./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3856985718 <...> Warning: Permanently added '10.128.10.25' (ED25519) to the list of known hosts. execve("./syz-executor3856985718", ["./syz-executor3856985718"], 0x7fff22b58000 /* 10 vars */) = 0 brk(NULL) = 0x55556fcaf000 brk(0x55556fcafd40) = 0x55556fcafd40 arch_prctl(ARCH_SET_FS, 0x55556fcaf3c0) = 0 set_tid_address(0x55556fcaf690) = 5836 set_robust_list(0x55556fcaf6a0, 24) = 0 rseq(0x55556fcafce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3856985718", 4096) = 28 getrandom("\xd8\xa0\xa2\x01\x78\x86\x40\xa7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556fcafd40 brk(0x55556fcd0d40) = 0x55556fcd0d40 brk(0x55556fcd1000) = 0x55556fcd1000 mprotect(0x7f53f82eb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.q6pGyu", 0700) = 0 chmod("./syzkaller.q6pGyu", 0777) = 0 chdir("./syzkaller.q6pGyu") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached , child_tidptr=0x55556fcaf690) = 5838 [pid 5838] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5838] chdir("./0") = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1000", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5838] write(1, "executing program\n", 18executing program ) = 18 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5838] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5838] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5838] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5839 attached [pid 5839] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 5838] <... clone3 resumed> => {parent_tid=[5839]}, 88) = 5839 [pid 5839] <... rseq resumed>) = 0 [pid 5839] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 5839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5839] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5839] memfd_create("syzkaller", 0) = 3 [pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5839] munmap(0x7f53efc00000, 138412032) = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5839] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5839] close(3) = 0 [pid 5839] close(4) = 0 [pid 5839] mkdir("./file1", 0777) = 0 [ 134.728068][ T5839] loop0: detected capacity change from 0 to 32768 [ 134.798603][ T5839] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 134.815166][ T5839] bcachefs (loop0): initializing new filesystem [ 134.823481][ T5839] bcachefs (loop0): going read-write [ 134.830653][ T5839] bcachefs (loop0): marking superblocks [pid 5839] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5839] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5839] chdir("./file1") = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5839] ioctl(4, LOOP_CLR_FD) = 0 [ 134.847813][ T5839] bcachefs (loop0): initializing freespace [ 134.854642][ T5839] bcachefs (loop0): done initializing freespace [ 134.864575][ T5839] bcachefs (loop0): reading snapshots table [ 134.870621][ T5839] bcachefs (loop0): reading snapshots done [ 134.886651][ T5839] bcachefs (loop0): done starting filesystem [pid 5839] close(4) = 0 [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5838] <... futex resumed>) = 0 [pid 5839] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] lseek(-1, 32767, SEEK_SET [pid 5838] <... futex resumed>) = 0 [pid 5839] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... futex resumed>) = 0 [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5838] <... futex resumed>) = 0 [pid 5839] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... openat resumed>) = 4 [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5838] <... futex resumed>) = 0 [pid 5839] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 5838] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = 0 [pid 5838] <... futex resumed>) = 1 [pid 5839] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5838] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... open resumed>) = 5 [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = 0 [pid 5839] <... futex resumed>) = 1 [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5839] memfd_create("syzkaller", 0) = 6 [pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5839] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5839] munmap(0x7f53efc00000, 138412032) = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5839] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5839] ioctl(7, LOOP_CLR_FD) = 0 [pid 5839] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5839] close(7) = 0 [pid 5839] close(6) = 0 [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = 0 [pid 5839] <... futex resumed>) = 1 [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] ftruncate(5, 33587195 [pid 5838] <... futex resumed>) = 0 [pid 5839] <... ftruncate resumed>) = 0 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5838] <... futex resumed>) = 0 [pid 5839] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5838] <... futex resumed>) = 0 [pid 5839] sendfile(5, 5, NULL, 281474978811909 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5838] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5838] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5838] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5851 attached [pid 5851] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 5838] <... clone3 resumed> => {parent_tid=[5851]}, 88) = 5851 [pid 5838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5838] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5851] set_robust_list(0x7f53f81da9a0, 24 [pid 5838] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5851] <... set_robust_list resumed>) = 0 [pid 5851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5851] ftruncate(5, 6 [pid 5839] <... sendfile resumed>) = 1703936 [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] <... ftruncate resumed>) = 0 [pid 5851] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5838] <... futex resumed>) = 0 [pid 5851] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5838] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] write(-1, "0x0000000000000009", 18 [pid 5838] <... futex resumed>) = 0 [pid 5839] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 5839] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = 0 [pid 5839] <... futex resumed>) = 0 [pid 5838] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5838] exit_group(0 [pid 5851] <... futex resumed>) = ? [pid 5839] <... futex resumed>) = ? [pid 5838] <... exit_group resumed>) = ? [pid 5851] +++ exited with 0 +++ [pid 5839] +++ exited with 0 +++ [pid 5838] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 135.212651][ T5851] syz-executor385 (5851) used greatest stack depth: 13680 bytes left newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 135.316075][ T5836] bcachefs (loop0): shutting down [ 135.321351][ T5836] bcachefs (loop0): going read-only [ 135.326710][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 135.335747][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 29 [ 135.360140][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 32 [ 135.370978][ T5836] bcachefs (loop0): shutdown complete, journal seq 33 [ 135.378889][ T5836] bcachefs (loop0): marking filesystem clean [ 135.396876][ T5836] bcachefs (loop0): shutdown complete umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5852 attached [pid 5852] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 5852 [pid 5852] <... set_robust_list resumed>) = 0 [pid 5852] chdir("./1") = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] setpgid(0, 0) = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1000", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5852] write(1, "executing program\n", 18) = 18 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5852] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5852] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5852] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5852] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5853 attached [pid 5853] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 5852] <... clone3 resumed> => {parent_tid=[5853]}, 88) = 5853 [pid 5853] <... rseq resumed>) = 0 [pid 5853] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 5852] rt_sigprocmask(SIG_SETMASK, [], [pid 5853] rt_sigprocmask(SIG_SETMASK, [], [pid 5852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] memfd_create("syzkaller", 0 [pid 5852] <... futex resumed>) = 0 [pid 5853] <... memfd_create resumed>) = 3 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5853] munmap(0x7f53efc00000, 138412032) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5853] close(3) = 0 [pid 5853] close(4) = 0 [pid 5853] mkdir("./file1", 0777) = 0 [ 136.844158][ T5853] loop0: detected capacity change from 0 to 32768 [ 136.925868][ T5853] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 136.942351][ T5853] bcachefs (loop0): initializing new filesystem [ 136.949602][ T5853] bcachefs (loop0): going read-write [ 136.956526][ T5853] bcachefs (loop0): marking superblocks [ 136.969984][ T5853] bcachefs (loop0): initializing freespace [pid 5853] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5853] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5853] chdir("./file1") = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_CLR_FD) = 0 [pid 5853] close(4) = 0 [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5852] <... futex resumed>) = 0 [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] lseek(-1, 32767, SEEK_SET [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5852] <... futex resumed>) = 0 [pid 5853] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 136.976688][ T5853] bcachefs (loop0): done initializing freespace [ 136.984168][ T5853] bcachefs (loop0): reading snapshots table [ 136.990415][ T5853] bcachefs (loop0): reading snapshots done [ 137.003127][ T5853] bcachefs (loop0): done starting filesystem [pid 5852] <... futex resumed>) = 0 [pid 5853] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] <... openat resumed>) = 4 [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5852] <... futex resumed>) = 0 [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 5852] <... futex resumed>) = 0 [pid 5853] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5852] <... futex resumed>) = 0 [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] creat(NULL, 000 [pid 5852] <... futex resumed>) = 0 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5852] <... futex resumed>) = 0 [pid 5853] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5852] <... futex resumed>) = 0 [pid 5853] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] <... open resumed>) = 5 [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5852] <... futex resumed>) = 0 [pid 5853] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5853] memfd_create("syzkaller", 0) = 6 [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5853] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5853] munmap(0x7f53efc00000, 138412032) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5853] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5853] ioctl(7, LOOP_CLR_FD) = 0 [pid 5853] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5853] close(7) = 0 [pid 5853] close(6) = 0 [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5852] <... futex resumed>) = 0 [pid 5853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] ftruncate(5, 33587195 [pid 5852] <... futex resumed>) = 0 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] <... ftruncate resumed>) = 0 [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5852] <... futex resumed>) = 0 [pid 5853] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5853] sendfile(5, 5, NULL, 281474978811909 [pid 5852] <... futex resumed>) = 0 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5852] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5852] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5852] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5864 attached [pid 5864] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 5852] <... clone3 resumed> => {parent_tid=[5864]}, 88) = 5864 [pid 5864] set_robust_list(0x7f53f81da9a0, 24 [pid 5852] rt_sigprocmask(SIG_SETMASK, [], [pid 5864] <... set_robust_list resumed>) = 0 [pid 5852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5852] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] ftruncate(5, 6 [pid 5852] <... futex resumed>) = 0 [pid 5852] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... ftruncate resumed>) = 0 [pid 5853] <... sendfile resumed>) = 1572864 [pid 5864] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... futex resumed>) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5852] <... futex resumed>) = 0 [pid 5864] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5852] <... futex resumed>) = 0 [pid 5853] write(-1, NULL, 0 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... futex resumed>) = 0 [pid 5853] <... futex resumed>) = 1 [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] write(-1, "0x0000000000000009", 18 [pid 5852] <... futex resumed>) = 0 [pid 5853] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5853] <... futex resumed>) = 0 [pid 5853] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 5852] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] <... futex resumed>) = 0 [pid 5853] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] <... futex resumed>) = 0 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5853] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5852] exit_group(0 [pid 5853] <... futex resumed>) = ? [pid 5864] <... futex resumed>) = ? [pid 5852] <... exit_group resumed>) = ? [pid 5853] +++ exited with 0 +++ [pid 5864] +++ exited with 0 +++ [pid 5852] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5852, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 [ 137.400326][ T5836] bcachefs (loop0): shutting down [ 137.405500][ T5836] bcachefs (loop0): going read-only [ 137.410686][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 137.418978][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 26 [ 137.438813][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 28 [ 137.449683][ T5836] bcachefs (loop0): shutdown complete, journal seq 29 [ 137.457380][ T5836] bcachefs (loop0): marking filesystem clean [ 137.471836][ T5836] bcachefs (loop0): shutdown complete umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5866 attached , child_tidptr=0x55556fcaf690) = 5866 [pid 5866] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5866] chdir("./2") = 0 [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5866] setpgid(0, 0) = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5866] write(3, "1000", 4) = 4 [pid 5866] close(3) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5866] write(1, "executing program\n", 18) = 18 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5866] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5866] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5866] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5866] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5867 attached [pid 5867] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 5866] <... clone3 resumed> => {parent_tid=[5867]}, 88) = 5867 [pid 5867] <... rseq resumed>) = 0 [pid 5867] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 5866] rt_sigprocmask(SIG_SETMASK, [], [pid 5867] rt_sigprocmask(SIG_SETMASK, [], [pid 5866] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5867] memfd_create("syzkaller", 0) = 3 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5867] munmap(0x7f53efc00000, 138412032) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5867] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5867] close(3) = 0 [pid 5867] close(4) = 0 [pid 5867] mkdir("./file1", 0777) = 0 [ 138.881359][ T5867] loop0: detected capacity change from 0 to 32768 [ 138.945548][ T5867] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 138.962047][ T5867] bcachefs (loop0): initializing new filesystem [ 138.969286][ T5867] bcachefs (loop0): going read-write [ 138.975808][ T5867] bcachefs (loop0): marking superblocks [ 138.988897][ T5867] bcachefs (loop0): initializing freespace [pid 5867] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5867] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5867] chdir("./file1") = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5867] ioctl(4, LOOP_CLR_FD) = 0 [pid 5867] close(4) = 0 [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5866] <... futex resumed>) = 0 [ 138.996066][ T5867] bcachefs (loop0): done initializing freespace [ 139.005057][ T5867] bcachefs (loop0): reading snapshots table [ 139.011046][ T5867] bcachefs (loop0): reading snapshots done [ 139.023406][ T5867] bcachefs (loop0): done starting filesystem [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] lseek(-1, 32767, SEEK_SET [pid 5866] <... futex resumed>) = 0 [pid 5867] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5866] <... futex resumed>) = 0 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... openat resumed>) = 4 [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... futex resumed>) = 0 [pid 5867] <... futex resumed>) = 1 [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5866] <... futex resumed>) = 0 [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... futex resumed>) = 0 [pid 5866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5867] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5866] <... futex resumed>) = 0 [pid 5867] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5867] <... futex resumed>) = 0 [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5866] <... futex resumed>) = 0 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... open resumed>) = 5 [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5867] memfd_create("syzkaller", 0) = 6 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5867] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5867] munmap(0x7f53efc00000, 138412032) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5867] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5867] ioctl(7, LOOP_CLR_FD) = 0 [pid 5867] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5867] close(7) = 0 [pid 5867] close(6) = 0 [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5867] ftruncate(5, 33587195 [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... ftruncate resumed>) = 0 [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5867] sendfile(5, 5, NULL, 281474978811909 [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5866] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5866] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5866] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5878 attached => {parent_tid=[5878]}, 88) = 5878 [pid 5878] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 5866] rt_sigprocmask(SIG_SETMASK, [], [pid 5878] set_robust_list(0x7f53f81da9a0, 24 [pid 5866] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5878] <... set_robust_list resumed>) = 0 [pid 5866] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] rt_sigprocmask(SIG_SETMASK, [], [pid 5866] <... futex resumed>) = 0 [pid 5878] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5866] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] ftruncate(5, 6 [pid 5867] <... sendfile resumed>) = 1900544 [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5867] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5878] <... ftruncate resumed>) = 0 [pid 5878] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5878] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] <... futex resumed>) = 0 [pid 5867] write(-1, NULL, 0 [pid 5866] <... futex resumed>) = 1 [pid 5867] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5867] <... futex resumed>) = 0 [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] write(-1, "0x0000000000000009", 18) = -1 EBADF (Bad file descriptor) [pid 5866] <... futex resumed>) = 0 [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... futex resumed>) = 0 [pid 5866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5867] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 5866] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5867] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... futex resumed>) = 0 [pid 5867] <... futex resumed>) = 0 [pid 5866] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5866] exit_group(0 [pid 5878] <... futex resumed>) = ? [pid 5867] <... futex resumed>) = ? [pid 5866] <... exit_group resumed>) = ? [pid 5878] +++ exited with 0 +++ [pid 5867] +++ exited with 0 +++ [pid 5866] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 [ 139.475164][ T5836] bcachefs (loop0): shutting down [ 139.480227][ T5836] bcachefs (loop0): going read-only [ 139.485740][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 139.493104][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 32 [ 139.513082][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 34 [ 139.523582][ T5836] bcachefs (loop0): shutdown complete, journal seq 35 [ 139.531156][ T5836] bcachefs (loop0): marking filesystem clean [ 139.546478][ T5836] bcachefs (loop0): shutdown complete umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5879 attached , child_tidptr=0x55556fcaf690) = 5879 [pid 5879] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5879] chdir("./3") = 0 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5879] setpgid(0, 0) = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5879] write(3, "1000", 4) = 4 [pid 5879] close(3) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5879] write(1, "executing program\n", 18) = 18 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5879] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5879] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5879] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5879] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5879] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5880 attached [pid 5880] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 5879] <... clone3 resumed> => {parent_tid=[5880]}, 88) = 5880 [pid 5880] set_robust_list(0x7f53f81fb9a0, 24 [pid 5879] rt_sigprocmask(SIG_SETMASK, [], [pid 5880] <... set_robust_list resumed>) = 0 [pid 5879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5880] rt_sigprocmask(SIG_SETMASK, [], [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5880] memfd_create("syzkaller", 0 [pid 5879] <... futex resumed>) = 0 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5880] <... memfd_create resumed>) = 3 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5880] munmap(0x7f53efc00000, 138412032) = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5880] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5880] close(3) = 0 [pid 5880] close(4) = 0 [pid 5880] mkdir("./file1", 0777) = 0 [ 140.929509][ T5880] loop0: detected capacity change from 0 to 32768 [ 141.002931][ T5880] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 141.019665][ T5880] bcachefs (loop0): initializing new filesystem [ 141.027044][ T5880] bcachefs (loop0): going read-write [ 141.033410][ T5880] bcachefs (loop0): marking superblocks [ 141.046154][ T5880] bcachefs (loop0): initializing freespace [pid 5880] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5880] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5880] chdir("./file1") = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5880] ioctl(4, LOOP_CLR_FD) = 0 [pid 5880] close(4) = 0 [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5880] lseek(-1, 32767, SEEK_SET [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 5879] <... futex resumed>) = 0 [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... futex resumed>) = 0 [pid 5879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5880] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... futex resumed>) = 0 [pid 5880] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... openat resumed>) = 4 [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5880] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 5879] <... futex resumed>) = 0 [pid 5880] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5880] <... futex resumed>) = 0 [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 5879] <... futex resumed>) = 0 [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... futex resumed>) = 0 [pid 5879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5880] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5880] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5879] <... futex resumed>) = 0 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... open resumed>) = 5 [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5880] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... futex resumed>) = 0 [ 141.052956][ T5880] bcachefs (loop0): done initializing freespace [ 141.061283][ T5880] bcachefs (loop0): reading snapshots table [ 141.067408][ T5880] bcachefs (loop0): reading snapshots done [ 141.079945][ T5880] bcachefs (loop0): done starting filesystem [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5880] memfd_create("syzkaller", 0) = 6 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5880] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5880] munmap(0x7f53efc00000, 138412032) = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5880] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5880] ioctl(7, LOOP_CLR_FD) = 0 [pid 5880] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5880] close(7) = 0 [pid 5880] close(6) = 0 [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] <... futex resumed>) = 0 [pid 5880] <... futex resumed>) = 1 [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] ftruncate(5, 33587195 [pid 5879] <... futex resumed>) = 0 [pid 5880] <... ftruncate resumed>) = 0 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] <... futex resumed>) = 0 [pid 5880] <... futex resumed>) = 1 [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] sendfile(5, 5, NULL, 281474978811909 [pid 5879] <... futex resumed>) = 0 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5879] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5879] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5879] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5879] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5891 attached => {parent_tid=[5891]}, 88) = 5891 [pid 5891] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 5879] rt_sigprocmask(SIG_SETMASK, [], [pid 5891] <... rseq resumed>) = 0 [pid 5879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] set_robust_list(0x7f53f81da9a0, 24 [pid 5879] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... set_robust_list resumed>) = 0 [pid 5879] <... futex resumed>) = 0 [pid 5891] rt_sigprocmask(SIG_SETMASK, [], [pid 5879] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] ftruncate(5, 6 [pid 5880] <... sendfile resumed>) = 1835008 [pid 5891] <... ftruncate resumed>) = 0 [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5891] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5891] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5891] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... futex resumed>) = 0 [pid 5879] <... futex resumed>) = 1 [pid 5880] write(-1, NULL, 0 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5880] write(-1, "0x0000000000000009", 18 [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5880] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... futex resumed>) = 0 [pid 5880] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 5879] <... futex resumed>) = 1 [pid 5880] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5879] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5880] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] exit_group(0 [pid 5891] <... futex resumed>) = ? [pid 5880] <... futex resumed>) = ? [pid 5891] +++ exited with 0 +++ [pid 5880] +++ exited with 0 +++ [pid 5879] <... exit_group resumed>) = ? [pid 5879] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 141.372334][ T5880] syz-executor385 (5880) used greatest stack depth: 12696 bytes left getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 [ 141.468963][ T5836] bcachefs (loop0): shutting down [ 141.474023][ T5836] bcachefs (loop0): going read-only [ 141.479299][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 141.486629][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 31 [ 141.505448][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 34 [ 141.516109][ T5836] bcachefs (loop0): shutdown complete, journal seq 35 [ 141.523494][ T5836] bcachefs (loop0): marking filesystem clean [ 141.538831][ T5836] bcachefs (loop0): shutdown complete umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5892 attached , child_tidptr=0x55556fcaf690) = 5892 [pid 5892] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5892] chdir("./4") = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 [pid 5892] close(3) = 0 [pid 5892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5892] write(1, "executing program\n", 18executing program ) = 18 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5892] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5892] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5892] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5893 attached [pid 5893] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 5892] <... clone3 resumed> => {parent_tid=[5893]}, 88) = 5893 [pid 5893] <... rseq resumed>) = 0 [pid 5893] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 5893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... futex resumed>) = 0 [pid 5892] <... futex resumed>) = 1 [pid 5893] memfd_create("syzkaller", 0 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5893] <... memfd_create resumed>) = 3 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5893] munmap(0x7f53efc00000, 138412032) = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5893] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5893] close(3) = 0 [pid 5893] close(4) = 0 [pid 5893] mkdir("./file1", 0777) = 0 [ 142.965776][ T5893] loop0: detected capacity change from 0 to 32768 [ 143.045518][ T5893] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 143.061995][ T5893] bcachefs (loop0): initializing new filesystem [ 143.069226][ T5893] bcachefs (loop0): going read-write [ 143.075840][ T5893] bcachefs (loop0): marking superblocks [ 143.089157][ T5893] bcachefs (loop0): initializing freespace [pid 5893] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5893] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5893] chdir("./file1") = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 143.096238][ T5893] bcachefs (loop0): done initializing freespace [ 143.103999][ T5893] bcachefs (loop0): reading snapshots table [ 143.110079][ T5893] bcachefs (loop0): reading snapshots done [ 143.122387][ T5893] bcachefs (loop0): done starting filesystem [pid 5893] ioctl(4, LOOP_CLR_FD) = 0 [pid 5893] close(4) = 0 [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5893] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] <... openat resumed>) = 4 [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5892] <... futex resumed>) = 0 [pid 5893] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5892] <... futex resumed>) = 0 [pid 5893] creat(NULL, 000 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5892] <... futex resumed>) = 0 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] <... open resumed>) = 5 [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5892] <... futex resumed>) = 0 [pid 5893] memfd_create("syzkaller", 0 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5893] <... memfd_create resumed>) = 6 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5893] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5893] munmap(0x7f53efc00000, 138412032) = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5893] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5893] ioctl(7, LOOP_CLR_FD) = 0 [pid 5893] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5893] close(7) = 0 [pid 5893] close(6) = 0 [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5892] <... futex resumed>) = 0 [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... futex resumed>) = 0 [pid 5892] <... futex resumed>) = 1 [pid 5893] ftruncate(5, 33587195) = 0 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5893] sendfile(5, 5, NULL, 281474978811909 [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5892] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5892] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5892] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0} => {parent_tid=[5904]}, 88) = 5904 ./strace-static-x86_64: Process 5904 attached [pid 5892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5892] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 5904] set_robust_list(0x7f53f81da9a0, 24) = 0 [pid 5904] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5904] ftruncate(5, 6 [pid 5893] <... sendfile resumed>) = 3080192 [pid 5904] <... ftruncate resumed>) = 0 [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5904] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5892] <... futex resumed>) = 0 [pid 5904] <... futex resumed>) = 1 [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] <... futex resumed>) = 0 [pid 5892] <... futex resumed>) = 1 [pid 5893] write(-1, NULL, 0 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5892] <... futex resumed>) = 0 [pid 5893] write(-1, "0x0000000000000009", 18 [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5892] <... futex resumed>) = 0 [pid 5893] <... futex resumed>) = 1 [pid 5892] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 5892] <... futex resumed>) = 0 [pid 5893] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5892] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5892] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] <... futex resumed>) = 0 [pid 5892] exit_group(0 [pid 5893] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5904] <... futex resumed>) = ? [pid 5893] <... futex resumed>) = ? [pid 5892] <... exit_group resumed>) = ? [pid 5904] +++ exited with 0 +++ [pid 5893] +++ exited with 0 +++ [pid 5892] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 [ 143.617361][ T5836] bcachefs (loop0): shutting down [ 143.622451][ T5836] bcachefs (loop0): going read-only [ 143.628324][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 143.636157][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 50 [ 143.656694][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 52 [ 143.667245][ T5836] bcachefs (loop0): shutdown complete, journal seq 53 [ 143.674624][ T5836] bcachefs (loop0): marking filesystem clean [ 143.690946][ T5836] bcachefs (loop0): shutdown complete umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5905 attached , child_tidptr=0x55556fcaf690) = 5905 [pid 5905] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5905] chdir("./5") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5905] write(1, "executing program\n", 18) = 18 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5905] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5905] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5906 attached [pid 5906] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 5905] <... clone3 resumed> => {parent_tid=[5906]}, 88) = 5906 [pid 5906] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 5905] rt_sigprocmask(SIG_SETMASK, [], [pid 5906] rt_sigprocmask(SIG_SETMASK, [], [pid 5905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5906] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] memfd_create("syzkaller", 0 [pid 5905] <... futex resumed>) = 0 [pid 5906] <... memfd_create resumed>) = 3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5906] munmap(0x7f53efc00000, 138412032) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5906] close(3) = 0 [pid 5906] close(4) = 0 [pid 5906] mkdir("./file1", 0777) = 0 [ 145.070973][ T5906] loop0: detected capacity change from 0 to 32768 [ 145.134591][ T5906] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 145.151471][ T5906] bcachefs (loop0): initializing new filesystem [ 145.159140][ T5906] bcachefs (loop0): going read-write [ 145.166174][ T5906] bcachefs (loop0): marking superblocks [ 145.178669][ T5906] bcachefs (loop0): initializing freespace [pid 5906] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5906] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5906] chdir("./file1") = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5906] ioctl(4, LOOP_CLR_FD) = 0 [pid 5906] close(4) = 0 [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 145.185688][ T5906] bcachefs (loop0): done initializing freespace [ 145.194064][ T5906] bcachefs (loop0): reading snapshots table [ 145.200102][ T5906] bcachefs (loop0): reading snapshots done [ 145.212038][ T5906] bcachefs (loop0): done starting filesystem [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5906] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5906] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = 0 [pid 5906] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5905] <... futex resumed>) = 1 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... openat resumed>) = 4 [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5906] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] creat(NULL, 000 [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... futex resumed>) = 0 [pid 5905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5906] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5906] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5905] <... futex resumed>) = 0 [pid 5906] <... open resumed>) = 5 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] <... futex resumed>) = 0 [pid 5906] <... futex resumed>) = 1 [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5906] memfd_create("syzkaller", 0) = 6 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5906] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5906] munmap(0x7f53efc00000, 138412032) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5906] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5906] ioctl(7, LOOP_CLR_FD) = 0 [pid 5906] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5906] close(7) = 0 [pid 5906] close(6) = 0 [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5906] ftruncate(5, 33587195 [pid 5905] <... futex resumed>) = 0 [pid 5906] <... ftruncate resumed>) = 0 [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5906] <... futex resumed>) = 0 [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] sendfile(5, 5, NULL, 281474978811909 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5905] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5905] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5917 attached [pid 5917] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 5905] <... clone3 resumed> => {parent_tid=[5917]}, 88) = 5917 [pid 5917] <... rseq resumed>) = 0 [pid 5905] rt_sigprocmask(SIG_SETMASK, [], [pid 5917] set_robust_list(0x7f53f81da9a0, 24 [pid 5905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5917] <... set_robust_list resumed>) = 0 [pid 5905] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5917] rt_sigprocmask(SIG_SETMASK, [], [pid 5905] <... futex resumed>) = 0 [pid 5917] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5905] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5917] ftruncate(5, 6 [pid 5906] <... sendfile resumed>) = 1835008 [pid 5917] <... ftruncate resumed>) = 0 [pid 5917] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] <... futex resumed>) = 0 [pid 5917] <... futex resumed>) = 1 [pid 5906] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5917] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5906] write(-1, NULL, 0 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] write(-1, "0x0000000000000009", 18 [pid 5905] <... futex resumed>) = 0 [pid 5906] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 5905] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... futex resumed>) = 0 [pid 5905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5906] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] exit_group(0 [pid 5917] <... futex resumed>) = ? [pid 5906] <... futex resumed>) = ? [pid 5905] <... exit_group resumed>) = ? [pid 5917] +++ exited with 0 +++ [pid 5906] +++ exited with 0 +++ [pid 5905] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 [ 145.584302][ T5836] bcachefs (loop0): shutting down [ 145.589634][ T5836] bcachefs (loop0): going read-only [ 145.594882][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 145.603028][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 31 [ 145.622751][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 35 [ 145.633592][ T5836] bcachefs (loop0): shutdown complete, journal seq 36 [ 145.641199][ T5836] bcachefs (loop0): marking filesystem clean [ 145.655929][ T5836] bcachefs (loop0): shutdown complete umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5918 attached [pid 5918] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 5918 [pid 5918] chdir("./6") = 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5918] setpgid(0, 0) = 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5918] write(3, "1000", 4) = 4 [pid 5918] close(3) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5918] write(1, "executing program\n", 18) = 18 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5918] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5918] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5918] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5918] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5919 attached [pid 5919] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 5918] <... clone3 resumed> => {parent_tid=[5919]}, 88) = 5919 [pid 5919] set_robust_list(0x7f53f81fb9a0, 24 [pid 5918] rt_sigprocmask(SIG_SETMASK, [], [pid 5919] <... set_robust_list resumed>) = 0 [pid 5918] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5919] rt_sigprocmask(SIG_SETMASK, [], [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5919] memfd_create("syzkaller", 0) = 3 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5919] munmap(0x7f53efc00000, 138412032) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5919] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5919] close(3) = 0 [pid 5919] close(4) = 0 [pid 5919] mkdir("./file1", 0777) = 0 [ 147.008276][ T5919] loop0: detected capacity change from 0 to 32768 [ 147.082862][ T5919] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 147.099403][ T5919] bcachefs (loop0): initializing new filesystem [ 147.107141][ T5919] bcachefs (loop0): going read-write [ 147.113105][ T5919] bcachefs (loop0): marking superblocks [ 147.125893][ T5919] bcachefs (loop0): initializing freespace [pid 5919] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5919] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5919] chdir("./file1") = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5919] ioctl(4, LOOP_CLR_FD) = 0 [ 147.133125][ T5919] bcachefs (loop0): done initializing freespace [ 147.140537][ T5919] bcachefs (loop0): reading snapshots table [ 147.147338][ T5919] bcachefs (loop0): reading snapshots done [ 147.159931][ T5919] bcachefs (loop0): done starting filesystem [pid 5919] close(4) = 0 [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5919] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... futex resumed>) = 0 [pid 5918] <... futex resumed>) = 1 [pid 5919] lseek(-1, 32767, SEEK_SET [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... futex resumed>) = 0 [pid 5918] <... futex resumed>) = 0 [pid 5919] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502) = 4 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5919] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... futex resumed>) = 0 [pid 5918] <... futex resumed>) = 1 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5918] <... futex resumed>) = 0 [pid 5919] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] <... open resumed>) = 5 [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5918] <... futex resumed>) = 0 [pid 5919] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5918] <... futex resumed>) = 0 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5919] memfd_create("syzkaller", 0) = 6 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5919] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5919] munmap(0x7f53efc00000, 138412032) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5919] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5919] ioctl(7, LOOP_CLR_FD) = 0 [pid 5919] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5919] close(7) = 0 [pid 5919] close(6) = 0 [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5918] <... futex resumed>) = 0 [pid 5919] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] ftruncate(5, 33587195 [pid 5918] <... futex resumed>) = 0 [pid 5919] <... ftruncate resumed>) = 0 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5918] <... futex resumed>) = 0 [pid 5919] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5918] <... futex resumed>) = 0 [pid 5919] sendfile(5, 5, NULL, 281474978811909 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5918] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5918] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5918] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5918] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5930 attached [pid 5930] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 5918] <... clone3 resumed> => {parent_tid=[5930]}, 88) = 5930 [pid 5930] <... rseq resumed>) = 0 [pid 5918] rt_sigprocmask(SIG_SETMASK, [], [pid 5930] set_robust_list(0x7f53f81da9a0, 24 [pid 5918] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5930] <... set_robust_list resumed>) = 0 [pid 5918] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] rt_sigprocmask(SIG_SETMASK, [], [pid 5918] <... futex resumed>) = 0 [pid 5930] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5918] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] ftruncate(5, 6) = 0 [pid 5919] <... sendfile resumed>) = 1769472 [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... futex resumed>) = 0 [pid 5918] <... futex resumed>) = 0 [pid 5930] <... futex resumed>) = 1 [pid 5919] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5919] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5918] <... futex resumed>) = 0 [pid 5919] write(-1, NULL, 0 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5918] <... futex resumed>) = 0 [pid 5919] write(-1, "0x0000000000000009", 18 [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5918] <... futex resumed>) = 0 [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] <... futex resumed>) = 0 [pid 5918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5919] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5918] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5919] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5918] <... futex resumed>) = 0 [pid 5919] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 5918] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5919] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5919] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] <... futex resumed>) = 0 [pid 5919] <... futex resumed>) = 1 [pid 5918] exit_group(0 [pid 5919] ???( [pid 5918] <... exit_group resumed>) = ? [pid 5930] <... futex resumed>) = ? [pid 5919] <... ??? resumed>) = ? [pid 5919] +++ exited with 0 +++ [pid 5930] +++ exited with 0 +++ [pid 5918] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 [ 147.623202][ T5836] bcachefs (loop0): shutting down [ 147.628413][ T5836] bcachefs (loop0): going read-only [ 147.633602][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 147.641382][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 30 [ 147.660854][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 33 [ 147.671288][ T5836] bcachefs (loop0): shutdown complete, journal seq 34 [ 147.678969][ T5836] bcachefs (loop0): marking filesystem clean [ 147.694664][ T5836] bcachefs (loop0): shutdown complete umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5931 attached , child_tidptr=0x55556fcaf690) = 5931 [pid 5931] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5931] chdir("./7") = 0 [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5931] setpgid(0, 0) = 0 [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5931] write(3, "1000", 4) = 4 [pid 5931] close(3) = 0 [pid 5931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5931] write(1, "executing program\n", 18executing program ) = 18 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5931] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5931] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5931] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5931] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5932 attached [pid 5932] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 5932] set_robust_list(0x7f53f81fb9a0, 24 [pid 5931] <... clone3 resumed> => {parent_tid=[5932]}, 88) = 5932 [pid 5932] <... set_robust_list resumed>) = 0 [pid 5931] rt_sigprocmask(SIG_SETMASK, [], [pid 5932] rt_sigprocmask(SIG_SETMASK, [], [pid 5931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5932] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5932] memfd_create("syzkaller", 0 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5932] <... memfd_create resumed>) = 3 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5932] munmap(0x7f53efc00000, 138412032) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5932] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5932] close(3) = 0 [pid 5932] close(4) = 0 [pid 5932] mkdir("./file1", 0777) = 0 [ 149.137865][ T5932] loop0: detected capacity change from 0 to 32768 [ 149.210813][ T5932] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 149.227615][ T5932] bcachefs (loop0): initializing new filesystem [ 149.234717][ T5932] bcachefs (loop0): going read-write [ 149.240946][ T5932] bcachefs (loop0): marking superblocks [ 149.254816][ T5932] bcachefs (loop0): initializing freespace [pid 5932] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5932] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5932] chdir("./file1") = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5932] ioctl(4, LOOP_CLR_FD) = 0 [ 149.261731][ T5932] bcachefs (loop0): done initializing freespace [ 149.269727][ T5932] bcachefs (loop0): reading snapshots table [ 149.275765][ T5932] bcachefs (loop0): reading snapshots done [ 149.288004][ T5932] bcachefs (loop0): done starting filesystem [pid 5932] close(4) = 0 [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] lseek(-1, 32767, SEEK_SET [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 1 [pid 5932] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... openat resumed>) = 4 [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] creat(NULL, 000 [pid 5931] <... futex resumed>) = 0 [pid 5932] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5932] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5932] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5931] <... futex resumed>) = 0 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... open resumed>) = 5 [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 1 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5932] memfd_create("syzkaller", 0) = 6 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5932] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5932] munmap(0x7f53efc00000, 138412032) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5932] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5932] ioctl(7, LOOP_CLR_FD) = 0 [pid 5932] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5932] close(7) = 0 [pid 5932] close(6) = 0 [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 0 [pid 5932] <... futex resumed>) = 1 [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] ftruncate(5, 33587195 [pid 5931] <... futex resumed>) = 0 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... ftruncate resumed>) = 0 [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] sendfile(5, 5, NULL, 281474978811909 [pid 5931] <... futex resumed>) = 0 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5931] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5931] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5931] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5944 attached => {parent_tid=[5944]}, 88) = 5944 [pid 5944] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 5931] rt_sigprocmask(SIG_SETMASK, [], [pid 5944] <... rseq resumed>) = 0 [pid 5931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5944] set_robust_list(0x7f53f81da9a0, 24 [pid 5931] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... set_robust_list resumed>) = 0 [pid 5931] <... futex resumed>) = 0 [pid 5944] rt_sigprocmask(SIG_SETMASK, [], [pid 5931] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5944] ftruncate(5, 6 [pid 5932] <... sendfile resumed>) = 1835008 [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5932] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5944] <... ftruncate resumed>) = 0 [pid 5944] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5944] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 1 [pid 5932] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5932] <... futex resumed>) = 0 [pid 5932] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] <... futex resumed>) = 0 [pid 5932] write(-1, "0x0000000000000009", 18) = -1 EBADF (Bad file descriptor) [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5932] <... futex resumed>) = 0 [pid 5931] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... futex resumed>) = 0 [pid 5932] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] exit_group(0 [pid 5932] <... futex resumed>) = ? [pid 5944] <... futex resumed>) = ? [pid 5944] +++ exited with 0 +++ [pid 5932] +++ exited with 0 +++ [pid 5931] <... exit_group resumed>) = ? [pid 5931] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 [ 149.748997][ T5836] bcachefs (loop0): shutting down [ 149.754061][ T5836] bcachefs (loop0): going read-only [ 149.759452][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 149.767004][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 31 [ 149.787962][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 34 [ 149.798690][ T5836] bcachefs (loop0): shutdown complete, journal seq 35 [ 149.806275][ T5836] bcachefs (loop0): marking filesystem clean [ 149.821344][ T5836] bcachefs (loop0): shutdown complete umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5945 attached [pid 5945] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 5945 [pid 5945] chdir("./8") = 0 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0) = 0 [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5945] write(3, "1000", 4) = 4 [pid 5945] close(3) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5945] write(1, "executing program\n", 18executing program ) = 18 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5945] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5945] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5946 attached => {parent_tid=[5946]}, 88) = 5946 [pid 5946] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 5945] rt_sigprocmask(SIG_SETMASK, [], [pid 5946] <... rseq resumed>) = 0 [pid 5945] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5946] set_robust_list(0x7f53f81fb9a0, 24 [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... set_robust_list resumed>) = 0 [pid 5945] <... futex resumed>) = 0 [pid 5946] rt_sigprocmask(SIG_SETMASK, [], [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5946] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5946] memfd_create("syzkaller", 0) = 3 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5946] munmap(0x7f53efc00000, 138412032) = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5946] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5946] close(3) = 0 [pid 5946] close(4) = 0 [pid 5946] mkdir("./file1", 0777) = 0 [ 151.155238][ T5946] loop0: detected capacity change from 0 to 32768 [ 151.228546][ T5946] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 151.245059][ T5946] bcachefs (loop0): initializing new filesystem [ 151.252249][ T5946] bcachefs (loop0): going read-write [ 151.258610][ T5946] bcachefs (loop0): marking superblocks [ 151.268417][ T5946] bcachefs (loop0): initializing freespace [pid 5946] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5946] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5946] chdir("./file1") = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5946] ioctl(4, LOOP_CLR_FD) = 0 [ 151.274879][ T5946] bcachefs (loop0): done initializing freespace [ 151.284291][ T5946] bcachefs (loop0): reading snapshots table [ 151.290607][ T5946] bcachefs (loop0): reading snapshots done [ 151.303093][ T5946] bcachefs (loop0): done starting filesystem [pid 5946] close(4) = 0 [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = 0 [pid 5945] <... futex resumed>) = 1 [pid 5946] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = 0 [pid 5945] <... futex resumed>) = 0 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502) = 4 [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5946] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5945] <... futex resumed>) = 0 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5946] creat(NULL, 000 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5946] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5945] <... futex resumed>) = 0 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... open resumed>) = 5 [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5945] <... futex resumed>) = 0 [pid 5946] <... futex resumed>) = 1 [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5946] memfd_create("syzkaller", 0) = 6 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5946] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5946] munmap(0x7f53efc00000, 138412032) = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5946] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5946] ioctl(7, LOOP_CLR_FD) = 0 [pid 5946] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5946] close(7) = 0 [pid 5946] close(6) = 0 [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5946] ftruncate(5, 33587195 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... ftruncate resumed>) = 0 [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5946] sendfile(5, 5, NULL, 281474978811909 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5945] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5945] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5957 attached [pid 5957] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 5957] set_robust_list(0x7f53f81da9a0, 24 [pid 5945] <... clone3 resumed> => {parent_tid=[5957]}, 88) = 5957 [pid 5957] <... set_robust_list resumed>) = 0 [pid 5957] rt_sigprocmask(SIG_SETMASK, [], [pid 5945] rt_sigprocmask(SIG_SETMASK, [], [pid 5957] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5945] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5957] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5957] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5957] ftruncate(5, 6 [pid 5945] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... sendfile resumed>) = 2228224 [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5957] <... ftruncate resumed>) = 0 [pid 5957] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5957] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5946] <... futex resumed>) = 0 [pid 5946] write(-1, NULL, 0 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = 0 [pid 5945] <... futex resumed>) = 1 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] write(-1, "0x0000000000000009", 18) = -1 EBADF (Bad file descriptor) [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5946] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 5946] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5945] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... futex resumed>) = 0 [pid 5946] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] exit_group(0 [pid 5957] <... futex resumed>) = ? [pid 5946] <... futex resumed>) = ? [pid 5945] <... exit_group resumed>) = ? [pid 5957] +++ exited with 0 +++ [pid 5946] +++ exited with 0 +++ [pid 5945] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 [ 151.785995][ T5836] bcachefs (loop0): shutting down [ 151.791067][ T5836] bcachefs (loop0): going read-only [ 151.796579][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 151.804073][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 37 [ 151.823925][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 40 [ 151.834367][ T5836] bcachefs (loop0): shutdown complete, journal seq 41 [ 151.842058][ T5836] bcachefs (loop0): marking filesystem clean [ 151.858192][ T5836] bcachefs (loop0): shutdown complete umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5958 attached [pid 5958] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 5958 [pid 5958] <... set_robust_list resumed>) = 0 [pid 5958] chdir("./9") = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5958] write(3, "1000", 4) = 4 [pid 5958] close(3) = 0 [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5958] write(1, "executing program\n", 18) = 18 [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5958] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5958] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5958] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5959 attached [pid 5959] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 5958] <... clone3 resumed> => {parent_tid=[5959]}, 88) = 5959 [pid 5959] <... rseq resumed>) = 0 [pid 5959] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 5959] rt_sigprocmask(SIG_SETMASK, [], [pid 5958] rt_sigprocmask(SIG_SETMASK, [], [pid 5959] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5958] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] memfd_create("syzkaller", 0 [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5959] <... memfd_create resumed>) = 3 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5959] munmap(0x7f53efc00000, 138412032) = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5959] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5959] close(3) = 0 [pid 5959] close(4) = 0 [pid 5959] mkdir("./file1", 0777) = 0 [ 153.240647][ T5959] loop0: detected capacity change from 0 to 32768 [ 153.303719][ T5959] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 153.320565][ T5959] bcachefs (loop0): initializing new filesystem [ 153.327795][ T5959] bcachefs (loop0): going read-write [ 153.334703][ T5959] bcachefs (loop0): marking superblocks [ 153.347524][ T5959] bcachefs (loop0): initializing freespace [pid 5959] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5959] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5959] chdir("./file1") = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5959] ioctl(4, LOOP_CLR_FD) = 0 [pid 5959] close(4) = 0 [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5959] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 0 [pid 5958] <... futex resumed>) = 1 [pid 5959] lseek(-1, 32767, SEEK_SET [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] <... openat resumed>) = 4 [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 1 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 5958] <... futex resumed>) = 0 [pid 5959] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 1 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] creat(NULL, 000 [pid 5958] <... futex resumed>) = 0 [pid 5959] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 1 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] <... open resumed>) = 5 [ 153.354284][ T5959] bcachefs (loop0): done initializing freespace [ 153.362233][ T5959] bcachefs (loop0): reading snapshots table [ 153.368259][ T5959] bcachefs (loop0): reading snapshots done [ 153.381468][ T5959] bcachefs (loop0): done starting filesystem [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5959] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 0 [pid 5958] <... futex resumed>) = 1 [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5959] memfd_create("syzkaller", 0) = 6 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5959] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5959] munmap(0x7f53efc00000, 138412032) = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5959] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5959] ioctl(7, LOOP_CLR_FD) = 0 [pid 5959] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5959] close(7) = 0 [pid 5959] close(6) = 0 [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5959] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 0 [pid 5958] <... futex resumed>) = 1 [pid 5959] ftruncate(5, 33587195 [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] <... ftruncate resumed>) = 0 [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5959] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] <... futex resumed>) = 0 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 0 [pid 5958] <... futex resumed>) = 1 [pid 5959] sendfile(5, 5, NULL, 281474978811909 [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5958] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5958] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5958] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5970 attached [pid 5970] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 5958] <... clone3 resumed> => {parent_tid=[5970]}, 88) = 5970 [pid 5958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5958] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] set_robust_list(0x7f53f81da9a0, 24) = 0 [pid 5970] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5970] ftruncate(5, 6) = 0 [pid 5970] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... sendfile resumed>) = 2162688 [pid 5970] <... futex resumed>) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5970] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] write(-1, NULL, 0 [pid 5958] <... futex resumed>) = 0 [pid 5959] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] write(-1, "0x0000000000000009", 18 [pid 5958] <... futex resumed>) = 0 [pid 5959] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5958] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 5958] <... futex resumed>) = 0 [pid 5959] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5958] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5958] <... futex resumed>) = 0 [pid 5959] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5958] exit_group(0 [pid 5959] <... futex resumed>) = ? [pid 5958] <... exit_group resumed>) = ? [pid 5970] <... futex resumed>) = ? [pid 5959] +++ exited with 0 +++ [pid 5970] +++ exited with 0 +++ [pid 5958] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 [ 153.811157][ T5836] bcachefs (loop0): shutting down [ 153.816403][ T5836] bcachefs (loop0): going read-only [ 153.821619][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 153.829796][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 35 [ 153.849801][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 38 [ 153.860719][ T5836] bcachefs (loop0): shutdown complete, journal seq 39 [ 153.868345][ T5836] bcachefs (loop0): marking filesystem clean [ 153.882966][ T5836] bcachefs (loop0): shutdown complete umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5971 attached [pid 5971] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 5971 [pid 5971] chdir("./10") = 0 [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5971] setpgid(0, 0) = 0 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5971] write(3, "1000", 4) = 4 [pid 5971] close(3) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5971] write(1, "executing program\n", 18) = 18 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5971] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5971] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5971] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5971] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5972 attached [pid 5972] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 5971] <... clone3 resumed> => {parent_tid=[5972]}, 88) = 5972 [pid 5972] set_robust_list(0x7f53f81fb9a0, 24 [pid 5971] rt_sigprocmask(SIG_SETMASK, [], [pid 5972] <... set_robust_list resumed>) = 0 [pid 5971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5972] rt_sigprocmask(SIG_SETMASK, [], [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5972] memfd_create("syzkaller", 0 [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5972] <... memfd_create resumed>) = 3 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5972] munmap(0x7f53efc00000, 138412032) = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5972] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5972] close(3) = 0 [pid 5972] close(4) = 0 [pid 5972] mkdir("./file1", 0777) = 0 [ 155.304278][ T5972] loop0: detected capacity change from 0 to 32768 [ 155.369388][ T5972] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 155.385964][ T5972] bcachefs (loop0): initializing new filesystem [ 155.393198][ T5972] bcachefs (loop0): going read-write [ 155.400071][ T5972] bcachefs (loop0): marking superblocks [ 155.413108][ T5972] bcachefs (loop0): initializing freespace [pid 5972] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5972] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5972] chdir("./file1") = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5972] ioctl(4, LOOP_CLR_FD) = 0 [pid 5972] close(4) = 0 [ 155.420094][ T5972] bcachefs (loop0): done initializing freespace [ 155.427811][ T5972] bcachefs (loop0): reading snapshots table [ 155.433771][ T5972] bcachefs (loop0): reading snapshots done [ 155.446153][ T5972] bcachefs (loop0): done starting filesystem [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5972] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] <... openat resumed>) = 4 [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5971] <... futex resumed>) = 0 [pid 5972] creat(NULL, 000 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] <... open resumed>) = 5 [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5972] memfd_create("syzkaller", 0) = 6 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5972] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5972] munmap(0x7f53efc00000, 138412032) = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5972] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5972] ioctl(7, LOOP_CLR_FD) = 0 [pid 5972] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5972] close(7) = 0 [pid 5972] close(6) = 0 [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] ftruncate(5, 33587195 [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] <... ftruncate resumed>) = 0 [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... futex resumed>) = 0 [pid 5972] <... futex resumed>) = 1 [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] sendfile(5, 5, NULL, 281474978811909 [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5971] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5971] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5971] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5971] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5983 attached => {parent_tid=[5983]}, 88) = 5983 [pid 5983] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 5971] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5983] <... rseq resumed>) = 0 [pid 5971] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] set_robust_list(0x7f53f81da9a0, 24 [pid 5971] <... futex resumed>) = 0 [pid 5983] <... set_robust_list resumed>) = 0 [pid 5971] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5983] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5983] ftruncate(5, 6 [pid 5972] <... sendfile resumed>) = 1900544 [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... ftruncate resumed>) = 0 [pid 5972] <... futex resumed>) = 0 [pid 5972] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5983] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5983] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... futex resumed>) = 0 [pid 5971] <... futex resumed>) = 1 [pid 5972] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... futex resumed>) = 0 [pid 5972] <... futex resumed>) = 1 [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5972] write(-1, "0x0000000000000009", 18 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5971] <... futex resumed>) = 0 [pid 5971] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 5972] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] exit_group(0 [pid 5972] <... futex resumed>) = ? [pid 5971] <... exit_group resumed>) = ? [pid 5972] +++ exited with 0 +++ [pid 5983] <... futex resumed>) = ? [pid 5983] +++ exited with 0 +++ [pid 5971] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 [ 155.929982][ T5836] bcachefs (loop0): shutting down [ 155.935200][ T5836] bcachefs (loop0): going read-only [ 155.940439][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 155.948905][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 32 [ 155.969313][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 35 [ 155.979665][ T5836] bcachefs (loop0): shutdown complete, journal seq 36 [ 155.987309][ T5836] bcachefs (loop0): marking filesystem clean [ 156.001853][ T5836] bcachefs (loop0): shutdown complete umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5984 attached [pid 5984] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 5984 [pid 5984] <... set_robust_list resumed>) = 0 [pid 5984] chdir("./11") = 0 [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5984] setpgid(0, 0) = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5984] write(3, "1000", 4) = 4 [pid 5984] close(3) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5984] write(1, "executing program\n", 18) = 18 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5984] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5984] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5984] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5984] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5985 attached => {parent_tid=[5985]}, 88) = 5985 [pid 5985] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 5984] rt_sigprocmask(SIG_SETMASK, [], [pid 5985] <... rseq resumed>) = 0 [pid 5984] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5985] set_robust_list(0x7f53f81fb9a0, 24 [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... set_robust_list resumed>) = 0 [pid 5985] rt_sigprocmask(SIG_SETMASK, [], [pid 5984] <... futex resumed>) = 0 [pid 5985] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5985] memfd_create("syzkaller", 0) = 3 [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5985] munmap(0x7f53efc00000, 138412032) = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5985] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5985] close(3) = 0 [pid 5985] close(4) = 0 [pid 5985] mkdir("./file1", 0777) = 0 [ 157.358405][ T5985] loop0: detected capacity change from 0 to 32768 [ 157.421395][ T5985] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 157.437876][ T5985] bcachefs (loop0): initializing new filesystem [ 157.445244][ T5985] bcachefs (loop0): going read-write [ 157.451574][ T5985] bcachefs (loop0): marking superblocks [ 157.465701][ T5985] bcachefs (loop0): initializing freespace [pid 5985] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5985] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5985] chdir("./file1") = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5985] ioctl(4, LOOP_CLR_FD) = 0 [pid 5985] close(4) = 0 [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = 0 [pid 5984] <... futex resumed>) = 1 [pid 5985] lseek(-1, 32767, SEEK_SET [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = 0 [ 157.472611][ T5985] bcachefs (loop0): done initializing freespace [ 157.480545][ T5985] bcachefs (loop0): reading snapshots table [ 157.486566][ T5985] bcachefs (loop0): reading snapshots done [ 157.499255][ T5985] bcachefs (loop0): done starting filesystem [pid 5984] <... futex resumed>) = 1 [pid 5985] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] <... openat resumed>) = 4 [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] creat(NULL, 000 [pid 5984] <... futex resumed>) = 0 [pid 5985] <... creat resumed>) = -1 EFAULT (Bad address) [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] <... futex resumed>) = 0 [pid 5984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... open resumed>) = 5 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5985] memfd_create("syzkaller", 0) = 6 [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5985] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5985] munmap(0x7f53efc00000, 138412032) = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5985] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5985] ioctl(7, LOOP_CLR_FD) = 0 [pid 5985] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5985] close(7) = 0 [pid 5985] close(6) = 0 [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] <... futex resumed>) = 0 [pid 5985] ftruncate(5, 33587195 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] <... ftruncate resumed>) = 0 [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] sendfile(5, 5, NULL, 281474978811909 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5984] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5984] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5984] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5984] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 5996 attached [pid 5996] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 5984] <... clone3 resumed> => {parent_tid=[5996]}, 88) = 5996 [pid 5996] <... rseq resumed>) = 0 [pid 5984] rt_sigprocmask(SIG_SETMASK, [], [pid 5996] set_robust_list(0x7f53f81da9a0, 24 [pid 5984] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5996] <... set_robust_list resumed>) = 0 [pid 5996] rt_sigprocmask(SIG_SETMASK, [], [pid 5984] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5996] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5996] ftruncate(5, 6 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] <... sendfile resumed>) = 1835008 [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5996] <... ftruncate resumed>) = 0 [pid 5996] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5985] <... futex resumed>) = 0 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] write(-1, NULL, 0 [pid 5996] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] <... futex resumed>) = 0 [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = 0 [pid 5985] write(-1, "0x0000000000000009", 18 [pid 5984] <... futex resumed>) = 1 [pid 5985] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5984] <... futex resumed>) = 0 [pid 5985] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 5984] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5985] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = 1 [pid 5984] exit_group(0 [pid 5985] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5996] <... futex resumed>) = ? [pid 5985] <... futex resumed>) = ? [pid 5984] <... exit_group resumed>) = ? [pid 5996] +++ exited with 0 +++ [pid 5985] +++ exited with 0 +++ [pid 5984] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 [ 157.923115][ T5836] bcachefs (loop0): shutting down [ 157.928315][ T5836] bcachefs (loop0): going read-only [ 157.933509][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 157.941041][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 31 [ 157.961093][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 34 [ 157.971543][ T5836] bcachefs (loop0): shutdown complete, journal seq 35 [ 157.979145][ T5836] bcachefs (loop0): marking filesystem clean [ 157.994153][ T5836] bcachefs (loop0): shutdown complete umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5997 attached [pid 5997] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5997] chdir("./12" [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 5997 [pid 5997] <... chdir resumed>) = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5997] setpgid(0, 0) = 0 [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5997] write(3, "1000", 4) = 4 [pid 5997] close(3) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5997] write(1, "executing program\n", 18executing program ) = 18 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 5997] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 5997] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 5998 attached [pid 5998] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 5997] <... clone3 resumed> => {parent_tid=[5998]}, 88) = 5998 [pid 5998] <... rseq resumed>) = 0 [pid 5998] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 5998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5998] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... futex resumed>) = 0 [pid 5997] <... futex resumed>) = 1 [pid 5998] memfd_create("syzkaller", 0 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5998] <... memfd_create resumed>) = 3 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5998] munmap(0x7f53efc00000, 138412032) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5998] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5998] close(3) = 0 [pid 5998] close(4) = 0 [pid 5998] mkdir("./file1", 0777) = 0 [ 159.336981][ T5998] loop0: detected capacity change from 0 to 32768 [ 159.401962][ T5998] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 159.418783][ T5998] bcachefs (loop0): initializing new filesystem [ 159.427373][ T5998] bcachefs (loop0): going read-write [ 159.434145][ T5998] bcachefs (loop0): marking superblocks [pid 5998] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 5998] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5998] chdir("./file1") = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5998] ioctl(4, LOOP_CLR_FD) = 0 [pid 5998] close(4) = 0 [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5998] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... futex resumed>) = 0 [pid 5997] <... futex resumed>) = 1 [pid 5998] lseek(-1, 32767, SEEK_SET [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... futex resumed>) = 0 [ 159.447464][ T5998] bcachefs (loop0): initializing freespace [ 159.454271][ T5998] bcachefs (loop0): done initializing freespace [ 159.462495][ T5998] bcachefs (loop0): reading snapshots table [ 159.468538][ T5998] bcachefs (loop0): reading snapshots done [ 159.480756][ T5998] bcachefs (loop0): done starting filesystem [pid 5998] <... futex resumed>) = 1 [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 5997] <... futex resumed>) = 0 [pid 5998] <... openat resumed>) = 4 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5998] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [pid 5998] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... futex resumed>) = 0 [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] <... futex resumed>) = 1 [pid 5998] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... futex resumed>) = 0 [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] <... futex resumed>) = 1 [pid 5998] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... futex resumed>) = 0 [pid 5998] <... futex resumed>) = 1 [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5998] memfd_create("syzkaller", 0) = 6 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 5998] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5998] munmap(0x7f53efc00000, 138412032) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 5998] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5998] ioctl(7, LOOP_CLR_FD) = 0 [pid 5998] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5998] close(7) = 0 [pid 5998] close(6) = 0 [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5998] ftruncate(5, 33587195 [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... ftruncate resumed>) = 0 [pid 5997] <... futex resumed>) = 0 [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] <... futex resumed>) = 0 [pid 5997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5998] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5998] sendfile(5, 5, NULL, 281474978811909 [pid 5997] <... futex resumed>) = 0 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5997] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 5997] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6009 attached [pid 6009] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 6009] set_robust_list(0x7f53f81da9a0, 24 [pid 5997] <... clone3 resumed> => {parent_tid=[6009]}, 88) = 6009 [pid 6009] <... set_robust_list resumed>) = 0 [pid 6009] rt_sigprocmask(SIG_SETMASK, [], [pid 5997] rt_sigprocmask(SIG_SETMASK, [], [pid 6009] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5997] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6009] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] ftruncate(5, 6 [pid 5998] <... sendfile resumed>) = 2424832 [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] <... ftruncate resumed>) = 0 [pid 5998] <... futex resumed>) = 0 [pid 5998] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5997] <... futex resumed>) = 0 [pid 6009] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... futex resumed>) = 0 [pid 5997] <... futex resumed>) = 1 [pid 5998] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5998] <... futex resumed>) = 0 [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] write(-1, "0x0000000000000009", 18 [pid 5997] <... futex resumed>) = 0 [pid 5998] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5998] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 5997] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5997] <... futex resumed>) = 0 [pid 5998] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] exit_group(0 [pid 6009] <... futex resumed>) = ? [pid 5998] <... futex resumed>) = ? [pid 5997] <... exit_group resumed>) = ? [pid 6009] +++ exited with 0 +++ [pid 5998] +++ exited with 0 +++ [pid 5997] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 [ 159.914403][ T5836] bcachefs (loop0): shutting down [ 159.919620][ T5836] bcachefs (loop0): going read-only [ 159.924808][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 159.932797][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 40 [ 159.953224][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 43 [ 159.963647][ T5836] bcachefs (loop0): shutdown complete, journal seq 44 [ 159.971282][ T5836] bcachefs (loop0): marking filesystem clean [ 159.986349][ T5836] bcachefs (loop0): shutdown complete umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6010 attached [pid 6010] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6010] chdir("./13") = 0 [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6010 [pid 6010] <... prctl resumed>) = 0 [pid 6010] setpgid(0, 0) = 0 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6010] write(3, "1000", 4) = 4 [pid 6010] close(3) = 0 [pid 6010] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6010] write(1, "executing program\n", 18) = 18 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6010] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6010] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6011 attached [pid 6011] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6010] <... clone3 resumed> => {parent_tid=[6011]}, 88) = 6011 [pid 6011] set_robust_list(0x7f53f81fb9a0, 24 [pid 6010] rt_sigprocmask(SIG_SETMASK, [], [pid 6011] <... set_robust_list resumed>) = 0 [pid 6010] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6011] rt_sigprocmask(SIG_SETMASK, [], [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6010] <... futex resumed>) = 0 [pid 6011] memfd_create("syzkaller", 0 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6011] <... memfd_create resumed>) = 3 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6011] munmap(0x7f53efc00000, 138412032) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6011] close(3) = 0 [pid 6011] close(4) = 0 [pid 6011] mkdir("./file1", 0777) = 0 [ 161.309482][ T6011] loop0: detected capacity change from 0 to 32768 [ 161.373591][ T6011] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 161.390383][ T6011] bcachefs (loop0): initializing new filesystem [ 161.397727][ T6011] bcachefs (loop0): going read-write [ 161.403975][ T6011] bcachefs (loop0): marking superblocks [ 161.417058][ T6011] bcachefs (loop0): initializing freespace [pid 6011] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6011] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6011] chdir("./file1") = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6011] ioctl(4, LOOP_CLR_FD) = 0 [ 161.423798][ T6011] bcachefs (loop0): done initializing freespace [ 161.432370][ T6011] bcachefs (loop0): reading snapshots table [ 161.438358][ T6011] bcachefs (loop0): reading snapshots done [ 161.450585][ T6011] bcachefs (loop0): done starting filesystem [pid 6011] close(4) = 0 [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6011] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6011] lseek(-1, 32767, SEEK_SET [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6010] <... futex resumed>) = 0 [pid 6011] <... openat resumed>) = 4 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] <... futex resumed>) = 0 [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6010] <... futex resumed>) = 0 [pid 6011] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6011] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6011] creat(NULL, 000 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 0 [pid 6011] <... futex resumed>) = 1 [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... open resumed>) = 5 [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 0 [pid 6011] <... futex resumed>) = 1 [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6011] memfd_create("syzkaller", 0) = 6 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6011] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6011] munmap(0x7f53efc00000, 138412032) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6011] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6011] ioctl(7, LOOP_CLR_FD) = 0 [pid 6011] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6011] close(7) = 0 [pid 6011] close(6) = 0 [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6010] <... futex resumed>) = 0 [pid 6011] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] ftruncate(5, 33587195 [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... ftruncate resumed>) = 0 [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6010] <... futex resumed>) = 0 [pid 6011] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] sendfile(5, 5, NULL, 281474978811909 [pid 6010] <... futex resumed>) = 0 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6010] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6010] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6022 attached => {parent_tid=[6022]}, 88) = 6022 [pid 6022] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 6010] rt_sigprocmask(SIG_SETMASK, [], [pid 6022] set_robust_list(0x7f53f81da9a0, 24 [pid 6010] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6022] <... set_robust_list resumed>) = 0 [pid 6010] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] rt_sigprocmask(SIG_SETMASK, [], [pid 6010] <... futex resumed>) = 0 [pid 6022] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6010] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] ftruncate(5, 6 [pid 6011] <... sendfile resumed>) = 1376256 [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... ftruncate resumed>) = 0 [pid 6011] <... futex resumed>) = 0 [pid 6011] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6022] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 0 [pid 6022] <... futex resumed>) = 1 [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6011] <... futex resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6011] write(-1, NULL, 0 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 0 [pid 6011] <... futex resumed>) = 1 [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] write(-1, "0x0000000000000009", 18 [pid 6010] <... futex resumed>) = 0 [pid 6011] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... futex resumed>) = 0 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6010] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6010] <... futex resumed>) = 0 [pid 6011] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6010] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6011] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6011] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6011] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6010] <... futex resumed>) = 0 [pid 6010] exit_group(0 [pid 6011] <... futex resumed>) = ? [pid 6022] <... futex resumed>) = ? [pid 6010] <... exit_group resumed>) = ? [pid 6011] +++ exited with 0 +++ [pid 6022] +++ exited with 0 +++ [pid 6010] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6010, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 [ 161.891737][ T5836] bcachefs (loop0): shutting down [ 161.896943][ T5836] bcachefs (loop0): going read-only [ 161.902191][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 161.910328][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 161.927331][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 26 [ 161.937930][ T5836] bcachefs (loop0): shutdown complete, journal seq 27 [ 161.945566][ T5836] bcachefs (loop0): marking filesystem clean [ 161.960366][ T5836] bcachefs (loop0): shutdown complete umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6023 attached , child_tidptr=0x55556fcaf690) = 6023 [pid 6023] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6023] chdir("./14") = 0 [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6023] setpgid(0, 0) = 0 [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6023] write(3, "1000", 4) = 4 [pid 6023] close(3) = 0 [pid 6023] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6023] write(1, "executing program\n", 18) = 18 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6023] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6023] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6023] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6023] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6024 attached [pid 6024] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6023] <... clone3 resumed> => {parent_tid=[6024]}, 88) = 6024 [pid 6024] <... rseq resumed>) = 0 [pid 6023] rt_sigprocmask(SIG_SETMASK, [], [pid 6024] set_robust_list(0x7f53f81fb9a0, 24 [pid 6023] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6024] <... set_robust_list resumed>) = 0 [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] rt_sigprocmask(SIG_SETMASK, [], [pid 6023] <... futex resumed>) = 0 [pid 6024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6024] memfd_create("syzkaller", 0) = 3 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6024] munmap(0x7f53efc00000, 138412032) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6024] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6024] close(3) = 0 [pid 6024] close(4) = 0 [pid 6024] mkdir("./file1", 0777) = 0 [ 163.281946][ T6024] loop0: detected capacity change from 0 to 32768 [ 163.334170][ T6024] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 163.350823][ T6024] bcachefs (loop0): initializing new filesystem [ 163.358305][ T6024] bcachefs (loop0): going read-write [ 163.364112][ T6024] bcachefs (loop0): marking superblocks [pid 6024] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6024] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6024] chdir("./file1") = 0 [ 163.379426][ T6024] bcachefs (loop0): initializing freespace [ 163.386427][ T6024] bcachefs (loop0): done initializing freespace [ 163.394003][ T6024] bcachefs (loop0): reading snapshots table [ 163.400350][ T6024] bcachefs (loop0): reading snapshots done [ 163.412381][ T6024] bcachefs (loop0): done starting filesystem [pid 6024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6024] ioctl(4, LOOP_CLR_FD) = 0 [pid 6024] close(4) = 0 [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... futex resumed>) = 0 [pid 6024] <... futex resumed>) = 1 [pid 6024] lseek(-1, 32767, SEEK_SET [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6023] <... futex resumed>) = 0 [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... futex resumed>) = 0 [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6023] <... futex resumed>) = 0 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... openat resumed>) = 4 [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... futex resumed>) = 0 [pid 6024] <... futex resumed>) = 1 [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6023] <... futex resumed>) = 0 [pid 6024] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] <... futex resumed>) = 0 [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] creat(NULL, 000 [pid 6023] <... futex resumed>) = 0 [pid 6024] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] <... futex resumed>) = 0 [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6023] <... futex resumed>) = 0 [pid 6024] <... open resumed>) = 5 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6024] memfd_create("syzkaller", 0) = 6 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6024] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6024] munmap(0x7f53efc00000, 138412032) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6024] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6024] ioctl(7, LOOP_CLR_FD) = 0 [pid 6024] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6024] close(7) = 0 [pid 6024] close(6) = 0 [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6024] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6024] ftruncate(5, 33587195 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... ftruncate resumed>) = 0 [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6024] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6024] sendfile(5, 5, NULL, 281474978811909 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6023] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6023] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6023] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6023] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6035 attached [pid 6035] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 6023] <... clone3 resumed> => {parent_tid=[6035]}, 88) = 6035 [pid 6035] set_robust_list(0x7f53f81da9a0, 24 [pid 6023] rt_sigprocmask(SIG_SETMASK, [], [pid 6035] <... set_robust_list resumed>) = 0 [pid 6023] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6035] rt_sigprocmask(SIG_SETMASK, [], [pid 6023] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6023] <... futex resumed>) = 0 [pid 6035] ftruncate(5, 6 [pid 6023] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6035] <... ftruncate resumed>) = 0 [pid 6024] <... sendfile resumed>) = 1572864 [pid 6035] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6035] <... futex resumed>) = 1 [pid 6024] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] <... futex resumed>) = 0 [pid 6035] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = 0 [pid 6023] <... futex resumed>) = 1 [pid 6024] write(-1, NULL, 0 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] <... futex resumed>) = 0 [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] write(-1, "0x0000000000000009", 18) = -1 EBADF (Bad file descriptor) [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] <... futex resumed>) = 0 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 6023] <... futex resumed>) = 0 [pid 6024] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... futex resumed>) = 0 [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] exit_group(0 [pid 6035] <... futex resumed>) = ? [pid 6024] <... futex resumed>) = ? [pid 6035] +++ exited with 0 +++ [pid 6024] +++ exited with 0 +++ [pid 6023] <... exit_group resumed>) = ? [pid 6023] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6023, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 [ 163.810167][ T5836] bcachefs (loop0): shutting down [ 163.815373][ T5836] bcachefs (loop0): going read-only [ 163.820559][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 163.827994][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 27 [ 163.847416][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 29 [ 163.857862][ T5836] bcachefs (loop0): shutdown complete, journal seq 30 [ 163.865530][ T5836] bcachefs (loop0): marking filesystem clean [ 163.881570][ T5836] bcachefs (loop0): shutdown complete umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6036 attached [pid 6036] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6036 [pid 6036] chdir("./15") = 0 [pid 6036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6036] setpgid(0, 0) = 0 [pid 6036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6036] write(3, "1000", 4) = 4 [pid 6036] close(3) = 0 [pid 6036] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6036] write(1, "executing program\n", 18) = 18 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6036] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6036] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6036] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6036] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6036] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6037 attached [pid 6037] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6036] <... clone3 resumed> => {parent_tid=[6037]}, 88) = 6037 [pid 6037] <... rseq resumed>) = 0 [pid 6037] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6037] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6037] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 1 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6037] memfd_create("syzkaller", 0) = 3 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6037] munmap(0x7f53efc00000, 138412032) = 0 [pid 6037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6037] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6037] close(3) = 0 [pid 6037] close(4) = 0 [pid 6037] mkdir("./file1", 0777) = 0 [ 165.264554][ T6037] loop0: detected capacity change from 0 to 32768 [ 165.338861][ T6037] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 165.355408][ T6037] bcachefs (loop0): initializing new filesystem [ 165.362499][ T6037] bcachefs (loop0): going read-write [ 165.368722][ T6037] bcachefs (loop0): marking superblocks [ 165.381886][ T6037] bcachefs (loop0): initializing freespace [pid 6037] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6037] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6037] chdir("./file1") = 0 [pid 6037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6037] ioctl(4, LOOP_CLR_FD) = 0 [ 165.389034][ T6037] bcachefs (loop0): done initializing freespace [ 165.397382][ T6037] bcachefs (loop0): reading snapshots table [ 165.403334][ T6037] bcachefs (loop0): reading snapshots done [ 165.415502][ T6037] bcachefs (loop0): done starting filesystem [pid 6037] close(4) = 0 [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6037] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6036] <... futex resumed>) = 0 [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6037] <... futex resumed>) = 0 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6037] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6036] <... futex resumed>) = 0 [pid 6037] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502) = 4 [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6036] <... futex resumed>) = 0 [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6037] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] creat(NULL, 000 [pid 6036] <... futex resumed>) = 0 [pid 6037] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6036] <... futex resumed>) = 0 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6037] <... open resumed>) = 5 [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6036] <... futex resumed>) = 0 [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] memfd_create("syzkaller", 0 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6037] <... memfd_create resumed>) = 6 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6037] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6037] munmap(0x7f53efc00000, 138412032) = 0 [pid 6037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6037] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6037] ioctl(7, LOOP_CLR_FD) = 0 [pid 6037] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6037] close(7) = 0 [pid 6037] close(6) = 0 [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = 0 [pid 6037] <... futex resumed>) = 1 [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] ftruncate(5, 33587195 [pid 6036] <... futex resumed>) = 0 [pid 6037] <... ftruncate resumed>) = 0 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 1 [pid 6037] sendfile(5, 5, NULL, 281474978811909 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6036] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6036] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6036] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6036] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6048 attached [pid 6048] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6036] <... clone3 resumed> => {parent_tid=[6048]}, 88) = 6048 [pid 6048] <... rseq resumed>) = 0 [pid 6036] rt_sigprocmask(SIG_SETMASK, [], [pid 6048] set_robust_list(0x7f53f81da9a0, 24 [pid 6036] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6048] <... set_robust_list resumed>) = 0 [pid 6036] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6048] rt_sigprocmask(SIG_SETMASK, [], [pid 6036] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6048] ftruncate(5, 6) = 0 [pid 6037] <... sendfile resumed>) = 1703936 [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6048] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6048] <... futex resumed>) = 1 [pid 6036] <... futex resumed>) = 0 [pid 6048] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 1 [pid 6037] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] <... futex resumed>) = 0 [pid 6037] write(-1, "0x0000000000000009", 18 [pid 6036] <... futex resumed>) = 1 [pid 6037] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6037] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6036] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6037] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6037] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = 0 [pid 6037] <... futex resumed>) = 0 [pid 6036] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6037] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6036] exit_group(0 [pid 6048] <... futex resumed>) = ? [pid 6048] +++ exited with 0 +++ [pid 6037] <... futex resumed>) = ? [pid 6036] <... exit_group resumed>) = ? [pid 6037] +++ exited with 0 +++ [pid 6036] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6036, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 [ 165.904013][ T5836] bcachefs (loop0): shutting down [ 165.909229][ T5836] bcachefs (loop0): going read-only [ 165.914420][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 165.922416][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 29 [ 165.941257][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 32 [ 165.951559][ T5836] bcachefs (loop0): shutdown complete, journal seq 33 [ 165.959195][ T5836] bcachefs (loop0): marking filesystem clean [ 165.973712][ T5836] bcachefs (loop0): shutdown complete umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6049 attached [pid 6049] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6049 [pid 6049] <... set_robust_list resumed>) = 0 [pid 6049] chdir("./16") = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6049] setpgid(0, 0) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] write(3, "1000", 4) = 4 [pid 6049] close(3) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6049] write(1, "executing program\n", 18) = 18 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6049] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6049] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6050 attached [pid 6050] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6049] <... clone3 resumed> => {parent_tid=[6050]}, 88) = 6050 [pid 6050] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6049] rt_sigprocmask(SIG_SETMASK, [], [pid 6050] rt_sigprocmask(SIG_SETMASK, [], [pid 6049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6050] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] memfd_create("syzkaller", 0 [pid 6049] <... futex resumed>) = 0 [pid 6050] <... memfd_create resumed>) = 3 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6050] munmap(0x7f53efc00000, 138412032) = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6050] close(3) = 0 [pid 6050] close(4) = 0 [pid 6050] mkdir("./file1", 0777) = 0 [ 167.390016][ T6050] loop0: detected capacity change from 0 to 32768 [ 167.453944][ T6050] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 167.470457][ T6050] bcachefs (loop0): initializing new filesystem [ 167.478019][ T6050] bcachefs (loop0): going read-write [ 167.483888][ T6050] bcachefs (loop0): marking superblocks [ 167.497330][ T6050] bcachefs (loop0): initializing freespace [pid 6050] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6050] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6050] chdir("./file1") = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 167.504153][ T6050] bcachefs (loop0): done initializing freespace [ 167.511807][ T6050] bcachefs (loop0): reading snapshots table [ 167.518032][ T6050] bcachefs (loop0): reading snapshots done [ 167.530561][ T6050] bcachefs (loop0): done starting filesystem [pid 6050] ioctl(4, LOOP_CLR_FD) = 0 [pid 6050] close(4) = 0 [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6050] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6050] lseek(-1, 32767, SEEK_SET [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] <... futex resumed>) = 0 [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502) = 4 [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6050] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6050] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] <... futex resumed>) = 0 [pid 6050] <... futex resumed>) = 1 [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] creat(NULL, 000 [pid 6049] <... futex resumed>) = 0 [pid 6050] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] <... futex resumed>) = 0 [pid 6049] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6050] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] <... open resumed>) = 5 [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6050] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6050] memfd_create("syzkaller", 0) = 6 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6050] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6050] munmap(0x7f53efc00000, 138412032) = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6050] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6050] ioctl(7, LOOP_CLR_FD) = 0 [pid 6050] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6050] close(7) = 0 [pid 6050] close(6) = 0 [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6050] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] <... futex resumed>) = 0 [pid 6049] <... futex resumed>) = 1 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] ftruncate(5, 33587195) = 0 [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6050] sendfile(5, 5, NULL, 281474978811909 [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6049] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6049] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6061 attached => {parent_tid=[6061]}, 88) = 6061 [pid 6061] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6049] rt_sigprocmask(SIG_SETMASK, [], [pid 6061] <... rseq resumed>) = 0 [pid 6049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6061] set_robust_list(0x7f53f81da9a0, 24 [pid 6049] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6061] <... set_robust_list resumed>) = 0 [pid 6049] <... futex resumed>) = 0 [pid 6061] rt_sigprocmask(SIG_SETMASK, [], [pid 6049] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6061] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6061] ftruncate(5, 6 [pid 6050] <... sendfile resumed>) = 1835008 [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6050] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] <... ftruncate resumed>) = 0 [pid 6061] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] <... futex resumed>) = 0 [pid 6061] <... futex resumed>) = 1 [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6061] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] <... futex resumed>) = 0 [pid 6049] <... futex resumed>) = 1 [pid 6050] write(-1, NULL, 0 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6050] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6050] write(-1, "0x0000000000000009", 18 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6050] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6050] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6049] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6050] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6050] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6050] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] exit_group(0 [pid 6061] <... futex resumed>) = ? [pid 6050] <... futex resumed>) = ? [pid 6049] <... exit_group resumed>) = ? [pid 6061] +++ exited with 0 +++ [pid 6050] +++ exited with 0 +++ [pid 6049] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 [ 167.961854][ T5836] bcachefs (loop0): shutting down [ 167.967195][ T5836] bcachefs (loop0): going read-only [ 167.972394][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 167.980454][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 31 [ 168.000538][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 34 [ 168.011117][ T5836] bcachefs (loop0): shutdown complete, journal seq 35 [ 168.018694][ T5836] bcachefs (loop0): marking filesystem clean [ 168.033154][ T5836] bcachefs (loop0): shutdown complete umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6062 attached [pid 6062] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6062 [pid 6062] <... set_robust_list resumed>) = 0 [pid 6062] chdir("./17") = 0 [pid 6062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6062] setpgid(0, 0) = 0 [pid 6062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6062] write(3, "1000", 4) = 4 [pid 6062] close(3) = 0 [pid 6062] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6062] write(1, "executing program\n", 18) = 18 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6062] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6062] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6063 attached [pid 6063] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6062] <... clone3 resumed> => {parent_tid=[6063]}, 88) = 6063 [pid 6063] <... rseq resumed>) = 0 [pid 6063] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6063] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... futex resumed>) = 0 [pid 6062] <... futex resumed>) = 1 [pid 6063] memfd_create("syzkaller", 0 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6063] <... memfd_create resumed>) = 3 [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6063] munmap(0x7f53efc00000, 138412032) = 0 [pid 6063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6063] close(3) = 0 [pid 6063] close(4) = 0 [pid 6063] mkdir("./file1", 0777) = 0 [ 169.542080][ T6063] loop0: detected capacity change from 0 to 32768 [ 169.616367][ T6063] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 169.632895][ T6063] bcachefs (loop0): initializing new filesystem [ 169.640165][ T6063] bcachefs (loop0): going read-write [ 169.646163][ T6063] bcachefs (loop0): marking superblocks [ 169.659526][ T6063] bcachefs (loop0): initializing freespace [pid 6063] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6063] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6063] chdir("./file1") = 0 [pid 6063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6063] ioctl(4, LOOP_CLR_FD) = 0 [ 169.666536][ T6063] bcachefs (loop0): done initializing freespace [ 169.675526][ T6063] bcachefs (loop0): reading snapshots table [ 169.681507][ T6063] bcachefs (loop0): reading snapshots done [ 169.693803][ T6063] bcachefs (loop0): done starting filesystem [pid 6063] close(4) = 0 [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6063] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] <... futex resumed>) = 0 [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6063] <... futex resumed>) = 0 [pid 6063] lseek(-1, 32767, SEEK_SET [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6063] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] <... futex resumed>) = 0 [pid 6063] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] <... openat resumed>) = 4 [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6063] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] creat(NULL, 000 [pid 6062] <... futex resumed>) = 0 [pid 6063] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6063] <... futex resumed>) = 0 [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6062] <... futex resumed>) = 0 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] <... open resumed>) = 5 [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6063] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] <... futex resumed>) = 0 [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... futex resumed>) = 0 [pid 6062] <... futex resumed>) = 1 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6063] memfd_create("syzkaller", 0) = 6 [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6063] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6063] munmap(0x7f53efc00000, 138412032) = 0 [pid 6063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6063] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6063] ioctl(7, LOOP_CLR_FD) = 0 [pid 6063] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6063] close(7) = 0 [pid 6063] close(6) = 0 [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... futex resumed>) = 0 [pid 6063] <... futex resumed>) = 1 [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] ftruncate(5, 33587195 [pid 6062] <... futex resumed>) = 0 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] <... ftruncate resumed>) = 0 [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... futex resumed>) = 0 [pid 6063] <... futex resumed>) = 1 [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] sendfile(5, 5, NULL, 281474978811909 [pid 6062] <... futex resumed>) = 0 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6062] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6062] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6074 attached => {parent_tid=[6074]}, 88) = 6074 [pid 6062] rt_sigprocmask(SIG_SETMASK, [], [pid 6074] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6062] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6074] <... rseq resumed>) = 0 [pid 6062] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] set_robust_list(0x7f53f81da9a0, 24 [pid 6062] <... futex resumed>) = 0 [pid 6074] <... set_robust_list resumed>) = 0 [pid 6062] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6074] ftruncate(5, 6 [pid 6063] <... sendfile resumed>) = 2424832 [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6063] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6074] <... ftruncate resumed>) = 0 [pid 6074] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... futex resumed>) = 0 [pid 6074] <... futex resumed>) = 1 [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6063] <... futex resumed>) = 0 [pid 6062] <... futex resumed>) = 1 [pid 6063] write(-1, NULL, 0 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6063] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] <... futex resumed>) = 0 [pid 6063] write(-1, "0x0000000000000009", 18 [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6063] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] <... futex resumed>) = 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6062] <... futex resumed>) = 0 [pid 6063] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6062] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6063] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] exit_group(0 [pid 6074] <... futex resumed>) = ? [pid 6063] <... futex resumed>) = ? [pid 6074] +++ exited with 0 +++ [pid 6063] +++ exited with 0 +++ [pid 6062] <... exit_group resumed>) = ? [pid 6062] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6062, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 [ 170.161192][ T5836] bcachefs (loop0): shutting down [ 170.166392][ T5836] bcachefs (loop0): going read-only [ 170.171582][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 170.179036][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 40 [ 170.199118][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 43 [ 170.209706][ T5836] bcachefs (loop0): shutdown complete, journal seq 44 [ 170.217264][ T5836] bcachefs (loop0): marking filesystem clean [ 170.233200][ T5836] bcachefs (loop0): shutdown complete umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556fcaf690) = 6075 ./strace-static-x86_64: Process 6075 attached [pid 6075] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6075] chdir("./18") = 0 [pid 6075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6075] setpgid(0, 0) = 0 [pid 6075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6075] write(3, "1000", 4) = 4 [pid 6075] close(3) = 0 [pid 6075] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6075] write(1, "executing program\n", 18) = 18 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6075] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6075] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6075] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6075] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6076 attached [pid 6076] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6075] <... clone3 resumed> => {parent_tid=[6076]}, 88) = 6076 [pid 6076] <... rseq resumed>) = 0 [pid 6076] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = 0 [pid 6075] <... futex resumed>) = 1 [pid 6076] memfd_create("syzkaller", 0 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6076] <... memfd_create resumed>) = 3 [pid 6076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6076] munmap(0x7f53efc00000, 138412032) = 0 [pid 6076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6076] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6076] close(3) = 0 [pid 6076] close(4) = 0 [pid 6076] mkdir("./file1", 0777) = 0 [ 171.671311][ T6076] loop0: detected capacity change from 0 to 32768 [ 171.744564][ T6076] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 171.761467][ T6076] bcachefs (loop0): initializing new filesystem [ 171.768689][ T6076] bcachefs (loop0): going read-write [ 171.774731][ T6076] bcachefs (loop0): marking superblocks [ 171.788237][ T6076] bcachefs (loop0): initializing freespace [pid 6076] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6076] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6076] chdir("./file1") = 0 [pid 6076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6076] ioctl(4, LOOP_CLR_FD) = 0 [pid 6076] close(4) = 0 [ 171.795115][ T6076] bcachefs (loop0): done initializing freespace [ 171.802771][ T6076] bcachefs (loop0): reading snapshots table [ 171.808892][ T6076] bcachefs (loop0): reading snapshots done [ 171.822114][ T6076] bcachefs (loop0): done starting filesystem [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 6075] <... futex resumed>) = 1 [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = 0 [pid 6075] <... futex resumed>) = 1 [pid 6076] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... openat resumed>) = 4 [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... futex resumed>) = 0 [pid 6076] <... futex resumed>) = 0 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = 0 [pid 6076] creat(NULL, 000 [pid 6075] <... futex resumed>) = 1 [pid 6076] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6076] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... open resumed>) = 5 [pid 6075] <... futex resumed>) = 0 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6076] memfd_create("syzkaller", 0) = 6 [pid 6076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6076] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6076] munmap(0x7f53efc00000, 138412032) = 0 [pid 6076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6076] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6076] ioctl(7, LOOP_CLR_FD) = 0 [pid 6076] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6076] close(7) = 0 [pid 6076] close(6) = 0 [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] ftruncate(5, 33587195 [pid 6075] <... futex resumed>) = 0 [pid 6076] <... ftruncate resumed>) = 0 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6076] sendfile(5, 5, NULL, 281474978811909 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6075] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6075] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6075] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6087 attached => {parent_tid=[6087]}, 88) = 6087 [pid 6087] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 6075] rt_sigprocmask(SIG_SETMASK, [], [pid 6087] set_robust_list(0x7f53f81da9a0, 24 [pid 6075] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6087] <... set_robust_list resumed>) = 0 [pid 6075] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] rt_sigprocmask(SIG_SETMASK, [], [pid 6075] <... futex resumed>) = 0 [pid 6087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6075] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] ftruncate(5, 6 [pid 6076] <... sendfile resumed>) = 2162688 [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] <... ftruncate resumed>) = 0 [pid 6087] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... futex resumed>) = 0 [pid 6087] <... futex resumed>) = 1 [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] <... futex resumed>) = 0 [pid 6075] <... futex resumed>) = 1 [pid 6076] write(-1, NULL, 0 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6076] write(-1, "0x0000000000000009", 18 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6076] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6075] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6076] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... futex resumed>) = 0 [pid 6076] <... futex resumed>) = 1 [pid 6075] exit_group(0 [pid 6076] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 6075] <... exit_group resumed>) = ? [pid 6076] +++ exited with 0 +++ [pid 6087] <... futex resumed>) = ? [pid 6087] +++ exited with 0 +++ [pid 6075] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6075, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 [ 172.293558][ T5836] bcachefs (loop0): shutting down [ 172.298776][ T5836] bcachefs (loop0): going read-only [ 172.304000][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 172.311534][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 36 [ 172.334012][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 39 [ 172.344474][ T5836] bcachefs (loop0): shutdown complete, journal seq 40 [ 172.352110][ T5836] bcachefs (loop0): marking filesystem clean [ 172.367002][ T5836] bcachefs (loop0): shutdown complete umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6088 attached [pid 6088] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6088 [pid 6088] chdir("./19") = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6088] setpgid(0, 0) = 0 [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6088] write(3, "1000", 4) = 4 [pid 6088] close(3) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6088] write(1, "executing program\n", 18executing program ) = 18 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6088] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6088] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6089 attached [pid 6089] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6088] <... clone3 resumed> => {parent_tid=[6089]}, 88) = 6089 [pid 6089] <... rseq resumed>) = 0 [pid 6089] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6089] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6089] <... futex resumed>) = 0 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6089] memfd_create("syzkaller", 0) = 3 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6089] munmap(0x7f53efc00000, 138412032) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6089] close(3) = 0 [pid 6089] close(4) = 0 [pid 6089] mkdir("./file1", 0777) = 0 [ 173.782248][ T6089] loop0: detected capacity change from 0 to 32768 [ 173.847760][ T6089] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 173.864575][ T6089] bcachefs (loop0): initializing new filesystem [ 173.872284][ T6089] bcachefs (loop0): going read-write [ 173.878055][ T6089] bcachefs (loop0): marking superblocks [ 173.890688][ T6089] bcachefs (loop0): initializing freespace [pid 6089] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6089] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6089] chdir("./file1") = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6089] ioctl(4, LOOP_CLR_FD) = 0 [pid 6089] close(4) = 0 [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6089] lseek(-1, 32767, SEEK_SET [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6088] <... futex resumed>) = 0 [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... futex resumed>) = 0 [ 173.897559][ T6089] bcachefs (loop0): done initializing freespace [ 173.905587][ T6089] bcachefs (loop0): reading snapshots table [ 173.911539][ T6089] bcachefs (loop0): reading snapshots done [ 173.924115][ T6089] bcachefs (loop0): done starting filesystem [pid 6088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6089] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... futex resumed>) = 0 [pid 6088] <... futex resumed>) = 1 [pid 6089] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... openat resumed>) = 4 [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6089] <... futex resumed>) = 1 [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6088] <... futex resumed>) = 0 [pid 6089] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6089] creat(NULL, 000 [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6088] <... futex resumed>) = 0 [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... futex resumed>) = 0 [pid 6088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6089] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6088] <... futex resumed>) = 0 [pid 6089] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... open resumed>) = 5 [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6089] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6089] memfd_create("syzkaller", 0) = 6 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6089] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6089] munmap(0x7f53efc00000, 138412032) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6089] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6089] ioctl(7, LOOP_CLR_FD) = 0 [pid 6089] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6089] close(7) = 0 [pid 6089] close(6) = 0 [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6089] <... futex resumed>) = 1 [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] ftruncate(5, 33587195 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... ftruncate resumed>) = 0 [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6089] <... futex resumed>) = 1 [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] sendfile(5, 5, NULL, 281474978811909 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6088] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6088] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6100 attached [pid 6100] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6088] <... clone3 resumed> => {parent_tid=[6100]}, 88) = 6100 [pid 6100] <... rseq resumed>) = 0 [pid 6088] rt_sigprocmask(SIG_SETMASK, [], [pid 6100] set_robust_list(0x7f53f81da9a0, 24) = 0 [pid 6088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6088] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6100] ftruncate(5, 6 [pid 6088] <... futex resumed>) = 0 [pid 6088] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... sendfile resumed>) = 1572864 [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6100] <... ftruncate resumed>) = 0 [pid 6100] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... futex resumed>) = 0 [pid 6100] <... futex resumed>) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6100] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6089] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6088] <... futex resumed>) = 0 [pid 6089] write(-1, NULL, 0 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6089] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6088] <... futex resumed>) = 0 [pid 6089] write(-1, "0x0000000000000009", 18 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6089] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6088] <... futex resumed>) = 0 [pid 6089] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6088] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6089] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6089] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6089] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] exit_group(0 [pid 6100] <... futex resumed>) = ? [pid 6089] <... futex resumed>) = ? [pid 6088] <... exit_group resumed>) = ? [pid 6100] +++ exited with 0 +++ [pid 6089] +++ exited with 0 +++ [pid 6088] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6088, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 [ 174.327429][ T5836] bcachefs (loop0): shutting down [ 174.332491][ T5836] bcachefs (loop0): going read-only [ 174.337894][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 174.345271][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 27 [ 174.366802][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 31 [ 174.377136][ T5836] bcachefs (loop0): shutdown complete, journal seq 32 [ 174.384508][ T5836] bcachefs (loop0): marking filesystem clean [ 174.400040][ T5836] bcachefs (loop0): shutdown complete umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6101 attached [pid 6101] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6101 [pid 6101] <... set_robust_list resumed>) = 0 [pid 6101] chdir("./20") = 0 [pid 6101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6101] setpgid(0, 0) = 0 [pid 6101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6101] write(3, "1000", 4) = 4 [pid 6101] close(3) = 0 [pid 6101] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6101] write(1, "executing program\n", 18) = 18 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6101] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6101] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6101] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6101] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6101] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6102 attached [pid 6102] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6102] set_robust_list(0x7f53f81fb9a0, 24 [pid 6101] <... clone3 resumed> => {parent_tid=[6102]}, 88) = 6102 [pid 6102] <... set_robust_list resumed>) = 0 [pid 6101] rt_sigprocmask(SIG_SETMASK, [], [pid 6102] rt_sigprocmask(SIG_SETMASK, [], [pid 6101] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] memfd_create("syzkaller", 0 [pid 6101] <... futex resumed>) = 0 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6102] <... memfd_create resumed>) = 3 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6102] munmap(0x7f53efc00000, 138412032) = 0 [pid 6102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6102] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6102] close(3) = 0 [pid 6102] close(4) = 0 [pid 6102] mkdir("./file1", 0777) = 0 [ 175.722426][ T6102] loop0: detected capacity change from 0 to 32768 [ 175.777606][ T6102] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 175.794074][ T6102] bcachefs (loop0): initializing new filesystem [ 175.801220][ T6102] bcachefs (loop0): going read-write [ 175.807253][ T6102] bcachefs (loop0): marking superblocks [ 175.820947][ T6102] bcachefs (loop0): initializing freespace [pid 6102] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6102] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6102] chdir("./file1") = 0 [pid 6102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6102] ioctl(4, LOOP_CLR_FD) = 0 [ 175.827826][ T6102] bcachefs (loop0): done initializing freespace [ 175.836008][ T6102] bcachefs (loop0): reading snapshots table [ 175.841965][ T6102] bcachefs (loop0): reading snapshots done [ 175.854438][ T6102] bcachefs (loop0): done starting filesystem [pid 6102] close(4) = 0 [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6102] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6102] lseek(-1, 32767, SEEK_SET [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6102] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6102] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... openat resumed>) = 4 [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = 0 [pid 6102] <... futex resumed>) = 1 [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6101] <... futex resumed>) = 0 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6102] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6102] creat(NULL, 000 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6102] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6102] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... open resumed>) = 5 [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = 0 [pid 6102] <... futex resumed>) = 1 [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6102] memfd_create("syzkaller", 0) = 6 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6102] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6102] munmap(0x7f53efc00000, 138412032) = 0 [pid 6102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6102] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6102] ioctl(7, LOOP_CLR_FD) = 0 [pid 6102] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6102] close(7) = 0 [pid 6102] close(6) = 0 [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] ftruncate(5, 33587195 [pid 6101] <... futex resumed>) = 0 [pid 6102] <... ftruncate resumed>) = 0 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6102] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] sendfile(5, 5, NULL, 281474978811909 [pid 6101] <... futex resumed>) = 0 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6101] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6101] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6101] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6101] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6113 attached [pid 6113] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6101] <... clone3 resumed> => {parent_tid=[6113]}, 88) = 6113 [pid 6113] <... rseq resumed>) = 0 [pid 6101] rt_sigprocmask(SIG_SETMASK, [], [pid 6113] set_robust_list(0x7f53f81da9a0, 24) = 0 [pid 6113] rt_sigprocmask(SIG_SETMASK, [], [pid 6101] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6113] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6113] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6101] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... futex resumed>) = 0 [pid 6101] <... futex resumed>) = 1 [pid 6113] ftruncate(5, 6 [pid 6101] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... sendfile resumed>) = 1769472 [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6102] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] <... ftruncate resumed>) = 0 [pid 6113] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = 0 [pid 6113] <... futex resumed>) = 1 [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6102] <... futex resumed>) = 0 [pid 6101] <... futex resumed>) = 1 [pid 6102] write(-1, NULL, 0 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6102] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6102] write(-1, "0x0000000000000009", 18 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6102] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6101] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6102] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6101] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6102] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6102] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6101] exit_group(0 [pid 6113] <... futex resumed>) = ? [pid 6102] <... futex resumed>) = ? [pid 6101] <... exit_group resumed>) = ? [pid 6113] +++ exited with 0 +++ [pid 6102] +++ exited with 0 +++ [pid 6101] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6101, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 [ 176.238905][ T5836] bcachefs (loop0): shutting down [ 176.243972][ T5836] bcachefs (loop0): going read-only [ 176.249434][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 176.256816][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 30 [ 176.275429][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 32 [ 176.285909][ T5836] bcachefs (loop0): shutdown complete, journal seq 33 [ 176.293283][ T5836] bcachefs (loop0): marking filesystem clean [ 176.308755][ T5836] bcachefs (loop0): shutdown complete umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6114 attached [pid 6114] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6114 [pid 6114] <... set_robust_list resumed>) = 0 [pid 6114] chdir("./21") = 0 [pid 6114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6114] setpgid(0, 0) = 0 [pid 6114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6114] write(3, "1000", 4) = 4 [pid 6114] close(3) = 0 [pid 6114] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6114] write(1, "executing program\n", 18executing program ) = 18 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6114] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6114] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6114] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6114] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6115 attached [pid 6115] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6115] set_robust_list(0x7f53f81fb9a0, 24 [pid 6114] <... clone3 resumed> => {parent_tid=[6115]}, 88) = 6115 [pid 6115] <... set_robust_list resumed>) = 0 [pid 6115] rt_sigprocmask(SIG_SETMASK, [], [pid 6114] rt_sigprocmask(SIG_SETMASK, [], [pid 6115] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6115] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6114] <... futex resumed>) = 0 [pid 6115] memfd_create("syzkaller", 0 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6115] <... memfd_create resumed>) = 3 [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6115] munmap(0x7f53efc00000, 138412032) = 0 [pid 6115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6115] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6115] close(3) = 0 [pid 6115] close(4) = 0 [pid 6115] mkdir("./file1", 0777) = 0 [ 177.662858][ T6115] loop0: detected capacity change from 0 to 32768 [ 177.734644][ T6115] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 177.751417][ T6115] bcachefs (loop0): initializing new filesystem [ 177.758975][ T6115] bcachefs (loop0): going read-write [ 177.765042][ T6115] bcachefs (loop0): marking superblocks [ 177.778995][ T6115] bcachefs (loop0): initializing freespace [pid 6115] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6115] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6115] chdir("./file1") = 0 [pid 6115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 177.785815][ T6115] bcachefs (loop0): done initializing freespace [ 177.793021][ T6115] bcachefs (loop0): reading snapshots table [ 177.799339][ T6115] bcachefs (loop0): reading snapshots done [ 177.811637][ T6115] bcachefs (loop0): done starting filesystem [pid 6115] ioctl(4, LOOP_CLR_FD) = 0 [pid 6115] close(4) = 0 [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6115] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] <... futex resumed>) = 0 [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6115] <... futex resumed>) = 0 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6114] <... futex resumed>) = 0 [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... openat resumed>) = 4 [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... futex resumed>) = 0 [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... futex resumed>) = 1 [pid 6115] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... futex resumed>) = 0 [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] <... futex resumed>) = 1 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... futex resumed>) = 0 [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... futex resumed>) = 1 [pid 6115] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6114] <... futex resumed>) = 0 [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6115] memfd_create("syzkaller", 0) = 6 [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6115] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6115] munmap(0x7f53efc00000, 138412032) = 0 [pid 6115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6115] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6115] ioctl(7, LOOP_CLR_FD) = 0 [pid 6115] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6115] close(7) = 0 [pid 6115] close(6) = 0 [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6114] <... futex resumed>) = 0 [pid 6115] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = 0 [pid 6114] <... futex resumed>) = 1 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] ftruncate(5, 33587195) = 0 [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6114] <... futex resumed>) = 0 [pid 6115] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6115] sendfile(5, 5, NULL, 281474978811909 [pid 6114] <... futex resumed>) = 0 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6114] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6114] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6114] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6126 attached [pid 6126] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6114] <... clone3 resumed> => {parent_tid=[6126]}, 88) = 6126 [pid 6126] <... rseq resumed>) = 0 [pid 6114] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6126] set_robust_list(0x7f53f81da9a0, 24 [pid 6114] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] <... set_robust_list resumed>) = 0 [pid 6114] <... futex resumed>) = 0 [pid 6126] rt_sigprocmask(SIG_SETMASK, [], [pid 6114] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6126] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6126] ftruncate(5, 6 [pid 6115] <... sendfile resumed>) = 1703936 [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] <... ftruncate resumed>) = 0 [pid 6126] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6114] <... futex resumed>) = 0 [pid 6126] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = 0 [pid 6115] write(-1, NULL, 0 [pid 6114] <... futex resumed>) = 1 [pid 6115] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6115] <... futex resumed>) = 0 [pid 6115] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6114] <... futex resumed>) = 0 [pid 6115] write(-1, "0x0000000000000009", 18) = -1 EBADF (Bad file descriptor) [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6115] <... futex resumed>) = 0 [pid 6114] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 6114] <... futex resumed>) = 0 [pid 6115] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6115] <... futex resumed>) = 0 [pid 6115] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6114] exit_group(0 [pid 6115] <... futex resumed>) = ? [pid 6115] +++ exited with 0 +++ [pid 6126] <... futex resumed>) = ? [pid 6126] +++ exited with 0 +++ [pid 6114] <... exit_group resumed>) = ? [pid 6114] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6114, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 [ 178.241540][ T5836] bcachefs (loop0): shutting down [ 178.246731][ T5836] bcachefs (loop0): going read-only [ 178.251943][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 178.259399][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 29 [ 178.278382][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 31 [ 178.289074][ T5836] bcachefs (loop0): shutdown complete, journal seq 32 [ 178.296688][ T5836] bcachefs (loop0): marking filesystem clean [ 178.311499][ T5836] bcachefs (loop0): shutdown complete umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6127 attached , child_tidptr=0x55556fcaf690) = 6127 [pid 6127] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6127] chdir("./22") = 0 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6127] setpgid(0, 0) = 0 [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6127] write(3, "1000", 4) = 4 [pid 6127] close(3) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6127] write(1, "executing program\n", 18) = 18 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6127] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6127] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6127] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6127] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6128 attached [pid 6128] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6127] <... clone3 resumed> => {parent_tid=[6128]}, 88) = 6128 [pid 6128] <... rseq resumed>) = 0 [pid 6127] rt_sigprocmask(SIG_SETMASK, [], [pid 6128] set_robust_list(0x7f53f81fb9a0, 24 [pid 6127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6128] <... set_robust_list resumed>) = 0 [pid 6128] rt_sigprocmask(SIG_SETMASK, [], [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6127] <... futex resumed>) = 0 [pid 6128] memfd_create("syzkaller", 0 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6128] <... memfd_create resumed>) = 3 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6128] munmap(0x7f53efc00000, 138412032) = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6128] close(3) = 0 [pid 6128] close(4) = 0 [pid 6128] mkdir("./file1", 0777) = 0 [ 179.705952][ T6128] loop0: detected capacity change from 0 to 32768 [ 179.769030][ T6128] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 179.785744][ T6128] bcachefs (loop0): initializing new filesystem [ 179.793316][ T6128] bcachefs (loop0): going read-write [ 179.798947][ T6128] bcachefs (loop0): marking superblocks [ 179.811605][ T6128] bcachefs (loop0): initializing freespace [pid 6128] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6128] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6128] chdir("./file1") = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6128] ioctl(4, LOOP_CLR_FD) = 0 [ 179.818574][ T6128] bcachefs (loop0): done initializing freespace [ 179.826047][ T6128] bcachefs (loop0): reading snapshots table [ 179.831985][ T6128] bcachefs (loop0): reading snapshots done [ 179.845159][ T6128] bcachefs (loop0): done starting filesystem [pid 6128] close(4) = 0 [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] <... futex resumed>) = 0 [pid 6128] lseek(-1, 32767, SEEK_SET [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6127] <... futex resumed>) = 0 [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... futex resumed>) = 0 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6128] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6128] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6127] <... futex resumed>) = 0 [pid 6128] <... openat resumed>) = 4 [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... futex resumed>) = 1 [pid 6127] <... futex resumed>) = 0 [pid 6128] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] <... futex resumed>) = 0 [pid 6128] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = 0 [pid 6128] creat(NULL, 000 [pid 6127] <... futex resumed>) = 1 [pid 6128] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6128] <... futex resumed>) = 0 [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6127] <... futex resumed>) = 0 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... open resumed>) = 5 [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6128] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6127] <... futex resumed>) = 0 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6128] memfd_create("syzkaller", 0) = 6 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6128] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6128] munmap(0x7f53efc00000, 138412032) = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6128] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6128] ioctl(7, LOOP_CLR_FD) = 0 [pid 6128] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6128] close(7) = 0 [pid 6128] close(6) = 0 [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] <... futex resumed>) = 0 [pid 6128] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6127] <... futex resumed>) = 0 [pid 6128] ftruncate(5, 33587195 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... ftruncate resumed>) = 0 [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] <... futex resumed>) = 0 [pid 6128] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... futex resumed>) = 0 [pid 6128] sendfile(5, 5, NULL, 281474978811909 [pid 6127] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6127] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6127] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6127] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6127] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6139 attached => {parent_tid=[6139]}, 88) = 6139 [pid 6139] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6127] rt_sigprocmask(SIG_SETMASK, [], [pid 6139] <... rseq resumed>) = 0 [pid 6127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6139] set_robust_list(0x7f53f81da9a0, 24) = 0 [pid 6127] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6127] <... futex resumed>) = 0 [pid 6139] ftruncate(5, 6 [pid 6127] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... sendfile resumed>) = 3080192 [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] <... ftruncate resumed>) = 0 [pid 6139] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] <... futex resumed>) = 0 [pid 6139] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = 0 [pid 6127] <... futex resumed>) = 1 [pid 6128] write(-1, NULL, 0 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6127] <... futex resumed>) = 0 [pid 6128] write(-1, "0x0000000000000009", 18 [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6127] <... futex resumed>) = 0 [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6127] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = 0 [pid 6127] <... futex resumed>) = 1 [pid 6128] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 6128] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6127] exit_group(0) = ? [pid 6128] <... futex resumed>) = ? [pid 6139] <... futex resumed>) = ? [pid 6128] +++ exited with 0 +++ [pid 6139] +++ exited with 0 +++ [pid 6127] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 [ 180.333474][ T5836] bcachefs (loop0): shutting down [ 180.338685][ T5836] bcachefs (loop0): going read-only [ 180.343876][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 180.351450][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 50 [ 180.373532][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 53 [ 180.384284][ T5836] bcachefs (loop0): shutdown complete, journal seq 54 [ 180.391898][ T5836] bcachefs (loop0): marking filesystem clean [ 180.406561][ T5836] bcachefs (loop0): shutdown complete umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6140 attached [pid 6140] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6140 [pid 6140] chdir("./23") = 0 [pid 6140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6140] setpgid(0, 0) = 0 [pid 6140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6140] write(3, "1000", 4) = 4 [pid 6140] close(3) = 0 [pid 6140] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6140] write(1, "executing program\n", 18executing program ) = 18 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6140] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6140] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6141 attached [pid 6141] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6140] <... clone3 resumed> => {parent_tid=[6141]}, 88) = 6141 [pid 6141] <... rseq resumed>) = 0 [pid 6141] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6141] memfd_create("syzkaller", 0 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6141] <... memfd_create resumed>) = 3 [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6141] munmap(0x7f53efc00000, 138412032) = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6141] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6141] close(3) = 0 [pid 6141] close(4) = 0 [pid 6141] mkdir("./file1", 0777) = 0 [ 181.769679][ T6141] loop0: detected capacity change from 0 to 32768 [ 181.843050][ T6141] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 181.859668][ T6141] bcachefs (loop0): initializing new filesystem [ 181.866975][ T6141] bcachefs (loop0): going read-write [ 181.872837][ T6141] bcachefs (loop0): marking superblocks [ 181.885983][ T6141] bcachefs (loop0): initializing freespace [pid 6141] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6141] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6141] chdir("./file1") = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6141] ioctl(4, LOOP_CLR_FD) = 0 [pid 6141] close(4) = 0 [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6141] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6140] <... futex resumed>) = 0 [ 181.892769][ T6141] bcachefs (loop0): done initializing freespace [ 181.901991][ T6141] bcachefs (loop0): reading snapshots table [ 181.908520][ T6141] bcachefs (loop0): reading snapshots done [ 181.921367][ T6141] bcachefs (loop0): done starting filesystem [pid 6141] <... openat resumed>) = 4 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6140] <... futex resumed>) = 0 [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6141] creat(NULL, 000 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6140] <... futex resumed>) = 0 [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6140] <... futex resumed>) = 0 [pid 6141] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] <... open resumed>) = 5 [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6140] <... futex resumed>) = 0 [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6141] memfd_create("syzkaller", 0) = 6 [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6141] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6141] munmap(0x7f53efc00000, 138412032) = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6141] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6141] ioctl(7, LOOP_CLR_FD) = 0 [pid 6141] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6141] close(7) = 0 [pid 6141] close(6) = 0 [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6141] ftruncate(5, 33587195 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] <... ftruncate resumed>) = 0 [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6140] <... futex resumed>) = 0 [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6140] <... futex resumed>) = 0 [pid 6141] sendfile(5, 5, NULL, 281474978811909 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6140] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6140] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6152 attached [pid 6152] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6140] <... clone3 resumed> => {parent_tid=[6152]}, 88) = 6152 [pid 6152] <... rseq resumed>) = 0 [pid 6140] rt_sigprocmask(SIG_SETMASK, [], [pid 6152] set_robust_list(0x7f53f81da9a0, 24) = 0 [pid 6140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6152] rt_sigprocmask(SIG_SETMASK, [], [pid 6140] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6140] <... futex resumed>) = 0 [pid 6152] ftruncate(5, 6 [pid 6140] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] <... sendfile resumed>) = 2031616 [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6152] <... ftruncate resumed>) = 0 [pid 6152] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6140] <... futex resumed>) = 0 [pid 6152] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6141] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6140] <... futex resumed>) = 0 [pid 6141] write(-1, "0x0000000000000009", 18) = -1 EBADF (Bad file descriptor) [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 6140] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 6140] <... futex resumed>) = 0 [pid 6141] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] <... futex resumed>) = 0 [pid 6141] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6140] exit_group(0 [pid 6141] <... futex resumed>) = ? [pid 6141] +++ exited with 0 +++ [pid 6152] <... futex resumed>) = ? [pid 6152] +++ exited with 0 +++ [pid 6140] <... exit_group resumed>) = ? [pid 6140] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6140, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 [ 182.389514][ T5836] bcachefs (loop0): shutting down [ 182.394581][ T5836] bcachefs (loop0): going read-only [ 182.400052][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 182.407565][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 34 [ 182.426896][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 36 [ 182.437303][ T5836] bcachefs (loop0): shutdown complete, journal seq 37 [ 182.444688][ T5836] bcachefs (loop0): marking filesystem clean [ 182.460055][ T5836] bcachefs (loop0): shutdown complete umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6153 attached [pid 6153] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6153 [pid 6153] chdir("./24") = 0 [pid 6153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6153] setpgid(0, 0) = 0 [pid 6153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6153] write(3, "1000", 4) = 4 [pid 6153] close(3) = 0 [pid 6153] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6153] write(1, "executing program\n", 18) = 18 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6153] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6153] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6153] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6153] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6154 attached [pid 6154] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6153] <... clone3 resumed> => {parent_tid=[6154]}, 88) = 6154 [pid 6154] set_robust_list(0x7f53f81fb9a0, 24 [pid 6153] rt_sigprocmask(SIG_SETMASK, [], [pid 6154] <... set_robust_list resumed>) = 0 [pid 6153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6154] rt_sigprocmask(SIG_SETMASK, [], [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6153] <... futex resumed>) = 0 [pid 6154] memfd_create("syzkaller", 0 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6154] <... memfd_create resumed>) = 3 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6154] munmap(0x7f53efc00000, 138412032) = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6154] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6154] close(3) = 0 [pid 6154] close(4) = 0 [pid 6154] mkdir("./file1", 0777) = 0 [ 183.765072][ T6154] loop0: detected capacity change from 0 to 32768 [ 183.828664][ T6154] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 183.845615][ T6154] bcachefs (loop0): initializing new filesystem [ 183.852700][ T6154] bcachefs (loop0): going read-write [ 183.859121][ T6154] bcachefs (loop0): marking superblocks [ 183.872316][ T6154] bcachefs (loop0): initializing freespace [pid 6154] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6154] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6154] chdir("./file1") = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6154] ioctl(4, LOOP_CLR_FD) = 0 [pid 6154] close(4) = 0 [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6153] <... futex resumed>) = 0 [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6153] <... futex resumed>) = 0 [pid 6154] lseek(-1, 32767, SEEK_SET [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6153] <... futex resumed>) = 0 [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6153] <... futex resumed>) = 0 [pid 6154] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... openat resumed>) = 4 [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 183.879320][ T6154] bcachefs (loop0): done initializing freespace [ 183.888093][ T6154] bcachefs (loop0): reading snapshots table [ 183.894154][ T6154] bcachefs (loop0): reading snapshots done [ 183.906680][ T6154] bcachefs (loop0): done starting filesystem [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] <... futex resumed>) = 0 [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 1 [pid 6154] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] <... futex resumed>) = 0 [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6153] <... futex resumed>) = 0 [pid 6154] creat(NULL, 000 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] <... futex resumed>) = 0 [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 1 [pid 6154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... open resumed>) = 5 [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... futex resumed>) = 0 [pid 6154] <... futex resumed>) = 1 [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] memfd_create("syzkaller", 0 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6154] <... memfd_create resumed>) = 6 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6154] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6154] munmap(0x7f53efc00000, 138412032) = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6154] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6154] ioctl(7, LOOP_CLR_FD) = 0 [pid 6154] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6154] close(7) = 0 [pid 6154] close(6) = 0 [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] <... futex resumed>) = 0 [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6154] <... futex resumed>) = 0 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] ftruncate(5, 33587195) = 0 [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] <... futex resumed>) = 0 [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 1 [pid 6154] sendfile(5, 5, NULL, 281474978811909 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6153] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6153] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6153] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6153] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6165 attached [pid 6165] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6153] <... clone3 resumed> => {parent_tid=[6165]}, 88) = 6165 [pid 6153] rt_sigprocmask(SIG_SETMASK, [], [pid 6165] <... rseq resumed>) = 0 [pid 6153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6165] set_robust_list(0x7f53f81da9a0, 24 [pid 6153] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... set_robust_list resumed>) = 0 [pid 6153] <... futex resumed>) = 0 [pid 6153] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6165] ftruncate(5, 6 [pid 6154] <... sendfile resumed>) = 1835008 [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6165] <... ftruncate resumed>) = 0 [pid 6165] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6153] <... futex resumed>) = 0 [pid 6165] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 1 [pid 6154] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] <... futex resumed>) = 0 [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6153] <... futex resumed>) = 0 [pid 6154] write(-1, "0x0000000000000009", 18 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] <... futex resumed>) = 0 [pid 6153] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 6153] <... futex resumed>) = 0 [pid 6154] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] exit_group(0 [pid 6165] <... futex resumed>) = ? [pid 6154] <... futex resumed>) = ? [pid 6165] +++ exited with 0 +++ [pid 6154] +++ exited with 0 +++ [pid 6153] <... exit_group resumed>) = ? [pid 6153] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6153, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 [ 184.279669][ T5836] bcachefs (loop0): shutting down [ 184.284729][ T5836] bcachefs (loop0): going read-only [ 184.290159][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 184.297560][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 31 [ 184.316461][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 33 [ 184.326780][ T5836] bcachefs (loop0): shutdown complete, journal seq 34 [ 184.334163][ T5836] bcachefs (loop0): marking filesystem clean [ 184.349111][ T5836] bcachefs (loop0): shutdown complete umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556fcaf690) = 6166 ./strace-static-x86_64: Process 6166 attached [pid 6166] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6166] chdir("./25") = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6166] setpgid(0, 0) = 0 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6166] write(3, "1000", 4) = 4 [pid 6166] close(3) = 0 [pid 6166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6166] write(1, "executing program\n", 18executing program ) = 18 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6166] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6166] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6166] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6167 attached [pid 6167] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6166] <... clone3 resumed> => {parent_tid=[6167]}, 88) = 6167 [pid 6167] <... rseq resumed>) = 0 [pid 6167] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 1 [pid 6167] memfd_create("syzkaller", 0 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6167] <... memfd_create resumed>) = 3 [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6167] munmap(0x7f53efc00000, 138412032) = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6167] close(3) = 0 [pid 6167] close(4) = 0 [pid 6167] mkdir("./file1", 0777) = 0 [ 185.763377][ T6167] loop0: detected capacity change from 0 to 32768 [ 185.828202][ T6167] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 185.844999][ T6167] bcachefs (loop0): initializing new filesystem [ 185.852083][ T6167] bcachefs (loop0): going read-write [ 185.858283][ T6167] bcachefs (loop0): marking superblocks [ 185.871740][ T6167] bcachefs (loop0): initializing freespace [pid 6167] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6167] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6167] chdir("./file1") = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 185.878558][ T6167] bcachefs (loop0): done initializing freespace [ 185.886574][ T6167] bcachefs (loop0): reading snapshots table [ 185.892530][ T6167] bcachefs (loop0): reading snapshots done [ 185.904550][ T6167] bcachefs (loop0): done starting filesystem [pid 6167] ioctl(4, LOOP_CLR_FD) = 0 [pid 6167] close(4) = 0 [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] <... futex resumed>) = 0 [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6167] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] <... futex resumed>) = 1 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6167] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6166] <... futex resumed>) = 1 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... openat resumed>) = 4 [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = 0 [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] <... futex resumed>) = 1 [pid 6167] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = 0 [pid 6167] <... futex resumed>) = 1 [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] creat(NULL, 000 [pid 6166] <... futex resumed>) = 0 [pid 6167] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] <... futex resumed>) = 0 [pid 6167] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] <... open resumed>) = 5 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 1 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6167] memfd_create("syzkaller", 0) = 6 [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6167] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6167] munmap(0x7f53efc00000, 138412032) = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6167] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6167] ioctl(7, LOOP_CLR_FD) = 0 [pid 6167] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6167] close(7) = 0 [pid 6167] close(6) = 0 [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] <... futex resumed>) = 0 [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] ftruncate(5, 33587195) = 0 [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = 0 [pid 6167] <... futex resumed>) = 0 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 1 [pid 6167] sendfile(5, 5, NULL, 281474978811909 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6166] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6166] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6166] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6178 attached [pid 6178] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 6166] <... clone3 resumed> => {parent_tid=[6178]}, 88) = 6178 [pid 6166] rt_sigprocmask(SIG_SETMASK, [], [pid 6178] set_robust_list(0x7f53f81da9a0, 24 [pid 6166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6166] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] <... set_robust_list resumed>) = 0 [pid 6166] <... futex resumed>) = 0 [pid 6178] rt_sigprocmask(SIG_SETMASK, [], [pid 6166] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6178] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6178] ftruncate(5, 6 [pid 6167] <... sendfile resumed>) = 2883584 [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6178] <... ftruncate resumed>) = 0 [pid 6178] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 1 [pid 6167] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] <... futex resumed>) = 0 [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 6167] write(-1, "0x0000000000000009", 18 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 6167] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 6167] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] exit_group(0 [pid 6178] <... futex resumed>) = ? [pid 6178] +++ exited with 0 +++ [pid 6167] <... futex resumed>) = ? [pid 6166] <... exit_group resumed>) = ? [pid 6167] +++ exited with 0 +++ [pid 6166] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 [ 186.319459][ T5836] bcachefs (loop0): shutting down [ 186.324531][ T5836] bcachefs (loop0): going read-only [ 186.329862][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 186.337243][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 47 [ 186.359051][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 51 [ 186.369497][ T5836] bcachefs (loop0): shutdown complete, journal seq 52 [ 186.376976][ T5836] bcachefs (loop0): marking filesystem clean [ 186.392344][ T5836] bcachefs (loop0): shutdown complete umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6179 attached [pid 6179] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6179 [pid 6179] chdir("./26") = 0 [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6179] setpgid(0, 0) = 0 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6179] write(3, "1000", 4) = 4 [pid 6179] close(3) = 0 [pid 6179] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6179] write(1, "executing program\n", 18) = 18 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6179] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6179] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6180 attached [pid 6180] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6179] <... clone3 resumed> => {parent_tid=[6180]}, 88) = 6180 [pid 6180] <... rseq resumed>) = 0 [pid 6180] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6180] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6180] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = 0 [pid 6179] <... futex resumed>) = 1 [pid 6180] memfd_create("syzkaller", 0 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6180] <... memfd_create resumed>) = 3 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6180] munmap(0x7f53efc00000, 138412032) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6180] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6180] close(3) = 0 [pid 6180] close(4) = 0 [pid 6180] mkdir("./file1", 0777) = 0 [ 187.856990][ T6180] loop0: detected capacity change from 0 to 32768 [ 187.920419][ T6180] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 187.937171][ T6180] bcachefs (loop0): initializing new filesystem [ 187.944246][ T6180] bcachefs (loop0): going read-write [ 187.950463][ T6180] bcachefs (loop0): marking superblocks [ 187.963724][ T6180] bcachefs (loop0): initializing freespace [pid 6180] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6180] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6180] chdir("./file1") = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6180] ioctl(4, LOOP_CLR_FD) = 0 [ 187.970688][ T6180] bcachefs (loop0): done initializing freespace [ 187.978801][ T6180] bcachefs (loop0): reading snapshots table [ 187.984755][ T6180] bcachefs (loop0): reading snapshots done [ 187.997275][ T6180] bcachefs (loop0): done starting filesystem [pid 6180] close(4) = 0 [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6180] lseek(-1, 32767, SEEK_SET [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 6180] <... futex resumed>) = 0 [pid 6180] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = 0 [pid 6179] <... futex resumed>) = 1 [pid 6180] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6180] <... openat resumed>) = 4 [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6180] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6180] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6180] creat(NULL, 000 [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6180] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6180] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6180] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6180] memfd_create("syzkaller", 0 [pid 6179] <... futex resumed>) = 0 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6180] <... memfd_create resumed>) = 6 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6180] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6180] munmap(0x7f53efc00000, 138412032) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6180] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6180] ioctl(7, LOOP_CLR_FD) = 0 [pid 6180] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6180] close(7) = 0 [pid 6180] close(6) = 0 [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6180] ftruncate(5, 33587195 [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... ftruncate resumed>) = 0 [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 6180] <... futex resumed>) = 0 [pid 6180] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6180] sendfile(5, 5, NULL, 281474978811909 [pid 6179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6179] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6179] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6191 attached [pid 6191] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6179] <... clone3 resumed> => {parent_tid=[6191]}, 88) = 6191 [pid 6191] <... rseq resumed>) = 0 [pid 6179] rt_sigprocmask(SIG_SETMASK, [], [pid 6191] set_robust_list(0x7f53f81da9a0, 24) = 0 [pid 6179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], [pid 6179] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6191] ftruncate(5, 6 [pid 6179] <... futex resumed>) = 0 [pid 6179] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6180] <... sendfile resumed>) = 1507328 [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6180] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] <... ftruncate resumed>) = 0 [pid 6191] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 6191] <... futex resumed>) = 1 [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6191] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] <... futex resumed>) = 1 [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6180] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6180] write(-1, "0x0000000000000009", 18 [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6179] <... futex resumed>) = 0 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6180] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6180] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6179] <... futex resumed>) = 0 [pid 6180] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6180] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6180] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] exit_group(0 [pid 6191] <... futex resumed>) = ? [pid 6180] <... futex resumed>) = ? [pid 6179] <... exit_group resumed>) = ? [pid 6191] +++ exited with 0 +++ [pid 6180] +++ exited with 0 +++ [pid 6179] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 [ 188.448015][ T5836] bcachefs (loop0): shutting down [ 188.453071][ T5836] bcachefs (loop0): going read-only [ 188.458523][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 188.466089][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 26 [ 188.485459][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 30 [ 188.496594][ T5836] bcachefs (loop0): shutdown complete, journal seq 31 [ 188.503968][ T5836] bcachefs (loop0): marking filesystem clean [ 188.519350][ T5836] bcachefs (loop0): shutdown complete umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6192 attached , child_tidptr=0x55556fcaf690) = 6192 [pid 6192] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6192] chdir("./27") = 0 [pid 6192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6192] setpgid(0, 0) = 0 [pid 6192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6192] write(3, "1000", 4) = 4 [pid 6192] close(3) = 0 executing program [pid 6192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6192] write(1, "executing program\n", 18) = 18 [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6192] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6192] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6192] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6192] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6192] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6193 attached [pid 6193] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6193] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6192] <... clone3 resumed> => {parent_tid=[6193]}, 88) = 6193 [pid 6193] rt_sigprocmask(SIG_SETMASK, [], [pid 6192] rt_sigprocmask(SIG_SETMASK, [], [pid 6193] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6192] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] memfd_create("syzkaller", 0 [pid 6192] <... futex resumed>) = 0 [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6193] <... memfd_create resumed>) = 3 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6193] munmap(0x7f53efc00000, 138412032) = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6193] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6193] close(3) = 0 [pid 6193] close(4) = 0 [pid 6193] mkdir("./file1", 0777) = 0 [ 189.925661][ T6193] loop0: detected capacity change from 0 to 32768 [ 189.989194][ T6193] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 190.005981][ T6193] bcachefs (loop0): initializing new filesystem [ 190.013179][ T6193] bcachefs (loop0): going read-write [ 190.019857][ T6193] bcachefs (loop0): marking superblocks [ 190.033243][ T6193] bcachefs (loop0): initializing freespace [pid 6193] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6193] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6193] chdir("./file1") = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6193] ioctl(4, LOOP_CLR_FD) = 0 [pid 6193] close(4) = 0 [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6192] <... futex resumed>) = 0 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6192] <... futex resumed>) = 0 [pid 6193] lseek(-1, 32767, SEEK_SET [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6192] <... futex resumed>) = 0 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6192] <... futex resumed>) = 0 [pid 6193] <... openat resumed>) = 4 [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] <... futex resumed>) = 0 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6192] <... futex resumed>) = 0 [pid 6193] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] <... futex resumed>) = 0 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] creat(NULL, 000 [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6192] <... futex resumed>) = 0 [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] <... futex resumed>) = 0 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] <... futex resumed>) = 0 [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = 0 [pid 6192] <... futex resumed>) = 1 [pid 6193] memfd_create("syzkaller", 0 [ 190.040291][ T6193] bcachefs (loop0): done initializing freespace [ 190.048526][ T6193] bcachefs (loop0): reading snapshots table [ 190.054495][ T6193] bcachefs (loop0): reading snapshots done [ 190.066684][ T6193] bcachefs (loop0): done starting filesystem [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6193] <... memfd_create resumed>) = 6 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6193] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6193] munmap(0x7f53efc00000, 138412032) = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6193] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6193] ioctl(7, LOOP_CLR_FD) = 0 [pid 6193] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6193] close(7) = 0 [pid 6193] close(6) = 0 [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = 0 [pid 6193] <... futex resumed>) = 1 [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] ftruncate(5, 33587195 [pid 6192] <... futex resumed>) = 0 [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] <... ftruncate resumed>) = 0 [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6192] <... futex resumed>) = 0 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6192] <... futex resumed>) = 0 [pid 6193] sendfile(5, 5, NULL, 281474978811909 [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6192] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6192] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6192] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6192] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6204 attached [pid 6204] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 6192] <... clone3 resumed> => {parent_tid=[6204]}, 88) = 6204 [pid 6204] set_robust_list(0x7f53f81da9a0, 24 [pid 6192] rt_sigprocmask(SIG_SETMASK, [], [pid 6204] <... set_robust_list resumed>) = 0 [pid 6192] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6204] rt_sigprocmask(SIG_SETMASK, [], [pid 6192] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6192] <... futex resumed>) = 0 [pid 6204] ftruncate(5, 6 [pid 6192] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] <... sendfile resumed>) = 2949120 [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6204] <... ftruncate resumed>) = 0 [pid 6204] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6192] <... futex resumed>) = 0 [pid 6204] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = 0 [pid 6193] write(-1, NULL, 0 [pid 6192] <... futex resumed>) = 1 [pid 6193] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6192] <... futex resumed>) = 0 [pid 6193] write(-1, "0x0000000000000009", 18) = -1 EBADF (Bad file descriptor) [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6192] <... futex resumed>) = 0 [pid 6193] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 6192] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6193] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] exit_group(0 [pid 6193] <... futex resumed>) = ? [pid 6193] +++ exited with 0 +++ [pid 6204] <... futex resumed>) = ? [pid 6204] +++ exited with 0 +++ [pid 6192] <... exit_group resumed>) = ? [pid 6192] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6192, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 [ 190.508766][ T5836] bcachefs (loop0): shutting down [ 190.513864][ T5836] bcachefs (loop0): going read-only [ 190.519314][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 190.526680][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 48 [ 190.546192][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 50 [ 190.556960][ T5836] bcachefs (loop0): shutdown complete, journal seq 51 [ 190.564325][ T5836] bcachefs (loop0): marking filesystem clean [ 190.579533][ T5836] bcachefs (loop0): shutdown complete umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6205 attached , child_tidptr=0x55556fcaf690) = 6205 [pid 6205] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6205] chdir("./28") = 0 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6205] setpgid(0, 0) = 0 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6205] write(3, "1000", 4) = 4 [pid 6205] close(3) = 0 [pid 6205] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6205] write(1, "executing program\n", 18) = 18 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6205] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6205] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6206 attached [pid 6206] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6205] <... clone3 resumed> => {parent_tid=[6206]}, 88) = 6206 [pid 6206] <... rseq resumed>) = 0 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6206] set_robust_list(0x7f53f81fb9a0, 24 [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... set_robust_list resumed>) = 0 [pid 6205] <... futex resumed>) = 0 [pid 6206] rt_sigprocmask(SIG_SETMASK, [], [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6206] memfd_create("syzkaller", 0) = 3 [pid 6206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6206] munmap(0x7f53efc00000, 138412032) = 0 [pid 6206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6206] close(3) = 0 [pid 6206] close(4) = 0 [pid 6206] mkdir("./file1", 0777) = 0 [ 191.960645][ T6206] loop0: detected capacity change from 0 to 32768 [ 192.022712][ T6206] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 192.039593][ T6206] bcachefs (loop0): initializing new filesystem [ 192.047013][ T6206] bcachefs (loop0): going read-write [ 192.053171][ T6206] bcachefs (loop0): marking superblocks [ 192.066361][ T6206] bcachefs (loop0): initializing freespace [pid 6206] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6206] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6206] chdir("./file1") = 0 [pid 6206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6206] ioctl(4, LOOP_CLR_FD) = 0 [pid 6206] close(4) = 0 [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6206] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6205] <... futex resumed>) = 1 [pid 6206] lseek(-1, 32767, SEEK_SET [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6206] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6205] <... futex resumed>) = 1 [pid 6206] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... openat resumed>) = 4 [ 192.073447][ T6206] bcachefs (loop0): done initializing freespace [ 192.081420][ T6206] bcachefs (loop0): reading snapshots table [ 192.087954][ T6206] bcachefs (loop0): reading snapshots done [ 192.100184][ T6206] bcachefs (loop0): done starting filesystem [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6206] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6205] <... futex resumed>) = 0 [pid 6206] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... futex resumed>) = 0 [pid 6206] <... futex resumed>) = 1 [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] creat(NULL, 000 [pid 6205] <... futex resumed>) = 0 [pid 6206] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6206] <... futex resumed>) = 0 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] memfd_create("syzkaller", 0 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6206] <... memfd_create resumed>) = 6 [pid 6206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6206] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6206] munmap(0x7f53efc00000, 138412032) = 0 [pid 6206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6206] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6206] ioctl(7, LOOP_CLR_FD) = 0 [pid 6206] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6206] close(7) = 0 [pid 6206] close(6) = 0 [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... futex resumed>) = 0 [pid 6206] <... futex resumed>) = 1 [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] ftruncate(5, 33587195 [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... ftruncate resumed>) = 0 [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6206] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] sendfile(5, 5, NULL, 281474978811909 [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6205] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6205] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6217 attached [pid 6217] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 6205] <... clone3 resumed> => {parent_tid=[6217]}, 88) = 6217 [pid 6217] set_robust_list(0x7f53f81da9a0, 24) = 0 [pid 6217] rt_sigprocmask(SIG_SETMASK, [], [pid 6205] rt_sigprocmask(SIG_SETMASK, [], [pid 6217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6217] ftruncate(5, 6 [pid 6205] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... sendfile resumed>) = 1769472 [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6217] <... ftruncate resumed>) = 0 [pid 6217] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... futex resumed>) = 0 [pid 6217] <... futex resumed>) = 1 [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = 1 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... futex resumed>) = 0 [pid 6206] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6206] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6205] <... futex resumed>) = 1 [pid 6206] write(-1, "0x0000000000000009", 18 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6206] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6205] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6205] <... futex resumed>) = 0 [pid 6206] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... futex resumed>) = 0 [pid 6206] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6205] exit_group(0 [pid 6206] <... futex resumed>) = ? [pid 6205] <... exit_group resumed>) = ? [pid 6206] +++ exited with 0 +++ [pid 6217] <... futex resumed>) = ? [pid 6217] +++ exited with 0 +++ [pid 6205] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 [ 192.500668][ T5836] bcachefs (loop0): shutting down [ 192.505950][ T5836] bcachefs (loop0): going read-only [ 192.511165][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 192.519250][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 30 [ 192.538147][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 32 [ 192.548479][ T5836] bcachefs (loop0): shutdown complete, journal seq 33 [ 192.555975][ T5836] bcachefs (loop0): marking filesystem clean [ 192.571355][ T5836] bcachefs (loop0): shutdown complete umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6218 attached , child_tidptr=0x55556fcaf690) = 6218 [pid 6218] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6218] chdir("./29") = 0 [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6218] setpgid(0, 0) = 0 [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6218] write(3, "1000", 4) = 4 [pid 6218] close(3) = 0 [pid 6218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6218] write(1, "executing program\n", 18executing program ) = 18 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6218] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6218] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6219 attached [pid 6219] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6218] <... clone3 resumed> => {parent_tid=[6219]}, 88) = 6219 [pid 6219] <... rseq resumed>) = 0 [pid 6218] rt_sigprocmask(SIG_SETMASK, [], [pid 6219] set_robust_list(0x7f53f81fb9a0, 24 [pid 6218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6219] <... set_robust_list resumed>) = 0 [pid 6219] rt_sigprocmask(SIG_SETMASK, [], [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] memfd_create("syzkaller", 0) = 3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6219] munmap(0x7f53efc00000, 138412032) = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6219] close(3) = 0 [pid 6219] close(4) = 0 [pid 6219] mkdir("./file1", 0777) = 0 [ 193.962435][ T6219] loop0: detected capacity change from 0 to 32768 [ 194.025107][ T6219] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 194.042190][ T6219] bcachefs (loop0): initializing new filesystem [ 194.049929][ T6219] bcachefs (loop0): going read-write [ 194.056157][ T6219] bcachefs (loop0): marking superblocks [ 194.069459][ T6219] bcachefs (loop0): initializing freespace [pid 6219] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6219] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6219] chdir("./file1") = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 194.076291][ T6219] bcachefs (loop0): done initializing freespace [ 194.083871][ T6219] bcachefs (loop0): reading snapshots table [ 194.089958][ T6219] bcachefs (loop0): reading snapshots done [ 194.102246][ T6219] bcachefs (loop0): done starting filesystem [pid 6219] ioctl(4, LOOP_CLR_FD) = 0 [pid 6219] close(4) = 0 [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6219] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = 0 [pid 6218] <... futex resumed>) = 1 [pid 6219] lseek(-1, 32767, SEEK_SET) = -1 EBADF (Bad file descriptor) [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6219] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... openat resumed>) = 4 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6218] <... futex resumed>) = 0 [pid 6219] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = 0 [pid 6218] <... futex resumed>) = 0 [pid 6219] creat(NULL, 000 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = 0 [pid 6219] <... futex resumed>) = 1 [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... open resumed>) = 5 [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6218] <... futex resumed>) = 0 [pid 6219] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6219] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] memfd_create("syzkaller", 0) = 6 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6219] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6219] munmap(0x7f53efc00000, 138412032) = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6219] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6219] ioctl(7, LOOP_CLR_FD) = 0 [pid 6219] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6219] close(7) = 0 [pid 6219] close(6) = 0 [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] ftruncate(5, 33587195 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... ftruncate resumed>) = 0 [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = 0 [pid 6219] <... futex resumed>) = 1 [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] sendfile(5, 5, NULL, 281474978811909 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6218] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6218] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6230 attached [pid 6230] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6218] <... clone3 resumed> => {parent_tid=[6230]}, 88) = 6230 [pid 6230] <... rseq resumed>) = 0 [pid 6230] set_robust_list(0x7f53f81da9a0, 24 [pid 6218] rt_sigprocmask(SIG_SETMASK, [], [pid 6230] <... set_robust_list resumed>) = 0 [pid 6218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6230] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6218] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] ftruncate(5, 6 [pid 6218] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... sendfile resumed>) = 2490368 [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] <... ftruncate resumed>) = 0 [pid 6219] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6230] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6218] <... futex resumed>) = 0 [pid 6230] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = 0 [pid 6218] <... futex resumed>) = 1 [pid 6219] write(-1, NULL, 0 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6219] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = 0 [pid 6218] <... futex resumed>) = 1 [pid 6219] write(-1, "0x0000000000000009", 18 [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6219] <... futex resumed>) = 0 [pid 6218] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6218] <... futex resumed>) = 0 [pid 6219] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6218] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6218] exit_group(0) = ? [pid 6230] <... futex resumed>) = ? [pid 6230] +++ exited with 0 +++ [pid 6219] +++ exited with 0 +++ [pid 6218] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6218, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 [ 194.557264][ T5836] bcachefs (loop0): shutting down [ 194.562350][ T5836] bcachefs (loop0): going read-only [ 194.567757][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 194.575558][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 41 [ 194.595065][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 44 [ 194.605819][ T5836] bcachefs (loop0): shutdown complete, journal seq 45 [ 194.613205][ T5836] bcachefs (loop0): marking filesystem clean [ 194.628418][ T5836] bcachefs (loop0): shutdown complete umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6231 attached , child_tidptr=0x55556fcaf690) = 6231 [pid 6231] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6231] chdir("./30") = 0 [pid 6231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6231] setpgid(0, 0) = 0 [pid 6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6231] write(3, "1000", 4) = 4 [pid 6231] close(3) = 0 [pid 6231] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6231] write(1, "executing program\n", 18executing program ) = 18 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6231] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6231] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6231] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6232 attached [pid 6232] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6231] <... clone3 resumed> => {parent_tid=[6232]}, 88) = 6232 [pid 6232] set_robust_list(0x7f53f81fb9a0, 24 [pid 6231] rt_sigprocmask(SIG_SETMASK, [], [pid 6232] <... set_robust_list resumed>) = 0 [pid 6231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] rt_sigprocmask(SIG_SETMASK, [], [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6231] <... futex resumed>) = 0 [pid 6232] memfd_create("syzkaller", 0 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6232] <... memfd_create resumed>) = 3 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6232] munmap(0x7f53efc00000, 138412032) = 0 [pid 6232] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6232] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6232] close(3) = 0 [pid 6232] close(4) = 0 [pid 6232] mkdir("./file1", 0777) = 0 [ 195.956892][ T6232] loop0: detected capacity change from 0 to 32768 [ 196.020530][ T6232] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 196.037504][ T6232] bcachefs (loop0): initializing new filesystem [ 196.045166][ T6232] bcachefs (loop0): going read-write [ 196.051201][ T6232] bcachefs (loop0): marking superblocks [ 196.063977][ T6232] bcachefs (loop0): initializing freespace [pid 6232] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6232] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6232] chdir("./file1") = 0 [pid 6232] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6232] ioctl(4, LOOP_CLR_FD) = 0 [pid 6232] close(4) = 0 [ 196.070920][ T6232] bcachefs (loop0): done initializing freespace [ 196.079435][ T6232] bcachefs (loop0): reading snapshots table [ 196.085606][ T6232] bcachefs (loop0): reading snapshots done [ 196.097986][ T6232] bcachefs (loop0): done starting filesystem [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = 1 [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] lseek(-1, 32767, SEEK_SET [pid 6231] <... futex resumed>) = 0 [pid 6232] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] <... futex resumed>) = 0 [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6231] <... futex resumed>) = 0 [pid 6232] <... openat resumed>) = 4 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] <... futex resumed>) = 0 [pid 6232] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = 1 [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] creat(NULL, 000 [pid 6231] <... futex resumed>) = 0 [pid 6232] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] <... futex resumed>) = 0 [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6231] <... futex resumed>) = 0 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... open resumed>) = 5 [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] <... futex resumed>) = 0 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6232] memfd_create("syzkaller", 0) = 6 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6232] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6232] munmap(0x7f53efc00000, 138412032) = 0 [pid 6232] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6232] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6232] ioctl(7, LOOP_CLR_FD) = 0 [pid 6232] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6232] close(7) = 0 [pid 6232] close(6) = 0 [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] ftruncate(5, 33587195) = 0 [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = 0 [pid 6232] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = 0 [pid 6231] <... futex resumed>) = 1 [pid 6232] sendfile(5, 5, NULL, 281474978811909 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6231] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6231] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6231] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6243 attached => {parent_tid=[6243]}, 88) = 6243 [pid 6243] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6231] rt_sigprocmask(SIG_SETMASK, [], [pid 6243] <... rseq resumed>) = 0 [pid 6243] set_robust_list(0x7f53f81da9a0, 24 [pid 6231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6231] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... set_robust_list resumed>) = 0 [pid 6231] <... futex resumed>) = 0 [pid 6243] rt_sigprocmask(SIG_SETMASK, [], [pid 6231] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6243] ftruncate(5, 6 [pid 6232] <... sendfile resumed>) = 2228224 [pid 6243] <... ftruncate resumed>) = 0 [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6243] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6243] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = 0 [pid 6231] <... futex resumed>) = 1 [pid 6232] write(-1, NULL, 0 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] write(-1, "0x0000000000000009", 18 [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6231] <... futex resumed>) = 0 [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... futex resumed>) = 0 [pid 6231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] <... futex resumed>) = 0 [pid 6232] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6231] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6232] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] exit_group(0 [pid 6243] <... futex resumed>) = ? [pid 6243] +++ exited with 0 +++ [pid 6232] <... futex resumed>) = ? [pid 6232] +++ exited with 0 +++ [pid 6231] <... exit_group resumed>) = ? [pid 6231] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./30/binderfs") = 0 [ 196.568517][ T5836] bcachefs (loop0): shutting down [ 196.573581][ T5836] bcachefs (loop0): going read-only [ 196.579040][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 196.586530][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 37 [ 196.607433][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 40 [ 196.618153][ T5836] bcachefs (loop0): shutdown complete, journal seq 41 [ 196.625872][ T5836] bcachefs (loop0): marking filesystem clean [ 196.640493][ T5836] bcachefs (loop0): shutdown complete umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./30/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6244 attached [pid 6244] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6244 [pid 6244] <... set_robust_list resumed>) = 0 [pid 6244] chdir("./31") = 0 [pid 6244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6244] setpgid(0, 0) = 0 [pid 6244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6244] write(3, "1000", 4) = 4 [pid 6244] close(3) = 0 [pid 6244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6244] write(1, "executing program\n", 18executing program ) = 18 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6244] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6244] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6244] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6244] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6245 attached [pid 6245] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6245] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6245] rt_sigprocmask(SIG_SETMASK, [], [pid 6244] <... clone3 resumed> => {parent_tid=[6245]}, 88) = 6245 [pid 6245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6244] rt_sigprocmask(SIG_SETMASK, [], [pid 6245] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6244] <... futex resumed>) = 1 [pid 6245] memfd_create("syzkaller", 0 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6245] <... memfd_create resumed>) = 3 [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6245] munmap(0x7f53efc00000, 138412032) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6245] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6245] close(3) = 0 [pid 6245] close(4) = 0 [pid 6245] mkdir("./file1", 0777) = 0 [ 198.001868][ T6245] loop0: detected capacity change from 0 to 32768 [ 198.065874][ T6245] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 198.082341][ T6245] bcachefs (loop0): initializing new filesystem [ 198.089580][ T6245] bcachefs (loop0): going read-write [ 198.095611][ T6245] bcachefs (loop0): marking superblocks [ 198.109084][ T6245] bcachefs (loop0): initializing freespace [pid 6245] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6245] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6245] chdir("./file1") = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6245] ioctl(4, LOOP_CLR_FD) = 0 [ 198.116102][ T6245] bcachefs (loop0): done initializing freespace [ 198.124392][ T6245] bcachefs (loop0): reading snapshots table [ 198.130440][ T6245] bcachefs (loop0): reading snapshots done [ 198.142287][ T6245] bcachefs (loop0): done starting filesystem [pid 6245] close(4) = 0 [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... futex resumed>) = 0 [pid 6245] <... futex resumed>) = 1 [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] lseek(-1, 32767, SEEK_SET [pid 6244] <... futex resumed>) = 0 [pid 6245] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6245] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... openat resumed>) = 4 [pid 6244] <... futex resumed>) = 0 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6245] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6244] <... futex resumed>) = 0 [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] <... futex resumed>) = 0 [pid 6244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6245] creat(NULL, 000 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... futex resumed>) = 0 [pid 6245] <... futex resumed>) = 1 [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6244] <... futex resumed>) = 0 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] <... open resumed>) = 5 [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6245] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6245] memfd_create("syzkaller", 0) = 6 [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6245] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6245] munmap(0x7f53efc00000, 138412032) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6245] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6245] ioctl(7, LOOP_CLR_FD) = 0 [pid 6245] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6245] close(7) = 0 [pid 6245] close(6) = 0 [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6245] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6244] <... futex resumed>) = 1 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] ftruncate(5, 33587195) = 0 [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6245] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6244] <... futex resumed>) = 1 [pid 6245] sendfile(5, 5, NULL, 281474978811909 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6244] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6244] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6244] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6256 attached [pid 6256] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6244] <... clone3 resumed> => {parent_tid=[6256]}, 88) = 6256 [pid 6256] <... rseq resumed>) = 0 [pid 6256] set_robust_list(0x7f53f81da9a0, 24 [pid 6244] rt_sigprocmask(SIG_SETMASK, [], [pid 6256] <... set_robust_list resumed>) = 0 [pid 6244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6256] rt_sigprocmask(SIG_SETMASK, [], [pid 6244] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6244] <... futex resumed>) = 0 [pid 6256] ftruncate(5, 6 [pid 6244] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] <... sendfile resumed>) = 1769472 [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6256] <... ftruncate resumed>) = 0 [pid 6256] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6244] <... futex resumed>) = 0 [pid 6256] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6245] write(-1, NULL, 0 [pid 6244] <... futex resumed>) = 1 [pid 6245] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6245] write(-1, "0x0000000000000009", 18) = -1 EBADF (Bad file descriptor) [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6245] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6244] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6245] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... futex resumed>) = 0 [pid 6244] exit_group(0 [pid 6245] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6256] <... futex resumed>) = ? [pid 6245] <... futex resumed>) = ? [pid 6244] <... exit_group resumed>) = ? [pid 6256] +++ exited with 0 +++ [pid 6245] +++ exited with 0 +++ [pid 6244] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6244, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./31/binderfs") = 0 [ 198.607819][ T5836] bcachefs (loop0): shutting down [ 198.612879][ T5836] bcachefs (loop0): going read-only [ 198.618356][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 198.625851][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 30 [ 198.645760][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 33 [ 198.656235][ T5836] bcachefs (loop0): shutdown complete, journal seq 34 [ 198.663611][ T5836] bcachefs (loop0): marking filesystem clean [ 198.678237][ T5836] bcachefs (loop0): shutdown complete umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./31/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6257 attached [pid 6257] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6257 [pid 6257] <... set_robust_list resumed>) = 0 [pid 6257] chdir("./32") = 0 [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6257] setpgid(0, 0) = 0 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6257] write(3, "1000", 4) = 4 [pid 6257] close(3) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6257] write(1, "executing program\n", 18executing program ) = 18 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6257] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6257] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6258 attached [pid 6258] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6257] <... clone3 resumed> => {parent_tid=[6258]}, 88) = 6258 [pid 6258] set_robust_list(0x7f53f81fb9a0, 24 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6258] <... set_robust_list resumed>) = 0 [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] memfd_create("syzkaller", 0 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6258] <... memfd_create resumed>) = 3 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6258] munmap(0x7f53efc00000, 138412032) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6258] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6258] close(3) = 0 [pid 6258] close(4) = 0 [pid 6258] mkdir("./file1", 0777) = 0 [ 200.032888][ T6258] loop0: detected capacity change from 0 to 32768 [ 200.096907][ T6258] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 200.113696][ T6258] bcachefs (loop0): initializing new filesystem [ 200.120975][ T6258] bcachefs (loop0): going read-write [ 200.127233][ T6258] bcachefs (loop0): marking superblocks [ 200.140237][ T6258] bcachefs (loop0): initializing freespace [pid 6258] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6258] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6258] chdir("./file1") = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6258] ioctl(4, LOOP_CLR_FD) = 0 [pid 6258] close(4) = 0 [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6258] lseek(-1, 32767, SEEK_SET [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6257] <... futex resumed>) = 0 [pid 6258] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [ 200.147074][ T6258] bcachefs (loop0): done initializing freespace [ 200.155903][ T6258] bcachefs (loop0): reading snapshots table [ 200.161880][ T6258] bcachefs (loop0): reading snapshots done [ 200.174282][ T6258] bcachefs (loop0): done starting filesystem [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... openat resumed>) = 4 [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6257] <... futex resumed>) = 0 [pid 6258] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] creat(NULL, 000 [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... futex resumed>) = 0 [pid 6258] <... futex resumed>) = 0 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = 1 [pid 6258] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... open resumed>) = 5 [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6258] memfd_create("syzkaller", 0) = 6 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6258] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6258] munmap(0x7f53efc00000, 138412032) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6258] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6258] ioctl(7, LOOP_CLR_FD) = 0 [pid 6258] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6258] close(7) = 0 [pid 6258] close(6) = 0 [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6258] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6258] <... futex resumed>) = 0 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] ftruncate(5, 33587195) = 0 [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6258] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = 0 [pid 6258] sendfile(5, 5, NULL, 281474978811909 [pid 6257] <... futex resumed>) = 1 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6257] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6257] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6269 attached [pid 6269] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 6257] <... clone3 resumed> => {parent_tid=[6269]}, 88) = 6269 [pid 6269] set_robust_list(0x7f53f81da9a0, 24 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6269] <... set_robust_list resumed>) = 0 [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6269] rt_sigprocmask(SIG_SETMASK, [], [pid 6257] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6257] <... futex resumed>) = 0 [pid 6269] ftruncate(5, 6 [pid 6257] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... ftruncate resumed>) = 0 [pid 6258] <... sendfile resumed>) = 1572864 [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6269] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = 0 [pid 6269] <... futex resumed>) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6269] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6258] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = 1 [pid 6258] write(-1, "0x0000000000000009", 18) = -1 EBADF (Bad file descriptor) [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] <... futex resumed>) = 0 [pid 6257] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2) = -1 EBADF (Bad file descriptor) [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 0 [pid 6258] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6257] exit_group(0 [pid 6269] <... futex resumed>) = ? [pid 6258] <... futex resumed>) = ? [pid 6257] <... exit_group resumed>) = ? [pid 6258] +++ exited with 0 +++ [pid 6269] +++ exited with 0 +++ [pid 6257] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./32/binderfs") = 0 [ 200.627402][ T5836] bcachefs (loop0): shutting down [ 200.632468][ T5836] bcachefs (loop0): going read-only [ 200.637978][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 200.645659][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 27 [ 200.664622][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 29 [ 200.675278][ T5836] bcachefs (loop0): shutdown complete, journal seq 30 [ 200.682658][ T5836] bcachefs (loop0): marking filesystem clean [ 200.697685][ T5836] bcachefs (loop0): shutdown complete umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./32/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6270 attached , child_tidptr=0x55556fcaf690) = 6270 [pid 6270] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6270] chdir("./33") = 0 [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6270] setpgid(0, 0) = 0 [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6270] write(3, "1000", 4) = 4 [pid 6270] close(3) = 0 [pid 6270] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6270] write(1, "executing program\n", 18) = 18 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6270] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6270] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6270] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6270] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6271 attached [pid 6271] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6270] <... clone3 resumed> => {parent_tid=[6271]}, 88) = 6271 [pid 6271] set_robust_list(0x7f53f81fb9a0, 24 [pid 6270] rt_sigprocmask(SIG_SETMASK, [], [pid 6271] <... set_robust_list resumed>) = 0 [pid 6270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6271] rt_sigprocmask(SIG_SETMASK, [], [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6270] <... futex resumed>) = 0 [pid 6271] memfd_create("syzkaller", 0 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6271] <... memfd_create resumed>) = 3 [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6271] munmap(0x7f53efc00000, 138412032) = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6271] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6271] close(3) = 0 [pid 6271] close(4) = 0 [pid 6271] mkdir("./file1", 0777) = 0 [ 202.101548][ T6271] loop0: detected capacity change from 0 to 32768 [ 202.164395][ T6271] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 202.181044][ T6271] bcachefs (loop0): initializing new filesystem [ 202.188324][ T6271] bcachefs (loop0): going read-write [ 202.194099][ T6271] bcachefs (loop0): marking superblocks [ 202.207231][ T6271] bcachefs (loop0): initializing freespace [pid 6271] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6271] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6271] chdir("./file1") = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6271] ioctl(4, LOOP_CLR_FD) = 0 [pid 6271] close(4) = 0 [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... futex resumed>) = 0 [pid 6270] <... futex resumed>) = 1 [pid 6271] lseek(-1, 32767, SEEK_SET [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 202.213998][ T6271] bcachefs (loop0): done initializing freespace [ 202.222045][ T6271] bcachefs (loop0): reading snapshots table [ 202.228164][ T6271] bcachefs (loop0): reading snapshots done [ 202.240756][ T6271] bcachefs (loop0): done starting filesystem [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6270] <... futex resumed>) = 0 [pid 6271] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] <... openat resumed>) = 4 [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] <... futex resumed>) = 0 [pid 6271] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... futex resumed>) = 0 [pid 6270] <... futex resumed>) = 1 [pid 6271] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6271] <... futex resumed>) = 0 [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6270] <... futex resumed>) = 0 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] <... open resumed>) = 5 [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... futex resumed>) = 0 [pid 6271] <... futex resumed>) = 1 [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6271] memfd_create("syzkaller", 0) = 6 [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6271] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6271] munmap(0x7f53efc00000, 138412032) = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6271] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6271] ioctl(7, LOOP_CLR_FD) = 0 [pid 6271] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6271] close(7) = 0 [pid 6271] close(6) = 0 [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... futex resumed>) = 0 [pid 6271] ftruncate(5, 33587195 [pid 6270] <... futex resumed>) = 1 [pid 6271] <... ftruncate resumed>) = 0 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] sendfile(5, 5, NULL, 281474978811909 [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6270] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6270] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6270] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6270] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6282 attached [pid 6282] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6270] <... clone3 resumed> => {parent_tid=[6282]}, 88) = 6282 [pid 6282] <... rseq resumed>) = 0 [pid 6270] rt_sigprocmask(SIG_SETMASK, [], [pid 6282] set_robust_list(0x7f53f81da9a0, 24 [pid 6270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6282] <... set_robust_list resumed>) = 0 [pid 6270] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] rt_sigprocmask(SIG_SETMASK, [], [pid 6270] <... futex resumed>) = 0 [pid 6282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6270] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6282] ftruncate(5, 6 [pid 6271] <... sendfile resumed>) = 1966080 [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6282] <... ftruncate resumed>) = 0 [pid 6282] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6282] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... futex resumed>) = 0 [pid 6270] <... futex resumed>) = 1 [pid 6271] write(-1, NULL, 0 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6271] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] <... futex resumed>) = 0 [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... futex resumed>) = 0 [pid 6270] <... futex resumed>) = 1 [pid 6271] write(-1, "0x0000000000000009", 18 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6270] <... futex resumed>) = 0 [pid 6271] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6270] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6271] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] exit_group(0 [pid 6271] <... futex resumed>) = ? [pid 6282] <... futex resumed>) = ? [pid 6271] +++ exited with 0 +++ [pid 6270] <... exit_group resumed>) = ? [pid 6282] +++ exited with 0 +++ [pid 6270] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6270, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./33/binderfs") = 0 [ 202.697975][ T5836] bcachefs (loop0): shutting down [ 202.703049][ T5836] bcachefs (loop0): going read-only [ 202.708545][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 202.716142][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 33 [ 202.735971][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 36 [ 202.746453][ T5836] bcachefs (loop0): shutdown complete, journal seq 37 [ 202.753826][ T5836] bcachefs (loop0): marking filesystem clean [ 202.768530][ T5836] bcachefs (loop0): shutdown complete umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./33/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./33/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6283 attached [pid 6283] set_robust_list(0x55556fcaf6a0, 24 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6283 [pid 6283] <... set_robust_list resumed>) = 0 [pid 6283] chdir("./34") = 0 [pid 6283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6283] setpgid(0, 0) = 0 [pid 6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6283] write(3, "1000", 4) = 4 [pid 6283] close(3) = 0 [pid 6283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6283] write(1, "executing program\n", 18executing program ) = 18 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6283] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6283] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6284 attached [pid 6284] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053) = 0 [pid 6283] <... clone3 resumed> => {parent_tid=[6284]}, 88) = 6284 [pid 6284] set_robust_list(0x7f53f81fb9a0, 24 [pid 6283] rt_sigprocmask(SIG_SETMASK, [], [pid 6284] <... set_robust_list resumed>) = 0 [pid 6283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6284] rt_sigprocmask(SIG_SETMASK, [], [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6283] <... futex resumed>) = 0 [pid 6284] memfd_create("syzkaller", 0 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6284] <... memfd_create resumed>) = 3 [pid 6284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6284] munmap(0x7f53efc00000, 138412032) = 0 [pid 6284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6284] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6284] close(3) = 0 [pid 6284] close(4) = 0 [pid 6284] mkdir("./file1", 0777) = 0 [ 204.108665][ T6284] loop0: detected capacity change from 0 to 32768 [ 204.171758][ T6284] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 204.188461][ T6284] bcachefs (loop0): initializing new filesystem [ 204.195719][ T6284] bcachefs (loop0): going read-write [ 204.201722][ T6284] bcachefs (loop0): marking superblocks [ 204.215972][ T6284] bcachefs (loop0): initializing freespace [pid 6284] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6284] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6284] chdir("./file1") = 0 [pid 6284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6284] ioctl(4, LOOP_CLR_FD) = 0 [pid 6284] close(4) = 0 [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] <... futex resumed>) = 0 [pid 6284] <... futex resumed>) = 1 [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] lseek(-1, 32767, SEEK_SET [pid 6283] <... futex resumed>) = 0 [pid 6284] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6284] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... openat resumed>) = 4 [pid 6283] <... futex resumed>) = 0 [ 204.223167][ T6284] bcachefs (loop0): done initializing freespace [ 204.230939][ T6284] bcachefs (loop0): reading snapshots table [ 204.236980][ T6284] bcachefs (loop0): reading snapshots done [ 204.248844][ T6284] bcachefs (loop0): done starting filesystem [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6284] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] <... futex resumed>) = 0 [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = 0 [pid 6283] <... futex resumed>) = 1 [pid 6284] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6284] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6283] <... futex resumed>) = 0 [pid 6284] creat(NULL, 000 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] <... creat resumed>) = -1 EFAULT (Bad address) [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6284] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6283] <... futex resumed>) = 0 [pid 6284] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] <... open resumed>) = 5 [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6284] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6283] <... futex resumed>) = 0 [pid 6284] memfd_create("syzkaller", 0 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6284] <... memfd_create resumed>) = 6 [pid 6284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6284] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6284] munmap(0x7f53efc00000, 138412032) = 0 [pid 6284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6284] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6284] ioctl(7, LOOP_CLR_FD) = 0 [pid 6284] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6284] close(7) = 0 [pid 6284] close(6) = 0 [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6284] ftruncate(5, 33587195 [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] <... ftruncate resumed>) = 0 [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6284] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6283] <... futex resumed>) = 0 [pid 6284] sendfile(5, 5, NULL, 281474978811909 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6283] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6283] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6295 attached [pid 6295] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053) = 0 [pid 6283] <... clone3 resumed> => {parent_tid=[6295]}, 88) = 6295 [pid 6295] set_robust_list(0x7f53f81da9a0, 24 [pid 6283] rt_sigprocmask(SIG_SETMASK, [], [pid 6295] <... set_robust_list resumed>) = 0 [pid 6295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6295] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6283] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6295] ftruncate(5, 6 [pid 6284] <... sendfile resumed>) = 2818048 [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6284] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6295] <... ftruncate resumed>) = 0 [pid 6295] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6283] <... futex resumed>) = 0 [pid 6295] futex(0x7f53f82f16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = 0 [pid 6283] <... futex resumed>) = 1 [pid 6284] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] <... futex resumed>) = 0 [pid 6283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6284] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6283] <... futex resumed>) = 0 [pid 6284] write(-1, "0x0000000000000009", 18 [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] <... futex resumed>) = 0 [pid 6284] <... futex resumed>) = 1 [pid 6283] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6283] <... futex resumed>) = 0 [pid 6284] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6283] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6284] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] exit_group(0 [pid 6295] <... futex resumed>) = ? [pid 6284] <... futex resumed>) = ? [pid 6295] +++ exited with 0 +++ [pid 6284] +++ exited with 0 +++ [pid 6283] <... exit_group resumed>) = ? [pid 6283] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6283, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556fcb0730 /* 4 entries */, 32768) = 112 umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./34/binderfs") = 0 [ 204.696393][ T5836] bcachefs (loop0): shutting down [ 204.701453][ T5836] bcachefs (loop0): going read-only [ 204.706868][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 204.714250][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 46 [ 204.733593][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 48 [ 204.743896][ T5836] bcachefs (loop0): shutdown complete, journal seq 49 [ 204.751598][ T5836] bcachefs (loop0): marking filesystem clean [ 204.766286][ T5836] bcachefs (loop0): shutdown complete umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./34/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55556fcb8770 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556fcb8770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/file1") = 0 getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6296 attached [pid 6296] set_robust_list(0x55556fcaf6a0, 24) = 0 [pid 6296] chdir("./35") = 0 [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6296] setpgid(0, 0 [pid 5836] <... clone resumed>, child_tidptr=0x55556fcaf690) = 6296 [pid 6296] <... setpgid resumed>) = 0 [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6296] write(3, "1000", 4) = 4 [pid 6296] close(3) = 0 [pid 6296] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6296] write(1, "executing program\n", 18) = 18 [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] rt_sigaction(SIGRT_1, {sa_handler=0x7f53f826b3b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f53f825c560}, NULL, 8) = 0 [pid 6296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81db000 [pid 6296] mprotect(0x7f53f81dc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81fb990, parent_tid=0x7f53f81fb990, exit_signal=0, stack=0x7f53f81db000, stack_size=0x20300, tls=0x7f53f81fb6c0}./strace-static-x86_64: Process 6297 attached [pid 6297] rseq(0x7f53f81fbfe0, 0x20, 0, 0x53053053 [pid 6296] <... clone3 resumed> => {parent_tid=[6297]}, 88) = 6297 [pid 6297] <... rseq resumed>) = 0 [pid 6297] set_robust_list(0x7f53f81fb9a0, 24) = 0 [pid 6297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6297] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6296] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] <... futex resumed>) = 0 [pid 6296] <... futex resumed>) = 1 [pid 6297] memfd_create("syzkaller", 0 [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6297] <... memfd_create resumed>) = 3 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f53efc00000 [pid 6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6297] munmap(0x7f53efc00000, 138412032) = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6297] close(3) = 0 [pid 6297] close(4) = 0 [pid 6297] mkdir("./file1", 0777) = 0 [ 206.112803][ T6297] loop0: detected capacity change from 0 to 32768 [ 206.188049][ T6297] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 206.204519][ T6297] bcachefs (loop0): initializing new filesystem [ 206.211805][ T6297] bcachefs (loop0): going read-write [ 206.217724][ T6297] bcachefs (loop0): marking superblocks [ 206.230818][ T6297] bcachefs (loop0): initializing freespace [pid 6297] mount("/dev/loop0", "./file1", "bcachefs", MS_SYNCHRONOUS, "") = 0 [pid 6297] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6297] chdir("./file1") = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6297] ioctl(4, LOOP_CLR_FD) = 0 [pid 6297] close(4) = 0 [pid 6297] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6297] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6296] <... futex resumed>) = 0 [pid 6297] lseek(-1, 32767, SEEK_SET [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] <... lseek resumed>) = -1 EBADF (Bad file descriptor) [pid 6297] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6297] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 0502 [pid 6296] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] <... openat resumed>) = 4 [pid 6297] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6297] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6296] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] ioctl(4, _IOC(_IOC_WRITE, 0x66, 0x10, 0x8), 0x20000ec0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 6296] <... futex resumed>) = 0 [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6297] <... futex resumed>) = 0 [pid 6296] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 6296] <... futex resumed>) = 0 [pid 6297] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] <... futex resumed>) = 0 [pid 6296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6297] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6296] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6296] <... futex resumed>) = 0 [pid 6297] <... open resumed>) = 5 [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6296] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] memfd_create("syzkaller", 0) = 6 [pid 6296] <... futex resumed>) = 0 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6297] <... mmap resumed>) = 0x7f53efc00000 [ 206.237639][ T6297] bcachefs (loop0): done initializing freespace [ 206.246520][ T6297] bcachefs (loop0): reading snapshots table [ 206.252472][ T6297] bcachefs (loop0): reading snapshots done [ 206.264475][ T6297] bcachefs (loop0): done starting filesystem [pid 6297] write(6, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 6297] munmap(0x7f53efc00000, 138412032) = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 6297] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6297] ioctl(7, LOOP_CLR_FD) = 0 [pid 6297] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 6297] close(7) = 0 [pid 6297] close(6) = 0 [pid 6297] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6297] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] <... futex resumed>) = 0 [pid 6296] <... futex resumed>) = 1 [pid 6297] ftruncate(5, 33587195 [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] <... ftruncate resumed>) = 0 [pid 6297] futex(0x7f53f82f16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6297] futex(0x7f53f82f16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6296] futex(0x7f53f82f16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] sendfile(5, 5, NULL, 281474978811909 [pid 6296] <... futex resumed>) = 0 [pid 6296] futex(0x7f53f82f16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6296] futex(0x7f53f82f16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f81ba000 [pid 6296] mprotect(0x7f53f81bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81da990, parent_tid=0x7f53f81da990, exit_signal=0, stack=0x7f53f81ba000, stack_size=0x20300, tls=0x7f53f81da6c0}./strace-static-x86_64: Process 6308 attached [pid 6308] rseq(0x7f53f81dafe0, 0x20, 0, 0x53053053 [pid 6296] <... clone3 resumed> => {parent_tid=[6308]}, 88) = 6308 [pid 6308] <... rseq resumed>) = 0 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], [pid 6308] set_robust_list(0x7f53f81da9a0, 24 [pid 6296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6308] <... set_robust_list resumed>) = 0 [pid 6296] futex(0x7f53f82f16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] rt_sigprocmask(SIG_SETMASK, [], [pid 6296] <... futex resumed>) = 0 [pid 6308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6308] ftruncate(5, 6 [pid 6296] futex(0x7f53f82f16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6296] futex(0x7f53f82f16ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f53f8199000 [pid 6296] mprotect(0x7f53f819a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f53f81b9990, parent_tid=0x7f53f81b9990, exit_signal=0, stack=0x7f53f8199000, stack_size=0x20300, tls=0x7f53f81b96c0}./strace-static-x86_64: Process 6309 attached [pid 6309] rseq(0x7f53f81b9fe0, 0x20, 0, 0x53053053 [pid 6296] <... clone3 resumed> => {parent_tid=[6309]}, 88) = 6309 [pid 6309] <... rseq resumed>) = 0 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], [pid 6309] set_robust_list(0x7f53f81b99a0, 24) = 0 [pid 6296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6309] rt_sigprocmask(SIG_SETMASK, [], [pid 6296] futex(0x7f53f82f16e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6296] <... futex resumed>) = 0 [pid 6309] write(-1, NULL, 0 [pid 6296] futex(0x7f53f82f16ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6309] futex(0x7f53f82f16ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6309] futex(0x7f53f82f16e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] futex(0x7f53f82f16e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6296] <... futex resumed>) = 0 [pid 6309] write(-1, "0x0000000000000009", 18 [pid 6296] futex(0x7f53f82f16ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6309] futex(0x7f53f82f16ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... futex resumed>) = 0 [pid 6309] <... futex resumed>) = 1 [pid 6296] futex(0x7f53f82f16e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6309] fallocate(-1, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 2 [pid 6296] <... futex resumed>) = 0 [pid 6309] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6296] futex(0x7f53f82f16ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] futex(0x7f53f82f16ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6309] <... futex resumed>) = 0 [pid 6309] futex(0x7f53f82f16e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] exit_group(0 [pid 6309] <... futex resumed>) = ? [pid 6296] <... exit_group resumed>) = ? [pid 6309] +++ exited with 0 +++ [pid 5836] kill(-6296, SIGKILL) = 0 [pid 5836] kill(6296, SIGKILL) = 0 [pid 5836] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x55556fcb0730 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(3, 0x55556fcb0730 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [ 429.955185][ T30] INFO: task syz-executor385:6297 blocked for more than 143 seconds. [ 429.963364][ T30] Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 429.971080][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.979788][ T30] task:syz-executor385 state:D stack:14368 pid:6297 tgid:6296 ppid:5836 flags:0x00004006 [ 429.990045][ T30] Call Trace: [ 429.993339][ T30] [ 429.996319][ T30] __schedule+0x17fb/0x4be0 [ 430.000872][ T30] ? __pfx___schedule+0x10/0x10 [ 430.005776][ T30] ? __blk_flush_plug+0x449/0x500 [ 430.010813][ T30] ? __pfx_lock_release+0x10/0x10 [ 430.015863][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 430.021775][ T30] ? schedule+0x90/0x320 [ 430.026054][ T30] schedule+0x14b/0x320 [ 430.030225][ T30] __bch2_two_state_lock+0x229/0x2c0 [ 430.035580][ T30] ? __pfx___bch2_two_state_lock+0x10/0x10 [ 430.041406][ T30] ? rcu_is_watching+0x15/0xb0 [ 430.046442][ T30] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 430.052448][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 430.058563][ T30] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 430.064564][ T30] bch2_readahead+0x9a2/0x11e0 [ 430.069446][ T30] ? __pfx_bch2_readahead+0x10/0x10 [ 430.074665][ T30] ? __filemap_add_folio+0xeeb/0x1320 [ 430.080096][ T30] ? blk_start_plug+0x70/0x1b0 [ 430.084870][ T30] read_pages+0x176/0x750 [ 430.089265][ T30] ? folio_add_lru+0x187/0x230 [ 430.094045][ T30] ? filemap_add_folio+0x24e/0x380 [ 430.099238][ T30] ? __pfx_read_pages+0x10/0x10 [ 430.104128][ T30] page_cache_ra_order+0x7e3/0xb60 [ 430.109315][ T30] filemap_get_pages+0x95f/0x2080 [ 430.114365][ T30] ? iter_file_splice_write+0x12ae/0x1510 [ 430.120279][ T30] ? direct_splice_actor+0x11b/0x220 [ 430.125648][ T30] ? do_sendfile+0x564/0x8a0 [ 430.130266][ T30] ? __pfx_filemap_get_pages+0x10/0x10 [ 430.135774][ T30] ? __pfx___might_resched+0x10/0x10 [ 430.141075][ T30] ? iter_file_splice_write+0x12ae/0x1510 [ 430.146850][ T30] ? iter_file_splice_write+0x12ae/0x1510 [ 430.152586][ T30] filemap_splice_read+0x68e/0xef0 [ 430.157762][ T30] ? __pfx_filemap_splice_read+0x10/0x10 [ 430.163419][ T30] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 430.169404][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 430.175341][ T30] ? file_end_write+0x15b/0x250 [ 430.180191][ T30] ? direct_splice_actor+0x128/0x220 [ 430.185529][ T30] ? __pfx_filemap_splice_read+0x10/0x10 [ 430.191175][ T30] splice_direct_to_actor+0x4af/0xc80 [ 430.196609][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 430.202258][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 430.208212][ T30] ? __fget_files+0x2a/0x410 [ 430.212812][ T30] ? __pfx_lock_release+0x10/0x10 [ 430.217872][ T30] do_splice_direct+0x289/0x3e0 [ 430.222737][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 430.228162][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 430.234072][ T30] ? rw_verify_area+0x1c3/0x6f0 [ 430.238982][ T30] do_sendfile+0x564/0x8a0 [ 430.243423][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 430.248432][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 430.253650][ T30] ? ptrace_notify+0x279/0x380 [ 430.258490][ T30] __se_sys_sendfile64+0x17c/0x1e0 [ 430.263621][ T30] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 430.269310][ T30] ? do_syscall_64+0x100/0x230 [ 430.274096][ T30] do_syscall_64+0xf3/0x230 [ 430.278643][ T30] ? clear_bhb_loop+0x35/0x90 [ 430.283333][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.289323][ T30] RIP: 0033:0x7f53f8244f99 [ 430.293776][ T30] RSP: 002b:00007f53f81fb218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 430.302219][ T30] RAX: ffffffffffffffda RBX: 00007f53f82f16c8 RCX: 00007f53f8244f99 [ 430.310241][ T30] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 430.318246][ T30] RBP: 00007f53f82f16c0 R08: 0000000000000000 R09: 0000000000000000 [ 430.326258][ T30] R10: 0001000000201005 R11: 0000000000000246 R12: 00007f53f82bdd3c [ 430.334214][ T30] R13: 756d6d695f737973 R14: 656c626174756d6d R15: 00007f53f829906b [ 430.342225][ T30] [ 430.345290][ T30] INFO: task syz-executor385:6308 blocked for more than 143 seconds. [ 430.353357][ T30] Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 430.361360][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.370162][ T30] task:syz-executor385 state:D stack:26768 pid:6308 tgid:6296 ppid:5836 flags:0x00004006 [ 430.380601][ T30] Call Trace: [ 430.383935][ T30] [ 430.386969][ T30] __schedule+0x17fb/0x4be0 [ 430.391509][ T30] ? __pfx___schedule+0x10/0x10 [ 430.396399][ T30] ? __pfx_lock_release+0x10/0x10 [ 430.401437][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.407518][ T30] ? schedule+0x90/0x320 [ 430.411801][ T30] schedule+0x14b/0x320 [ 430.415990][ T30] io_schedule+0x8d/0x110 [ 430.420331][ T30] ? folio_wait_bit_common+0x850/0xee0 [ 430.425888][ T30] folio_wait_bit_common+0x839/0xee0 [ 430.431197][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 430.437050][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 430.442621][ T30] ? __filemap_get_folio+0x848/0x940 [ 430.447994][ T30] truncate_inode_pages_range+0xc1f/0x10e0 [ 430.453821][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 430.460116][ T30] ? unmap_mapping_range+0xf8/0x290 [ 430.465359][ T30] ? unmap_mapping_range+0xf8/0x290 [ 430.470550][ T30] ? __pfx_unmap_mapping_range+0x10/0x10 [ 430.476224][ T30] truncate_setsize+0xcf/0xf0 [ 430.480917][ T30] bchfs_truncate+0x6f3/0xc90 [ 430.485643][ T30] ? __pfx_bchfs_truncate+0x10/0x10 [ 430.490863][ T30] ? setattr_prepare+0x1f5/0xb20 [ 430.495850][ T30] ? bch2_setattr+0x1a4/0x220 [ 430.500536][ T30] ? __pfx_bch2_setattr+0x10/0x10 [ 430.505616][ T30] notify_change+0xbca/0xe90 [ 430.510246][ T30] do_ftruncate+0x462/0x580 [ 430.514772][ T30] ? __pfx_do_ftruncate+0x10/0x10 [ 430.519865][ T30] ? __fget_files+0x395/0x410 [ 430.524549][ T30] ? __fget_files+0x2a/0x410 [ 430.529179][ T30] __x64_sys_ftruncate+0x94/0xf0 [ 430.534131][ T30] do_syscall_64+0xf3/0x230 [ 430.538670][ T30] ? clear_bhb_loop+0x35/0x90 [ 430.543353][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.549279][ T30] RIP: 0033:0x7f53f8244f99 [ 430.553704][ T30] RSP: 002b:00007f53f81da218 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 430.562176][ T30] RAX: ffffffffffffffda RBX: 00007f53f82f16d8 RCX: 00007f53f8244f99 [ 430.570216][ T30] RDX: 00007f53f821e5f6 RSI: 0000000000000006 RDI: 0000000000000005 [ 430.578212][ T30] RBP: 00007f53f82f16d0 R08: 00007ffd7e15fa57 R09: 0000000000000000 [ 430.586215][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f53f82bdd3c [ 430.594173][ T30] R13: 756d6d695f737973 R14: 00007ffd7e15f970 R15: 00007ffd7e15fa58 [ 430.602187][ T30] [ 430.605275][ T30] [ 430.605275][ T30] Showing all locks held in the system: [ 430.612988][ T30] 1 lock held by khungtaskd/30: [ 430.617936][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 430.627920][ T30] 2 locks held by getty/5572: [ 430.632600][ T30] #0: ffff8880358e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.642408][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 430.652591][ T30] 1 lock held by syz-executor385/6297: [ 430.658091][ T30] #0: ffff8880781a4668 (mapping.invalidate_lock#3){.+.+}-{4:4}, at: page_cache_ra_order+0x326/0xb60 [ 430.669065][ T30] 2 locks held by syz-executor385/6308: [ 430.674610][ T30] #0: ffff8880308fc420 (sb_writers#9){.+.+}-{0:0}, at: do_ftruncate+0x28b/0x580 [ 430.683797][ T30] #1: ffff8880781a44c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: do_ftruncate+0x44e/0x580 [ 430.694348][ T30] [ 430.696703][ T30] ============================================= [ 430.696703][ T30] [ 430.705144][ T30] NMI backtrace for cpu 1 [ 430.709463][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 430.719943][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 430.729982][ T30] Call Trace: [ 430.733246][ T30] [ 430.736163][ T30] dump_stack_lvl+0x241/0x360 [ 430.740839][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.746023][ T30] ? __pfx__printk+0x10/0x10 [ 430.750600][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 430.755527][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.760969][ T30] ? _printk+0xd5/0x120 [ 430.765120][ T30] ? __pfx__printk+0x10/0x10 [ 430.769718][ T30] ? __wake_up_klogd+0xcc/0x110 [ 430.774572][ T30] ? __pfx__printk+0x10/0x10 [ 430.779162][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.785142][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 430.791121][ T30] watchdog+0xff6/0x1040 [ 430.795360][ T30] ? watchdog+0x1ea/0x1040 [ 430.799773][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.804442][ T30] kthread+0x2f0/0x390 [ 430.808508][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.813176][ T30] ? __pfx_kthread+0x10/0x10 [ 430.817764][ T30] ret_from_fork+0x4b/0x80 [ 430.822173][ T30] ? __pfx_kthread+0x10/0x10 [ 430.826760][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.831532][ T30] [ 430.834648][ T30] Sending NMI from CPU 1 to CPUs 0: [ 430.839923][ C0] NMI backtrace for cpu 0 [ 430.839935][ C0] CPU: 0 UID: 0 PID: 6317 Comm: kworker/u8:0 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 430.839955][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 430.839966][ C0] Workqueue: events_unbound toggle_allocation_gate [ 430.839993][ C0] RIP: 0010:insn_get_opcode+0x51/0xe80 [ 430.840017][ C0] Code: 4d 8d 6f 1c 4c 89 ed 48 c1 ed 03 42 0f b6 44 35 00 84 c0 0f 85 1e 0b 00 00 41 0f b6 5d 00 45 31 e4 31 ff 89 de e8 0f 95 df f5 <85> db 74 0a e8 06 92 df f5 e9 cc 0a 00 00 4c 89 ff e8 c9 e4 ff ff [ 430.840030][ C0] RSP: 0018:ffffc90003cc7658 EFLAGS: 00000293 [ 430.840044][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8880306f3c00 [ 430.840055][ C0] RDX: ffff8880306f3c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.840066][ C0] RBP: 1ffff92000798f27 R08: ffffffff8bbfe191 R09: 0000000000000000 [ 430.840077][ C0] R10: ffffc90003cc7920 R11: fffff52000798f2f R12: 0000000000000000 [ 430.840089][ C0] R13: ffffc90003cc793c R14: dffffc0000000000 R15: ffffc90003cc7920 [ 430.840101][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 430.840115][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.840127][ C0] CR2: 00007fc84f01c580 CR3: 000000000e736000 CR4: 00000000003526f0 [ 430.840142][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.840151][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.840162][ C0] Call Trace: [ 430.840168][ C0] [ 430.840174][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 430.840192][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 430.840211][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.840229][ C0] ? nmi_handle+0x2a/0x5a0 [ 430.840253][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 430.840276][ C0] ? nmi_handle+0x14f/0x5a0 [ 430.840292][ C0] ? nmi_handle+0x2a/0x5a0 [ 430.840310][ C0] ? insn_get_opcode+0x51/0xe80 [ 430.840330][ C0] ? default_do_nmi+0x63/0x160 [ 430.840348][ C0] ? exc_nmi+0x123/0x1f0 [ 430.840364][ C0] ? end_repeat_nmi+0xf/0x53 [ 430.840382][ C0] ? insn_get_opcode+0x51/0xe80 [ 430.840403][ C0] ? insn_get_opcode+0x51/0xe80 [ 430.840424][ C0] ? insn_get_opcode+0x51/0xe80 [ 430.840445][ C0] ? insn_get_opcode+0x51/0xe80 [ 430.840465][ C0] [ 430.840470][ C0] [ 430.840476][ C0] ? inat_get_opcode_attribute+0xc/0x50 [ 430.840495][ C0] ? __kmalloc_cache_node_noprof+0x8d/0x3a0 [ 430.840511][ C0] ? insn_get_opcode+0xa10/0xe80 [ 430.840537][ C0] insn_get_modrm+0x63/0x730 [ 430.840563][ C0] ? insn_get_modrm+0x4a2/0x730 [ 430.840586][ C0] insn_get_displacement+0x151/0x9a0 [ 430.840611][ C0] insn_get_immediate+0x62/0x11f0 [ 430.840632][ C0] ? insn_get_immediate+0xad4/0x11f0 [ 430.840656][ C0] insn_decode+0x2d6/0x4c0 [ 430.840678][ C0] ? __kmalloc_cache_node_noprof+0x8c/0x3a0 [ 430.840694][ C0] text_poke_loc_init+0xed/0x870 [ 430.840715][ C0] ? __jump_label_patch+0x2ca/0x490 [ 430.840737][ C0] ? __kmalloc_cache_node_noprof+0x8c/0x3a0 [ 430.840754][ C0] ? __pfx_text_poke_loc_init+0x10/0x10 [ 430.840779][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 430.840802][ C0] ? text_poke_queue+0x12c/0x180 [ 430.840820][ C0] arch_jump_label_transform_queue+0x8f/0x100 [ 430.840844][ C0] __jump_label_update+0x177/0x3a0 [ 430.840868][ C0] ? process_scheduled_works+0x976/0x1840 [ 430.840892][ C0] static_key_disable_cpuslocked+0xd2/0x1c0 [ 430.840914][ C0] static_key_disable+0x1a/0x20 [ 430.840934][ C0] toggle_allocation_gate+0x1bf/0x260 [ 430.840957][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 430.840979][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.841002][ C0] process_scheduled_works+0xa66/0x1840 [ 430.841038][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.841064][ C0] ? assign_work+0x364/0x3d0 [ 430.841089][ C0] worker_thread+0x870/0xd30 [ 430.841108][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 430.841129][ C0] ? __kthread_parkme+0x169/0x1d0 [ 430.841146][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.841161][ C0] kthread+0x2f0/0x390 [ 430.841178][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.841192][ C0] ? __pfx_kthread+0x10/0x10 [ 430.841210][ C0] ret_from_fork+0x4b/0x80 [ 430.841224][ C0] ? __pfx_kthread+0x10/0x10 [ 430.841242][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.841270][ C0] [ 430.841277][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.354 msecs [ 430.841927][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 431.278092][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 431.288583][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 431.298630][ T30] Call Trace: [ 431.301903][ T30] [ 431.304828][ T30] dump_stack_lvl+0x241/0x360 [ 431.309506][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.314703][ T30] ? __pfx__printk+0x10/0x10 [ 431.319285][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.325267][ T30] ? vscnprintf+0x5d/0x90 [ 431.329590][ T30] panic+0x349/0x880 [ 431.333480][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 431.339627][ T30] ? __pfx_panic+0x10/0x10 [ 431.344040][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 431.349407][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 431.355556][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 431.361705][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 431.367852][ T30] watchdog+0x1035/0x1040 [ 431.372176][ T30] ? watchdog+0x1ea/0x1040 [ 431.376588][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.381264][ T30] kthread+0x2f0/0x390 [ 431.385326][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.389995][ T30] ? __pfx_kthread+0x10/0x10 [ 431.394576][ T30] ret_from_fork+0x4b/0x80 [ 431.398982][ T30] ? __pfx_kthread+0x10/0x10 [ 431.403568][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.408337][ T30] [ 431.411600][ T30] Kernel Offset: disabled [ 431.415915][ T30] Rebooting in 86400 seconds..