./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1133881517 <...> Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. execve("./syz-executor1133881517", ["./syz-executor1133881517"], 0x7ffe9ac257c0 /* 10 vars */) = 0 brk(NULL) = 0x555572f38000 brk(0x555572f38d00) = 0x555572f38d00 arch_prctl(ARCH_SET_FS, 0x555572f38380) = 0 set_tid_address(0x555572f38650) = 5828 set_robust_list(0x555572f38660, 24) = 0 rseq(0x555572f38ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1133881517", 4096) = 28 getrandom("\x92\xb1\x8d\x4d\xe4\x74\xbe\x63", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555572f38d00 brk(0x555572f59d00) = 0x555572f59d00 brk(0x555572f5a000) = 0x555572f5a000 mprotect(0x7f27340e9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5829 attached , child_tidptr=0x555572f38650) = 5829 [pid 5829] set_robust_list(0x555572f38660, 24) = 0 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] mkdir("./syzkaller.uKglkn", 0700./strace-static-x86_64: Process 5830 attached [pid 5828] <... clone resumed>, child_tidptr=0x555572f38650) = 5830 [pid 5830] set_robust_list(0x555572f38660, 24 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5831 attached [pid 5829] <... mkdir resumed>) = 0 [pid 5830] mkdir("./syzkaller.P0ePQI", 0700 [pid 5828] <... clone resumed>, child_tidptr=0x555572f38650) = 5831 [pid 5831] set_robust_list(0x555572f38660, 24 [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] chmod("./syzkaller.uKglkn", 0777) = 0 [pid 5831] <... set_robust_list resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5829] chdir("./syzkaller.uKglkn" [pid 5831] mkdir("./syzkaller.EUOWN7", 0700 [pid 5829] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5832 attached [pid 5830] chmod("./syzkaller.P0ePQI", 0777 [pid 5829] mkdir("./0", 0777 [pid 5831] <... mkdir resumed>) = 0 [pid 5830] <... chmod resumed>) = 0 [pid 5828] <... clone resumed>, child_tidptr=0x555572f38650) = 5832 [pid 5832] set_robust_list(0x555572f38660, 24 [pid 5830] chdir("./syzkaller.P0ePQI" [pid 5828] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] <... set_robust_list resumed>) = 0 [pid 5831] chmod("./syzkaller.EUOWN7", 0777 [pid 5830] <... chdir resumed>) = 0 [pid 5832] mkdir("./syzkaller.Ujoxkb", 0700 [pid 5829] <... mkdir resumed>) = 0 [pid 5830] mkdir("./0", 0777 [pid 5831] <... chmod resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5833 attached ) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD [pid 5833] set_robust_list(0x555572f38660, 24 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] chdir("./syzkaller.EUOWN7" [pid 5830] <... mkdir resumed>) = 0 [pid 5828] <... clone resumed>, child_tidptr=0x555572f38650) = 5833 [pid 5833] <... set_robust_list resumed>) = 0 [pid 5831] <... chdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] chmod("./syzkaller.Ujoxkb", 0777 [pid 5831] mkdir("./0", 0777 [pid 5832] <... chmod resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] mkdir("./syzkaller.AN25Rk", 0700 [pid 5832] chdir("./syzkaller.Ujoxkb") = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5832] mkdir("./0", 0777 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5829] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] <... mkdir resumed>) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5829] close(3 [pid 5830] close(3 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5833] chmod("./syzkaller.AN25Rk", 0777 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5834 attached [pid 5833] <... chmod resumed>) = 0 [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] chdir("./syzkaller.AN25Rk" [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] close(3) = 0 [pid 5833] <... chdir resumed>) = 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5834] set_robust_list(0x555572f38660, 24 [pid 5833] mkdir("./0", 0777 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5834] <... set_robust_list resumed>) = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5835 attached ./strace-static-x86_64: Process 5836 attached [pid 5835] set_robust_list(0x555572f38660, 24 [pid 5834] chdir("./0" [pid 5830] <... clone resumed>, child_tidptr=0x555572f38650) = 5834 [pid 5834] <... chdir resumed>) = 0 [pid 5832] <... openat resumed>) = 3 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5834] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5836] set_robust_list(0x555572f38660, 24 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5836] <... set_robust_list resumed>) = 0 [pid 5836] chdir("./0" [pid 5835] chdir("./0" [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] close(3 [pid 5831] <... clone resumed>, child_tidptr=0x555572f38650) = 5835 [pid 5836] <... chdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5829] <... clone resumed>, child_tidptr=0x555572f38650) = 5836 [pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] <... chdir resumed>) = 0 [pid 5834] <... prctl resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5834] setpgid(0, 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5836] <... prctl resumed>) = 0 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5836] setpgid(0, 0) = 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5837 attached [pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] <... prctl resumed>) = 0 [pid 5833] close(3 [pid 5835] setpgid(0, 0 [pid 5834] <... setpgid resumed>) = 0 [pid 5835] <... setpgid resumed>) = 0 [pid 5836] <... openat resumed>) = 3 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5837] set_robust_list(0x555572f38660, 24 [pid 5835] <... openat resumed>) = 3 [pid 5834] <... openat resumed>) = 3 [pid 5837] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5838 attached [pid 5836] write(3, "1000", 4) = 4 [pid 5836] close(3) = 0 [pid 5836] symlink("/dev/binderfs", "./binderfs" [pid 5838] set_robust_list(0x555572f38660, 24 [pid 5836] <... symlink resumed>) = 0 [pid 5838] <... set_robust_list resumed>) = 0 [pid 5833] <... clone resumed>, child_tidptr=0x555572f38650) = 5838 [pid 5837] chdir("./0" [pid 5835] write(3, "1000", 4 [pid 5834] write(3, "1000", 4 [pid 5832] <... clone resumed>, child_tidptr=0x555572f38650) = 5837 [pid 5837] <... chdir resumed>) = 0 [pid 5835] <... write resumed>) = 4 [pid 5834] <... write resumed>) = 4 [pid 5838] chdir("./0" [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] close(3 [pid 5834] close(3 [pid 5838] <... chdir resumed>) = 0 [pid 5837] <... prctl resumed>) = 0 [pid 5836] write(1, "executing program\n", 18 [pid 5835] <... close resumed>) = 0 [pid 5834] <... close resumed>) = 0 executing program [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5836] <... write resumed>) = 18 [pid 5835] symlink("/dev/binderfs", "./binderfs" [pid 5838] <... prctl resumed>) = 0 [pid 5837] setpgid(0, 0 [pid 5836] memfd_create("syzkaller", 0 [pid 5834] symlink("/dev/binderfs", "./binderfs" [pid 5838] setpgid(0, 0 [pid 5837] <... setpgid resumed>) = 0 [pid 5838] <... setpgid resumed>) = 0 [pid 5835] <... symlink resumed>) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5836] <... memfd_create resumed>) = 3 [pid 5834] <... symlink resumed>) = 0 [pid 5838] <... openat resumed>) = 3 [pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [pid 5838] write(3, "1000", 4 [pid 5837] <... openat resumed>) = 3 [pid 5835] write(1, "executing program\n", 18executing program [pid 5834] write(1, "executing program\n", 18 [pid 5837] write(3, "1000", 4executing program [pid 5834] <... write resumed>) = 18 [pid 5838] <... write resumed>) = 4 [pid 5837] <... write resumed>) = 4 [pid 5834] memfd_create("syzkaller", 0 [pid 5835] <... write resumed>) = 18 [pid 5837] close(3 [pid 5834] <... memfd_create resumed>) = 3 [pid 5838] close(3 [pid 5837] <... close resumed>) = 0 [pid 5835] memfd_create("syzkaller", 0 [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5838] <... close resumed>) = 0 [pid 5837] symlink("/dev/binderfs", "./binderfs" [pid 5834] <... mmap resumed>) = 0x7f272bc00000 [pid 5837] <... symlink resumed>) = 0 executing program [pid 5837] write(1, "executing program\n", 18) = 18 [pid 5838] symlink("/dev/binderfs", "./binderfs" [pid 5837] memfd_create("syzkaller", 0 [pid 5835] <... memfd_create resumed>) = 3 [pid 5837] <... memfd_create resumed>) = 3 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5838] <... symlink resumed>) = 0 [pid 5837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5835] <... mmap resumed>) = 0x7f272bc00000 [pid 5837] <... mmap resumed>) = 0x7f272bc00000 executing program [pid 5838] write(1, "executing program\n", 18) = 18 [pid 5838] memfd_create("syzkaller", 0) = 3 [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [pid 5837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5837] <... write resumed>) = 16777216 [pid 5837] munmap(0x7f272bc00000, 138412032 [pid 5836] <... write resumed>) = 16777216 [pid 5836] munmap(0x7f272bc00000, 138412032 [pid 5837] <... munmap resumed>) = 0 [pid 5838] <... write resumed>) = 16777216 [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5838] munmap(0x7f272bc00000, 138412032 [pid 5836] <... munmap resumed>) = 0 [pid 5835] <... write resumed>) = 16777216 [pid 5837] <... openat resumed>) = 4 [pid 5837] ioctl(4, LOOP_SET_FD, 3 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5835] munmap(0x7f272bc00000, 138412032 [pid 5837] <... ioctl resumed>) = 0 [pid 5836] ioctl(4, LOOP_SET_FD, 3 [pid 5837] close(3 [pid 5838] <... munmap resumed>) = 0 [pid 5837] <... close resumed>) = 0 [pid 5836] <... ioctl resumed>) = 0 [pid 5835] <... munmap resumed>) = 0 [pid 5834] <... write resumed>) = 16777216 [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5837] close(4 [pid 5836] close(3 [pid 5837] <... close resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5834] munmap(0x7f272bc00000, 138412032 [pid 5838] <... openat resumed>) = 4 [pid 5837] mkdir("./file0", 0777 [pid 5836] <... close resumed>) = 0 [pid 5838] ioctl(4, LOOP_SET_FD, 3 [pid 5836] close(4 [pid 5835] <... openat resumed>) = 4 [pid 5837] <... mkdir resumed>) = 0 [pid 5836] <... close resumed>) = 0 [pid 5835] ioctl(4, LOOP_SET_FD, 3 [pid 5836] mkdir("./file0", 0777 [pid 5838] <... ioctl resumed>) = 0 [pid 5836] <... mkdir resumed>) = 0 [pid 5837] mount("/dev/loop3", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5836] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5838] close(3) = 0 [pid 5838] close(4) = 0 [pid 5834] <... munmap resumed>) = 0 [pid 5838] mkdir("./file0", 0777) = 0 [pid 5838] mount("/dev/loop4", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5835] <... ioctl resumed>) = 0 [ 60.926144][ T5837] loop3: detected capacity change from 0 to 32768 [ 60.935812][ T5836] loop0: detected capacity change from 0 to 32768 [ 60.955816][ T5838] loop4: detected capacity change from 0 to 32768 [ 60.957468][ T5835] loop2: detected capacity change from 0 to 32768 [pid 5834] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5835] close(3 [pid 5834] <... openat resumed>) = 4 [pid 5835] <... close resumed>) = 0 [pid 5834] ioctl(4, LOOP_SET_FD, 3 [pid 5835] close(4) = 0 [pid 5835] mkdir("./file0", 0777) = 0 [pid 5835] mount("/dev/loop2", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5834] <... ioctl resumed>) = 0 [pid 5834] close(3) = 0 [pid 5834] close(4) = 0 [pid 5834] mkdir("./file0", 0777) = 0 [ 61.046271][ T5834] loop1: detected capacity change from 0 to 32768 [ 61.139306][ T5836] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 61.162596][ T5836] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 61.170846][ T5836] bcachefs (loop0): Version upgrade required: [ 61.170846][ T5836] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 61.170846][ T5836] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 61.170846][ T5836] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 61.246828][ T5836] bcachefs (loop0): dropping and reconstructing all alloc info [ 61.256788][ T5837] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 61.266623][ T5837] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 61.289304][ T5835] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 61.293497][ T5836] bcachefs (loop0): check_topology... done [ 61.307747][ T5836] bcachefs (loop0): accounting_read... [ 61.324084][ T5835] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 61.339745][ T5838] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 61.352814][ T5838] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 61.353096][ T5836] done [ 61.368936][ T5834] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [pid 5834] mount("/dev/loop1", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5837] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5837] ioctl(3, LOOP_CLR_FD) = 0 [ 61.385389][ T5837] bcachefs: bch2_fs_get_tree() error: EINVAL [ 61.393157][ T5836] bcachefs (loop0): alloc_read... done [ 61.400689][ T5836] bcachefs (loop0): stripes_read... done [ 61.407782][ T5834] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 61.420717][ T5836] bcachefs (loop0): snapshots_read... done [pid 5837] close(3 [pid 5835] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 61.433973][ T5836] bcachefs (loop0): check_allocations... [ 61.495307][ T5838] bcachefs: bch2_fs_get_tree() error: EINVAL [ 61.508992][ T5835] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5838] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5835] ioctl(3, LOOP_CLR_FD [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5838] ioctl(3, LOOP_CLR_FD) = 0 [pid 5838] close(3 [pid 5835] <... ioctl resumed>) = 0 [pid 5834] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5835] close(3 [pid 5834] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5834] ioctl(3, LOOP_CLR_FD) = 0 [ 61.558813][ T5834] bcachefs: bch2_fs_get_tree() error: EINVAL [ 61.569249][ T5836] done [ 61.585704][ T5836] bcachefs (loop0): going read-write [pid 5834] close(3 [pid 5836] <... mount resumed>) = 0 [pid 5836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5836] chdir("./file0") = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 61.615857][ T5836] bcachefs (loop0): done starting filesystem [pid 5836] ioctl(4, LOOP_CLR_FD) = 0 [pid 5836] close(4) = 0 [pid 5836] mkdir("./bus", 000) = 0 [pid 5836] exit_group(0) = ? [pid 5836] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5836, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=43 /* 0.43 s */} --- [pid 5837] <... close resumed>) = 0 [pid 5837] mkdir("./bus", 000) = 0 [pid 5837] exit_group(0) = ? [pid 5837] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5837, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=44 /* 0.44 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5832] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 61.728948][ T5836] syz-executor113 (5836) used greatest stack depth: 17904 bytes left [pid 5832] getdents64(3, 0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5829] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./0/binderfs") = 0 [pid 5829] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] newfstatat(3, "", [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] getdents64(3, 0x555572f396f0 /* 4 entries */, 32768) = 112 [pid 5832] newfstatat(4, "", [pid 5829] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] getdents64(4, [pid 5829] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5832] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] getdents64(4, [pid 5829] unlink("./0/binderfs" [pid 5835] <... close resumed>) = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5829] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./0/bus") = 0 [pid 5832] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./0/file0") = 0 [pid 5832] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5832] rmdir("./0" [pid 5835] mkdir("./bus", 000 [pid 5834] <... close resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5832] mkdir("./1", 0777) = 0 [pid 5835] <... mkdir resumed>) = 0 [pid 5835] exit_group(0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5835] <... exit_group resumed>) = ? [pid 5832] close(3 [pid 5838] <... close resumed>) = 0 [pid 5835] +++ exited with 0 +++ [pid 5834] mkdir("./bus", 000 [pid 5832] <... close resumed>) = 0 [pid 5838] mkdir("./bus", 000 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=39 /* 0.39 s */} --- [pid 5834] <... mkdir resumed>) = 0 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5831] <... restart_syscall resumed>) = 0 [pid 5838] <... mkdir resumed>) = 0 [pid 5834] exit_group(0 [pid 5831] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5834] <... exit_group resumed>) = ? [pid 5831] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(3, 0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5831] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5838] exit_group(0 [pid 5834] +++ exited with 0 +++ [pid 5831] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5838] <... exit_group resumed>) = ? [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./0/binderfs" [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5834, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=38 /* 0.38 s */} --- [pid 5831] <... unlink resumed>) = 0 [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5831] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5881 attached [pid 5838] +++ exited with 0 +++ [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... restart_syscall resumed>) = 0 [ 61.835792][ T5829] bcachefs (loop0): shutting down [ 61.841003][ T5829] bcachefs (loop0): going read-only [ 61.855737][ T5829] bcachefs (loop0): finished waiting for writes to stop [pid 5831] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=39 /* 0.39 s */} --- [pid 5831] <... openat resumed>) = 4 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5831] newfstatat(4, "", [pid 5833] <... restart_syscall resumed>) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(4, [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(4, [pid 5881] set_robust_list(0x555572f38660, 24 [pid 5833] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... clone resumed>, child_tidptr=0x555572f38650) = 5881 [pid 5831] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5881] <... set_robust_list resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5831] close(4 [pid 5881] chdir("./1" [pid 5830] newfstatat(3, "", [pid 5881] <... chdir resumed>) = 0 [pid 5833] newfstatat(3, "", [pid 5831] <... close resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] rmdir("./0/bus" [pid 5830] getdents64(3, [pid 5881] <... prctl resumed>) = 0 [pid 5833] getdents64(3, [pid 5831] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5881] setpgid(0, 0 [pid 5833] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5831] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5881] <... setpgid resumed>) = 0 [pid 5833] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./0/file0", [pid 5830] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5881] <... openat resumed>) = 3 [pid 5833] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5881] write(3, "1000", 4 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] unlink("./0/binderfs" [pid 5881] <... write resumed>) = 4 [pid 5833] unlink("./0/binderfs" [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... unlink resumed>) = 0 [pid 5881] close(3 [pid 5833] <... unlink resumed>) = 0 [pid 5881] <... close resumed>) = 0 [pid 5833] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./0/bus", [pid 5831] newfstatat(4, "", [pid 5830] newfstatat(AT_FDCWD, "./0/bus", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] getdents64(4, [pid 5830] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] getdents64(4, [pid 5830] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5881] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... openat resumed>) = 4 [pid 5831] close(4 [pid 5830] newfstatat(4, "", [pid 5833] newfstatat(4, "", [pid 5831] <... close resumed>) = 0 [pid 5881] <... symlink resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] rmdir("./0/file0" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5881] write(1, "executing program\n", 18executing program [pid 5833] getdents64(4, [pid 5831] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5881] <... write resumed>) = 18 [pid 5833] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5881] memfd_create("syzkaller", 0 [pid 5831] getdents64(3, [pid 5830] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5881] <... memfd_create resumed>) = 3 [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [pid 5833] getdents64(4, [pid 5831] <... getdents64 resumed>0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5830] getdents64(4, [pid 5831] close(3 [pid 5830] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5830] close(4 [pid 5831] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5831] rmdir("./0" [pid 5830] <... close resumed>) = 0 [pid 5831] <... rmdir resumed>) = 0 [pid 5830] rmdir("./0/bus" [pid 5833] rmdir("./0/bus" [pid 5831] mkdir("./1", 0777 [pid 5830] <... rmdir resumed>) = 0 [pid 5831] <... mkdir resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... openat resumed>) = 3 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./0/file0", [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] newfstatat(AT_FDCWD, "./0/file0", [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 61.899787][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [pid 5830] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] close(3 [pid 5830] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5833] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] newfstatat(4, "", [pid 5833] <... openat resumed>) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] newfstatat(4, "", [pid 5831] <... clone resumed>, child_tidptr=0x555572f38650) = 5882 [pid 5830] getdents64(4, [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5830] getdents64(4, [pid 5833] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5882 attached [pid 5833] getdents64(4, [pid 5830] close(4 [pid 5833] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 5833] close(4 [pid 5830] rmdir("./0/file0" [pid 5833] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5882] set_robust_list(0x555572f38660, 24 [pid 5833] rmdir("./0/file0" [pid 5830] getdents64(3, [pid 5882] <... set_robust_list resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5882] chdir("./1" [pid 5833] getdents64(3, [pid 5830] close(3 [pid 5882] <... chdir resumed>) = 0 [pid 5833] <... getdents64 resumed>0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5830] <... close resumed>) = 0 [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] close(3 [pid 5830] rmdir("./0" [pid 5882] <... prctl resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5882] setpgid(0, 0 [pid 5833] rmdir("./0" [pid 5830] mkdir("./1", 0777 [pid 5882] <... setpgid resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] <... mkdir resumed>) = 0 [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] mkdir("./1", 0777 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5882] <... openat resumed>) = 3 [pid 5833] <... mkdir resumed>) = 0 [pid 5882] write(3, "1000", 4 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] <... openat resumed>) = 3 [pid 5882] <... write resumed>) = 4 [pid 5833] <... openat resumed>) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD [pid 5882] close(3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5882] <... close resumed>) = 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5830] close(3 [pid 5882] symlink("/dev/binderfs", "./binderfs" [pid 5833] close(3 [pid 5830] <... close resumed>) = 0 executing program [pid 5882] <... symlink resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5883 attached [pid 5882] write(1, "executing program\n", 18 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5884 attached [pid 5830] <... clone resumed>, child_tidptr=0x555572f38650) = 5883 [pid 5882] <... write resumed>) = 18 [ 61.958716][ T52] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 54) [pid 5882] memfd_create("syzkaller", 0 [pid 5884] set_robust_list(0x555572f38660, 24 [pid 5883] set_robust_list(0x555572f38660, 24 [pid 5882] <... memfd_create resumed>) = 3 [pid 5833] <... clone resumed>, child_tidptr=0x555572f38650) = 5884 [pid 5884] <... set_robust_list resumed>) = 0 [pid 5884] chdir("./1") = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5884] <... prctl resumed>) = 0 [pid 5883] <... set_robust_list resumed>) = 0 [pid 5882] <... mmap resumed>) = 0x7f272bc00000 [pid 5884] setpgid(0, 0) = 0 [pid 5883] chdir("./1" [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5883] <... chdir resumed>) = 0 [pid 5884] <... openat resumed>) = 3 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5884] write(3, "1000", 4) = 4 [pid 5884] close(3) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs" [pid 5883] <... prctl resumed>) = 0 [pid 5883] setpgid(0, 0) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5883] write(3, "1000", 4) = 4 [pid 5883] close(3) = 0 [pid 5883] symlink("/dev/binderfs", "./binderfs"executing program [pid 5884] <... symlink resumed>) = 0 [pid 5883] <... symlink resumed>) = 0 [pid 5884] write(1, "executing program\n", 18) = 18 [pid 5884] memfd_create("syzkaller", 0executing program [pid 5883] write(1, "executing program\n", 18 [pid 5884] <... memfd_create resumed>) = 3 [pid 5883] <... write resumed>) = 18 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5883] memfd_create("syzkaller", 0) = 3 [pid 5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [pid 5884] <... mmap resumed>) = 0x7f272bc00000 [ 62.011672][ T52] bcachefs (loop0): fatal error - emergency read only [ 62.046593][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 62.084384][ T5829] bcachefs (loop0): unshutdown complete, journal seq 13 [ 62.092564][ T5829] bcachefs (loop0): done going read-only, filesystem not clean [ 62.188639][ T5829] bcachefs (loop0): shutdown complete [pid 5881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5881] <... write resumed>) = 16777216 [pid 5881] munmap(0x7f272bc00000, 138412032) = 0 [pid 5881] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5881] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5881] close(3) = 0 [pid 5881] close(4) = 0 [ 62.615399][ T5881] loop3: detected capacity change from 0 to 32768 [pid 5883] <... write resumed>) = 16777216 [pid 5884] <... write resumed>) = 16777216 [pid 5882] <... write resumed>) = 16777216 [pid 5881] mkdir("./file0", 0777 [pid 5883] munmap(0x7f272bc00000, 138412032 [pid 5884] munmap(0x7f272bc00000, 138412032 [pid 5882] munmap(0x7f272bc00000, 138412032 [pid 5881] <... mkdir resumed>) = 0 [pid 5881] mount("/dev/loop3", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5883] <... munmap resumed>) = 0 [pid 5884] <... munmap resumed>) = 0 [pid 5882] <... munmap resumed>) = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5883] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5884] <... openat resumed>) = 4 [pid 5884] ioctl(4, LOOP_SET_FD, 3 [pid 5883] <... openat resumed>) = 4 [pid 5882] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5882] ioctl(4, LOOP_SET_FD, 3 [pid 5884] <... ioctl resumed>) = 0 [pid 5883] ioctl(4, LOOP_SET_FD, 3 [pid 5882] <... ioctl resumed>) = 0 [pid 5882] close(3) = 0 [pid 5882] close(4) = 0 [pid 5882] mkdir("./file0", 0777 [pid 5884] close(3 [pid 5883] <... ioctl resumed>) = 0 [pid 5884] <... close resumed>) = 0 [pid 5883] close(3 [pid 5882] <... mkdir resumed>) = 0 [pid 5884] close(4) = 0 [pid 5883] <... close resumed>) = 0 [pid 5884] mkdir("./file0", 0777 [pid 5882] mount("/dev/loop2", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5884] <... mkdir resumed>) = 0 [pid 5883] close(4 [pid 5884] mount("/dev/loop4", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5883] <... close resumed>) = 0 [pid 5883] mkdir("./file0", 0777) = 0 [ 62.707173][ T5884] loop4: detected capacity change from 0 to 32768 [ 62.709366][ T5882] loop2: detected capacity change from 0 to 32768 [ 62.715423][ T5883] loop1: detected capacity change from 0 to 32768 [ 62.960486][ T5881] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 62.961143][ T5882] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 62.972215][ T5881] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 62.997760][ T5882] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 63.013434][ T5882] bcachefs (loop2): Version upgrade required: [ 63.013434][ T5882] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 63.013434][ T5882] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 63.013434][ T5882] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 63.025442][ T5883] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 63.104303][ T5883] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 63.104411][ T5884] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 63.164181][ T5884] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 63.188564][ T5882] bcachefs (loop2): dropping and reconstructing all alloc info [pid 5883] mount("/dev/loop1", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5881] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5881] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5881] ioctl(3, LOOP_CLR_FD) = 0 [ 63.226453][ T5881] bcachefs: bch2_fs_get_tree() error: EINVAL [ 63.275318][ T5882] bcachefs (loop2): check_topology... done [pid 5881] close(3 [pid 5884] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5883] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5884] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5884] ioctl(3, LOOP_CLR_FD) = 0 [pid 5884] close(3 [pid 5883] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5883] ioctl(3, LOOP_CLR_FD) = 0 [ 63.281211][ T5882] bcachefs (loop2): accounting_read... [ 63.319532][ T5883] bcachefs: bch2_fs_get_tree() error: EINVAL [ 63.331214][ T5882] done [ 63.334750][ T5882] bcachefs (loop2): alloc_read... done [ 63.342424][ T5884] bcachefs: bch2_fs_get_tree() error: EINVAL [ 63.349310][ T5882] bcachefs (loop2): stripes_read... done [ 63.361470][ T5882] bcachefs (loop2): snapshots_read... done [pid 5883] close(3 [pid 5829] <... umount2 resumed>) = 0 [pid 5829] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./0/file0") = 0 [pid 5829] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./0") = 0 [pid 5829] mkdir("./1", 0777) = 0 [ 63.399566][ T5882] bcachefs (loop2): check_allocations... done [ 63.507787][ T5882] bcachefs (loop2): going read-write [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5881] <... close resumed>) = 0 [pid 5829] <... openat resumed>) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5881] mkdir("./bus", 000) = 0 ./strace-static-x86_64: Process 5916 attached [pid 5829] <... clone resumed>, child_tidptr=0x555572f38650) = 5916 [pid 5881] exit_group(0) = ? [pid 5916] set_robust_list(0x555572f38660, 24 [pid 5884] <... close resumed>) = 0 [pid 5881] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=34 /* 0.34 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...> [pid 5916] <... set_robust_list resumed>) = 0 [pid 5832] <... restart_syscall resumed>) = 0 [pid 5916] chdir("./1" [pid 5832] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5916] <... chdir resumed>) = 0 [pid 5884] mkdir("./bus", 000 [pid 5882] <... mount resumed>) = 0 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5832] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5916] setpgid(0, 0 [pid 5832] <... openat resumed>) = 3 [pid 5916] <... setpgid resumed>) = 0 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5832] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5884] <... mkdir resumed>) = 0 [pid 5882] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5916] <... openat resumed>) = 3 [pid 5832] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5882] <... openat resumed>) = 3 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5916] write(3, "1000", 4 [pid 5882] chdir("./file0" [pid 5832] unlink("./1/binderfs" [pid 5916] <... write resumed>) = 4 [pid 5882] <... chdir resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5916] close(3 [pid 5884] exit_group(0 [pid 5882] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5832] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5916] <... close resumed>) = 0 [pid 5884] <... exit_group resumed>) = ? [pid 5882] <... openat resumed>) = 4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5832] rmdir("./1/bus" [pid 5916] symlink("/dev/binderfs", "./binderfs" [pid 5884] +++ exited with 0 +++ [pid 5882] ioctl(4, LOOP_CLR_FD [pid 5832] <... rmdir resumed>) = 0 [pid 5832] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 63.559046][ T5882] bcachefs (loop2): done starting filesystem [pid 5832] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5916] <... symlink resumed>) = 0 [pid 5882] <... ioctl resumed>) = 0 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=38 /* 0.38 s */} --- [pid 5882] close(4 [pid 5916] write(1, "executing program\n", 18 [pid 5882] <... close resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 executing program [pid 5882] mkdir("./bus", 000 [pid 5832] close(4 [pid 5916] <... write resumed>) = 18 [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./1/file0") = 0 [pid 5832] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 5882] <... mkdir resumed>) = 0 [pid 5832] rmdir("./1" [pid 5916] memfd_create("syzkaller", 0 [pid 5882] exit_group(0 [pid 5832] <... rmdir resumed>) = 0 [pid 5916] <... memfd_create resumed>) = 3 [pid 5882] <... exit_group resumed>) = ? [pid 5832] mkdir("./2", 0777 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... mkdir resumed>) = 0 [pid 5882] +++ exited with 0 +++ [pid 5916] <... mmap resumed>) = 0x7f272bc00000 [pid 5883] <... close resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=34 /* 0.34 s */} --- [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5917 attached [pid 5883] mkdir("./bus", 000 [pid 5917] set_robust_list(0x555572f38660, 24 [pid 5883] <... mkdir resumed>) = 0 [pid 5917] <... set_robust_list resumed>) = 0 [pid 5917] chdir("./2" [pid 5832] <... clone resumed>, child_tidptr=0x555572f38650) = 5917 [pid 5883] exit_group(0 [pid 5917] <... chdir resumed>) = 0 [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5883] <... exit_group resumed>) = ? [pid 5833] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(3, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5831] <... openat resumed>) = 3 [pid 5833] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(3, "", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5883] +++ exited with 0 +++ [pid 5833] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5831] getdents64(3, [pid 5917] <... prctl resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... getdents64 resumed>0x555572f396f0 /* 4 entries */, 32768) = 112 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=37 /* 0.37 s */} --- [pid 5917] setpgid(0, 0 [pid 5833] unlink("./1/binderfs" [pid 5831] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 5917] <... setpgid resumed>) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... unlink resumed>) = 0 [pid 5830] <... restart_syscall resumed>) = 0 [pid 5833] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] unlink("./1/binderfs" [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... unlink resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... openat resumed>) = 3 [pid 5830] newfstatat(3, "", [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5917] write(3, "1000", 4) = 4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5917] close(3 [pid 5830] getdents64(3, [pid 5917] <... close resumed>) = 0 [pid 5833] newfstatat(AT_FDCWD, "./1/bus", [pid 5830] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 executing program [pid 5917] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5917] <... symlink resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5917] write(1, "executing program\n", 18 [pid 5830] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5833] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5917] <... write resumed>) = 18 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] unlink("./1/binderfs" [pid 5917] memfd_create("syzkaller", 0 [pid 5833] <... openat resumed>) = 4 [pid 5830] <... unlink resumed>) = 0 [pid 5917] <... memfd_create resumed>) = 3 [pid 5830] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] newfstatat(4, "", [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5917] <... mmap resumed>) = 0x7f272bc00000 [pid 5830] newfstatat(AT_FDCWD, "./1/bus", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] <... openat resumed>) = 4 [pid 5833] getdents64(4, [pid 5830] newfstatat(4, "", [pid 5833] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... close resumed>) = 0 [pid 5830] getdents64(4, [pid 5833] rmdir("./1/bus" [pid 5830] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5833] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] close(4 [pid 5833] newfstatat(AT_FDCWD, "./1/file0", [pid 5830] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] rmdir("./1/bus" [pid 5833] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... rmdir resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 4 [pid 5830] newfstatat(AT_FDCWD, "./1/file0", [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] getdents64(4, [pid 5830] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] getdents64(4, [pid 5830] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5830] <... openat resumed>) = 4 [pid 5833] <... close resumed>) = 0 [pid 5830] newfstatat(4, "", [pid 5833] rmdir("./1/file0" [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5830] getdents64(4, [pid 5833] getdents64(3, [pid 5830] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] <... getdents64 resumed>0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3 [pid 5830] getdents64(4, [pid 5833] <... close resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [ 63.702378][ T5831] bcachefs (loop2): shutting down [ 63.711708][ T5831] bcachefs (loop2): going read-only [ 63.732807][ T5831] bcachefs (loop2): finished waiting for writes to stop [pid 5833] rmdir("./1") = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./1/file0") = 0 [pid 5830] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3 [pid 5833] mkdir("./2", 0777 [pid 5830] <... close resumed>) = 0 [pid 5830] rmdir("./1" [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... rmdir resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] mkdir("./2", 0777 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5830] <... mkdir resumed>) = 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5833] close(3) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5830] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5918 attached ) = -1 ENXIO (No such device or address) [pid 5918] set_robust_list(0x555572f38660, 24 [pid 5833] <... clone resumed>, child_tidptr=0x555572f38650) = 5918 [pid 5830] close(3 [pid 5918] <... set_robust_list resumed>) = 0 [pid 5918] chdir("./2" [pid 5830] <... close resumed>) = 0 [pid 5918] <... chdir resumed>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5919 attached [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5919] set_robust_list(0x555572f38660, 24 [pid 5918] <... prctl resumed>) = 0 [pid 5830] <... clone resumed>, child_tidptr=0x555572f38650) = 5919 [pid 5919] <... set_robust_list resumed>) = 0 [pid 5918] setpgid(0, 0 [pid 5919] chdir("./2" [ 63.747443][ T5831] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [pid 5918] <... setpgid resumed>) = 0 [pid 5919] <... chdir resumed>) = 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5918] write(3, "1000", 4 [pid 5919] setpgid(0, 0 [pid 5918] <... write resumed>) = 4 [pid 5919] <... setpgid resumed>) = 0 [pid 5918] close(3 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5918] <... close resumed>) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5919] <... openat resumed>) = 3 [pid 5918] write(1, "executing program\n", 18) = 18 [ 63.804095][ T52] bcachefs (loop2): bch2_write_super(): fatal error loop2: Superblock write was silently dropped! (seq 0 expected 54) [pid 5919] write(3, "1000", 4) = 4 [pid 5918] memfd_create("syzkaller", 0 [pid 5919] close(3) = 0 [pid 5919] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5919] write(1, "executing program\n", 18 [pid 5918] <... memfd_create resumed>) = 3 [pid 5919] <... write resumed>) = 18 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5919] memfd_create("syzkaller", 0 [pid 5918] <... mmap resumed>) = 0x7f272bc00000 [pid 5919] <... memfd_create resumed>) = 3 [pid 5916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [ 63.850253][ T52] bcachefs (loop2): fatal error - emergency read only [ 63.874228][ T5831] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 63.914102][ T5831] bcachefs (loop2): unshutdown complete, journal seq 14 [ 63.945120][ T5831] bcachefs (loop2): done going read-only, filesystem not clean [ 64.026916][ T5831] bcachefs (loop2): shutdown complete [pid 5917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5916] <... write resumed>) = 16777216 [pid 5916] munmap(0x7f272bc00000, 138412032) = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5917] <... write resumed>) = 16777216 [pid 5916] ioctl(4, LOOP_SET_FD, 3 [pid 5917] munmap(0x7f272bc00000, 138412032) = 0 [pid 5916] <... ioctl resumed>) = 0 [pid 5916] close(3) = 0 [pid 5916] close(4 [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5917] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5916] <... close resumed>) = 0 [pid 5916] mkdir("./file0", 0777 [pid 5917] <... openat resumed>) = 4 [pid 5916] <... mkdir resumed>) = 0 [ 64.241849][ T5916] loop0: detected capacity change from 0 to 32768 [pid 5917] ioctl(4, LOOP_SET_FD, 3 [pid 5916] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5917] <... ioctl resumed>) = 0 [pid 5917] close(3) = 0 [pid 5917] close(4) = 0 [pid 5917] mkdir("./file0", 0777) = 0 [ 64.295214][ T5917] loop3: detected capacity change from 0 to 32768 [pid 5917] mount("/dev/loop3", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5918] <... write resumed>) = 16777216 [pid 5918] munmap(0x7f272bc00000, 138412032 [pid 5919] <... write resumed>) = 16777216 [pid 5919] munmap(0x7f272bc00000, 138412032 [pid 5918] <... munmap resumed>) = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5919] <... munmap resumed>) = 0 [pid 5918] <... openat resumed>) = 4 [pid 5919] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5918] ioctl(4, LOOP_SET_FD, 3 [pid 5919] <... openat resumed>) = 4 [pid 5919] ioctl(4, LOOP_SET_FD, 3 [pid 5918] <... ioctl resumed>) = 0 [pid 5918] close(3) = 0 [pid 5918] close(4) = 0 [pid 5918] mkdir("./file0", 0777) = 0 [pid 5918] mount("/dev/loop4", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5919] <... ioctl resumed>) = 0 [pid 5919] close(3) = 0 [pid 5919] close(4) = 0 [pid 5919] mkdir("./file0", 0777) = 0 [ 64.479013][ T5918] loop4: detected capacity change from 0 to 32768 [ 64.490480][ T5919] loop1: detected capacity change from 0 to 32768 [ 64.702185][ T5916] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 64.702421][ T5917] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 64.733520][ T5916] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 64.734844][ T5917] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 64.750915][ T5917] bcachefs (loop3): Version upgrade required: [ 64.750915][ T5917] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 64.750915][ T5917] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 64.750915][ T5917] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 64.837173][ T5918] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 64.846673][ T5918] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 64.856871][ T5917] bcachefs (loop3): dropping and reconstructing all alloc info [ 64.890696][ T5919] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 64.915997][ T5919] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 64.927488][ T5916] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5919] mount("/dev/loop1", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5916] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5916] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5916] ioctl(3, LOOP_CLR_FD) = 0 [ 64.957891][ T5917] bcachefs (loop3): check_topology... done [ 64.967657][ T5917] bcachefs (loop3): accounting_read... [ 64.968565][ T5918] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5916] close(3 [pid 5918] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5918] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5918] ioctl(3, LOOP_CLR_FD) = 0 [ 65.025732][ T5917] done [ 65.028545][ T5917] bcachefs (loop3): alloc_read... done [ 65.055272][ T5917] bcachefs (loop3): stripes_read... done [ 65.061009][ T5917] bcachefs (loop3): snapshots_read... done [pid 5918] close(3 [pid 5916] <... close resumed>) = 0 [pid 5916] mkdir("./bus", 000 [pid 5919] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5916] <... mkdir resumed>) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5919] ioctl(3, LOOP_CLR_FD) = 0 [ 65.103963][ T5917] bcachefs (loop3): check_allocations... [ 65.150075][ T5919] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5919] close(3 [pid 5916] exit_group(0) = ? [pid 5916] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=36 /* 0.36 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5829] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 65.194727][ T5917] done [pid 5829] getdents64(3, 0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5829] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./1/binderfs") = 0 [pid 5829] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./1/bus") = 0 [pid 5829] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [ 65.215023][ T5917] bcachefs (loop3): going read-write [pid 5829] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./1/file0") = 0 [pid 5829] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./1") = 0 [pid 5829] mkdir("./2", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5952 attached [pid 5917] <... mount resumed>) = 0 [pid 5917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5917] chdir("./file0" [pid 5952] set_robust_list(0x555572f38660, 24 [pid 5917] <... chdir resumed>) = 0 [pid 5952] <... set_robust_list resumed>) = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... clone resumed>, child_tidptr=0x555572f38650) = 5952 [pid 5952] chdir("./2" [pid 5917] <... openat resumed>) = 4 [pid 5917] ioctl(4, LOOP_CLR_FD) = 0 [pid 5917] close(4 [pid 5952] <... chdir resumed>) = 0 [pid 5917] <... close resumed>) = 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5917] mkdir("./bus", 000 [pid 5952] <... prctl resumed>) = 0 [pid 5917] <... mkdir resumed>) = 0 [pid 5952] setpgid(0, 0 [pid 5917] exit_group(0 [pid 5952] <... setpgid resumed>) = 0 [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5917] <... exit_group resumed>) = ? [pid 5952] <... openat resumed>) = 3 [pid 5952] write(3, "1000", 4) = 4 [pid 5952] close(3) = 0 [pid 5952] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5831] <... umount2 resumed>) = 0 [ 65.246719][ T5917] bcachefs (loop3): done starting filesystem executing program [pid 5952] write(1, "executing program\n", 18 [pid 5917] +++ exited with 0 +++ [pid 5831] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=34 /* 0.34 s */} --- [pid 5832] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(3, "", [pid 5952] <... write resumed>) = 18 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5952] memfd_create("syzkaller", 0 [pid 5832] getdents64(3, 0x555572f396f0 /* 4 entries */, 32768) = 112 [pid 5832] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./1/file0", [pid 5952] <... memfd_create resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5952] <... mmap resumed>) = 0x7f272bc00000 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./2/binderfs" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] <... unlink resumed>) = 0 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, [pid 5832] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./1/file0") = 0 [pid 5918] <... close resumed>) = 0 [pid 5831] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5918] mkdir("./bus", 000 [pid 5831] close(3 [pid 5918] <... mkdir resumed>) = 0 [pid 5831] <... close resumed>) = 0 [pid 5918] exit_group(0 [pid 5831] rmdir("./1") = 0 [pid 5918] <... exit_group resumed>) = ? [pid 5831] mkdir("./2", 0777 [pid 5918] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5831] <... mkdir resumed>) = 0 [ 65.349847][ T5832] bcachefs (loop3): shutting down [ 65.358270][ T5832] bcachefs (loop3): going read-only [ 65.370182][ T5832] bcachefs (loop3): finished waiting for writes to stop [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] <... restart_syscall resumed>) = 0 [pid 5831] <... openat resumed>) = 3 [pid 5833] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] ioctl(3, LOOP_CLR_FD [pid 5833] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] getdents64(3, [pid 5831] close(3 [pid 5833] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5831] <... close resumed>) = 0 [pid 5833] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./2/binderfs") = 0 [pid 5833] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, ./strace-static-x86_64: Process 5953 attached 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5831] <... clone resumed>, child_tidptr=0x555572f38650) = 5953 [pid 5833] close(4 [pid 5953] set_robust_list(0x555572f38660, 24 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./2/bus" [pid 5953] <... set_robust_list resumed>) = 0 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5953] chdir("./2") = 0 [pid 5833] newfstatat(AT_FDCWD, "./2/file0", [pid 5953] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5953] <... prctl resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, [pid 5953] setpgid(0, 0 [pid 5833] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, [pid 5953] <... setpgid resumed>) = 0 [ 65.392133][ T5832] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [pid 5833] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4 [pid 5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] <... close resumed>) = 0 [pid 5833] rmdir("./2/file0" [pid 5953] write(3, "1000", 4 [pid 5833] <... rmdir resumed>) = 0 [pid 5833] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./2" [pid 5953] <... write resumed>) = 4 [pid 5833] <... rmdir resumed>) = 0 [pid 5953] close(3) = 0 [pid 5833] mkdir("./3", 0777 [pid 5953] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] <... mkdir resumed>) = 0 [pid 5953] write(1, "executing program\n", 18executing program ) = 18 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5953] memfd_create("syzkaller", 0 [pid 5833] <... openat resumed>) = 3 [pid 5953] <... memfd_create resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] close(3 [pid 5953] <... mmap resumed>) = 0x7f272bc00000 [pid 5833] <... close resumed>) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555572f38650) = 5954 ./strace-static-x86_64: Process 5954 attached [pid 5954] set_robust_list(0x555572f38660, 24) = 0 [pid 5954] chdir("./3") = 0 [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5954] setpgid(0, 0) = 0 [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5954] write(3, "1000", 4) = 4 [pid 5954] close(3) = 0 [pid 5954] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5954] write(1, "executing program\n", 18 [pid 5919] <... close resumed>) = 0 [pid 5954] <... write resumed>) = 18 [pid 5954] memfd_create("syzkaller", 0) = 3 [pid 5919] mkdir("./bus", 000 [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [pid 5919] <... mkdir resumed>) = 0 [pid 5919] exit_group(0) = ? [ 65.486365][ T3512] bcachefs (loop3): bch2_write_super(): fatal error loop3: Superblock write was silently dropped! (seq 0 expected 54) [ 65.520341][ T3512] bcachefs (loop3): fatal error - emergency read only [pid 5919] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=41 /* 0.41 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5830] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, 0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5830] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./2/binderfs") = 0 [pid 5830] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./2/bus") = 0 [pid 5830] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./2/file0") = 0 [pid 5830] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./2") = 0 [pid 5830] mkdir("./3", 0777) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 65.537071][ T5832] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 65.561816][ T5832] bcachefs (loop3): unshutdown complete, journal seq 14 [ 65.574856][ T5832] bcachefs (loop3): done going read-only, filesystem not clean [pid 5830] close(3) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5955 attached [pid 5955] set_robust_list(0x555572f38660, 24 [pid 5830] <... clone resumed>, child_tidptr=0x555572f38650) = 5955 [pid 5955] <... set_robust_list resumed>) = 0 [pid 5955] chdir("./3") = 0 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5955] setpgid(0, 0) = 0 [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5955] write(3, "1000", 4) = 4 [pid 5955] close(3) = 0 [pid 5955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5955] write(1, "executing program\n", 18executing program ) = 18 [pid 5955] memfd_create("syzkaller", 0) = 3 [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [ 65.658253][ T5832] bcachefs (loop3): shutdown complete [pid 5952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5952] <... write resumed>) = 16777216 [pid 5952] munmap(0x7f272bc00000, 138412032 [pid 5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5952] <... munmap resumed>) = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5952] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5952] close(3) = 0 [pid 5952] close(4) = 0 [pid 5952] mkdir("./file0", 0777) = 0 [pid 5952] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5954] <... write resumed>) = 16777216 [pid 5953] <... write resumed>) = 16777216 [ 66.062151][ T5952] loop0: detected capacity change from 0 to 32768 [pid 5954] munmap(0x7f272bc00000, 138412032) = 0 [pid 5953] munmap(0x7f272bc00000, 138412032 [pid 5954] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5954] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5953] <... munmap resumed>) = 0 [pid 5954] close(3 [pid 5953] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5954] <... close resumed>) = 0 [pid 5953] <... openat resumed>) = 4 [pid 5954] close(4) = 0 [pid 5953] ioctl(4, LOOP_SET_FD, 3 [pid 5954] mkdir("./file0", 0777) = 0 [pid 5954] mount("/dev/loop4", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5953] <... ioctl resumed>) = 0 [pid 5953] close(3) = 0 [pid 5953] close(4) = 0 [pid 5953] mkdir("./file0", 0777) = 0 [ 66.137217][ T5954] loop4: detected capacity change from 0 to 32768 [ 66.165051][ T5953] loop2: detected capacity change from 0 to 32768 [pid 5953] mount("/dev/loop2", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5955] <... write resumed>) = 16777216 [pid 5955] munmap(0x7f272bc00000, 138412032) = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5955] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5955] close(3) = 0 [pid 5955] close(4) = 0 [pid 5955] mkdir("./file0", 0777) = 0 [ 66.269400][ T5955] loop1: detected capacity change from 0 to 32768 [ 66.536723][ T5952] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 66.559100][ T5953] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 66.559743][ T5952] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 66.580248][ T5952] bcachefs (loop0): Version upgrade required: [ 66.580248][ T5952] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 66.580248][ T5952] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 66.580248][ T5952] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 66.589938][ T5953] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 66.652688][ T5952] bcachefs (loop0): dropping and reconstructing all alloc info [ 66.663915][ T5954] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 66.676572][ T5952] bcachefs (loop0): check_topology... done [ 66.682442][ T5952] bcachefs (loop0): accounting_read... done [ 66.693985][ T5954] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 66.698098][ T5952] bcachefs (loop0): alloc_read... done [ 66.708836][ T5955] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 66.737410][ T5952] bcachefs (loop0): stripes_read... done [ 66.743668][ T5955] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 66.751791][ T5952] bcachefs (loop0): snapshots_read... done [ 66.751913][ T5952] bcachefs (loop0): check_allocations... [ 66.783973][ T5953] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5955] mount("/dev/loop1", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5953] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5953] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5953] ioctl(3, LOOP_CLR_FD) = 0 [pid 5953] close(3 [pid 5954] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5954] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5954] ioctl(3, LOOP_CLR_FD) = 0 [ 66.844060][ T5952] done [ 66.849705][ T5952] bcachefs (loop0): going read-write [ 66.878909][ T5954] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5954] close(3 [pid 5952] <... mount resumed>) = 0 [pid 5952] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5952] chdir("./file0") = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5952] ioctl(4, LOOP_CLR_FD) = 0 [pid 5952] close(4) = 0 [ 66.910084][ T5952] bcachefs (loop0): done starting filesystem [pid 5952] mkdir("./bus", 000) = 0 [pid 5952] exit_group(0) = ? [pid 5952] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5952, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=40 /* 0.40 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...> [pid 5832] <... umount2 resumed>) = 0 [pid 5955] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... restart_syscall resumed>) = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5955] <... openat resumed>) = 3 [pid 5829] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5955] ioctl(3, LOOP_CLR_FD [pid 5829] <... openat resumed>) = 3 [pid 5955] <... ioctl resumed>) = 0 [pid 5829] newfstatat(3, "", [pid 5955] close(3 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] getdents64(3, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5832] close(4) = 0 [pid 5829] <... getdents64 resumed>0x555572f396f0 /* 4 entries */, 32768) = 112 [pid 5832] rmdir("./2/file0" [pid 5829] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... rmdir resumed>) = 0 [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 66.975927][ T5955] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5832] getdents64(3, [pid 5829] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5832] <... getdents64 resumed>0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] close(3 [pid 5829] unlink("./2/binderfs" [pid 5832] <... close resumed>) = 0 [pid 5832] rmdir("./2") = 0 [pid 5829] <... unlink resumed>) = 0 [pid 5832] mkdir("./3", 0777) = 0 [pid 5829] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] close(3) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555572f38650) = 5987 ./strace-static-x86_64: Process 5987 attached [pid 5987] set_robust_list(0x555572f38660, 24) = 0 [pid 5987] chdir("./3") = 0 [pid 5987] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5987] setpgid(0, 0) = 0 [pid 5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5987] write(3, "1000", 4) = 4 [pid 5987] close(3) = 0 [pid 5987] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5987] write(1, "executing program\n", 18executing program ) = 18 [pid 5987] memfd_create("syzkaller", 0) = 3 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [pid 5954] <... close resumed>) = 0 [pid 5954] mkdir("./bus", 000) = 0 [ 67.090455][ T5829] bcachefs (loop0): shutting down [ 67.108919][ T5829] bcachefs (loop0): going read-only [ 67.114223][ T5829] bcachefs (loop0): finished waiting for writes to stop [pid 5954] exit_group(0) = ? [pid 5954] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5954, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=37 /* 0.37 s */} --- [pid 5833] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5833] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] unlink("./3/binderfs") = 0 [pid 5833] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./3/bus") = 0 [ 67.143051][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [pid 5833] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5953] <... close resumed>) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./3/file0") = 0 [pid 5833] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./3") = 0 [pid 5833] mkdir("./4", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5953] mkdir("./bus", 000 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5989 attached [pid 5953] <... mkdir resumed>) = 0 [pid 5989] set_robust_list(0x555572f38660, 24) = 0 [pid 5989] chdir("./4") = 0 [pid 5953] exit_group(0) = ? [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5953] +++ exited with 0 +++ [pid 5989] <... prctl resumed>) = 0 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5953, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=41 /* 0.41 s */} --- [pid 5989] setpgid(0, 0 [pid 5833] <... clone resumed>, child_tidptr=0x555572f38650) = 5989 [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5989] <... setpgid resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5989] write(3, "1000", 4executing program ) = 4 [pid 5831] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5989] close(3) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5989] symlink("/dev/binderfs", "./binderfs" [pid 5831] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5989] <... symlink resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5989] write(1, "executing program\n", 18) = 18 [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5989] memfd_create("syzkaller", 0 [pid 5831] getdents64(3, [pid 5989] <... memfd_create resumed>) = 3 [pid 5831] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [pid 5831] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] unlink("./2/binderfs") = 0 [pid 5831] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./2/bus") = 0 [pid 5831] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4) = 0 [pid 5831] rmdir("./2/file0") = 0 [pid 5831] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./2") = 0 [pid 5831] mkdir("./3", 0777) = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x555572f38660, 24 [pid 5831] <... clone resumed>, child_tidptr=0x555572f38650) = 5990 [pid 5990] <... set_robust_list resumed>) = 0 [pid 5990] chdir("./3") = 0 [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] setpgid(0, 0) = 0 [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5990] write(3, "1000", 4) = 4 [pid 5990] close(3) = 0 [pid 5990] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5990] write(1, "executing program\n", 18) = 18 [pid 5990] memfd_create("syzkaller", 0) = 3 [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [pid 5955] <... close resumed>) = 0 [ 67.293613][ T11] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 54) [ 67.333787][ T11] bcachefs (loop0): fatal error - emergency read only [pid 5955] mkdir("./bus", 000) = 0 [pid 5955] exit_group(0) = ? [pid 5955] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=38 /* 0.38 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5830] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, 0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5830] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 67.368676][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 67.396196][ T5829] bcachefs (loop0): unshutdown complete, journal seq 14 [pid 5830] unlink("./3/binderfs") = 0 [pid 5830] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./3/bus") = 0 [pid 5830] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./3/file0") = 0 [pid 5830] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./3") = 0 [pid 5830] mkdir("./4", 0777) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5830] close(3) = 0 [ 67.420411][ T5829] bcachefs (loop0): done going read-only, filesystem not clean [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5991 attached , child_tidptr=0x555572f38650) = 5991 [pid 5991] set_robust_list(0x555572f38660, 24) = 0 [pid 5991] chdir("./4") = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5991] setpgid(0, 0) = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5991] write(3, "1000", 4) = 4 [pid 5991] close(3) = 0 [pid 5991] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5991] write(1, "executing program\n", 18executing program ) = 18 [pid 5991] memfd_create("syzkaller", 0) = 3 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [ 67.510915][ T5829] bcachefs (loop0): shutdown complete [pid 5989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5987] <... write resumed>) = 16777216 [pid 5987] munmap(0x7f272bc00000, 138412032) = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5987] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5987] close(3) = 0 [pid 5987] close(4) = 0 [pid 5987] mkdir("./file0", 0777) = 0 [ 67.726555][ T5987] loop3: detected capacity change from 0 to 32768 [pid 5987] mount("/dev/loop3", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5990] <... write resumed>) = 16777216 [pid 5990] munmap(0x7f272bc00000, 138412032) = 0 [pid 5990] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5990] ioctl(4, LOOP_SET_FD, 3 [pid 5989] <... write resumed>) = 16777216 [pid 5990] <... ioctl resumed>) = 0 [pid 5990] close(3 [pid 5989] munmap(0x7f272bc00000, 138412032 [pid 5990] <... close resumed>) = 0 [pid 5990] close(4) = 0 [pid 5990] mkdir("./file0", 0777) = 0 [pid 5990] mount("/dev/loop2", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5989] <... munmap resumed>) = 0 [pid 5989] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 67.917040][ T5990] loop2: detected capacity change from 0 to 32768 [pid 5989] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5989] close(3) = 0 [pid 5989] close(4) = 0 [pid 5989] mkdir("./file0", 0777) = 0 [ 67.966205][ T5989] loop4: detected capacity change from 0 to 32768 [pid 5989] mount("/dev/loop4", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5991] <... write resumed>) = 16777216 [pid 5991] munmap(0x7f272bc00000, 138412032) = 0 [pid 5991] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5991] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5991] close(3) = 0 [pid 5991] close(4) = 0 [pid 5991] mkdir("./file0", 0777) = 0 [ 68.063482][ T5991] loop1: detected capacity change from 0 to 32768 [ 68.234033][ T5987] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 68.243658][ T5990] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 68.266921][ T5987] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 68.275874][ T5991] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 68.292702][ T5989] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 68.294918][ T5990] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 68.311839][ T5990] bcachefs (loop2): Version upgrade required: [ 68.311839][ T5990] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 68.311839][ T5990] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 68.311839][ T5990] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 68.393978][ T5989] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 68.402445][ T5991] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [pid 5991] mount("/dev/loop1", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 5987] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 68.494367][ T5987] bcachefs: bch2_fs_get_tree() error: EINVAL [ 68.502142][ T5990] bcachefs (loop2): dropping and reconstructing all alloc info [pid 5987] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5989] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5987] <... openat resumed>) = 3 [pid 5989] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5987] ioctl(3, LOOP_CLR_FD [pid 5989] ioctl(3, LOOP_CLR_FD [pid 5987] <... ioctl resumed>) = 0 [pid 5989] <... ioctl resumed>) = 0 [pid 5989] close(3 [pid 5987] close(3 [pid 5829] <... umount2 resumed>) = 0 [pid 5829] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [ 68.545440][ T5989] bcachefs: bch2_fs_get_tree() error: EINVAL [ 68.570419][ T5990] bcachefs (loop2): check_topology... done [pid 5829] close(4) = 0 [pid 5829] rmdir("./2/file0") = 0 [pid 5829] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./2") = 0 [pid 5829] mkdir("./3", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6021 attached , child_tidptr=0x555572f38650) = 6021 [pid 6021] set_robust_list(0x555572f38660, 24) = 0 [pid 6021] chdir("./3") = 0 [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6021] setpgid(0, 0) = 0 [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6021] write(3, "1000", 4) = 4 [pid 6021] close(3) = 0 executing program [pid 6021] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6021] write(1, "executing program\n", 18) = 18 [ 68.587734][ T5990] bcachefs (loop2): accounting_read... done [ 68.652421][ T5990] bcachefs (loop2): alloc_read... done [ 68.658446][ T5991] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 6021] memfd_create("syzkaller", 0 [pid 5991] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5991] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5991] ioctl(3, LOOP_CLR_FD) = 0 [pid 5991] close(3 [pid 6021] <... memfd_create resumed>) = 3 [pid 6021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [ 68.683623][ T5990] bcachefs (loop2): stripes_read... done [ 68.709861][ T5990] bcachefs (loop2): snapshots_read... done [pid 5989] <... close resumed>) = 0 [pid 5987] <... close resumed>) = 0 [pid 5989] mkdir("./bus", 000 [pid 5987] mkdir("./bus", 000) = 0 [pid 5989] <... mkdir resumed>) = 0 [pid 5987] exit_group(0 [pid 5989] exit_group(0 [pid 5987] <... exit_group resumed>) = ? [pid 5989] <... exit_group resumed>) = ? [pid 5989] +++ exited with 0 +++ [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=32 /* 0.32 s */} --- [pid 5987] +++ exited with 0 +++ [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5987, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5991] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... openat resumed>) = 3 [ 68.736728][ T5990] bcachefs (loop2): check_allocations... done [ 68.893293][ T5990] bcachefs (loop2): going read-write [pid 5832] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5991] mkdir("./bus", 000 [pid 5833] newfstatat(3, "", [pid 5832] <... openat resumed>) = 3 [pid 5991] <... mkdir resumed>) = 0 [pid 5991] exit_group(0 [pid 5990] <... mount resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] newfstatat(3, "", [pid 5991] <... exit_group resumed>) = ? [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5991] +++ exited with 0 +++ [pid 5990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5833] getdents64(3, [pid 5832] getdents64(3, 0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=40 /* 0.40 s */} --- [pid 5833] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5833] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5990] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5990] chdir("./file0" [pid 5833] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5832] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5990] <... chdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5990] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] unlink("./4/binderfs" [pid 5832] unlink("./3/binderfs" [pid 5990] <... openat resumed>) = 4 [pid 5990] ioctl(4, LOOP_CLR_FD [pid 5833] <... unlink resumed>) = 0 [pid 5832] <... unlink resumed>) = 0 [pid 5990] <... ioctl resumed>) = 0 [pid 5832] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5990] close(4 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5990] <... close resumed>) = 0 [pid 5832] newfstatat(AT_FDCWD, "./3/bus", [pid 5990] mkdir("./bus", 000 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5990] <... mkdir resumed>) = 0 [pid 5832] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] newfstatat(AT_FDCWD, "./4/bus", [pid 5832] getdents64(4, [pid 5990] exit_group(0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5990] <... exit_group resumed>) = ? [pid 5833] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] close(4 [pid 5990] +++ exited with 0 +++ [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... close resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] rmdir("./3/bus" [pid 6021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5833] <... openat resumed>) = 4 [pid 5831] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5990, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=38 /* 0.38 s */} --- [pid 5830] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] <... rmdir resumed>) = 0 [pid 5832] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./3/file0", [pid 5833] newfstatat(4, "", [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(4, [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5832] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] getdents64(4, [pid 5832] <... openat resumed>) = 4 [pid 5833] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5832] newfstatat(4, "", [pid 5833] close(4 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] <... close resumed>) = 0 [pid 5832] getdents64(4, [pid 5833] rmdir("./4/bus" [pid 5832] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5832] close(4 [pid 5833] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... close resumed>) = 0 [pid 5831] <... restart_syscall resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] rmdir("./3/file0" [pid 5833] newfstatat(AT_FDCWD, "./4/file0", [pid 5832] <... rmdir resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] getdents64(3, [pid 5831] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] <... getdents64 resumed>0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] close(3 [pid 5831] <... openat resumed>) = 3 [pid 5833] <... openat resumed>) = 4 [pid 5832] <... close resumed>) = 0 [pid 5831] newfstatat(3, "", [pid 5833] newfstatat(4, "", [pid 5832] rmdir("./3" [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] newfstatat(3, "", [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5831] getdents64(3, 0x555572f396f0 /* 4 entries */, 32768) = 112 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] getdents64(4, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] getdents64(3, [pid 5833] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5831] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5833] getdents64(4, [pid 5831] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5833] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5832] mkdir("./4", 0777 [pid 5831] unlink("./3/binderfs" [pid 5830] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] close(4 [pid 5832] <... mkdir resumed>) = 0 [pid 5831] <... unlink resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5831] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] rmdir("./4/file0") = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5833] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [ 68.940939][ T5990] bcachefs (loop2): done starting filesystem [pid 5833] close(3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 5833] <... close resumed>) = 0 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5833] rmdir("./4" [pid 5832] close(3 [pid 5833] <... rmdir resumed>) = 0 [pid 5832] <... close resumed>) = 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5833] mkdir("./5", 0777 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6024 attached [pid 5833] <... mkdir resumed>) = 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./4/binderfs" [pid 6024] set_robust_list(0x555572f38660, 24 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... clone resumed>, child_tidptr=0x555572f38650) = 6024 [pid 5830] <... unlink resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6025 attached [pid 6024] <... set_robust_list resumed>) = 0 [pid 5830] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... clone resumed>, child_tidptr=0x555572f38650) = 6025 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6024] chdir("./4" [pid 5830] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6024] <... chdir resumed>) = 0 [pid 5830] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6025] set_robust_list(0x555572f38660, 24 [pid 6024] <... prctl resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6025] <... set_robust_list resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 6025] chdir("./5" [pid 5830] newfstatat(4, "", [pid 6025] <... chdir resumed>) = 0 [pid 6024] setpgid(0, 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6025] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6024] <... setpgid resumed>) = 0 [pid 5830] getdents64(4, [pid 6025] <... prctl resumed>) = 0 [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 6025] setpgid(0, 0) = 0 [pid 6024] <... openat resumed>) = 3 [pid 6025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6024] write(3, "1000", 4 [pid 5830] getdents64(4, [pid 6024] <... write resumed>) = 4 [pid 5830] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 6025] <... openat resumed>) = 3 [pid 6024] close(3 [pid 5830] close(4 [pid 6025] write(3, "1000", 4 [pid 6024] <... close resumed>) = 0 [pid 6025] <... write resumed>) = 4 [pid 6024] symlink("/dev/binderfs", "./binderfs" [pid 5830] <... close resumed>) = 0 [pid 6025] close(3) = 0 [pid 6024] <... symlink resumed>) = 0 [pid 5830] rmdir("./4/bus" [pid 6025] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6025] write(1, "executing program\n", 18executing program ) = 18 [pid 6025] memfd_create("syzkaller", 0) = 3 [pid 6025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [pid 5830] <... rmdir resumed>) = 0 [pid 5830] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6024] write(1, "executing program\n", 18) = 18 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6024] memfd_create("syzkaller", 0 [ 69.006702][ T5831] bcachefs (loop2): shutting down [ 69.011782][ T5831] bcachefs (loop2): going read-only [ 69.031013][ T5831] bcachefs (loop2): finished waiting for writes to stop [ 69.041953][ T5831] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [pid 5830] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6024] <... memfd_create resumed>) = 3 [pid 5830] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6024] <... mmap resumed>) = 0x7f272bc00000 [pid 5830] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./4/file0") = 0 [pid 5830] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5830] rmdir("./4") = 0 [pid 5830] mkdir("./5", 0777) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5830] close(3) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6026 attached [pid 6026] set_robust_list(0x555572f38660, 24 [pid 5830] <... clone resumed>, child_tidptr=0x555572f38650) = 6026 [pid 6026] <... set_robust_list resumed>) = 0 [pid 6026] chdir("./5") = 0 [pid 6026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6026] setpgid(0, 0) = 0 [pid 6026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 69.101760][ T11] bcachefs (loop2): bch2_write_super(): fatal error loop2: Superblock write was silently dropped! (seq 0 expected 54) [pid 6026] write(3, "1000", 4) = 4 [pid 6026] close(3) = 0 [ 69.154876][ T11] bcachefs (loop2): fatal error - emergency read only [ 69.164443][ T5831] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 69.194280][ T5831] bcachefs (loop2): unshutdown complete, journal seq 13 [pid 6026] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6026] write(1, "executing program\n", 18executing program ) = 18 [pid 6026] memfd_create("syzkaller", 0) = 3 [pid 6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [ 69.202247][ T5831] bcachefs (loop2): done going read-only, filesystem not clean [pid 6021] <... write resumed>) = 16777216 [pid 6021] munmap(0x7f272bc00000, 138412032) = 0 [pid 6021] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6021] close(3) = 0 [pid 6021] close(4) = 0 [pid 6021] mkdir("./file0", 0777) = 0 [ 69.278302][ T5831] bcachefs (loop2): shutdown complete [ 69.315787][ T6021] loop0: detected capacity change from 0 to 32768 [pid 6021] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6025] <... write resumed>) = 16777216 [pid 6025] munmap(0x7f272bc00000, 138412032) = 0 [pid 6025] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6025] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6025] close(3) = 0 [pid 6025] close(4) = 0 [pid 6025] mkdir("./file0", 0777) = 0 [ 69.618779][ T6025] loop4: detected capacity change from 0 to 32768 [pid 6025] mount("/dev/loop4", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [pid 6024] <... write resumed>) = 16777216 [pid 6024] munmap(0x7f272bc00000, 138412032) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6024] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6026] <... write resumed>) = 16777216 [pid 6026] munmap(0x7f272bc00000, 138412032 [pid 6024] close(3) = 0 [pid 6024] close(4) = 0 [pid 6026] <... munmap resumed>) = 0 [pid 6024] mkdir("./file0", 0777 [pid 6026] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6024] <... mkdir resumed>) = 0 [pid 6026] <... openat resumed>) = 4 [pid 6024] mount("/dev/loop3", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"... [ 69.709098][ T6024] loop3: detected capacity change from 0 to 32768 [pid 6026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6026] close(3) = 0 [pid 6026] close(4) = 0 [pid 6026] mkdir("./file0", 0777) = 0 [ 69.749631][ T6026] loop1: detected capacity change from 0 to 32768 [ 69.980410][ T6025] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 69.989921][ T6021] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 70.029076][ T6025] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 70.035456][ T6021] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 70.045629][ T6024] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 70.045762][ T6021] bcachefs (loop0): Version upgrade required: [ 70.045762][ T6021] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 70.045762][ T6021] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 70.045762][ T6021] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 70.065044][ T6024] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 70.133777][ T6026] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 70.143794][ T6026] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 70.144327][ T6021] bcachefs (loop0): dropping and reconstructing all alloc info [ 70.203298][ T6021] bcachefs (loop0): check_topology... done [ 70.210224][ T6021] bcachefs (loop0): accounting_read... done [ 70.222823][ T6021] bcachefs (loop0): alloc_read... done [ 70.229001][ T6021] bcachefs (loop0): stripes_read... done [ 70.235210][ T6021] bcachefs (loop0): snapshots_read... done [pid 6026] mount("/dev/loop1", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,a"...) = -1 EINVAL (Invalid argument) [pid 6026] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6021] <... mount resumed>) = 0 [pid 6026] ioctl(3, LOOP_CLR_FD) = 0 [pid 6021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6026] close(3 [pid 6021] <... openat resumed>) = 3 [pid 6021] chdir("./file0") = 0 [pid 6021] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6021] ioctl(4, LOOP_CLR_FD) = 0 [pid 6021] close(4) = 0 [ 70.241959][ T6021] bcachefs (loop0): check_allocations... done [ 70.296323][ T6021] bcachefs (loop0): going read-write [ 70.302985][ T6026] bcachefs: bch2_fs_get_tree() error: EINVAL [ 70.317049][ T6021] bcachefs (loop0): done starting filesystem [pid 6021] mkdir("./bus", 000) = 0 [pid 6021] exit_group(0) = ? [pid 6021] +++ exited with 0 +++ [pid 6025] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6021, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=38 /* 0.38 s */} --- [pid 5829] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", [pid 6025] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5831] <... umount2 resumed>) = 0 [pid 5829] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6025] ioctl(3, LOOP_CLR_FD) = 0 [pid 6025] close(3 [pid 5831] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 70.365542][ T6025] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5829] getdents64(3, [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... getdents64 resumed>0x555572f396f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] newfstatat(AT_FDCWD, "./3/file0", [pid 5829] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5831] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] unlink("./3/binderfs" [pid 5831] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... unlink resumed>) = 0 [pid 5829] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5831] <... openat resumed>) = 4 [pid 5831] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5831] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5831] close(4 [pid 6024] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... close resumed>) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5831] rmdir("./3/file0" [pid 6024] ioctl(3, LOOP_CLR_FD [pid 5831] <... rmdir resumed>) = 0 [pid 6024] <... ioctl resumed>) = 0 [pid 6024] close(3 [pid 5831] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5831] close(3) = 0 [pid 5831] rmdir("./3") = 0 [pid 5831] mkdir("./4", 0777) = 0 [ 70.462628][ T5829] bcachefs (loop0): shutting down [ 70.470512][ T6024] bcachefs: bch2_fs_get_tree() error: EINVAL [ 70.478469][ T5829] bcachefs (loop0): going read-only [ 70.485123][ T5829] bcachefs (loop0): finished waiting for writes to stop [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5831] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5831] close(3) = 0 [pid 5831] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6058 attached , child_tidptr=0x555572f38650) = 6058 [pid 6058] set_robust_list(0x555572f38660, 24) = 0 [pid 6026] <... close resumed>) = 0 [pid 6058] chdir("./4") = 0 [pid 6026] mkdir("./bus", 000) = 0 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6026] exit_group(0) = ? [pid 6026] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6026, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=40 /* 0.40 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...> [pid 6058] <... prctl resumed>) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... restart_syscall resumed>) = 0 [pid 6058] <... openat resumed>) = 3 [pid 6058] write(3, "1000", 4 [pid 5830] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6058] <... write resumed>) = 4 [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 70.548092][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [pid 6058] close(3 [pid 5830] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6058] <... close resumed>) = 0 [pid 5830] <... openat resumed>) = 3 [pid 6058] symlink("/dev/binderfs", "./binderfs" [pid 5830] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] getdents64(3, [pid 6058] <... symlink resumed>) = 0 [pid 5830] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 6058] write(1, "executing program\n", 18 [pid 5830] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] unlink("./5/binderfs") = 0 executing program [pid 6058] <... write resumed>) = 18 [pid 6025] <... close resumed>) = 0 [pid 5830] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5830] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5830] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", [pid 6058] memfd_create("syzkaller", 0 [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6058] <... memfd_create resumed>) = 3 [pid 6025] mkdir("./bus", 000 [pid 6024] <... close resumed>) = 0 [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6025] <... mkdir resumed>) = 0 [pid 6024] mkdir("./bus", 000 [pid 6058] <... mmap resumed>) = 0x7f272bc00000 [pid 5830] getdents64(4, [pid 6025] exit_group(0) = ? [pid 5830] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] close(4) = 0 [pid 5830] rmdir("./5/bus") = 0 [pid 5830] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6024] <... mkdir resumed>) = 0 [pid 5830] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6025] +++ exited with 0 +++ [pid 5830] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6025, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [pid 5830] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 6024] exit_group(0 [pid 5830] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5830] newfstatat(4, "", [pid 5833] <... restart_syscall resumed>) = 0 [pid 6024] <... exit_group resumed>) = ? [pid 5830] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 70.623110][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 70.659739][ T3512] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 54) [pid 5830] getdents64(4, [pid 5833] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555572f41730 /* 2 entries */, 32768) = 48 [pid 6024] +++ exited with 0 +++ [pid 5830] getdents64(4, [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6024, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=39 /* 0.39 s */} --- [pid 5832] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5832] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... openat resumed>) = 3 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5832] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5832] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(3, 0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5832] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] unlink("./4/binderfs") = 0 [pid 5832] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5832] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5832] getdents64(4, [pid 5833] newfstatat(3, "", [pid 5830] close(4) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] <... getdents64 resumed>0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] rmdir("./5/file0" [pid 5833] getdents64(3, [pid 5832] close(4) = 0 [pid 5833] <... getdents64 resumed>0x555572f396f0 /* 5 entries */, 32768) = 136 [pid 5832] rmdir("./4/bus" [pid 5830] <... rmdir resumed>) = 0 [pid 5832] <... rmdir resumed>) = 0 [pid 5833] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] getdents64(3, [pid 5832] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... getdents64 resumed>0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5833] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] close(3 [pid 5833] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5832] newfstatat(AT_FDCWD, "./4/file0", [pid 5830] <... close resumed>) = 0 [pid 5833] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5832] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 70.672895][ T5829] bcachefs (loop0): unshutdown complete, journal seq 14 [ 70.680929][ T3512] bcachefs (loop0): fatal error - emergency read only [ 70.696990][ T3512] ------------[ cut here ]------------ [ 70.702810][ T3512] kernel BUG at fs/bcachefs/journal.h:375! [ 70.731824][ T3512] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 70.738819][ T3512] CPU: 0 UID: 0 PID: 3512 Comm: kworker/u8:8 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0 [ 70.749676][ T3512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 70.759734][ T3512] Workqueue: btree_update btree_interior_update_work [ 70.766444][ T3512] RIP: 0010:__bch2_trans_commit+0x9232/0x93c0 [ 70.772527][ T3512] Code: fd 90 0f 0b e8 6f 86 78 fd 90 0f 0b e8 67 86 78 fd 90 0f 0b e8 5f 86 78 fd 90 0f 0b e8 57 86 78 fd 90 0f 0b e8 4f 86 78 fd 90 <0f> 0b e8 47 86 78 fd 90 0f 0b e8 3f 86 78 fd 90 0f 0b e8 37 86 78 [ 70.792159][ T3512] RSP: 0018:ffffc9000c3ff6c0 EFLAGS: 00010293 [ 70.798247][ T3512] RAX: ffffffff841c53b1 RBX: 0000000000000000 RCX: ffff888031c3da00 [ 70.806227][ T3512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.814200][ T3512] RBP: ffffc9000c3ff890 R08: ffffffff841bf6e8 R09: 1ffff1100e6594a8 [ 70.822164][ T3512] R10: dffffc0000000000 R11: ffffed100e6594a9 R12: ffff888073280000 [ 70.830128][ T3512] R13: ffff8880732ca500 R14: 0000000000000044 R15: ffff8880319400d0 [ 70.838088][ T3512] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 70.847006][ T3512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.853586][ T3512] CR2: 0000555572f416f8 CR3: 000000005c964000 CR4: 00000000003526f0 [ 70.861560][ T3512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.869523][ T3512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.877481][ T3512] Call Trace: [ 70.880756][ T3512] [ 70.883679][ T3512] ? __die_body+0x5f/0xb0 [ 70.887999][ T3512] ? die+0x9e/0xc0 [ 70.891719][ T3512] ? do_trap+0x15a/0x3a0 [ 70.895967][ T3512] ? __bch2_trans_commit+0x9232/0x93c0 [ 70.901420][ T3512] ? do_error_trap+0x1dc/0x2c0 [ 70.906177][ T3512] ? __bch2_trans_commit+0x9232/0x93c0 [ 70.911631][ T3512] ? __pfx_do_error_trap+0x10/0x10 [ 70.916735][ T3512] ? report_bug+0x3e8/0x500 [ 70.921240][ T3512] ? handle_invalid_op+0x34/0x40 [ 70.926171][ T3512] ? __bch2_trans_commit+0x9232/0x93c0 [ 70.931620][ T3512] ? exc_invalid_op+0x38/0x50 [ 70.936293][ T3512] ? asm_exc_invalid_op+0x1a/0x20 [ 70.941311][ T3512] ? __bch2_trans_commit+0x3568/0x93c0 [ 70.946767][ T3512] ? __bch2_trans_commit+0x9231/0x93c0 [ 70.952221][ T3512] ? __bch2_trans_commit+0x9232/0x93c0 [ 70.957679][ T3512] ? __pfx___bch2_trans_commit+0x10/0x10 [ 70.963305][ T3512] ? bch2_dev_btree_bitmap_marked+0x2f/0xda0 [ 70.969282][ T3512] ? __bch2_trans_jset_entry_alloc+0x2c7/0x4b0 [ 70.975429][ T3512] ? btree_interior_update_work+0x117a/0x2b10 [ 70.981498][ T3512] btree_interior_update_work+0x1492/0x2b10 [ 70.987398][ T3512] ? __pfx_btree_interior_update_work+0x10/0x10 [ 70.993634][ T3512] ? __pfx_lock_acquire+0x10/0x10 [ 70.998654][ T3512] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 71.004628][ T3512] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.010955][ T3512] ? process_scheduled_works+0x976/0x1850 [ 71.016671][ T3512] process_scheduled_works+0xa63/0x1850 [ 71.022221][ T3512] ? __pfx_process_scheduled_works+0x10/0x10 [ 71.028202][ T3512] ? assign_work+0x364/0x3d0 [ 71.032788][ T3512] worker_thread+0x870/0xd30 [ 71.037377][ T3512] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 71.043257][ T3512] ? __kthread_parkme+0x169/0x1d0 [ 71.048274][ T3512] ? __pfx_worker_thread+0x10/0x10 [ 71.053377][ T3512] kthread+0x2f0/0x390 [ 71.057435][ T3512] ? __pfx_worker_thread+0x10/0x10 [ 71.062537][ T3512] ? __pfx_kthread+0x10/0x10 [ 71.067113][ T3512] ret_from_fork+0x4b/0x80 [ 71.071525][ T3512] ? __pfx_kthread+0x10/0x10 [ 71.076102][ T3512] ret_from_fork_asm+0x1a/0x30 executing program [pid 5833] unlink("./5/binderfs" [pid 5830] rmdir("./5" [pid 5832] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5833] <... unlink resumed>) = 0 [pid 5833] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|000, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./5/bus") = 0 [pid 5833] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5833] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5833] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5833] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5833] close(4) = 0 [pid 5833] rmdir("./5/file0") = 0 [pid 5833] getdents64(3, 0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5833] close(3) = 0 [pid 5833] rmdir("./5") = 0 [pid 5833] mkdir("./6", 0777) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5833] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5833] close(3) = 0 [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555572f38650) = 6059 ./strace-static-x86_64: Process 6059 attached [pid 6059] set_robust_list(0x555572f38660, 24) = 0 [pid 6059] chdir("./6") = 0 [pid 6059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6059] setpgid(0, 0) = 0 [pid 6059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6059] write(3, "1000", 4) = 4 [pid 6059] close(3) = 0 [pid 6059] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6059] write(1, "executing program\n", 18) = 18 [pid 6059] memfd_create("syzkaller", 0) = 3 [pid 6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f272bc00000 [ 71.080871][ T3512] [ 71.083880][ T3512] Modules linked in: [ 71.088319][ T3512] ---[ end trace 0000000000000000 ]--- [ 71.100955][ T3512] RIP: 0010:__bch2_trans_commit+0x9232/0x93c0 [ 71.107246][ T3512] Code: fd 90 0f 0b e8 6f 86 78 fd 90 0f 0b e8 67 86 78 fd 90 0f 0b e8 5f 86 78 fd 90 0f 0b e8 57 86 78 fd 90 0f 0b e8 4f 86 78 fd 90 <0f> 0b e8 47 86 78 fd 90 0f 0b e8 3f 86 78 fd 90 0f 0b e8 37 86 78 [ 71.136501][ T3512] RSP: 0018:ffffc9000c3ff6c0 EFLAGS: 00010293 [ 71.142604][ T3512] RAX: ffffffff841c53b1 RBX: 0000000000000000 RCX: ffff888031c3da00 [ 71.163038][ T3512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.171476][ T3512] RBP: ffffc9000c3ff890 R08: ffffffff841bf6e8 R09: 1ffff1100e6594a8 [pid 6058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5832] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... rmdir resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] mkdir("./6", 0777 [pid 5832] <... openat resumed>) = 4 [pid 5830] <... mkdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] <... openat resumed>) = 3 [pid 5832] getdents64(4, 0x555572f41730 /* 2 entries */, 32768) = 48 [pid 5830] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5832] getdents64(4, 0x555572f41730 /* 0 entries */, 32768) = 0 [pid 5830] close(3) = 0 [pid 5832] close(4) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] rmdir("./4/file0"./strace-static-x86_64: Process 6060 attached [pid 5830] <... clone resumed>, child_tidptr=0x555572f38650) = 6060 [pid 6060] set_robust_list(0x555572f38660, 24 [pid 5832] <... rmdir resumed>) = 0 [pid 6060] <... set_robust_list resumed>) = 0 [pid 5832] getdents64(3, [pid 6060] chdir("./6" [pid 5832] <... getdents64 resumed>0x555572f396f0 /* 0 entries */, 32768) = 0 [pid 5832] close(3) = 0 [pid 6060] <... chdir resumed>) = 0 [pid 5832] rmdir("./4") = 0 [pid 6060] prctl(PR_SET_PDEATHSIG, SIGKILL [ 71.179661][ T3512] R10: dffffc0000000000 R11: ffffed100e6594a9 R12: ffff888073280000 [ 71.188302][ T3512] R13: ffff8880732ca500 R14: 0000000000000044 R15: ffff8880319400d0 [ 71.197815][ T3512] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 71.210695][ T3512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.217736][ T3512] CR2: 00005648995f5098 CR3: 000000007df4e000 CR4: 00000000003526f0 [ 71.226471][ T3512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 5832] mkdir("./5", 0777) = 0 [pid 6060] <... prctl resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5832] ioctl(3, LOOP_CLR_FD [pid 6060] setpgid(0, 0 [pid 5832] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6060] <... setpgid resumed>) = 0 [pid 6060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 71.237164][ T3512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.247015][ T3512] Kernel panic - not syncing: Fatal exception [ 71.253348][ T3512] Kernel Offset: disabled [ 71.257659][ T3512] Rebooting in 86400 seconds..