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 97.937513][ T5960] bcachefs (loop1): delete_dead_inodes... [ 97.943468][ T5963] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 97.957705][ T5963] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [pid 5961] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5960] <... mount resumed>) = 0 [pid 5960] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5960] chdir("./file0") = 0 [ 97.987978][ T5960] done [ 98.003512][ T5961] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 5960] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 98.003537][ T5961] allowing incompatible features above 0.0: (unknown version) [ 98.003549][ T5961] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 98.024299][ T5960] bcachefs (loop1): done starting filesystem [ 98.060840][ T5963] bcachefs (loop2): accounting_read... [ 98.066329][ T5961] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [pid 5960] ioctl(4, LOOP_CLR_FD [pid 5975] <... write resumed>) = 16777216 [pid 5960] <... ioctl resumed>) = 0 [pid 5960] close(4) = 0 [pid 5975] munmap(0x7fb414200000, 138412032 [pid 5960] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5960] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] <... futex resumed>) = 0 [pid 5958] <... futex resumed>) = 1 [pid 5960] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5958] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5975] <... munmap resumed>) = 0 [ 98.107665][ T5961] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 98.131698][ T5963] done [ 98.135777][ T5963] bcachefs (loop2): alloc_read... done [ 98.137981][ T5960] bcachefs (loop1): going read-write [pid 5975] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5975] ioctl(4, LOOP_SET_FD, 3 [pid 5958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 98.143394][ T5963] bcachefs (loop2): snapshots_read... done [ 98.176025][ T5975] loop4: detected capacity change from 0 to 32768 [pid 5975] <... ioctl resumed>) = 0 [pid 5975] close(3) = 0 [pid 5975] close(4) = 0 [pid 5975] mkdir("./file0", 0777) = 0 [ 98.218521][ T5963] bcachefs (loop2): journal_replay... done [ 98.247539][ T5963] bcachefs (loop2): resume_logged_ops... done [pid 5975] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5960] <... mount resumed>) = 0 [pid 5960] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5960] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] exit_group(0) = ? [pid 5960] <... futex resumed>) = ? [pid 5960] +++ exited with 0 +++ [pid 5958] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=43 /* 0.43 s */} --- [pid 5963] <... mount resumed>) = 0 [pid 5835] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 98.284446][ T5963] bcachefs (loop2): delete_dead_inodes... done [ 98.299074][ T5961] bcachefs (loop0): accounting_read... [pid 5835] newfstatat(3, "", [pid 5963] <... openat resumed>) = 3 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5835] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5963] chdir("./file0") = 0 [pid 5963] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5963] ioctl(4, LOOP_CLR_FD) = 0 [pid 5963] close(4) = 0 [pid 5963] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5962] <... futex resumed>) = 0 [pid 5962] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5962] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 98.326152][ T5986] bcachefs (loop1): backpointer doesn't match extent it points to: [ 98.326174][ T5986] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 98.326192][ T5986] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 98.326212][ T5986] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 98.344139][ T5963] bcachefs (loop2): done starting filesystem [ 98.373926][ T5961] done [ 98.373945][ T5961] bcachefs (loop0): alloc_read... done [ 98.377541][ T5961] bcachefs (loop0): snapshots_read... done [ 98.397973][ T5975] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 5963] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5962] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5837] <... umount2 resumed>) = 0 [pid 5837] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5837] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5837] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5837] close(4) = 0 [pid 5837] rmdir("./1/file0") = 0 [pid 5837] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] unlink("./1/binderfs") = 0 [pid 5837] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5837] close(3) = 0 [pid 5837] rmdir("./1") = 0 [pid 5837] mkdir("./2", 0777) = 0 [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5837] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5837] close(3) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575691690) = 5989 ./strace-static-x86_64: Process 5989 attached [ 98.421303][ T5963] bcachefs (loop2): going read-write [ 98.461137][ T5975] allowing incompatible features above 0.0: (unknown version) [ 98.491572][ T5975] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 98.513299][ T5986] bcachefs (loop1): Detected missing backpointers in bucket 34, now have 1/128 with missing [pid 5989] set_robust_list(0x5555756916a0, 24) = 0 [pid 5989] chdir("./2") = 0 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 98.513320][ T5986] scheduling recovery pass check_extents_to_backpointers (17) [ 98.539922][ T5975] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 98.540045][ T5975] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 98.540923][ T5835] bcachefs (loop1): shutting down [ 98.540939][ T5835] bcachefs (loop1): going read-only [ 98.540964][ T5835] bcachefs (loop1): finished waiting for writes to stop executing program [pid 5989] setpgid(0, 0) = 0 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5989] write(3, "1000", 4) = 4 [pid 5989] close(3) = 0 [pid 5989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5989] write(1, "executing program\n", 18) = 18 [pid 5989] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5989] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 5989] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5989] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[5996]}, 88) = 5996 ./strace-static-x86_64: Process 5996 attached [pid 5989] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5989] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5996] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 5996] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 5996] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5996] memfd_create("syzkaller", 0) = 3 [ 98.568000][ T5961] bcachefs (loop0): journal_replay... [ 98.591816][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 15 [ 98.614383][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 15 [ 98.633680][ T5975] bcachefs (loop4): accounting_read... [ 98.634977][ T5961] done [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 98.647013][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 16 [ 98.656752][ T5975] done [ 98.664805][ T5975] bcachefs (loop4): alloc_read... done [ 98.671757][ T5975] bcachefs (loop4): snapshots_read... [ 98.672823][ T5961] bcachefs (loop0): resume_logged_ops... [ 98.679332][ T5835] bcachefs (loop1): marking filesystem clean [pid 5963] <... mount resumed>) = 0 [pid 5963] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5963] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5962] exit_group(0) = ? [pid 5963] <... futex resumed>) = ? [pid 5963] +++ exited with 0 +++ [pid 5962] +++ exited with 0 +++ [ 98.682918][ T5999] bcachefs (loop2): backpointer doesn't match extent it points to: [ 98.695856][ T5961] done [ 98.702317][ T5961] bcachefs (loop0): delete_dead_inodes... done [ 98.715291][ T5975] done [ 98.722266][ T5961] bcachefs (loop0): done starting filesystem [pid 5961] <... mount resumed>) = 0 [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5962, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=45 /* 0.45 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...> [pid 5961] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5836] <... restart_syscall resumed>) = 0 [pid 5961] <... openat resumed>) = 3 [pid 5961] chdir("./file0" [pid 5836] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 98.745053][ T5999] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 98.745946][ T5975] bcachefs (loop4): journal_replay... [ 98.760805][ T5999] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5836] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5961] <... chdir resumed>) = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5961] ioctl(4, LOOP_CLR_FD) = 0 [pid 5961] close(4) = 0 [pid 5961] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5961] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] <... futex resumed>) = 0 [ 98.795655][ T5836] bcachefs (loop2): shutting down [ 98.797184][ T5835] bcachefs (loop1): shutdown complete [ 98.806010][ T5836] bcachefs (loop2): going read-only [ 98.806557][ T5999] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 98.811282][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 98.830018][ T5975] done [pid 5959] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 1 [pid 5961] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [ 98.867277][ T5961] bcachefs (loop0): going read-write [ 98.878679][ T5975] bcachefs (loop4): resume_logged_ops... done [ 98.891638][ T5975] bcachefs (loop4): delete_dead_inodes... done [ 98.902844][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [pid 5959] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 98.915225][ T5975] bcachefs (loop4): done starting filesystem [pid 5975] <... mount resumed>) = 0 [pid 5975] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5975] chdir("./file0") = 0 [pid 5975] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5975] ioctl(4, LOOP_CLR_FD) = 0 [pid 5975] close(4) = 0 [pid 5975] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5973] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5975] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5973] <... futex resumed>) = 0 [ 98.945087][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 98.970194][ T5975] bcachefs (loop4): going read-write [ 98.971537][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 14 [pid 5973] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5961] <... mount resumed>) = 0 [pid 5961] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] exit_group(0 [pid 5961] <... futex resumed>) = ? [pid 5959] <... exit_group resumed>) = ? [pid 5961] +++ exited with 0 +++ [pid 5959] +++ exited with 0 +++ [ 98.995274][ T5836] bcachefs (loop2): marking filesystem clean [ 99.021797][ T6009] bcachefs (loop0): backpointer doesn't match extent it points to: [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=48 /* 0.48 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 99.021818][ T6009] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 5833] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 99.021836][ T6009] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 99.021857][ T6009] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5975] <... mount resumed>) = 0 [pid 5975] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5975] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] exit_group(0) = ? [pid 5975] <... futex resumed>) = ? [pid 5975] +++ exited with 0 +++ [pid 5973] +++ exited with 0 +++ [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=36 /* 0.36 s */} --- [ 99.097284][ T5833] bcachefs (loop0): shutting down [ 99.097307][ T5833] bcachefs (loop0): going read-only [ 99.097335][ T5833] bcachefs (loop0): finished waiting for writes to stop [pid 5838] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5838] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5838] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 99.100314][ T5836] bcachefs (loop2): shutdown complete [ 99.201065][ T6017] bcachefs (loop4): backpointer doesn't match extent it points to: [ 99.201102][ T6017] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 99.201119][ T6017] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 99.201139][ T6017] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 99.206149][ T6017] bcachefs (loop4): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 99.206170][ T6017] scheduling recovery pass check_extents_to_backpointers (17) [ 99.265797][ T5838] bcachefs (loop4): shutting down [ 99.265818][ T5838] bcachefs (loop4): going read-only [ 99.265846][ T5838] bcachefs (loop4): finished waiting for writes to stop [ 99.295030][ T5838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 14 [ 99.331474][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 99.365133][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 99.406393][ T5838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 99.408122][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 14 [ 99.424972][ T5838] bcachefs (loop4): clean shutdown complete, journal seq 16 [ 99.432942][ T5838] bcachefs (loop4): marking filesystem clean [ 99.450538][ T5833] bcachefs (loop0): marking filesystem clean [pid 5838] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5996] <... write resumed>) = 16777216 [pid 5996] munmap(0x7fb414200000, 138412032) = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5996] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5996] close(3) = 0 [pid 5996] close(4) = 0 [pid 5996] mkdir("./file0", 0777) = 0 [ 99.537424][ T5996] loop3: detected capacity change from 0 to 32768 [ 99.573173][ T5838] bcachefs (loop4): shutdown complete [pid 5996] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5835] <... umount2 resumed>) = 0 [pid 5835] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 99.720566][ T5996] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 5835] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [ 99.720594][ T5996] allowing incompatible features above 0.0: (unknown version) [ 99.720608][ T5996] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [pid 5835] rmdir("./2/file0") = 0 [pid 5835] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./2/binderfs") = 0 [pid 5835] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./2") = 0 [pid 5835] mkdir("./3", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575691690) = 6020 ./strace-static-x86_64: Process 6020 attached [pid 6020] set_robust_list(0x5555756916a0, 24) = 0 [pid 6020] chdir("./3") = 0 [ 99.741514][ T5833] bcachefs (loop0): shutdown complete [ 99.831074][ T5996] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 99.853823][ T5996] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [pid 6020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5836] <... umount2 resumed>) = 0 [pid 6020] setpgid(0, 0) = 0 [pid 6020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6020] write(3, "1000", 4 [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] <... write resumed>) = 4 [pid 6020] close(3 [pid 5836] newfstatat(AT_FDCWD, "./2/file0", [pid 6020] <... close resumed>) = 0 [pid 6020] symlink("/dev/binderfs", "./binderfs" [pid 5836] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6020] <... symlink resumed>) = 0 [pid 5836] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6020] write(1, "executing program\n", 18 [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] <... write resumed>) = 18 [pid 5836] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6020] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5836] <... openat resumed>) = 4 [pid 6020] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 5836] newfstatat(4, "", [pid 6020] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5836] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6020] <... mmap resumed>) = 0x7fb41c6b3000 [pid 5836] getdents64(4, [pid 6020] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5836] <... getdents64 resumed>0x55557569a770 /* 2 entries */, 32768) = 48 [pid 6020] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5836] getdents64(4, [pid 6020] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5836] <... getdents64 resumed>0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5836] close(4 [pid 6020] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} [pid 5836] <... close resumed>) = 0 [pid 5836] rmdir("./2/file0"./strace-static-x86_64: Process 6021 attached [pid 6020] <... clone3 resumed> => {parent_tid=[6021]}, 88) = 6021 [pid 5836] <... rmdir resumed>) = 0 [pid 6020] rt_sigprocmask(SIG_SETMASK, [], [pid 5836] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6020] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6020] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5836] newfstatat(AT_FDCWD, "./2/binderfs", [pid 6021] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 6021] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6021] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5836] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./2/binderfs") = 0 [pid 6021] memfd_create("syzkaller", 0) = 3 [pid 6021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5836] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./2") = 0 [pid 5836] mkdir("./3", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5836] close(3) = 0 [ 99.985741][ T5996] bcachefs (loop3): accounting_read... done [ 99.994450][ T5996] bcachefs (loop3): alloc_read... done [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6022 attached [pid 6022] set_robust_list(0x5555756916a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555575691690) = 6022 [pid 6022] <... set_robust_list resumed>) = 0 [pid 6022] chdir("./3") = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6022] setpgid(0, 0) = 0 [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 100.034954][ T5996] bcachefs (loop3): snapshots_read... done [pid 6022] write(3, "1000", 4) = 4 [pid 6022] close(3) = 0 executing program [pid 6022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6022] write(1, "executing program\n", 18) = 18 [pid 6022] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6022] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6022] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6022] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6022] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6022] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[6023]}, 88) = 6023 ./strace-static-x86_64: Process 6023 attached [pid 6023] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6022] rt_sigprocmask(SIG_SETMASK, [], [pid 6023] <... rseq resumed>) = 0 [pid 6023] set_robust_list(0x7fb41c6d39a0, 24 [pid 6022] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6023] <... set_robust_list resumed>) = 0 [pid 5838] <... umount2 resumed>) = 0 [pid 6023] rt_sigprocmask(SIG_SETMASK, [], [pid 6022] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6022] <... futex resumed>) = 0 [pid 6023] memfd_create("syzkaller", 0 [pid 6022] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5838] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6023] <... memfd_create resumed>) = 3 [pid 5838] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5838] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5996] <... mount resumed>) = 0 [pid 5838] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5838] newfstatat(4, "", [pid 5996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5996] chdir("./file0") = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5838] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(4, [pid 5996] <... openat resumed>) = 4 [pid 5838] <... getdents64 resumed>0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5996] ioctl(4, LOOP_CLR_FD) = 0 [pid 5996] close(4) = 0 [pid 5838] getdents64(4, [pid 5996] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... getdents64 resumed>0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... futex resumed>) = 1 [ 100.125812][ T5996] bcachefs (loop3): journal_replay... done [ 100.137816][ T5996] bcachefs (loop3): resume_logged_ops... done [ 100.146248][ T5996] bcachefs (loop3): delete_dead_inodes... done [ 100.166830][ T5996] bcachefs (loop3): done starting filesystem [pid 5996] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 5838] close(4) = 0 [pid 5838] rmdir("./2/file0") = 0 [pid 5838] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] unlink("./2/binderfs") = 0 [pid 5838] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5838] close(3) = 0 [ 100.215070][ T5996] bcachefs (loop3): going read-write [pid 5838] rmdir("./2") = 0 [pid 5989] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5838] mkdir("./3", 0777) = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5838] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5838] close(3) = 0 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6029 attached [pid 6029] set_robust_list(0x5555756916a0, 24) = 0 [pid 6029] chdir("./3") = 0 [pid 5838] <... clone resumed>, child_tidptr=0x555575691690) = 6029 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6029] write(3, "1000", 4 [pid 6021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6029] <... write resumed>) = 4 [pid 6029] close(3) = 0 [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6029] write(1, "executing program\n", 18) = 18 [pid 6029] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6029] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6029] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 5996] <... mount resumed>) = 0 [pid 6029] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE [pid 5996] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] <... mprotect resumed>) = 0 [pid 5996] <... futex resumed>) = 0 [pid 5989] exit_group(0 [pid 6029] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5989] <... exit_group resumed>) = ? [pid 6029] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5996] +++ exited with 0 +++ [pid 6029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} [pid 5989] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=44 /* 0.44 s */} --- ./strace-static-x86_64: Process 6034 attached [pid 6034] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6029] <... clone3 resumed> => {parent_tid=[6034]}, 88) = 6034 [pid 6029] rt_sigprocmask(SIG_SETMASK, [], [pid 5837] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] <... rseq resumed>) = 0 [pid 6029] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6034] set_robust_list(0x7fb41c6d39a0, 24 [pid 6029] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... set_robust_list resumed>) = 0 [pid 6029] <... futex resumed>) = 0 [pid 6034] rt_sigprocmask(SIG_SETMASK, [], [ 100.390019][ T6032] bcachefs (loop3): backpointer doesn't match extent it points to: [ 100.390040][ T6032] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 6029] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6034] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6034] memfd_create("syzkaller", 0) = 3 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5837] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6034] <... mmap resumed>) = 0x7fb414200000 [pid 5837] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5837] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 100.390058][ T6032] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 100.390078][ T6032] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 100.473612][ T6032] bcachefs (loop3): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 100.473633][ T6032] scheduling recovery pass check_extents_to_backpointers (17) [ 100.518545][ T5837] bcachefs (loop3): shutting down [ 100.523624][ T5837] bcachefs (loop3): going read-only [ 100.539146][ T5837] bcachefs (loop3): finished waiting for writes to stop [ 100.557483][ T5837] bcachefs (loop3): flushing journal and stopping allocators, journal seq 15 [pid 5837] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = 0 [pid 5833] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./2/file0") = 0 [pid 5833] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./2/binderfs") = 0 [pid 6023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5833] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./2") = 0 [pid 5833] mkdir("./3", 0777) = 0 [ 100.586256][ T5837] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15 [ 100.625810][ T5837] bcachefs (loop3): clean shutdown complete, journal seq 16 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6035 attached , child_tidptr=0x555575691690) = 6035 [pid 6035] set_robust_list(0x5555756916a0, 24) = 0 [pid 6035] chdir("./3") = 0 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6035] setpgid(0, 0) = 0 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 100.634122][ T5837] bcachefs (loop3): marking filesystem clean [pid 6035] write(3, "1000", 4) = 4 [pid 6035] close(3) = 0 executing program [pid 6035] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6035] write(1, "executing program\n", 18 [pid 6034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6035] <... write resumed>) = 18 [pid 6035] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6035] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6035] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6035] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6035] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6035] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6036 attached => {parent_tid=[6036]}, 88) = 6036 [pid 6036] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6035] rt_sigprocmask(SIG_SETMASK, [], [pid 6036] <... rseq resumed>) = 0 [pid 6035] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6036] set_robust_list(0x7fb41c6d39a0, 24 [pid 6035] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... set_robust_list resumed>) = 0 [pid 6035] <... futex resumed>) = 0 [pid 6035] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6036] memfd_create("syzkaller", 0) = 3 [pid 6036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 100.767368][ T5837] bcachefs (loop3): shutdown complete [pid 6021] <... write resumed>) = 16777216 [pid 6021] munmap(0x7fb414200000, 138412032) = 0 [pid 6036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6021] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6021] ioctl(4, LOOP_SET_FD, 3 [pid 6023] <... write resumed>) = 16777216 [pid 6021] <... ioctl resumed>) = 0 [pid 6021] close(3) = 0 [pid 6023] munmap(0x7fb414200000, 138412032 [pid 6021] close(4 [pid 6023] <... munmap resumed>) = 0 [pid 6021] <... close resumed>) = 0 [pid 6021] mkdir("./file0", 0777) = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6021] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6023] <... openat resumed>) = 4 [ 101.007013][ T6021] loop1: detected capacity change from 0 to 32768 [pid 6023] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6023] close(3) = 0 [pid 6023] close(4) = 0 [pid 6023] mkdir("./file0", 0777) = 0 [ 101.069361][ T6023] loop2: detected capacity change from 0 to 32768 [pid 6023] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6034] <... write resumed>) = 16777216 [pid 6034] munmap(0x7fb414200000, 138412032) = 0 [pid 6034] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6034] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6036] <... write resumed>) = 16777216 [pid 6034] close(3) = 0 [pid 6034] close(4 [pid 6036] munmap(0x7fb414200000, 138412032 [pid 6034] <... close resumed>) = 0 [pid 6034] mkdir("./file0", 0777) = 0 [ 101.193259][ T6034] loop4: detected capacity change from 0 to 32768 [pid 6034] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6036] <... munmap resumed>) = 0 [pid 6036] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6036] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6036] close(3) = 0 [pid 6036] close(4) = 0 [pid 6036] mkdir("./file0", 0777) = 0 [ 101.283901][ T6036] loop0: detected capacity change from 0 to 32768 [ 101.485138][ T6021] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 101.485165][ T6021] allowing incompatible features above 0.0: (unknown version) [ 101.485178][ T6021] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 101.538186][ T6021] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 101.547101][ T6021] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 101.579361][ T6021] bcachefs (loop1): accounting_read... [ 101.587654][ T6023] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 101.587681][ T6023] allowing incompatible features above 0.0: (unknown version) [ 101.587694][ T6023] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 101.621276][ T6021] done [ 101.621294][ T6021] bcachefs (loop1): alloc_read... done [ 101.622431][ T6021] bcachefs (loop1): snapshots_read... done [ 101.632538][ T6021] bcachefs (loop1): journal_replay... done [ 101.636937][ T6021] bcachefs (loop1): resume_logged_ops... done [ 101.672601][ T6023] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 101.683836][ T6034] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 101.690504][ T6023] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 101.724763][ T6034] allowing incompatible features above 0.0: (unknown version) [ 101.728433][ T6021] bcachefs (loop1): delete_dead_inodes... done [ 101.755744][ T6034] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 101.773944][ T6021] bcachefs (loop1): done starting filesystem [pid 6036] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6021] <... mount resumed>) = 0 [pid 6021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6021] chdir("./file0") = 0 [pid 6021] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6021] ioctl(4, LOOP_CLR_FD) = 0 [pid 6021] close(4) = 0 [pid 6021] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6021] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6020] <... futex resumed>) = 0 [pid 6020] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] <... futex resumed>) = 0 [pid 6020] <... futex resumed>) = 1 [pid 6021] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [ 101.778098][ T6036] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 101.810645][ T6034] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 101.817022][ T6023] bcachefs (loop2): accounting_read... [ 101.823582][ T6021] bcachefs (loop1): going read-write [ 101.824940][ T6034] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [pid 6020] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 101.832304][ T6023] done [ 101.844820][ T6036] allowing incompatible features above 0.0: (unknown version) [ 101.853432][ T6036] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 101.875631][ T6023] bcachefs (loop2): alloc_read... done [ 101.904902][ T6023] bcachefs (loop2): snapshots_read... done [ 101.932023][ T6034] bcachefs (loop4): accounting_read... [ 101.933186][ T6023] bcachefs (loop2): journal_replay... [ 101.939766][ T6036] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 101.962065][ T6036] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 101.963070][ T6034] done [ 101.973211][ T6023] done [ 101.979755][ T6048] bcachefs (loop1): backpointer doesn't match extent it points to: [ 101.979772][ T6048] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 5837] <... umount2 resumed>) = 0 [pid 6021] <... mount resumed>) = 0 [ 101.979790][ T6048] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 101.979809][ T6048] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 101.979827][ T6034] bcachefs (loop4): alloc_read... [ 102.004115][ T6048] bcachefs (loop1): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 102.049994][ T6036] bcachefs (loop0): accounting_read... [pid 6021] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6021] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 102.055406][ T6023] bcachefs (loop2): resume_logged_ops... [ 102.055515][ T6036] done [ 102.062888][ T6048] scheduling recovery pass check_extents_to_backpointers (17) [ 102.069463][ T6036] bcachefs (loop0): alloc_read... [ 102.070479][ T6034] done [ 102.080015][ T6023] done [ 102.082852][ T6034] bcachefs (loop4): snapshots_read... [ 102.086316][ T6023] bcachefs (loop2): delete_dead_inodes... [ 102.089492][ T6034] done [ 102.095127][ T6036] done [pid 5837] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6020] exit_group(0 [pid 6021] <... futex resumed>) = ? [pid 6020] <... exit_group resumed>) = ? [pid 6021] +++ exited with 0 +++ [pid 5837] getdents64(4, [pid 6020] +++ exited with 0 +++ [pid 5837] <... getdents64 resumed>0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6020, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=40 /* 0.40 s */} --- [pid 5835] restart_syscall(<... resuming interrupted clone ...> [pid 5837] getdents64(4, [pid 5835] <... restart_syscall resumed>) = 0 [pid 5837] <... getdents64 resumed>0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5837] close(4) = 0 [pid 5837] rmdir("./2/file0") = 0 [pid 5837] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] unlink("./2/binderfs") = 0 [pid 5837] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5837] close(3) = 0 [pid 5837] rmdir("./2") = 0 [pid 6023] <... mount resumed>) = 0 [pid 5837] mkdir("./3", 0777) = 0 [pid 5835] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5837] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5837] close(3) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6050 attached [ 102.105027][ T6034] bcachefs (loop4): journal_replay... done [ 102.115255][ T6036] bcachefs (loop0): snapshots_read... [ 102.118025][ T6023] done [ 102.118699][ T6036] done [ 102.125012][ T6023] bcachefs (loop2): done starting filesystem [ 102.126583][ T6034] bcachefs (loop4): resume_logged_ops... done [ 102.142701][ T6034] bcachefs (loop4): delete_dead_inodes... done [ 102.146983][ T6036] bcachefs (loop0): journal_replay... done [pid 6023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6050] set_robust_list(0x5555756916a0, 24 [pid 6023] <... openat resumed>) = 3 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6050] <... set_robust_list resumed>) = 0 [pid 6050] chdir("./3") = 0 [pid 6050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6023] chdir("./file0" [pid 6050] <... prctl resumed>) = 0 [pid 6023] <... chdir resumed>) = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5837] <... clone resumed>, child_tidptr=0x555575691690) = 6050 [pid 6023] <... openat resumed>) = 4 [pid 6050] setpgid(0, 0 [pid 6023] ioctl(4, LOOP_CLR_FD [pid 5835] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6050] <... setpgid resumed>) = 0 [pid 6023] <... ioctl resumed>) = 0 [pid 5835] <... openat resumed>) = 3 [pid 6050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6023] close(4 [pid 5835] newfstatat(3, "", [pid 6050] <... openat resumed>) = 3 [pid 6023] <... close resumed>) = 0 [pid 6050] write(3, "1000", 4 [pid 6023] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6022] <... futex resumed>) = 0 [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6023] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6022] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] <... write resumed>) = 4 [pid 6022] <... futex resumed>) = 0 [pid 5835] getdents64(3, [pid 6022] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5835] <... getdents64 resumed>0x555575692730 /* 4 entries */, 32768) = 112 [pid 5835] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6050] close(3executing program ) = 0 [pid 6050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6050] write(1, "executing program\n", 18) = 18 [pid 6050] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6050] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6050] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6050] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[6051]}, 88) = 6051 [ 102.159545][ T6036] bcachefs (loop0): resume_logged_ops... done [ 102.168281][ T6036] bcachefs (loop0): delete_dead_inodes... [ 102.174403][ T6023] bcachefs (loop2): going read-write [ 102.196308][ T6036] done [ 102.197233][ T6034] bcachefs (loop4): done starting filesystem [pid 6050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6050] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6050] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6051 attached [pid 6051] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 6051] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6051] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6051] memfd_create("syzkaller", 0) = 3 [pid 6051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 6036] <... mount resumed>) = 0 [pid 6034] <... mount resumed>) = 0 [pid 6036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6022] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6036] <... openat resumed>) = 3 [pid 6034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6034] chdir("./file0") = 0 [pid 6034] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6034] ioctl(4, LOOP_CLR_FD) = 0 [pid 6034] close(4) = 0 [pid 6036] chdir("./file0") = 0 [pid 6034] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6034] <... futex resumed>) = 1 [pid 6034] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6036] <... openat resumed>) = 4 [ 102.209248][ T6036] bcachefs (loop0): done starting filesystem [ 102.220934][ T5835] bcachefs (loop1): shutting down [ 102.237182][ T5835] bcachefs (loop1): going read-only [ 102.246623][ T5835] bcachefs (loop1): finished waiting for writes to stop [pid 6029] <... futex resumed>) = 0 [pid 6036] ioctl(4, LOOP_CLR_FD) = 0 [pid 6029] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] close(4 [pid 6029] <... futex resumed>) = 1 [pid 6029] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] <... close resumed>) = 0 [pid 6034] <... futex resumed>) = 0 [pid 6034] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6036] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6036] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6035] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6035] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6029] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 102.268018][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 14 [ 102.278324][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 102.279750][ T6034] bcachefs (loop4): going read-write [ 102.297622][ T6036] bcachefs (loop0): going read-write [pid 6035] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6023] <... mount resumed>) = 0 [pid 6023] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6022] exit_group(0 [pid 6023] <... futex resumed>) = ? [pid 6022] <... exit_group resumed>) = ? [pid 6023] +++ exited with 0 +++ [pid 6022] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=44 /* 0.44 s */} --- [ 102.348546][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 15 [ 102.364201][ T5835] bcachefs (loop1): marking filesystem clean [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 102.393367][ T6066] bcachefs (loop2): backpointer doesn't match extent it points to: [ 102.393388][ T6066] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 5836] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] <... mount resumed>) = 0 [pid 6034] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6034] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] exit_group(0 [pid 6034] <... futex resumed>) = ? [pid 6029] <... exit_group resumed>) = ? [pid 6034] +++ exited with 0 +++ [pid 6029] +++ exited with 0 +++ [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=43 /* 0.43 s */} --- [pid 5838] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5838] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 102.393406][ T6066] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 102.393425][ T6066] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 5838] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6036] <... mount resumed>) = 0 [pid 6036] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] exit_group(0 [pid 6036] <... futex resumed>) = 0 [pid 6035] <... exit_group resumed>) = ? [pid 6036] +++ exited with 0 +++ [pid 6035] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6035, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 102.460639][ T5836] bcachefs (loop2): shutting down [ 102.460658][ T5836] bcachefs (loop2): going read-only [ 102.460685][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 102.524160][ T6073] bcachefs (loop4): backpointer doesn't match extent it points to: [ 102.524181][ T6073] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 102.524198][ T6073] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 102.524217][ T6073] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 102.526545][ T6073] bcachefs (loop4): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 102.526563][ T6073] scheduling recovery pass check_extents_to_backpointers (17) [ 102.546085][ T5835] bcachefs (loop1): shutdown complete [ 102.563635][ T5838] bcachefs (loop4): shutting down [ 102.563652][ T5838] bcachefs (loop4): going read-only [ 102.563677][ T5838] bcachefs (loop4): finished waiting for writes to stop [ 102.573287][ T6077] bcachefs (loop0): backpointer doesn't match extent it points to: [pid 6051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [ 102.573304][ T6077] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 6051] munmap(0x7fb414200000, 138412032) = 0 [pid 6051] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6051] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6051] close(3) = 0 [pid 6051] close(4) = 0 [pid 6051] mkdir("./file0", 0777) = 0 [ 102.573321][ T6077] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 102.573340][ T6077] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 102.578591][ T6077] bcachefs (loop0): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 102.578609][ T6077] scheduling recovery pass check_extents_to_backpointers (17) [ 102.588843][ T5838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 14 [ 102.594893][ T5838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 102.595767][ T5838] bcachefs (loop4): clean shutdown complete, journal seq 16 [ 102.596497][ T5838] bcachefs (loop4): marking filesystem clean [ 102.607264][ T5833] bcachefs (loop0): shutting down [ 102.607282][ T5833] bcachefs (loop0): going read-only [ 102.607310][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 102.617321][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 14 [ 102.619637][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 102.620333][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 16 [ 102.621041][ T5833] bcachefs (loop0): marking filesystem clean [ 102.699388][ T5833] bcachefs (loop0): shutdown complete [ 102.707797][ T5838] bcachefs (loop4): shutdown complete [ 102.989455][ T6051] loop3: detected capacity change from 0 to 32768 [ 103.129033][ T6051] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 103.129061][ T6051] allowing incompatible features above 0.0: (unknown version) [ 103.129074][ T6051] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 103.129105][ T6051] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 103.129237][ T6051] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [pid 6051] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5835] <... umount2 resumed>) = 0 [ 103.325917][ T6051] bcachefs (loop3): accounting_read... [ 103.337672][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 103.376820][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [pid 5835] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./3/file0") = 0 [pid 5835] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./3/binderfs") = 0 [pid 5835] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./3") = 0 [pid 5833] <... umount2 resumed>) = 0 [pid 5833] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] mkdir("./4", 0777 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... mkdir resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 103.398196][ T6051] done [ 103.405773][ T6051] bcachefs (loop3): alloc_read... [ 103.412347][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 14 [ 103.427628][ T6051] done [ 103.430439][ T6051] bcachefs (loop3): snapshots_read... done [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3 [pid 5838] <... umount2 resumed>) = 0 [pid 5835] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./3/file0", [pid 5838] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5838] newfstatat(AT_FDCWD, "./3/file0", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5838] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5838] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 4 [pid 5838] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] newfstatat(4, "", [pid 5838] <... openat resumed>) = 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] newfstatat(4, "", [pid 5833] getdents64(4, [pid 5838] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... getdents64 resumed>0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5838] getdents64(4, [pid 5833] getdents64(4, [pid 5838] <... getdents64 resumed>0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5833] <... getdents64 resumed>0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5838] getdents64(4, [pid 5833] <... close resumed>) = 0 ./strace-static-x86_64: Process 6080 attached [pid 5838] <... getdents64 resumed>0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5833] rmdir("./3/file0" [pid 5838] close(4 [pid 5835] <... clone resumed>, child_tidptr=0x555575691690) = 6080 [pid 5833] <... rmdir resumed>) = 0 [pid 5838] <... close resumed>) = 0 [pid 6080] set_robust_list(0x5555756916a0, 24) = 0 [pid 5838] rmdir("./3/file0" [ 103.464309][ T5836] bcachefs (loop2): marking filesystem clean [ 103.478639][ T6051] bcachefs (loop3): journal_replay... done [ 103.491369][ T6051] bcachefs (loop3): resume_logged_ops... done [pid 5833] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6080] chdir("./4" [pid 5838] <... rmdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6080] <... chdir resumed>) = 0 [pid 5838] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] newfstatat(AT_FDCWD, "./3/binderfs", [pid 6051] <... mount resumed>) = 0 [pid 6080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5838] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6080] <... prctl resumed>) = 0 [pid 6051] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5838] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5833] unlink("./3/binderfs" [pid 6080] setpgid(0, 0 [pid 6051] <... openat resumed>) = 3 [pid 5838] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6080] <... setpgid resumed>) = 0 [pid 5833] <... unlink resumed>) = 0 [pid 5838] unlink("./3/binderfs" [pid 6080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6051] chdir("./file0" [pid 5838] <... unlink resumed>) = 0 [pid 5833] getdents64(3, [pid 6080] <... openat resumed>) = 3 [pid 6051] <... chdir resumed>) = 0 [pid 5838] getdents64(3, [pid 5833] <... getdents64 resumed>0x555575692730 /* 0 entries */, 32768) = 0 [pid 6051] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5838] <... getdents64 resumed>0x555575692730 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 6051] <... openat resumed>) = 4 [pid 5838] close(3 [pid 6080] write(3, "1000", 4 [pid 5838] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 6080] <... write resumed>) = 4 [pid 5838] rmdir("./3" [pid 5833] rmdir("./3" [pid 6051] ioctl(4, LOOP_CLR_FD) = 0 [pid 5838] <... rmdir resumed>) = 0 [pid 6051] close(4 [pid 5833] <... rmdir resumed>) = 0 [pid 6051] <... close resumed>) = 0 [pid 5838] mkdir("./4", 0777 [pid 5833] mkdir("./4", 0777 [pid 6051] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6050] <... futex resumed>) = 0 [pid 6051] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... mkdir resumed>) = 0 [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] <... futex resumed>) = 0 [pid 5838] <... mkdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 103.508684][ T6051] bcachefs (loop3): delete_dead_inodes... done [ 103.511919][ T5836] bcachefs (loop2): shutdown complete [ 103.520499][ T6051] bcachefs (loop3): done starting filesystem [pid 6051] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6050] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... openat resumed>) = 3 [pid 6080] close(3 [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 6080] <... close resumed>) = 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] close(3 [pid 6080] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... close resumed>) = 0 [pid 6080] <... symlink resumed>) = 0 [pid 5838] <... openat resumed>) = 3 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6086 attached [pid 6086] set_robust_list(0x5555756916a0, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555575691690) = 6086 executing program [pid 5838] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5838] close(3) = 0 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6080] write(1, "executing program\n", 18) = 18 [pid 6080] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6080] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6080] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6080] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6080] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[6088]}, 88) = 6088 [pid 6080] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6087 attached NULL, 8) = 0 [ 103.562944][ T6051] bcachefs (loop3): going read-write [pid 6080] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... clone resumed>, child_tidptr=0x555575691690) = 6087 [pid 6086] <... set_robust_list resumed>) = 0 [pid 6080] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6088 attached [pid 6086] chdir("./4" [pid 6088] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6087] set_robust_list(0x5555756916a0, 24 [pid 6088] <... rseq resumed>) = 0 [pid 6087] <... set_robust_list resumed>) = 0 [pid 6088] set_robust_list(0x7fb41c6d39a0, 24 [pid 6087] chdir("./4" [pid 6080] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6088] <... set_robust_list resumed>) = 0 [pid 6087] <... chdir resumed>) = 0 [pid 6088] rt_sigprocmask(SIG_SETMASK, [], [pid 6087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6087] <... prctl resumed>) = 0 [pid 6050] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6088] memfd_create("syzkaller", 0 [pid 6087] setpgid(0, 0 [pid 6088] <... memfd_create resumed>) = 3 [pid 6087] <... setpgid resumed>) = 0 [pid 6088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6088] <... mmap resumed>) = 0x7fb414200000 [pid 6087] <... openat resumed>) = 3 [pid 6087] write(3, "1000", 4 [pid 6086] <... chdir resumed>) = 0 [pid 6087] <... write resumed>) = 4 executing program [pid 6086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6087] close(3) = 0 [pid 6087] symlink("/dev/binderfs", "./binderfs" [pid 6086] <... prctl resumed>) = 0 [pid 6087] <... symlink resumed>) = 0 [pid 6086] setpgid(0, 0 [pid 6087] write(1, "executing program\n", 18) = 18 [pid 6087] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6086] <... setpgid resumed>) = 0 [pid 6087] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, [pid 6086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6087] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6086] <... openat resumed>) = 3 [pid 6087] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6086] write(3, "1000", 4) = 4 [pid 6086] close(3) = 0 [pid 6086] symlink("/dev/binderfs", "./binderfs" [pid 6087] <... mmap resumed>) = 0x7fb41c6b3000 [pid 6086] <... symlink resumed>) = 0 [pid 6087] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6089 attached [pid 6089] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6087] <... clone3 resumed> => {parent_tid=[6089]}, 88) = 6089 [pid 6089] <... rseq resumed>) = 0 [pid 6087] rt_sigprocmask(SIG_SETMASK, [], [pid 6089] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6089] rt_sigprocmask(SIG_SETMASK, [], [pid 6087] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6087] <... futex resumed>) = 0 executing program [pid 6086] write(1, "executing program\n", 18 [pid 6087] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6086] <... write resumed>) = 18 [pid 6089] memfd_create("syzkaller", 0 [pid 6086] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6089] <... memfd_create resumed>) = 3 [pid 6086] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6086] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6086] <... mmap resumed>) = 0x7fb41c6b3000 [pid 6089] <... mmap resumed>) = 0x7fb414200000 [pid 6086] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6086] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6093 attached => {parent_tid=[6093]}, 88) = 6093 [pid 6093] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6086] rt_sigprocmask(SIG_SETMASK, [], [pid 6051] <... mount resumed>) = 0 [pid 6093] <... rseq resumed>) = 0 [pid 6093] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6093] rt_sigprocmask(SIG_SETMASK, [], [pid 6086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6093] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6086] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] memfd_create("syzkaller", 0 [pid 6086] <... futex resumed>) = 0 [pid 6086] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6051] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... memfd_create resumed>) = 3 [pid 6051] <... futex resumed>) = 0 [pid 6093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6051] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6093] <... mmap resumed>) = 0x7fb414200000 [pid 6050] exit_group(0 [pid 6051] <... futex resumed>) = ? [pid 6050] <... exit_group resumed>) = ? [pid 6051] +++ exited with 0 +++ [pid 6050] +++ exited with 0 +++ [ 103.695878][ T6092] bcachefs (loop3): backpointer doesn't match extent it points to: [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6050, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=37 /* 0.37 s */} --- [ 103.695899][ T6092] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 5837] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5837] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5837] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 103.695917][ T6092] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 103.695936][ T6092] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 103.816803][ T5837] bcachefs (loop3): shutting down [ 103.816823][ T5837] bcachefs (loop3): going read-only [ 103.816869][ T5837] bcachefs (loop3): finished waiting for writes to stop [ 103.982321][ T5837] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 104.006296][ T5837] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5836] <... umount2 resumed>) = 0 [pid 5836] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 104.040003][ T5837] bcachefs (loop3): clean shutdown complete, journal seq 14 [ 104.079732][ T5837] bcachefs (loop3): marking filesystem clean [pid 6093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5836] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./3/file0") = 0 [pid 5836] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./3/binderfs") = 0 [pid 5836] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [ 104.148753][ T5837] bcachefs (loop3): shutdown complete [pid 5836] close(3) = 0 [pid 5836] rmdir("./3") = 0 [pid 5836] mkdir("./4", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5836] close(3 [pid 6089] <... write resumed>) = 16777216 [pid 5836] <... close resumed>) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6095 attached [pid 6089] munmap(0x7fb414200000, 138412032 [pid 6095] set_robust_list(0x5555756916a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x555575691690) = 6095 [pid 6095] <... set_robust_list resumed>) = 0 [pid 6095] chdir("./4" [pid 6089] <... munmap resumed>) = 0 [pid 6095] <... chdir resumed>) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6089] <... openat resumed>) = 4 [pid 6095] setpgid(0, 0 [pid 6089] ioctl(4, LOOP_SET_FD, 3 [pid 6095] <... setpgid resumed>) = 0 [pid 6089] <... ioctl resumed>) = 0 [pid 6095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6089] close(3 [pid 6095] write(3, "1000", 4 [pid 6089] <... close resumed>) = 0 [pid 6095] <... write resumed>) = 4 [pid 6089] close(4 [pid 6095] close(3 [pid 6089] <... close resumed>) = 0 [pid 6095] <... close resumed>) = 0 [pid 6089] mkdir("./file0", 0777 [pid 6095] symlink("/dev/binderfs", "./binderfs" [pid 6089] <... mkdir resumed>) = 0 executing program [pid 6095] <... symlink resumed>) = 0 [pid 6095] write(1, "executing program\n", 18 [pid 6089] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6095] <... write resumed>) = 18 [pid 6095] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6095] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6095] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6095] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6095] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 104.336820][ T6089] loop4: detected capacity change from 0 to 32768 [pid 6095] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6097 attached [pid 6097] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 6095] <... clone3 resumed> => {parent_tid=[6097]}, 88) = 6097 [pid 6097] set_robust_list(0x7fb41c6d39a0, 24 [pid 6095] rt_sigprocmask(SIG_SETMASK, [], [pid 6097] <... set_robust_list resumed>) = 0 [pid 6097] rt_sigprocmask(SIG_SETMASK, [], [pid 6095] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6097] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6097] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6095] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] memfd_create("syzkaller", 0 [pid 6095] <... futex resumed>) = 0 [pid 6097] <... memfd_create resumed>) = 3 [pid 6095] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 6093] <... write resumed>) = 16777216 [pid 6093] munmap(0x7fb414200000, 138412032) = 0 [pid 6088] <... write resumed>) = 16777216 [pid 6093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6088] munmap(0x7fb414200000, 138412032 [pid 6093] ioctl(4, LOOP_SET_FD, 3 [pid 6088] <... munmap resumed>) = 0 [pid 6093] <... ioctl resumed>) = 0 [pid 6093] close(3) = 0 [pid 6093] close(4) = 0 [pid 6093] mkdir("./file0", 0777) = 0 [pid 6093] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6088] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6088] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6088] close(3) = 0 [pid 6088] close(4) = 0 [pid 6088] mkdir("./file0", 0777) = 0 [ 104.476225][ T6093] loop0: detected capacity change from 0 to 32768 [ 104.513544][ T6088] loop1: detected capacity change from 0 to 32768 [pid 6088] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [ 104.710050][ T6093] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 104.710078][ T6093] allowing incompatible features above 0.0: (unknown version) [ 104.710091][ T6093] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 104.756437][ T6093] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 104.778240][ T6093] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [pid 6097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6097] munmap(0x7fb414200000, 138412032) = 0 [pid 6097] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6097] ioctl(4, LOOP_SET_FD, 3) = 0 [ 104.819105][ T6093] bcachefs (loop0): accounting_read... done [ 104.826816][ T6093] bcachefs (loop0): alloc_read... done [ 104.839232][ T6097] loop2: detected capacity change from 0 to 32768 [ 104.844830][ T6093] bcachefs (loop0): snapshots_read... done [ 104.858772][ T6093] bcachefs (loop0): journal_replay... done [pid 6097] close(3) = 0 [pid 6097] close(4) = 0 [pid 6097] mkdir("./file0", 0777) = 0 [pid 6097] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6093] <... mount resumed>) = 0 [pid 6093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6093] chdir("./file0") = 0 [pid 6093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6093] ioctl(4, LOOP_CLR_FD) = 0 [ 104.870610][ T6093] bcachefs (loop0): resume_logged_ops... done [ 104.879729][ T6093] bcachefs (loop0): delete_dead_inodes... done [ 104.891365][ T6093] bcachefs (loop0): done starting filesystem [pid 6093] close(4) = 0 [pid 6093] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6093] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6086] <... futex resumed>) = 0 [pid 6086] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6086] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6093] <... futex resumed>) = 0 [ 104.933681][ T6088] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 6093] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6086] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 104.933709][ T6088] allowing incompatible features above 0.0: (unknown version) [ 104.933722][ T6088] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 104.955726][ T6093] bcachefs (loop0): going read-write [ 104.996653][ T6089] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 105.014854][ T6088] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 105.049085][ T6089] allowing incompatible features above 0.0: (unknown version) [ 105.064970][ T6088] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 105.115123][ T6089] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [pid 6093] <... mount resumed>) = 0 [pid 6093] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6086] exit_group(0 [pid 6093] <... futex resumed>) = ? [pid 6086] <... exit_group resumed>) = ? [pid 6093] +++ exited with 0 +++ [pid 6086] +++ exited with 0 +++ [ 105.156036][ T6089] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 105.164445][ T6089] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 105.168074][ T6088] bcachefs (loop1): accounting_read... [ 105.175160][ T6097] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6086, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6088] <... mount resumed>) = 0 [pid 6088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6088] chdir("./file0") = 0 [pid 6088] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6088] ioctl(4, LOOP_CLR_FD) = 0 [pid 6088] close(4) = 0 [pid 6088] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] <... futex resumed>) = 0 [pid 6080] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 105.175182][ T6097] allowing incompatible features above 0.0: (unknown version) [ 105.175192][ T6097] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 105.201212][ T6108] bcachefs (loop0): backpointer doesn't match extent it points to: [ 105.201230][ T6108] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 105.201245][ T6108] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 105.201261][ T6108] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 6088] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 105.202654][ T6088] done [ 105.202668][ T6088] bcachefs (loop1): alloc_read... done [ 105.205061][ T6088] bcachefs (loop1): snapshots_read... done [ 105.220579][ T6108] bcachefs (loop0): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 105.220599][ T6108] scheduling recovery pass check_extents_to_backpointers (17) [ 105.235916][ T6088] bcachefs (loop1): journal_replay... done [ 105.237794][ T6088] bcachefs (loop1): resume_logged_ops... done [ 105.238670][ T6088] bcachefs (loop1): delete_dead_inodes... done [ 105.257005][ T5833] bcachefs (loop0): shutting down [ 105.257024][ T5833] bcachefs (loop0): going read-only [ 105.257053][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 105.258555][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 14 [ 105.261486][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 105.262413][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 16 [ 105.263106][ T5833] bcachefs (loop0): marking filesystem clean [pid 5837] <... umount2 resumed>) = 0 [pid 5837] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 105.268410][ T6088] bcachefs (loop1): done starting filesystem [ 105.320628][ T6088] bcachefs (loop1): going read-write [ 105.333700][ T6089] bcachefs (loop4): accounting_read... [ 105.337147][ T6097] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 105.496683][ T6097] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 105.503102][ T5833] bcachefs (loop0): shutdown complete [ 105.517745][ T6089] done [pid 5837] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5837] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5837] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5837] close(4) = 0 [pid 5837] rmdir("./3/file0") = 0 [pid 5837] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] unlink("./3/binderfs") = 0 [pid 5837] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5837] close(3) = 0 [pid 5837] rmdir("./3") = 0 [pid 5837] mkdir("./4", 0777) = 0 [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5837] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5837] close(3) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575691690) = 6115 ./strace-static-x86_64: Process 6115 attached [pid 6115] set_robust_list(0x5555756916a0, 24) = 0 [pid 6115] chdir("./4") = 0 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6115] setpgid(0, 0) = 0 [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6115] write(3, "1000", 4) = 4 executing program [pid 6115] close(3) = 0 [pid 6115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6115] write(1, "executing program\n", 18) = 18 [pid 6115] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [ 105.520558][ T6089] bcachefs (loop4): alloc_read... done [ 105.530804][ T6089] bcachefs (loop4): snapshots_read... done [pid 6115] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6115] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] <... mount resumed>) = 0 [pid 6115] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6088] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6115] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} [pid 6088] <... futex resumed>) = 0 [pid 6080] exit_group(0) = ? ./strace-static-x86_64: Process 6120 attached [pid 6120] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6115] <... clone3 resumed> => {parent_tid=[6120]}, 88) = 6120 [pid 6120] <... rseq resumed>) = 0 [pid 6120] set_robust_list(0x7fb41c6d39a0, 24 [pid 6115] rt_sigprocmask(SIG_SETMASK, [], [pid 6088] +++ exited with 0 +++ [pid 6080] +++ exited with 0 +++ [pid 6120] <... set_robust_list resumed>) = 0 [pid 6115] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6120] rt_sigprocmask(SIG_SETMASK, [], [pid 6115] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6080, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 6120] memfd_create("syzkaller", 0 [pid 6115] <... futex resumed>) = 0 [pid 5835] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6120] <... memfd_create resumed>) = 3 [pid 5835] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6115] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5835] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5835] <... openat resumed>) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 105.612354][ T6118] bcachefs (loop1): backpointer doesn't match extent it points to: [pid 5835] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] <... mount resumed>) = 0 [pid 6097] <... mount resumed>) = 0 [pid 6089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6089] chdir("./file0") = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6089] ioctl(4, LOOP_CLR_FD [pid 6097] <... openat resumed>) = 3 [pid 6089] <... ioctl resumed>) = 0 [pid 6097] chdir("./file0" [pid 6089] close(4 [pid 6097] <... chdir resumed>) = 0 [pid 6089] <... close resumed>) = 0 [pid 6089] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6087] <... futex resumed>) = 0 [pid 6089] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6087] <... futex resumed>) = 0 [pid 6097] <... openat resumed>) = 4 [pid 6089] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6087] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6097] ioctl(4, LOOP_CLR_FD) = 0 [pid 6097] close(4) = 0 [pid 6097] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 105.612375][ T6118] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 6097] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6095] <... futex resumed>) = 0 [pid 6095] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6097] <... futex resumed>) = 0 [pid 6095] <... futex resumed>) = 1 [ 105.612391][ T6118] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 105.612407][ T6118] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 105.631818][ T6097] bcachefs (loop2): accounting_read... [ 105.634393][ T6089] bcachefs (loop4): journal_replay... [ 105.635751][ T6097] done [ 105.635766][ T6097] bcachefs (loop2): alloc_read... done [ 105.636747][ T6097] bcachefs (loop2): snapshots_read... [ 105.637611][ T6089] done [ 105.642123][ T6089] bcachefs (loop4): resume_logged_ops... done [ 105.642981][ T6089] bcachefs (loop4): delete_dead_inodes... [ 105.643606][ T6097] done [ 105.652368][ T6089] done [ 105.654038][ T6089] bcachefs (loop4): done starting filesystem [ 105.661230][ T6097] bcachefs (loop2): journal_replay... done [ 105.667864][ T6097] bcachefs (loop2): resume_logged_ops... done [pid 6097] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6095] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 105.668644][ T6097] bcachefs (loop2): delete_dead_inodes... [ 105.669695][ T5835] bcachefs (loop1): shutting down [ 105.669711][ T5835] bcachefs (loop1): going read-only [ 105.669737][ T5835] bcachefs (loop1): finished waiting for writes to stop [ 105.670274][ T6097] done [ 105.671645][ T6097] bcachefs (loop2): done starting filesystem [ 105.706667][ T6089] bcachefs (loop4): going read-write [ 105.738510][ T6097] bcachefs (loop2): going read-write [ 105.744567][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 105.925933][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [pid 6120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6095] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6089] <... mount resumed>) = 0 [pid 6089] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6089] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] exit_group(0 [pid 6089] <... futex resumed>) = ? [pid 6087] <... exit_group resumed>) = ? [pid 6089] +++ exited with 0 +++ [pid 6087] +++ exited with 0 +++ [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6087, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=41 /* 0.41 s */} --- [pid 5838] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5838] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5838] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 105.967844][ T6133] bcachefs (loop4): backpointer doesn't match extent it points to: [pid 5838] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6097] <... mount resumed>) = 0 [pid 6097] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6095] exit_group(0) = ? [ 105.967867][ T6133] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 6097] +++ exited with 0 +++ [pid 6095] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6095, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=56 /* 0.56 s */} --- [pid 5836] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 105.967885][ T6133] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 105.967906][ T6133] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 105.997974][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 14 [ 105.998655][ T5835] bcachefs (loop1): marking filesystem clean [ 106.015070][ T5838] bcachefs (loop4): shutting down [ 106.015087][ T5838] bcachefs (loop4): going read-only [ 106.015111][ T5838] bcachefs (loop4): finished waiting for writes to stop [ 106.084033][ T6137] bcachefs (loop2): backpointer doesn't match extent it points to: [ 106.084054][ T6137] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 5836] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = 0 [ 106.084072][ T6137] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5833] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./4/file0") = 0 [pid 5833] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 106.084091][ T6137] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 5833] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./4/binderfs") = 0 [pid 5833] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [ 106.087322][ T5835] bcachefs (loop1): shutdown complete [ 106.108472][ T6137] bcachefs (loop2): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 106.108494][ T6137] scheduling recovery pass check_extents_to_backpointers (17) [pid 5833] rmdir("./4") = 0 [pid 5833] mkdir("./5", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [ 106.153263][ T5836] bcachefs (loop2): shutting down [pid 6120] <... write resumed>) = 16777216 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6139 attached [pid 6139] set_robust_list(0x5555756916a0, 24 [pid 6120] munmap(0x7fb414200000, 138412032 [pid 5833] <... clone resumed>, child_tidptr=0x555575691690) = 6139 [pid 6139] <... set_robust_list resumed>) = 0 [ 106.153283][ T5836] bcachefs (loop2): going read-only [pid 6139] chdir("./5") = 0 [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6139] setpgid(0, 0) = 0 [pid 6120] <... munmap resumed>) = 0 [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6120] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6139] <... openat resumed>) = 3 [pid 6120] <... openat resumed>) = 4 [pid 6139] write(3, "1000", 4) = 4 [pid 6139] close(3 [pid 6120] ioctl(4, LOOP_SET_FD, 3 [pid 6139] <... close resumed>) = 0 [pid 6139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6139] write(1, "executing program\n", 18executing program ) = 18 [pid 6120] <... ioctl resumed>) = 0 [pid 6139] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] close(3 [pid 6139] <... futex resumed>) = 0 [pid 6120] <... close resumed>) = 0 [pid 6120] close(4) = 0 [pid 6139] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, [pid 6120] mkdir("./file0", 0777 [pid 6139] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6139] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6120] <... mkdir resumed>) = 0 [pid 6139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6120] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [ 106.153311][ T5836] bcachefs (loop2): finished waiting for writes to stop [pid 6139] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6139] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6139] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6140 attached => {parent_tid=[6140]}, 88) = 6140 [pid 6140] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6139] rt_sigprocmask(SIG_SETMASK, [], [pid 6140] <... rseq resumed>) = 0 [pid 6139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6140] set_robust_list(0x7fb41c6d39a0, 24 [pid 6139] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... set_robust_list resumed>) = 0 [pid 6139] <... futex resumed>) = 0 [pid 6140] rt_sigprocmask(SIG_SETMASK, [], [pid 6139] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6140] memfd_create("syzkaller", 0) = 3 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 106.162237][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 14 [ 106.165471][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 106.177881][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 16 [ 106.178573][ T5836] bcachefs (loop2): marking filesystem clean [ 106.245079][ T5836] bcachefs (loop2): shutdown complete [ 106.494960][ T6120] loop3: detected capacity change from 0 to 32768 [pid 6140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5835] <... umount2 resumed>) = 0 [ 106.601247][ T6120] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 5835] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 106.601273][ T6120] allowing incompatible features above 0.0: (unknown version) [ 106.601284][ T6120] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 106.601310][ T6120] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 106.601424][ T6120] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 106.768564][ T6120] bcachefs (loop3): accounting_read... done [pid 5835] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [ 106.841571][ T6120] bcachefs (loop3): alloc_read... done [ 106.842521][ T6120] bcachefs (loop3): snapshots_read... done [ 106.849229][ T6120] bcachefs (loop3): journal_replay... [ 106.885576][ T5838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [pid 5835] rmdir("./4/file0") = 0 [pid 5835] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] <... umount2 resumed>) = 0 [pid 5835] unlink("./4/binderfs") = 0 [pid 5835] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./4" [pid 5836] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... rmdir resumed>) = 0 [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./4/file0", [pid 5835] mkdir("./5", 0777) = 0 [pid 5836] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5836] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 106.933181][ T5838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 106.935846][ T6120] done [ 106.957937][ T5838] bcachefs (loop4): clean shutdown complete, journal seq 14 [ 106.960262][ T6120] bcachefs (loop3): resume_logged_ops... [ 106.970275][ T5838] bcachefs (loop4): marking filesystem clean [pid 5835] ioctl(3, LOOP_CLR_FD [pid 5836] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5836] <... openat resumed>) = 4 [pid 5835] close(3 [pid 5836] newfstatat(4, "", [pid 5835] <... close resumed>) = 0 [pid 5836] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5836] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6142 attached [pid 5836] getdents64(4, [pid 5835] <... clone resumed>, child_tidptr=0x555575691690) = 6142 [pid 5836] <... getdents64 resumed>0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5836] close(4 [pid 6142] set_robust_list(0x5555756916a0, 24 [pid 6140] <... write resumed>) = 16777216 [pid 5836] <... close resumed>) = 0 [pid 6142] <... set_robust_list resumed>) = 0 [pid 6142] chdir("./5") = 0 [pid 6142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6142] setpgid(0, 0) = 0 [pid 6142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6142] write(3, "1000", 4 [pid 5836] rmdir("./4/file0" [pid 6142] <... write resumed>) = 4 [pid 5836] <... rmdir resumed>) = 0 [pid 6142] close(3 [pid 6140] munmap(0x7fb414200000, 138412032 [pid 5836] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6142] <... close resumed>) = 0 [pid 6142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5836] unlink("./4/binderfs" [pid 6142] write(1, "executing program\n", 18) = 18 [pid 6142] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] <... unlink resumed>) = 0 [pid 6142] <... futex resumed>) = 0 [pid 6142] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6140] <... munmap resumed>) = 0 [pid 5836] getdents64(3, [pid 6142] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6142] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6142] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5836] <... getdents64 resumed>0x555575692730 /* 0 entries */, 32768) = 0 [pid 6142] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[6143]}, 88) = 6143 ./strace-static-x86_64: Process 6143 attached [pid 6142] rt_sigprocmask(SIG_SETMASK, [], [pid 6140] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 106.980549][ T6120] done [ 106.985396][ T6120] bcachefs (loop3): delete_dead_inodes... done [ 107.014108][ T6120] bcachefs (loop3): done starting filesystem [pid 5836] close(3 [pid 6140] <... openat resumed>) = 4 [pid 5836] <... close resumed>) = 0 [pid 5836] rmdir("./4" [pid 6140] ioctl(4, LOOP_SET_FD, 3 [pid 6142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6142] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6143] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 5836] <... rmdir resumed>) = 0 [pid 6143] <... rseq resumed>) = 0 [pid 6143] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6143] rt_sigprocmask(SIG_SETMASK, [], [pid 5836] mkdir("./5", 0777 [pid 6143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6143] memfd_create("syzkaller", 0 [pid 5836] <... mkdir resumed>) = 0 [pid 6143] <... memfd_create resumed>) = 3 [pid 6143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 6120] <... mount resumed>) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5836] <... openat resumed>) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD [pid 6120] <... openat resumed>) = 3 [pid 5836] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575691690) = 6144 ./strace-static-x86_64: Process 6144 attached [pid 6140] <... ioctl resumed>) = 0 [pid 6120] chdir("./file0") = 0 [pid 6140] close(3 [pid 6120] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6140] <... close resumed>) = 0 [pid 6120] <... openat resumed>) = 4 [pid 6144] set_robust_list(0x5555756916a0, 24 [pid 6140] close(4 [pid 6120] ioctl(4, LOOP_CLR_FD [pid 6144] <... set_robust_list resumed>) = 0 [pid 6144] chdir("./5" [pid 6120] <... ioctl resumed>) = 0 [pid 6144] <... chdir resumed>) = 0 [pid 6144] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6120] close(4 [pid 6144] <... prctl resumed>) = 0 [pid 6144] setpgid(0, 0) = 0 executing program [pid 6144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6120] <... close resumed>) = 0 [pid 6144] <... openat resumed>) = 3 [pid 6120] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... close resumed>) = 0 [pid 6144] write(3, "1000", 4) = 4 [pid 6144] close(3) = 0 [pid 6144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6144] write(1, "executing program\n", 18) = 18 [pid 6144] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6144] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6144] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6144] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6140] mkdir("./file0", 0777 [pid 6120] <... futex resumed>) = 1 [pid 6115] <... futex resumed>) = 0 [pid 6140] <... mkdir resumed>) = 0 [ 107.038659][ T6140] loop0: detected capacity change from 0 to 32768 [ 107.078454][ T5838] bcachefs (loop4): shutdown complete [pid 6120] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6115] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6115] <... futex resumed>) = 0 [pid 6144] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6144] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6145 attached [pid 6115] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] <... clone3 resumed> => {parent_tid=[6145]}, 88) = 6145 [pid 6145] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6144] rt_sigprocmask(SIG_SETMASK, [], [pid 6145] <... rseq resumed>) = 0 [pid 6144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6144] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] set_robust_list(0x7fb41c6d39a0, 24 [pid 6144] <... futex resumed>) = 0 [pid 6144] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6145] <... set_robust_list resumed>) = 0 [pid 6145] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6140] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6145] memfd_create("syzkaller", 0) = 3 [pid 6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 107.101816][ T6120] bcachefs (loop3): going read-write [pid 6115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6120] <... mount resumed>) = 0 [pid 6120] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6120] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] exit_group(0 [pid 6120] <... futex resumed>) = ? [pid 6115] <... exit_group resumed>) = ? [pid 6120] +++ exited with 0 +++ [pid 6115] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6115, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=35 /* 0.35 s */} --- [pid 5837] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5837] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5837] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 107.216255][ T6154] bcachefs (loop3): backpointer doesn't match extent it points to: [pid 5837] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 107.216276][ T6154] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 107.216293][ T6154] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 107.216313][ T6154] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 107.265601][ T5837] bcachefs (loop3): shutting down [ 107.265622][ T5837] bcachefs (loop3): going read-only [ 107.265650][ T5837] bcachefs (loop3): finished waiting for writes to stop [ 107.296591][ T6140] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 6143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 107.296618][ T6140] allowing incompatible features above 0.0: (unknown version) [ 107.296632][ T6140] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [pid 6145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6143] <... write resumed>) = 16777216 [ 107.296662][ T6140] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 107.296785][ T6140] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [pid 6143] munmap(0x7fb414200000, 138412032) = 0 [pid 6143] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6143] close(3) = 0 [pid 6143] close(4) = 0 [pid 6143] mkdir("./file0", 0777) = 0 [pid 6143] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6140] <... mount resumed>) = 0 [pid 6140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 107.486660][ T6140] bcachefs (loop0): accounting_read... done [ 107.545039][ T6140] bcachefs (loop0): alloc_read... done [pid 6140] chdir("./file0") = 0 [pid 6140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6140] ioctl(4, LOOP_CLR_FD) = 0 [pid 6140] close(4) = 0 [ 107.569229][ T6140] bcachefs (loop0): snapshots_read... done [pid 6140] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6140] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] <... futex resumed>) = 0 [pid 6139] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 1 [pid 6140] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [ 107.675806][ T6140] bcachefs (loop0): journal_replay... done [ 107.768211][ T6140] bcachefs (loop0): resume_logged_ops... [ 107.771968][ T6143] loop1: detected capacity change from 0 to 32768 [ 107.778827][ T6140] done [pid 6139] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 107.778845][ T6140] bcachefs (loop0): delete_dead_inodes... done [ 107.793653][ T6140] bcachefs (loop0): done starting filesystem [ 107.842495][ T6143] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 107.842524][ T6143] allowing incompatible features above 0.0: (unknown version) [pid 6143] <... mount resumed>) = 0 [pid 6143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6143] chdir("./file0") = 0 [pid 6143] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6143] ioctl(4, LOOP_CLR_FD) = 0 [pid 6143] close(4) = 0 [pid 6143] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6143] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6142] <... futex resumed>) = 0 [pid 6142] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = 1 [pid 6143] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [ 107.842537][ T6143] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 107.842568][ T6143] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 107.842704][ T6143] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 107.857979][ T6140] bcachefs (loop0): going read-write [ 107.883985][ T6143] bcachefs (loop1): accounting_read... done [ 107.938117][ T6143] bcachefs (loop1): alloc_read... done [pid 6142] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 107.939038][ T6143] bcachefs (loop1): snapshots_read... done [ 107.953461][ T6143] bcachefs (loop1): journal_replay... done [ 107.955305][ T6143] bcachefs (loop1): resume_logged_ops... done [ 107.956408][ T6143] bcachefs (loop1): delete_dead_inodes... done [ 107.958777][ T6143] bcachefs (loop1): done starting filesystem [ 107.992219][ T6143] bcachefs (loop1): going read-write [ 107.996904][ T5837] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [pid 6140] <... mount resumed>) = 0 [pid 6140] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] exit_group(0 [pid 6140] <... futex resumed>) = ? [pid 6139] <... exit_group resumed>) = ? [pid 6140] +++ exited with 0 +++ [pid 6139] +++ exited with 0 +++ [pid 5838] <... umount2 resumed>) = 0 [pid 5838] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=31 /* 0.31 s */} --- [pid 5838] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 108.057362][ T5837] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 108.082276][ T6165] bcachefs (loop0): backpointer doesn't match extent it points to: [pid 5833] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 108.082297][ T6165] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 108.082315][ T6165] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 108.082335][ T6165] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 5838] newfstatat(AT_FDCWD, "./4/file0", [pid 5833] newfstatat(3, "", [pid 5838] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, [pid 5838] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555575692730 /* 4 entries */, 32768) = 112 [pid 5838] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5838] <... openat resumed>) = 4 [pid 5838] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5838] getdents64(4, [pid 6143] <... mount resumed>) = 0 [pid 6143] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.124922][ T5837] bcachefs (loop3): clean shutdown complete, journal seq 14 [ 108.178381][ T5833] bcachefs (loop0): shutting down [ 108.183465][ T5833] bcachefs (loop0): going read-only [pid 6143] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6142] exit_group(0 [pid 5838] <... getdents64 resumed>0x55557569a770 /* 0 entries */, 32768) = 0 [ 108.210248][ T6173] bcachefs (loop1): backpointer doesn't match extent it points to: [ 108.210267][ T6173] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 108.210284][ T6173] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 6143] <... futex resumed>) = ? [pid 6142] <... exit_group resumed>) = ? [pid 5838] close(4 [pid 6143] +++ exited with 0 +++ [pid 6142] +++ exited with 0 +++ [pid 5838] <... close resumed>) = 0 [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6142, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=35 /* 0.35 s */} --- [pid 5835] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", [pid 5838] rmdir("./4/file0" [pid 5835] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 108.210302][ T6173] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 108.214978][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 108.243978][ T6173] bcachefs (loop1): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 108.253779][ T5837] bcachefs (loop3): marking filesystem clean [ 108.298545][ T6173] scheduling recovery pass check_extents_to_backpointers (17) [pid 5835] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5838] <... rmdir resumed>) = 0 [pid 5838] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] unlink("./4/binderfs") = 0 [pid 5838] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5838] close(3) = 0 [ 108.310118][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 108.326454][ T5835] bcachefs (loop1): shutting down [ 108.331532][ T5835] bcachefs (loop1): going read-only [ 108.345942][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [pid 5838] rmdir("./4" [pid 6145] <... write resumed>) = 16777216 [pid 5838] <... rmdir resumed>) = 0 [pid 6145] munmap(0x7fb414200000, 138412032 [pid 5838] mkdir("./5", 0777) = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5838] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5838] close(3) = 0 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6175 attached , child_tidptr=0x555575691690) = 6175 [ 108.357531][ T5835] bcachefs (loop1): finished waiting for writes to stop [pid 6175] set_robust_list(0x5555756916a0, 24) = 0 [pid 6175] chdir("./5") = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6175] setpgid(0, 0) = 0 [pid 6145] <... munmap resumed>) = 0 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 108.383272][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 14 [ 108.393228][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 14 [ 108.408267][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 108.413201][ T5837] bcachefs (loop3): shutdown complete [ 108.420090][ T5833] bcachefs (loop0): marking filesystem clean [pid 6175] write(3, "1000", 4 [pid 6145] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6175] <... write resumed>) = 4 [pid 6145] <... openat resumed>) = 4 [pid 6175] close(3 [pid 6145] ioctl(4, LOOP_SET_FD, 3 [pid 6175] <... close resumed>) = 0 [pid 6175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6175] write(1, "executing program\n", 18executing program ) = 18 [pid 6175] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6175] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6175] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6145] <... ioctl resumed>) = 0 [pid 6175] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6145] close(3 [pid 6175] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6145] <... close resumed>) = 0 [pid 6175] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} [pid 6145] close(4) = 0 ./strace-static-x86_64: Process 6176 attached [pid 6175] <... clone3 resumed> => {parent_tid=[6176]}, 88) = 6176 [pid 6145] mkdir("./file0", 0777 [pid 6175] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6145] <... mkdir resumed>) = 0 [pid 6176] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6175] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6176] <... rseq resumed>) = 0 [pid 6175] <... futex resumed>) = 0 [pid 6176] set_robust_list(0x7fb41c6d39a0, 24 [pid 6175] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6176] <... set_robust_list resumed>) = 0 [pid 6176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 108.430873][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 15 [ 108.441790][ T5835] bcachefs (loop1): marking filesystem clean [ 108.462483][ T6145] loop2: detected capacity change from 0 to 32768 [pid 6176] memfd_create("syzkaller", 0) = 3 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 108.532496][ T5833] bcachefs (loop0): shutdown complete [ 108.591633][ T6145] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 108.591660][ T6145] allowing incompatible features above 0.0: (unknown version) [ 108.591673][ T6145] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 108.597801][ T5835] bcachefs (loop1): shutdown complete [ 108.654845][ T6145] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 108.686075][ T6145] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 108.791735][ T6145] bcachefs (loop2): accounting_read... done [ 108.880638][ T6145] bcachefs (loop2): alloc_read... done [ 108.925388][ T6145] bcachefs (loop2): snapshots_read... done [ 108.969156][ T6145] bcachefs (loop2): journal_replay... done [pid 6176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6145] <... mount resumed>) = 0 [pid 6145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6145] chdir("./file0") = 0 [pid 6145] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6145] ioctl(4, LOOP_CLR_FD) = 0 [pid 6145] close(4) = 0 [ 108.994468][ T6145] bcachefs (loop2): resume_logged_ops... done [ 109.003023][ T6145] bcachefs (loop2): delete_dead_inodes... done [ 109.013354][ T6145] bcachefs (loop2): done starting filesystem [pid 6145] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6144] <... futex resumed>) = 0 [pid 6144] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6145] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6144] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 109.075423][ T6145] bcachefs (loop2): going read-write [pid 5837] <... umount2 resumed>) = 0 [pid 5837] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5837] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5837] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5837] close(4) = 0 [pid 5837] rmdir("./4/file0") = 0 [pid 5837] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] unlink("./4/binderfs") = 0 [pid 5837] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5837] close(3) = 0 [pid 5837] rmdir("./4" [pid 6145] <... mount resumed>) = 0 [pid 6145] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6145] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] <... rmdir resumed>) = 0 [pid 6144] exit_group(0 [pid 6145] <... futex resumed>) = ? [pid 6144] <... exit_group resumed>) = ? [pid 6145] +++ exited with 0 +++ [pid 6144] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6144, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=41 /* 0.41 s */} --- [pid 5836] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5836] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5837] mkdir("./5", 0777) = 0 [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5837] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5837] close(3) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program , child_tidptr=0x555575691690) = 6187 ./strace-static-x86_64: Process 6187 attached [pid 6187] set_robust_list(0x5555756916a0, 24) = 0 [pid 6187] chdir("./5") = 0 [pid 6187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6187] setpgid(0, 0) = 0 [pid 6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6187] write(3, "1000", 4) = 4 [pid 6187] close(3) = 0 [pid 6187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6187] write(1, "executing program\n", 18) = 18 [pid 6187] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6187] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6187] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6187] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6187] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6187] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[6188]}, 88) = 6188 [pid 6187] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6187] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6187] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6188 attached [pid 6188] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 6188] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6188] memfd_create("syzkaller", 0) = 3 [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 109.223797][ T6185] bcachefs (loop2): backpointer doesn't match extent it points to: [ 109.223816][ T6185] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 109.223832][ T6185] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 6176] <... write resumed>) = 16777216 [ 109.223849][ T6185] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 109.238639][ T5836] bcachefs (loop2): shutting down [ 109.238657][ T5836] bcachefs (loop2): going read-only [pid 6176] munmap(0x7fb414200000, 138412032 [pid 5833] <... umount2 resumed>) = 0 [pid 5833] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6176] <... munmap resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/file0", [pid 6176] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6176] <... openat resumed>) = 4 [pid 5833] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6176] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./5/file0") = 0 [pid 5833] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./5/binderfs") = 0 [pid 5833] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./5") = 0 [pid 5833] mkdir("./6", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6176] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6189 attached [pid 6176] close(3) = 0 [pid 6176] close(4) = 0 [ 109.238683][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 109.436706][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 109.445819][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 109.461220][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 14 [ 109.462266][ T6176] loop4: detected capacity change from 0 to 32768 [pid 6176] mkdir("./file0", 0777) = 0 [pid 6189] set_robust_list(0x5555756916a0, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555575691690) = 6189 [pid 6189] <... set_robust_list resumed>) = 0 [pid 6189] chdir("./6") = 0 [pid 6189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6189] setpgid(0, 0) = 0 [pid 6189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6189] write(3, "1000", 4) = 4 [pid 6189] close(3) = 0 [pid 6189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6176] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6189] write(1, "executing program\n", 18executing program ) = 18 [pid 6189] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6189] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6189] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6189] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6189] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6191 attached [pid 6191] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6189] <... clone3 resumed> => {parent_tid=[6191]}, 88) = 6191 [pid 6191] <... rseq resumed>) = 0 [pid 6189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6189] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6189] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6191] set_robust_list(0x7fb41c6d39a0, 24) = 0 [ 109.497993][ T5836] bcachefs (loop2): marking filesystem clean [pid 6191] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6191] memfd_create("syzkaller", 0) = 3 [pid 6191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 5835] <... umount2 resumed>) = 0 [pid 5835] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./5/file0") = 0 [pid 5835] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./5/binderfs") = 0 [pid 5835] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./5") = 0 [pid 5835] mkdir("./6", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575691690) = 6192 ./strace-static-x86_64: Process 6192 attached [pid 6192] set_robust_list(0x5555756916a0, 24) = 0 [pid 6192] chdir("./6") = 0 [pid 6192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6192] setpgid(0, 0) = 0 [pid 6192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 109.630692][ T5836] bcachefs (loop2): shutdown complete [ 109.652538][ T6176] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 6192] write(3, "1000", 4) = 4 [pid 6192] close(3) = 0 [pid 6192] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6192] write(1, "executing program\n", 18) = 18 [pid 6192] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6192] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6192] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6192] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6192] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6192] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6193 attached => {parent_tid=[6193]}, 88) = 6193 [pid 6192] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 109.652565][ T6176] allowing incompatible features above 0.0: (unknown version) [ 109.652578][ T6176] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [pid 6193] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6192] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6193] <... rseq resumed>) = 0 [pid 6193] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6193] memfd_create("syzkaller", 0 [pid 6192] <... futex resumed>) = 0 [pid 6192] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6193] <... memfd_create resumed>) = 3 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 109.786893][ T6176] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 109.805288][ T6176] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 109.905877][ T6176] bcachefs (loop4): accounting_read... done [ 109.922588][ T6176] bcachefs (loop4): alloc_read... done [ 109.931254][ T6176] bcachefs (loop4): snapshots_read... done [pid 6191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 110.021485][ T6176] bcachefs (loop4): journal_replay... done [pid 6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6188] <... write resumed>) = 16777216 [pid 6188] munmap(0x7fb414200000, 138412032) = 0 [ 110.104886][ T6176] bcachefs (loop4): resume_logged_ops... done [ 110.131058][ T6176] bcachefs (loop4): delete_dead_inodes... done [pid 6188] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6188] ioctl(4, LOOP_SET_FD, 3 [pid 6176] <... mount resumed>) = 0 [pid 6176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6176] chdir("./file0") = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6176] ioctl(4, LOOP_CLR_FD) = 0 [pid 6176] close(4) = 0 [pid 6176] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6176] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6175] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... ioctl resumed>) = 0 [pid 6188] close(3) = 0 [pid 6188] close(4) = 0 [pid 6188] mkdir("./file0", 0777) = 0 [ 110.174998][ T6176] bcachefs (loop4): done starting filesystem [ 110.187411][ T6188] loop3: detected capacity change from 0 to 32768 [ 110.201866][ T6176] bcachefs (loop4): going read-write [pid 6188] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6191] <... write resumed>) = 16777216 [pid 6175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6191] munmap(0x7fb414200000, 138412032 [pid 6176] <... mount resumed>) = 0 [pid 6176] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6191] <... munmap resumed>) = 0 [pid 6175] exit_group(0) = ? [ 110.314591][ T6202] bcachefs (loop4): backpointer doesn't match extent it points to: [ 110.314612][ T6202] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 6191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6191] close(3) = 0 [pid 6191] close(4) = 0 [pid 6191] mkdir("./file0", 0777) = 0 [pid 6191] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6176] +++ exited with 0 +++ [pid 6175] +++ exited with 0 +++ [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=45 /* 0.45 s */} --- [pid 5838] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5838] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5838] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] <... umount2 resumed>) = 0 [pid 5836] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 110.314629][ T6202] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5836] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 110.314649][ T6202] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 110.360710][ T6191] loop0: detected capacity change from 0 to 32768 [ 110.457044][ T5838] bcachefs (loop4): shutting down [ 110.457065][ T5838] bcachefs (loop4): going read-only [ 110.457094][ T5838] bcachefs (loop4): finished waiting for writes to stop [ 110.458342][ T6188] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 110.458365][ T6188] allowing incompatible features above 0.0: (unknown version) [ 110.458378][ T6188] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 110.458408][ T6188] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 110.458532][ T6188] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [pid 6193] <... write resumed>) = 16777216 [pid 5836] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6193] munmap(0x7fb414200000, 138412032 [pid 5836] <... openat resumed>) = 4 [pid 5836] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5836] close(4) = 0 [pid 5836] rmdir("./5/file0") = 0 [pid 5836] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./5/binderfs") = 0 [pid 5836] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./5") = 0 [pid 5836] mkdir("./6", 0777) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 110.584037][ T6191] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 110.668960][ T5838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 110.680916][ T5838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 110.693376][ T6191] allowing incompatible features above 0.0: (unknown version) [pid 5836] close(3) = 0 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6205 attached [ 110.701387][ T6191] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 110.716224][ T6191] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 110.729153][ T6188] bcachefs (loop3): accounting_read... [ 110.729227][ T5838] bcachefs (loop4): clean shutdown complete, journal seq 14 [ 110.754518][ T5838] bcachefs (loop4): marking filesystem clean [pid 6193] <... munmap resumed>) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555575691690) = 6205 [pid 6193] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6193] ioctl(4, LOOP_SET_FD, 3 [ 110.767270][ T6188] done [ 110.770197][ T6188] bcachefs (loop3): alloc_read... [ 110.771580][ T6191] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 110.775317][ T6188] done [ 110.798109][ T6188] bcachefs (loop3): snapshots_read... [ 110.798449][ T6193] loop1: detected capacity change from 0 to 32768 [ 110.800405][ T6188] done [pid 6205] set_robust_list(0x5555756916a0, 24 [pid 6193] <... ioctl resumed>) = 0 [pid 6193] close(3) = 0 [pid 6193] close(4 [pid 6205] <... set_robust_list resumed>) = 0 [pid 6205] chdir("./6" [pid 6193] <... close resumed>) = 0 [pid 6205] <... chdir resumed>) = 0 [pid 6193] mkdir("./file0", 0777 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6193] <... mkdir resumed>) = 0 [pid 6205] <... prctl resumed>) = 0 [pid 6193] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6205] setpgid(0, 0) = 0 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6205] write(3, "1000", 4) = 4 [ 110.819751][ T5838] bcachefs (loop4): shutdown complete [pid 6205] close(3) = 0 [pid 6205] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6205] write(1, "executing program\n", 18) = 18 [pid 6205] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6205] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6205] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6207 attached => {parent_tid=[6207]}, 88) = 6207 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 110.851438][ T6191] bcachefs (loop0): accounting_read... [ 110.857693][ T6188] bcachefs (loop3): journal_replay... done [ 110.874905][ T6191] done [ 110.887417][ T6191] bcachefs (loop0): alloc_read... [ 110.887828][ T6188] bcachefs (loop3): resume_logged_ops... [pid 6207] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6205] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] <... rseq resumed>) = 0 [pid 6205] <... futex resumed>) = 0 [pid 6207] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6205] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6207] memfd_create("syzkaller", 0) = 3 [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 110.901782][ T6191] done [ 110.906353][ T6188] done [ 110.913616][ T6188] bcachefs (loop3): delete_dead_inodes... [ 110.915370][ T6191] bcachefs (loop0): snapshots_read... [ 110.933798][ T6188] done [ 110.937373][ T6193] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 110.962885][ T6191] done [ 110.962950][ T6193] allowing incompatible features above 0.0: (unknown version) [ 110.968444][ T6188] bcachefs (loop3): done starting filesystem [ 110.973391][ T6193] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 110.994262][ T6193] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [pid 6188] <... mount resumed>) = 0 [pid 6188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6188] chdir("./file0") = 0 [pid 6188] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6188] ioctl(4, LOOP_CLR_FD) = 0 [pid 6188] close(4) = 0 [pid 6188] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 111.002804][ T6193] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 111.011712][ T6191] bcachefs (loop0): journal_replay... done [ 111.038379][ T6193] bcachefs (loop1): accounting_read... [ 111.040998][ T6191] bcachefs (loop0): resume_logged_ops... [ 111.041123][ T6193] done [ 111.056114][ T6191] done [pid 6188] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... futex resumed>) = 0 [pid 6187] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6187] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... futex resumed>) = 0 [ 111.056128][ T6191] bcachefs (loop0): delete_dead_inodes... done [ 111.085979][ T6188] bcachefs (loop3): going read-write [ 111.092592][ T6193] bcachefs (loop1): alloc_read... done [ 111.100313][ T6193] bcachefs (loop1): snapshots_read... done [pid 6188] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6191] <... mount resumed>) = 0 [pid 6187] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6191] chdir("./file0") = 0 [pid 6191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 111.110509][ T6191] bcachefs (loop0): done starting filesystem [ 111.136418][ T6193] bcachefs (loop1): journal_replay... done [ 111.145249][ T6193] bcachefs (loop1): resume_logged_ops... done [ 111.152265][ T6193] bcachefs (loop1): delete_dead_inodes... done [pid 6191] ioctl(4, LOOP_CLR_FD) = 0 [pid 6191] close(4) = 0 [pid 6191] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6189] <... futex resumed>) = 0 [pid 6191] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6189] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... mount resumed>) = 0 [pid 6189] <... futex resumed>) = 0 [pid 6193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6189] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] <... openat resumed>) = 3 [pid 6193] chdir("./file0") = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6188] <... mount resumed>) = 0 [pid 6193] ioctl(4, LOOP_CLR_FD [pid 6188] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 111.162038][ T6193] bcachefs (loop1): done starting filesystem [ 111.170785][ T6191] bcachefs (loop0): going read-write [ 111.198664][ T6215] bcachefs (loop3): backpointer doesn't match extent it points to: [pid 6187] exit_group(0 [pid 6193] <... ioctl resumed>) = 0 [pid 6189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6188] <... futex resumed>) = ? [pid 6187] <... exit_group resumed>) = ? [pid 6188] +++ exited with 0 +++ [pid 6187] +++ exited with 0 +++ [pid 6193] close(4 [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6187, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=37 /* 0.37 s */} --- [pid 5837] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6193] <... close resumed>) = 0 [pid 6193] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5837] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5837] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5837] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6193] <... futex resumed>) = 1 [pid 6192] <... futex resumed>) = 0 [pid 6193] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6192] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 111.198685][ T6215] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 6192] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 111.198703][ T6215] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 6191] <... mount resumed>) = 0 [pid 6191] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6189] exit_group(0) = ? [pid 6191] +++ exited with 0 +++ [pid 6189] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6189, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=49 /* 0.49 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6193] <... mount resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 111.198721][ T6215] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 111.285625][ T5837] bcachefs (loop3): shutting down [ 111.285657][ T5837] bcachefs (loop3): going read-only [ 111.285682][ T5837] bcachefs (loop3): finished waiting for writes to stop [ 111.287596][ T6193] bcachefs (loop1): going read-write [ 111.394101][ T6230] bcachefs (loop0): backpointer doesn't match extent it points to: [pid 5833] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 111.394123][ T6230] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 111.394140][ T6230] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5833] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6193] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] exit_group(0) = ? [pid 6193] <... futex resumed>) = ? [pid 6193] +++ exited with 0 +++ [pid 6192] +++ exited with 0 +++ [ 111.394159][ T6230] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 111.407258][ T6233] bcachefs (loop1): backpointer doesn't match extent it points to: [ 111.414118][ T5837] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 111.453867][ T6233] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 111.485432][ T6230] bcachefs (loop0): Detected missing backpointers in bucket 34, now have 1/128 with missing [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6192, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=47 /* 0.47 s */} --- [pid 5835] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 111.485454][ T6230] scheduling recovery pass check_extents_to_backpointers (17) [ 111.490030][ T5837] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 111.558655][ T5835] bcachefs (loop1): shutting down [ 111.563740][ T5835] bcachefs (loop1): going read-only [ 111.572840][ T5833] bcachefs (loop0): shutting down [ 111.578049][ T5833] bcachefs (loop0): going read-only [ 111.596355][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 111.603756][ T5835] bcachefs (loop1): finished waiting for writes to stop [ 111.615064][ T5837] bcachefs (loop3): clean shutdown complete, journal seq 14 [ 111.623076][ T5837] bcachefs (loop3): marking filesystem clean [ 111.637877][ T6233] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 111.665404][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 15 [ 111.694938][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 111.715592][ T6233] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 5835] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6207] <... write resumed>) = 16777216 [ 111.745958][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 16 [ 111.753965][ T5833] bcachefs (loop0): marking filesystem clean [ 111.782943][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [pid 6207] munmap(0x7fb414200000, 138412032) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6207] close(3) = 0 [pid 6207] close(4) = 0 [pid 6207] mkdir("./file0", 0777) = 0 [ 111.794487][ T5837] bcachefs (loop3): shutdown complete [ 111.805209][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 111.820096][ T6207] loop2: detected capacity change from 0 to 32768 [pid 6207] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5838] <... umount2 resumed>) = 0 [pid 5838] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5838] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5838] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5838] close(4) = 0 [pid 5838] rmdir("./5/file0") = 0 [pid 5838] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] unlink("./5/binderfs") = 0 [pid 5838] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5838] close(3) = 0 [pid 5838] rmdir("./5") = 0 [pid 5838] mkdir("./6", 0777) = 0 [ 111.859740][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 14 [ 111.884111][ T5835] bcachefs (loop1): marking filesystem clean [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5838] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5838] close(3) = 0 [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575691690) = 6236 ./strace-static-x86_64: Process 6236 attached [pid 6236] set_robust_list(0x5555756916a0, 24) = 0 [pid 6236] chdir("./6") = 0 [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6236] setpgid(0, 0) = 0 [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6236] write(3, "1000", 4) = 4 [pid 6236] close(3) = 0 [pid 6236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6236] write(1, "executing program\n", 18executing program ) = 18 [pid 6236] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6236] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6236] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6236] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6237 attached => {parent_tid=[6237]}, 88) = 6237 [pid 6236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6236] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053 [pid 6236] <... futex resumed>) = 0 [pid 6237] <... rseq resumed>) = 0 [pid 6236] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6237] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6237] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 112.037403][ T5833] bcachefs (loop0): shutdown complete [ 112.044453][ T5835] bcachefs (loop1): shutdown complete [ 112.052320][ T6207] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 6237] memfd_create("syzkaller", 0) = 3 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 112.052347][ T6207] allowing incompatible features above 0.0: (unknown version) [ 112.052359][ T6207] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 112.204827][ T6207] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 112.235006][ T6207] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [pid 5837] <... umount2 resumed>) = 0 [pid 5837] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5837] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5837] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5837] close(4) = 0 [pid 5837] rmdir("./5/file0") = 0 [pid 5837] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5837] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] unlink("./5/binderfs") = 0 [pid 5837] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5837] close(3) = 0 [pid 5837] rmdir("./5") = 0 [pid 5837] mkdir("./6", 0777) = 0 [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5837] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5837] close(3) = 0 [ 112.365582][ T6207] bcachefs (loop2): accounting_read... done [ 112.382345][ T6207] bcachefs (loop2): alloc_read... done [ 112.392121][ T6207] bcachefs (loop2): snapshots_read... done [ 112.413059][ T6207] bcachefs (loop2): journal_replay... done [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6238 attached [pid 6238] set_robust_list(0x5555756916a0, 24) = 0 [pid 6238] chdir("./6") = 0 [pid 6238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6238] setpgid(0, 0 [pid 5837] <... clone resumed>, child_tidptr=0x555575691690) = 6238 [pid 6238] <... setpgid resumed>) = 0 [pid 6238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6238] write(3, "1000", 4) = 4 executing program [pid 6238] close(3) = 0 [pid 6238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6238] write(1, "executing program\n", 18) = 18 [pid 6238] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6238] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6238] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6238] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6238] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[6239]}, 88) = 6239 [pid 6238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6238] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6239 attached ) = 0 [pid 6238] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6239] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 6239] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6239] memfd_create("syzkaller", 0) = 3 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 112.442617][ T6207] bcachefs (loop2): resume_logged_ops... done [ 112.462810][ T6207] bcachefs (loop2): delete_dead_inodes... done [pid 6207] <... mount resumed>) = 0 [pid 6207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6207] chdir("./file0") = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6207] ioctl(4, LOOP_CLR_FD) = 0 [pid 6207] close(4) = 0 [pid 6207] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6207] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] <... futex resumed>) = 0 [pid 6205] <... futex resumed>) = 1 [ 112.525584][ T6207] bcachefs (loop2): done starting filesystem [pid 6207] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [ 112.582904][ T6207] bcachefs (loop2): going read-write [pid 6205] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6207] <... mount resumed>) = 0 [pid 6207] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] exit_group(0) = ? [pid 6207] +++ exited with 0 +++ [pid 6205] +++ exited with 0 +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5836] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5836] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 112.717695][ T6247] bcachefs (loop2): backpointer doesn't match extent it points to: [pid 5836] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5835] <... umount2 resumed>) = 0 [ 112.717716][ T6247] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 112.717732][ T6247] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5835] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 112.717749][ T6247] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 112.795082][ T5836] bcachefs (loop2): shutting down [ 112.795101][ T5836] bcachefs (loop2): going read-only [ 112.795128][ T5836] bcachefs (loop2): finished waiting for writes to stop [ 112.855366][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [pid 5835] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5835] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5835] close(4) = 0 [pid 5835] rmdir("./6/file0") = 0 [pid 5835] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] unlink("./6/binderfs") = 0 [pid 5835] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5835] close(3) = 0 [pid 5835] rmdir("./6") = 0 [pid 5835] mkdir("./7", 0777) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] close(3) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6249 attached [pid 6249] set_robust_list(0x5555756916a0, 24 [pid 5835] <... clone resumed>, child_tidptr=0x555575691690) = 6249 [pid 6249] <... set_robust_list resumed>) = 0 [pid 6249] chdir("./7") = 0 [pid 6249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6249] setpgid(0, 0) = 0 [pid 6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6249] write(3, "1000", 4) = 4 [pid 6249] close(3) = 0 [pid 6249] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6249] write(1, "executing program\n", 18) = 18 [pid 6249] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6249] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6249] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6249] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6249] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6249] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[6250]}, 88) = 6250 [pid 6249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 112.865392][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 112.902479][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 14 [pid 6249] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6249] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6250 attached [pid 6250] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 6250] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6250] memfd_create("syzkaller", 0) = 3 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 112.916043][ T5836] bcachefs (loop2): marking filesystem clean [pid 6237] <... write resumed>) = 16777216 [pid 6237] munmap(0x7fb414200000, 138412032) = 0 [pid 6239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6237] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6237] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6237] close(3) = 0 [pid 6237] close(4) = 0 [pid 6237] mkdir("./file0", 0777) = 0 [pid 6237] mount("/dev/loop4", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5833] <... umount2 resumed>) = 0 [ 112.972228][ T5836] bcachefs (loop2): shutdown complete [ 113.009912][ T6237] loop4: detected capacity change from 0 to 32768 [pid 5833] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./6/file0") = 0 [pid 5833] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./6/binderfs") = 0 [pid 5833] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./6") = 0 [pid 5833] mkdir("./7", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6252 attached [pid 6252] set_robust_list(0x5555756916a0, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555575691690) = 6252 [pid 6252] <... set_robust_list resumed>) = 0 [pid 6252] chdir("./7") = 0 [pid 6252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6252] setpgid(0, 0) = 0 [pid 6252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 6252] write(3, "1000", 4) = 4 [pid 6252] close(3) = 0 [pid 6252] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6252] write(1, "executing program\n", 18) = 18 [pid 6252] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6252] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6252] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6252] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6252] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6252] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0}./strace-static-x86_64: Process 6253 attached => {parent_tid=[6253]}, 88) = 6253 [pid 6253] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 6252] rt_sigprocmask(SIG_SETMASK, [], [pid 6253] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6252] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] memfd_create("syzkaller", 0 [pid 6252] <... futex resumed>) = 0 [pid 6253] <... memfd_create resumed>) = 3 [pid 6252] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 113.167481][ T6237] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [pid 6253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [pid 6239] <... write resumed>) = 16777216 [pid 6239] munmap(0x7fb414200000, 138412032) = 0 [pid 6239] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 113.167510][ T6237] allowing incompatible features above 0.0: (unknown version) [ 113.167523][ T6237] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 113.307453][ T6239] loop3: detected capacity change from 0 to 32768 [ 113.327725][ T6237] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 113.338454][ T6237] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [pid 6239] ioctl(4, LOOP_SET_FD, 3 [pid 6250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6239] <... ioctl resumed>) = 0 [pid 6239] close(3) = 0 [pid 6239] close(4) = 0 [pid 6239] mkdir("./file0", 0777) = 0 [ 113.446238][ T6237] bcachefs (loop4): accounting_read... done [ 113.475159][ T6239] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 113.475187][ T6239] allowing incompatible features above 0.0: (unknown version) [pid 6239] mount("/dev/loop3", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [ 113.475200][ T6239] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 113.477142][ T6237] bcachefs (loop4): alloc_read... [ 113.501239][ T6239] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 113.529636][ T6239] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 113.566153][ T6237] done [ 113.569069][ T6237] bcachefs (loop4): snapshots_read... done [ 113.608284][ T6239] bcachefs (loop3): accounting_read... done [ 113.621924][ T6239] bcachefs (loop3): alloc_read... done [ 113.654948][ T6239] bcachefs (loop3): snapshots_read... done [ 113.667180][ T6237] bcachefs (loop4): journal_replay... done [ 113.675861][ T6237] bcachefs (loop4): resume_logged_ops... done [ 113.677152][ T6239] bcachefs (loop3): journal_replay... [pid 6253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6237] <... mount resumed>) = 0 [ 113.683090][ T6237] bcachefs (loop4): delete_dead_inodes... done [ 113.715925][ T6239] done [ 113.720340][ T6239] bcachefs (loop3): resume_logged_ops... done [ 113.740628][ T6237] bcachefs (loop4): done starting filesystem [ 113.745444][ T6239] bcachefs (loop3): delete_dead_inodes... done [pid 6237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6237] chdir("./file0") = 0 [pid 6237] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6237] ioctl(4, LOOP_CLR_FD) = 0 [pid 6237] close(4) = 0 [pid 6239] <... mount resumed>) = 0 [pid 6239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6239] chdir("./file0") = 0 [pid 6239] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6239] ioctl(4, LOOP_CLR_FD) = 0 [pid 6239] close(4 [pid 6237] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] <... close resumed>) = 0 [pid 6239] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... futex resumed>) = 1 [pid 6236] <... futex resumed>) = 0 [pid 6239] <... futex resumed>) = 1 [pid 6238] <... futex resumed>) = 0 [pid 6237] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6238] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6236] <... futex resumed>) = 0 [pid 6239] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6238] <... futex resumed>) = 0 [pid 6236] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6239] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6238] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 113.766984][ T6239] bcachefs (loop3): done starting filesystem [ 113.806683][ T6239] bcachefs (loop3): going read-write [pid 6237] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6238] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 113.815420][ T6237] bcachefs (loop4): going read-write [pid 6250] <... write resumed>) = 16777216 [pid 6250] munmap(0x7fb414200000, 138412032) = 0 [pid 6250] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6250] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6250] close(3) = 0 [pid 6250] close(4) = 0 [pid 6250] mkdir("./file0", 0777) = 0 [ 113.958141][ T6250] loop1: detected capacity change from 0 to 32768 [pid 6250] mount("/dev/loop1", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5836] <... umount2 resumed>) = 0 [pid 6239] <... mount resumed>) = 0 [pid 6239] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] exit_group(0 [pid 6239] <... futex resumed>) = 231 [pid 6238] <... exit_group resumed>) = ? [pid 6239] +++ exited with 0 +++ [pid 5836] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6253] <... write resumed>) = 16777216 [pid 6238] +++ exited with 0 +++ [pid 6237] <... mount resumed>) = 0 [pid 5836] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6237] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6238, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6237] <... futex resumed>) = 0 [pid 5836] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6237] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6253] munmap(0x7fb414200000, 138412032 [pid 5836] <... openat resumed>) = 4 [pid 6236] exit_group(0 [pid 5837] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6237] <... futex resumed>) = ? [pid 6236] <... exit_group resumed>) = ? [pid 5837] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] newfstatat(4, "", [pid 6237] +++ exited with 0 +++ [pid 6236] +++ exited with 0 +++ [pid 5837] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5836] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] <... openat resumed>) = 3 [pid 5836] getdents64(4, [pid 5838] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6236, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=41 /* 0.41 s */} --- [pid 5837] newfstatat(3, "", [pid 5838] restart_syscall(<... resuming interrupted clone ...> [pid 5837] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] <... getdents64 resumed>0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5838] <... restart_syscall resumed>) = 0 [pid 5837] getdents64(3, [pid 5836] getdents64(4, [pid 5837] <... getdents64 resumed>0x555575692730 /* 4 entries */, 32768) = 112 [pid 5836] <... getdents64 resumed>0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5837] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5838] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] close(4 [pid 5838] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] <... close resumed>) = 0 [ 114.016161][ T6269] bcachefs (loop3): backpointer doesn't match extent it points to: [pid 5838] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5836] rmdir("./6/file0" [pid 5838] <... openat resumed>) = 3 [pid 5836] <... rmdir resumed>) = 0 [pid 5838] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 6253] <... munmap resumed>) = 0 [pid 5838] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6253] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6253] <... openat resumed>) = 4 [pid 5836] newfstatat(AT_FDCWD, "./6/binderfs", [pid 6253] ioctl(4, LOOP_SET_FD, 3 [pid 5836] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] unlink("./6/binderfs") = 0 [pid 5836] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [pid 5836] rmdir("./6") = 0 [pid 5836] mkdir("./7", 0777) = 0 [ 114.016182][ T6269] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 114.016201][ T6269] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 114.016221][ T6269] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 114.032908][ T6270] bcachefs (loop4): backpointer doesn't match extent it points to: [ 114.032927][ T6270] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5836] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5836] close(3) = 0 [pid 6253] <... ioctl resumed>) = 0 [pid 6253] close(3 [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6253] <... close resumed>) = 0 [pid 6253] close(4./strace-static-x86_64: Process 6274 attached ) = 0 [pid 6274] set_robust_list(0x5555756916a0, 24 [ 114.032946][ T6270] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 114.032965][ T6270] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 114.063045][ T6270] bcachefs (loop4): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 114.063065][ T6270] scheduling recovery pass check_extents_to_backpointers (17) [pid 6253] mkdir("./file0", 0777 [pid 6274] <... set_robust_list resumed>) = 0 [pid 6253] <... mkdir resumed>) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x555575691690) = 6274 [pid 6274] chdir("./7" [pid 6253] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 6274] <... chdir resumed>) = 0 [pid 6274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6274] setpgid(0, 0) = 0 [pid 6274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6274] write(3, "1000", 4) = 4 [pid 6274] close(3) = 0 [ 114.074987][ T5837] bcachefs (loop3): shutting down [ 114.075004][ T5837] bcachefs (loop3): going read-only [ 114.075029][ T5837] bcachefs (loop3): finished waiting for writes to stop [ 114.121052][ T5838] bcachefs (loop4): shutting down [ 114.121072][ T5838] bcachefs (loop4): going read-only [ 114.121100][ T5838] bcachefs (loop4): finished waiting for writes to stop [ 114.123279][ T6253] loop0: detected capacity change from 0 to 32768 [ 114.132990][ T5838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 15 [pid 6274] symlink("/dev/binderfs", "./binderfs") = 0 [ 114.290995][ T5837] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 114.300002][ T5837] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 114.302775][ T6250] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 114.316765][ T5837] bcachefs (loop3): clean shutdown complete, journal seq 14 executing program [pid 6274] write(1, "executing program\n", 18) = 18 [pid 6274] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6274] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6274] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6274] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6274] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[6276]}, 88) = 6276 [pid 6274] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6274] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6274] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6276 attached [pid 6276] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 6276] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6276] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 114.338877][ T5838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 114.356425][ T5837] bcachefs (loop3): marking filesystem clean [ 114.377184][ T6250] allowing incompatible features above 0.0: (unknown version) [ 114.385750][ T5838] bcachefs (loop4): clean shutdown complete, journal seq 16 [pid 6276] memfd_create("syzkaller", 0) = 3 [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 114.391584][ T6253] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 114.412723][ T5838] bcachefs (loop4): marking filesystem clean [ 114.413784][ T6250] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 114.433865][ T6253] allowing incompatible features above 0.0: (unknown version) [ 114.464870][ T6250] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 114.473521][ T6250] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 114.491542][ T5837] bcachefs (loop3): shutdown complete [ 114.499165][ T6253] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 114.501949][ T5838] bcachefs (loop4): shutdown complete [ 114.585351][ T6253] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 114.614942][ T6253] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 114.659155][ T6250] bcachefs (loop1): accounting_read... done [ 114.676814][ T6250] bcachefs (loop1): alloc_read... done [ 114.694185][ T6250] bcachefs (loop1): snapshots_read... done [ 114.722688][ T6253] bcachefs (loop0): accounting_read... done [ 114.731603][ T6250] bcachefs (loop1): journal_replay... done [ 114.743721][ T6253] bcachefs (loop0): alloc_read... done [ 114.750685][ T6253] bcachefs (loop0): snapshots_read... done [ 114.768944][ T6250] bcachefs (loop1): resume_logged_ops... done [ 114.792279][ T6250] bcachefs (loop1): delete_dead_inodes... done [ 114.813549][ T6253] bcachefs (loop0): journal_replay... done [pid 6276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6250] <... mount resumed>) = 0 [pid 6250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6250] chdir("./file0") = 0 [pid 6250] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6250] ioctl(4, LOOP_CLR_FD [pid 6253] <... mount resumed>) = 0 [pid 6250] <... ioctl resumed>) = 0 [pid 6253] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6250] close(4 [pid 6253] <... openat resumed>) = 3 [pid 6250] <... close resumed>) = 0 [pid 6250] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6249] <... futex resumed>) = 0 [pid 6253] chdir("./file0" [pid 6250] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] <... chdir resumed>) = 0 [pid 6250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6249] <... futex resumed>) = 0 [pid 6253] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 114.822099][ T6250] bcachefs (loop1): done starting filesystem [ 114.832895][ T6253] bcachefs (loop0): resume_logged_ops... done [ 114.840114][ T6253] bcachefs (loop0): delete_dead_inodes... done [ 114.854808][ T6253] bcachefs (loop0): done starting filesystem [pid 6250] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6249] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6253] <... openat resumed>) = 4 [pid 6253] ioctl(4, LOOP_CLR_FD) = 0 [pid 6253] close(4) = 0 [pid 6253] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6252] <... futex resumed>) = 0 [pid 6253] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6252] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6252] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6249] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 114.871273][ T6250] bcachefs (loop1): going read-write [ 114.880911][ T6253] bcachefs (loop0): going read-write [pid 6252] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6250] <... mount resumed>) = 0 [pid 6250] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6250] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] exit_group(0) = ? [pid 6250] <... futex resumed>) = ? [pid 6250] +++ exited with 0 +++ [pid 6249] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6249, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=41 /* 0.41 s */} --- [pid 5835] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5835] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [ 114.974162][ T6289] bcachefs (loop1): backpointer doesn't match extent it points to: [pid 5835] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6276] <... write resumed>) = 16777216 [pid 6276] munmap(0x7fb414200000, 138412032) = 0 [ 114.974184][ T6289] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [pid 6276] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6253] <... mount resumed>) = 0 [pid 6276] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6253] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] exit_group(0) = ? [pid 6276] close(3) = 0 [pid 6276] close(4 [pid 6253] <... futex resumed>) = ? [pid 6276] <... close resumed>) = 0 [pid 6276] mkdir("./file0", 0777) = 0 [pid 6253] +++ exited with 0 +++ [pid 6252] +++ exited with 0 +++ [pid 6276] mount("/dev/loop2", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "errors=fix_safe,version_upgrade=none,noexcl,shard_inode_numbers," [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6252, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=36 /* 0.36 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 114.974202][ T6289] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5833] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555575692730 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5837] <... umount2 resumed>) = 0 [pid 5837] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 114.974222][ T6289] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 115.078480][ T5835] bcachefs (loop1): shutting down [ 115.078499][ T5835] bcachefs (loop1): going read-only [ 115.078524][ T5835] bcachefs (loop1): finished waiting for writes to stop [ 115.101821][ T6276] loop2: detected capacity change from 0 to 32768 [ 115.107714][ T6293] bcachefs (loop0): backpointer doesn't match extent it points to: [ 115.107733][ T6293] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 115.107752][ T6293] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 115.107772][ T6293] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 115.135968][ T6293] bcachefs (loop0): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 115.135990][ T6293] scheduling recovery pass check_extents_to_backpointers (17) [ 115.211007][ T5833] bcachefs (loop0): shutting down [ 115.211025][ T5833] bcachefs (loop0): going read-only [ 115.211050][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 115.226908][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 15 [pid 5837] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5837] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5837] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5837] close(4) = 0 [pid 5837] rmdir("./6/file0") = 0 [pid 5837] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5837] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5837] unlink("./6/binderfs") = 0 [pid 5837] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5837] close(3) = 0 [pid 5837] rmdir("./6") = 0 [pid 5837] mkdir("./7", 0777) = 0 [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5837] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5837] close(3) = 0 [ 115.276983][ T6276] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 115.297415][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 115.297442][ T6276] allowing incompatible features above 0.0: (unknown version) [ 115.385007][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6296 attached [pid 6296] set_robust_list(0x5555756916a0, 24 [pid 5837] <... clone resumed>, child_tidptr=0x555575691690) = 6296 [pid 6296] <... set_robust_list resumed>) = 0 [pid 6296] chdir("./7") = 0 [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6296] setpgid(0, 0) = 0 [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6296] write(3, "1000", 4) = 4 [pid 6296] close(3) = 0 [pid 6296] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6296] write(1, "executing program\n", 18) = 18 [pid 6296] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] rt_sigaction(SIGRT_1, {sa_handler=0x7fb41c745060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb41c736210}, NULL, 8) = 0 [pid 6296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb41c6b3000 [pid 6296] mprotect(0x7fb41c6b4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb41c6d3990, parent_tid=0x7fb41c6d3990, exit_signal=0, stack=0x7fb41c6b3000, stack_size=0x20300, tls=0x7fb41c6d36c0} => {parent_tid=[6297]}, 88) = 6297 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6296] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 115.401123][ T6276] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 115.429444][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 14 [ 115.435625][ T6276] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [pid 6296] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6297 attached [pid 6297] rseq(0x7fb41c6d3fe0, 0x20, 0, 0x53053053) = 0 [pid 6297] set_robust_list(0x7fb41c6d39a0, 24) = 0 [pid 6297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6297] memfd_create("syzkaller", 0) = 3 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb414200000 [ 115.446284][ T6276] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 115.477061][ T5835] bcachefs (loop1): marking filesystem clean [ 115.477901][ T6276] bcachefs (loop2): accounting_read... [ 115.484302][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 115.500716][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 16 [ 115.508888][ T5833] bcachefs (loop0): marking filesystem clean [ 115.519708][ T6276] done [ 115.522546][ T6276] bcachefs (loop2): alloc_read... done [ 115.555035][ T6276] bcachefs (loop2): snapshots_read... done [ 115.640262][ T5833] bcachefs (loop0): shutdown complete [ 115.642288][ T5835] bcachefs (loop1): shutdown complete [ 115.656165][ T6276] bcachefs (loop2): journal_replay... done [pid 6276] <... mount resumed>) = 0 [pid 6276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6276] chdir("./file0") = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6276] ioctl(4, LOOP_CLR_FD) = 0 [pid 6276] close(4) = 0 [ 115.706666][ T6276] bcachefs (loop2): resume_logged_ops... done [ 115.713824][ T6276] bcachefs (loop2): delete_dead_inodes... done [ 115.723600][ T6276] bcachefs (loop2): done starting filesystem [pid 6276] futex(0x7fb41c7b66ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6276] futex(0x7fb41c7b66a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6274] <... futex resumed>) = 0 [pid 6274] futex(0x7fb41c7b66a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... futex resumed>) = 0 [pid 6274] <... futex resumed>) = 1 [pid 6276] mount(NULL, ".", NULL, MS_NODEV|MS_REMOUNT|MS_MOVE|MS_POSIXACL|MS_LAZYTIME, NULL [pid 6274] futex(0x7fb41c7b66ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 115.758254][ T6276] bcachefs (loop2): going read-write [pid 6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6274] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5838] <... umount2 resumed>) = 0 [pid 5838] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5838] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5838] getdents64(4, 0x55557569a770 /* 2 entries */, 32768) = 48 [pid 5838] getdents64(4, 0x55557569a770 /* 0 entries */, 32768) = 0 [pid 5838] close(4) = 0 [pid 5838] rmdir("./6/file0") = 0 [pid 6274] exit_group(0) = ? [pid 5838] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] unlink("./6/binderfs") = 0 [pid 5838] getdents64(3, 0x555575692730 /* 0 entries */, 32768) = 0 [pid 5838] close(3) = 0 [ 115.960149][ T6276] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR [ 115.972539][ T6276] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [pid 5838] rmdir("./6") = 0 [ 116.016370][ T6276] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 116.037321][ T6276] ------------[ cut here ]------------ [ 116.042962][ T6276] kernel BUG at fs/bcachefs/journal.c:397! [ 116.048921][ T6276] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 116.055286][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz-executor206 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 116.067694][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.077759][ T6276] RIP: 0010:__journal_res_get+0x25cd/0x27f0 [ 116.083674][ T6276] Code: ff ff e9 2b db ff ff e8 01 7c 7e fd 41 be eb f6 ff ff e9 1b db ff ff e8 11 58 1d 07 e8 ec 7b 7e fd 90 0f 0b e8 e4 7b 7e fd 90 <0f> 0b e8 dc 7b 7e fd 90 0f 0b e8 d4 7b 7e fd 90 0f 0b e8 cc 7b 7e [ 116.103284][ T6276] RSP: 0018:ffffc900038874c0 EFLAGS: 00010293 [ 116.109355][ T6276] RAX: ffffffff8441cf5c RBX: 1ffff1100bf4951b RCX: ffff888027951e00 [ 116.117343][ T6276] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 116.125322][ T6276] RBP: ffffc90003887790 R08: ffff88805fa4a9f7 R09: 1ffff1100bf4953e [ 116.133301][ T6276] R10: dffffc0000000000 R11: ffffed100bf4953f R12: ffff88805fa49800 [ 116.141274][ T6276] R13: 1ffff1100bf4953e R14: 0000000000000002 R15: 00000000007ffffe [ 116.149267][ T6276] FS: 00007fb41c6d36c0(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 116.158203][ T6276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.164783][ T6276] CR2: 00007fb41c772758 CR3: 000000001bacc000 CR4: 00000000003526f0 [ 116.172757][ T6276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.180727][ T6276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.188705][ T6276] Call Trace: [ 116.191999][ T6276] [ 116.194936][ T6276] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.200157][ T6276] ? rcu_is_watching+0x15/0xb0 [ 116.204943][ T6276] ? __pfx___journal_res_get+0x10/0x10 [ 116.210412][ T6276] ? __journal_entry_close+0x1cc/0xeb0 [ 116.215878][ T6276] ? journal_flush_done+0x675/0x810 [ 116.221092][ T6276] bch2_journal_res_get_slowpath+0xdc/0xaf0 [ 116.227010][ T6276] ? __pfx_bch2_journal_res_get_slowpath+0x10/0x10 [ 116.233522][ T6276] ? do_raw_spin_lock+0x121/0x290 [ 116.238562][ T6276] ? __journal_entry_close+0x1cc/0xeb0 [ 116.244035][ T6276] ? journal_res_get_fast+0x12e/0x6a0 [ 116.249612][ T6276] ? __lock_acquire+0xab9/0xd20 [ 116.254472][ T6276] ? __pfx_journal_res_get_fast+0x10/0x10 [ 116.260208][ T6276] bch2_journal_res_get+0x14f/0x1f0 [ 116.265421][ T6276] __bch2_journal_meta+0x40/0x1d0 [ 116.270460][ T6276] bch2_fs_journal_stop+0x1dd/0x440 [ 116.275690][ T6276] ? __pfx_bch2_fs_journal_stop+0x10/0x10 [ 116.281443][ T6276] ? __pfx___bch2_print+0x10/0x10 [ 116.286475][ T6276] ? __bch2_btree_flush_all+0x54/0x6f0 [ 116.291941][ T6276] ? __bch2_btree_flush_all+0x6ce/0x6f0 [ 116.297501][ T6276] ? __bch2_btree_flush_all+0x54/0x6f0 [ 116.303604][ T6276] __bch2_fs_read_only+0x343/0x5b0 [ 116.309386][ T6276] __bch2_fs_read_write+0x5cd/0x830 [ 116.314789][ T6276] ? __pfx_shrink_dcache_sb+0x10/0x10 [ 116.320787][ T6276] bch2_fs_reconfigure+0x29a/0x400 [ 116.326009][ T6276] reconfigure_super+0x224/0x890 [ 116.330962][ T6276] path_mount+0xd18/0xfe0 [ 116.335311][ T6276] ? user_path_at+0x44/0x60 [ 116.339843][ T6276] __se_sys_mount+0x317/0x410 [ 116.344534][ T6276] ? __pfx___se_sys_mount+0x10/0x10 [ 116.349741][ T6276] ? rcu_is_watching+0x15/0xb0 [ 116.354519][ T6276] ? __x64_sys_mount+0x20/0xc0 [ 116.359294][ T6276] do_syscall_64+0xfa/0x3b0 [ 116.363815][ T6276] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.369040][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.375112][ T6276] ? clear_bhb_loop+0x60/0xb0 [ 116.379786][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.385687][ T6276] RIP: 0033:0x7fb41c71ec49 [ 116.390127][ T6276] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 116.409736][ T6276] RSP: 002b:00007fb41c6d3218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.418163][ T6276] RAX: ffffffffffffffda RBX: 00007fb41c7b66a8 RCX: 00007fb41c71ec49 [ 116.426143][ T6276] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 116.434144][ T6276] RBP: 00007fb41c7b66a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.442123][ T6276] R10: 0000000002012024 R11: 0000000000000246 R12: 0000200000000000 [ 116.450104][ T6276] R13: 0030656c69662f2e R14: 7366656863616362 R15: 0000200000000080 [ 116.458090][ T6276] [ 116.461126][ T6276] Modules linked in: [ 116.465134][ T6276] ---[ end trace 0000000000000000 ]--- [ 116.470625][ T6276] RIP: 0010:__journal_res_get+0x25cd/0x27f0 [ 116.476585][ T6276] Code: ff ff e9 2b db ff ff e8 01 7c 7e fd 41 be eb f6 ff ff e9 1b db ff ff e8 11 58 1d 07 e8 ec 7b 7e fd 90 0f 0b e8 e4 7b 7e fd 90 <0f> 0b e8 dc 7b 7e fd 90 0f 0b e8 d4 7b 7e fd 90 0f 0b e8 cc 7b 7e [ 116.496283][ T6276] RSP: 0018:ffffc900038874c0 EFLAGS: 00010293 [ 116.502374][ T6276] RAX: ffffffff8441cf5c RBX: 1ffff1100bf4951b RCX: ffff888027951e00 [ 116.510394][ T6276] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 116.518423][ T6276] RBP: ffffc90003887790 R08: ffff88805fa4a9f7 R09: 1ffff1100bf4953e [ 116.526468][ T6276] R10: dffffc0000000000 R11: ffffed100bf4953f R12: ffff88805fa49800 [ 116.534462][ T6276] R13: 1ffff1100bf4953e R14: 0000000000000002 R15: 00000000007ffffe [ 116.542567][ T6276] FS: 00007fb41c6d36c0(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 116.551630][ T6276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.558275][ T6276] CR2: 00007fb41c772758 CR3: 000000001bacc000 CR4: 00000000003526f0 [ 116.566761][ T6276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.574794][ T6276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.582793][ T6276] Kernel panic - not syncing: Fatal exception [ 116.589201][ T6276] Kernel Offset: disabled [ 116.593534][ T6276] Rebooting in 86400 seconds..