./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3738948201 <...> atacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8539] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] unlink("./103/binderfs" [pid 8539] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... unlink resumed>) = 0 [pid 5080] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8545] close(4) = 0 [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8539] <... futex resumed>) = 1 [pid 8538] <... futex resumed>) = 0 [pid 8538] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8538] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8543] <... futex resumed>) = 0 [pid 8539] openat(AT_FDCWD, ".log", O_RDONLY [pid 8543] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] <... futex resumed>) = 0 [pid 8543] <... futex resumed>) = 1 [pid 8539] <... openat resumed>) = 4 [pid 8543] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8539] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8539] <... futex resumed>) = 1 [pid 8538] <... futex resumed>) = 0 [pid 8545] <... openat resumed>) = 3 [pid 8539] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8538] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8538] <... futex resumed>) = 0 [pid 8545] <... futex resumed>) = 1 [pid 8538] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8543] <... futex resumed>) = 0 [pid 8539] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8543] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8539] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8545] <... futex resumed>) = 0 [pid 8543] <... futex resumed>) = 1 [pid 8539] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8543] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8539] <... futex resumed>) = 1 [pid 8538] <... futex resumed>) = 0 [pid 8545] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8539] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8538] exit_group(0 [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8539] <... futex resumed>) = ? [pid 8538] <... exit_group resumed>) = ? [pid 8547] <... mount resumed>) = -1 EEXIST (File exists) [pid 8545] <... futex resumed>) = 1 [pid 8543] <... futex resumed>) = 0 [pid 8539] +++ exited with 0 +++ [pid 8538] +++ exited with 0 +++ [pid 8547] ioctl(4, LOOP_CLR_FD [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8543] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8538, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 8545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 231.147780][ T8547] loop1: detected capacity change from 0 to 32768 [ 231.170124][ T8547] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8547) [pid 8543] <... futex resumed>) = 0 [pid 8545] openat(AT_FDCWD, ".log", O_RDONLY [pid 8543] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8545] <... openat resumed>) = 4 [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8543] <... futex resumed>) = 0 [pid 5078] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8543] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8543] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8545] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8543] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8545] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 3 [pid 8545] <... futex resumed>) = 1 [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8543] <... futex resumed>) = 0 [pid 5078] fstat(3, [pid 8543] exit_group(0 [pid 8545] <... futex resumed>) = ? [pid 8543] <... exit_group resumed>) = ? [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8545] +++ exited with 0 +++ [pid 8543] +++ exited with 0 +++ [pid 5078] getdents64(3, [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8543, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=37 /* 0.37 s */} --- [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./102/binderfs", [pid 5083] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] fstat(3, [pid 5078] unlink("./102/binderfs" [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [pid 5078] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./102/file0", [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./103/binderfs", [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./103/binderfs" [pid 5078] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 4 [pid 5083] lstat("./103/file0", [pid 5080] <... umount2 resumed>) = 0 [pid 5078] fstat(4, [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./103/file0", [pid 5078] getdents64(4, [pid 5083] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5080] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] getdents64(4, [pid 5080] <... openat resumed>) = 4 [pid 5078] close(4 [pid 8542] <... ioctl resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] fstat(4, [pid 5078] <... close resumed>) = 0 [pid 5083] getdents64(4, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./102/file0" [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(4, [pid 5083] close(4 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... rmdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 5078] umount2("./102/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] rmdir("./103/file0" [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(4) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] rmdir("./103/file0" [pid 5078] lstat("./102/.log", [pid 5083] umount2("./103/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] lstat("./103/.log", [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] unlink("./102/.log" [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] close(3 [pid 5083] unlink("./103/.log" [pid 5080] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5080] rmdir("./103" [pid 5078] getdents64(3, [pid 5083] getdents64(3, [pid 5080] <... rmdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] mkdir("./104", 0777 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 5080] <... mkdir resumed>) = 0 [pid 5078] close(3 [pid 5083] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] rmdir("./103" [pid 5080] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5083] mkdir("./104", 0777 [pid 5080] <... ioctl resumed>) = 0 [pid 5078] rmdir("./102" [pid 5080] close(3 [pid 5083] <... mkdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] mkdir("./103", 0777 [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8567 [pid 8542] close(4 [pid 5078] <... mkdir resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8542] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] close(3 [pid 5078] <... openat resumed>) = 3 [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8568 ./strace-static-x86_64: Process 8567 attached [pid 5078] close(3 [pid 8567] set_robust_list(0x5555559d56e0, 24 [pid 5078] <... close resumed>) = 0 [pid 8567] <... set_robust_list resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8567] chdir("./104") = 0 [pid 8567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8569 [pid 8567] setpgid(0, 0 [pid 8542] <... futex resumed>) = 1 [pid 8541] <... futex resumed>) = 0 [pid 8567] <... setpgid resumed>) = 0 [pid 8542] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8541] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8569 attached ./strace-static-x86_64: Process 8568 attached [pid 8567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8542] <... openat resumed>) = 3 [pid 8541] <... futex resumed>) = 0 [pid 8569] set_robust_list(0x5555559d56e0, 24 [pid 8568] set_robust_list(0x5555559d56e0, 24 [pid 8567] <... openat resumed>) = 3 [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8541] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8569] <... set_robust_list resumed>) = 0 [pid 8568] <... set_robust_list resumed>) = 0 [pid 8567] write(3, "1000", 4 [pid 8542] <... futex resumed>) = 0 [pid 8541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8569] chdir("./103" [pid 8568] chdir("./104" [pid 8567] <... write resumed>) = 4 [pid 8542] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8541] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] <... chdir resumed>) = 0 [pid 8568] <... chdir resumed>) = 0 [pid 8567] close(3 [pid 8542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8541] <... futex resumed>) = 0 [pid 8569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8568] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8567] <... close resumed>) = 0 [pid 8542] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8541] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8569] <... prctl resumed>) = 0 [pid 8568] <... prctl resumed>) = 0 [pid 8567] symlink("/dev/binderfs", "./binderfs" [pid 8542] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8569] setpgid(0, 0 [pid 8568] setpgid(0, 0 [pid 8567] <... symlink resumed>) = 0 [pid 8569] <... setpgid resumed>) = 0 [pid 8568] <... setpgid resumed>) = 0 [pid 8567] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8567] <... futex resumed>) = 0 [pid 8542] <... futex resumed>) = 1 [pid 8541] <... futex resumed>) = 0 [pid 8569] <... openat resumed>) = 3 [pid 8568] <... openat resumed>) = 3 [pid 8567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8542] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8541] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] write(3, "1000", 4 [pid 8568] write(3, "1000", 4 [pid 8567] <... mmap resumed>) = 0x7ff2b3754000 [pid 8542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8541] <... futex resumed>) = 0 [pid 8569] <... write resumed>) = 4 [pid 8568] <... write resumed>) = 4 [pid 8567] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8542] openat(AT_FDCWD, ".log", O_RDONLY [pid 8541] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8569] close(3 [pid 8568] close(3 [pid 8567] <... mprotect resumed>) = 0 [pid 8542] <... openat resumed>) = 4 [pid 8569] <... close resumed>) = 0 [pid 8568] <... close resumed>) = 0 [pid 8567] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] symlink("/dev/binderfs", "./binderfs" [pid 8568] symlink("/dev/binderfs", "./binderfs" [pid 8542] <... futex resumed>) = 1 [pid 8541] <... futex resumed>) = 0 [pid 8569] <... symlink resumed>) = 0 [pid 8568] <... symlink resumed>) = 0 [pid 8567] <... clone resumed>, parent_tid=[8570], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8570 [pid 8542] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8541] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8570 attached [pid 8569] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8542] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8541] <... futex resumed>) = 0 [pid 8570] set_robust_list(0x7ff2b37749e0, 24 [pid 8569] <... futex resumed>) = 0 [pid 8568] <... futex resumed>) = 0 [pid 8567] <... futex resumed>) = 0 [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8541] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] <... set_robust_list resumed>) = 0 [pid 8569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8542] <... futex resumed>) = 0 [pid 8541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8570] memfd_create("syzkaller", 0 [pid 8569] <... mmap resumed>) = 0x7ff2b3754000 [pid 8568] <... mmap resumed>) = 0x7ff2b3754000 [pid 8542] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8541] exit_group(0 [pid 8570] <... memfd_create resumed>) = 3 [pid 8569] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8568] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8542] <... futex resumed>) = ? [pid 8541] <... exit_group resumed>) = ? [pid 8570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8569] <... mprotect resumed>) = 0 [pid 8568] <... mprotect resumed>) = 0 [pid 8569] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8568] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8542] +++ exited with 0 +++ [pid 8541] +++ exited with 0 +++ [pid 8570] <... mmap resumed>) = 0x7ff2ab354000 [pid 8569] <... clone resumed>, parent_tid=[8571], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8571 [pid 8568] <... clone resumed>, parent_tid=[8572], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8572 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8541, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=22 /* 0.22 s */} --- [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 8569] <... futex resumed>) = 0 [pid 8568] <... futex resumed>) = 0 [pid 5084] <... restart_syscall resumed>) = 0 [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8568] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8544] <... ioctl resumed>) = 0 [pid 5084] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8571 attached [pid 5084] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8571] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] <... openat resumed>) = 3 [pid 8571] <... set_robust_list resumed>) = 0 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8572 attached [pid 8571] memfd_create("syzkaller", 0 [pid 5084] getdents64(3, [pid 8572] set_robust_list(0x7ff2b37749e0, 24 [pid 8571] <... memfd_create resumed>) = 3 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8572] <... set_robust_list resumed>) = 0 [pid 8571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8571] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] lstat("./104/binderfs", [pid 8572] memfd_create("syzkaller", 0 [pid 8544] close(4 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8572] <... memfd_create resumed>) = 3 [pid 8544] <... close resumed>) = 0 [pid 5084] unlink("./104/binderfs" [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8540] <... futex resumed>) = 0 [pid 8544] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8540] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8544] <... openat resumed>) = 3 [pid 8540] <... futex resumed>) = 0 [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8540] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8544] <... futex resumed>) = 0 [pid 8540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8544] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8540] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8544] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8540] <... futex resumed>) = 0 [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8540] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8544] <... futex resumed>) = 0 [pid 8540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8544] openat(AT_FDCWD, ".log", O_RDONLY [pid 8540] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8544] <... openat resumed>) = 4 [pid 8540] <... futex resumed>) = 0 [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8540] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8544] <... futex resumed>) = 0 [pid 8540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8544] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8540] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 8544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8540] <... futex resumed>) = 0 [pid 5084] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8544] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 231.409480][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 231.409494][ T27] audit: type=1804 audit(1680236914.882:624): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/104/.log" dev="sda1" ino=1151 res=1 errno=0 [pid 8540] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8544] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] lstat("./104/file0", [pid 8572] <... mmap resumed>) = 0x7ff2ab354000 [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8544] <... futex resumed>) = 1 [pid 8540] <... futex resumed>) = 0 [pid 5084] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8544] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8540] exit_group(0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8544] <... futex resumed>) = ? [pid 8540] <... exit_group resumed>) = ? [pid 5084] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8544] +++ exited with 0 +++ [pid 8540] +++ exited with 0 +++ [pid 5084] <... openat resumed>) = 4 [pid 5084] fstat(4, [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8540, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./104/file0" [pid 5081] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5084] lstat("./104/.log", [pid 5081] fstat(3, [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] unlink("./104/.log" [pid 5081] getdents64(3, [pid 5084] <... unlink resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] getdents64(3, [pid 5081] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] close(3 [pid 5081] lstat("./103/binderfs", [pid 5084] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8547] <... ioctl resumed>) = 0 [pid 5084] rmdir("./104" [pid 5081] unlink("./103/binderfs" [pid 5084] <... rmdir resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5084] mkdir("./105", 0777 [pid 5081] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... openat resumed>) = 3 [pid 5081] lstat("./103/file0", [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... close resumed>) = 0 [pid 8547] close(4) = 0 [pid 5081] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... openat resumed>) = 4 [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8546] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 8547] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8546] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8573 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8547] <... openat resumed>) = 3 [pid 8546] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8546] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8547] <... futex resumed>) = 0 [pid 8546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] getdents64(4, ./strace-static-x86_64: Process 8573 attached [pid 8547] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8546] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8573] set_robust_list(0x5555559d56e0, 24 [pid 8547] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8546] <... futex resumed>) = 0 [ 231.508629][ T27] audit: type=1804 audit(1680236914.952:625): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/103/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 5081] close(4 [pid 8573] <... set_robust_list resumed>) = 0 [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8546] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 8573] chdir("./105" [pid 8547] <... futex resumed>) = 0 [pid 8546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] rmdir("./103/file0" [pid 8573] <... chdir resumed>) = 0 [pid 8547] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8546] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8573] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8546] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 8547] openat(AT_FDCWD, ".log", O_RDONLY [pid 8546] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./103/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8573] <... prctl resumed>) = 0 [pid 8547] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8573] setpgid(0, 0 [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./103/.log", [pid 8573] <... setpgid resumed>) = 0 [pid 8547] <... futex resumed>) = 1 [pid 8546] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8547] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8546] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] unlink("./103/.log" [pid 8573] <... openat resumed>) = 3 [pid 8547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8546] <... futex resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 8573] write(3, "1000", 4 [pid 8547] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8546] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(3, [pid 8573] <... write resumed>) = 4 [pid 8547] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8573] close(3 [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 8573] <... close resumed>) = 0 [pid 8547] <... futex resumed>) = 1 [pid 8546] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 8573] symlink("/dev/binderfs", "./binderfs" [pid 8547] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8546] exit_group(0 [pid 5081] rmdir("./103" [pid 8573] <... symlink resumed>) = 0 [pid 8547] <... futex resumed>) = ? [pid 8546] <... exit_group resumed>) = ? [pid 8573] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8547] +++ exited with 0 +++ [pid 8546] +++ exited with 0 +++ [pid 5081] <... rmdir resumed>) = 0 [pid 8573] <... futex resumed>) = 0 [pid 5081] mkdir("./104", 0777 [pid 8573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8546, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 8573] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 8573] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5079] <... restart_syscall resumed>) = 0 [pid 8573] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 8573] <... clone resumed>, parent_tid=[8574], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8574 [pid 5081] close(3 [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5079] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8573] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8574 attached [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8574] set_robust_list(0x7ff2b37749e0, 24 [pid 5079] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8574] <... set_robust_list resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8575 [pid 8574] memfd_create("syzkaller", 0 [pid 5079] <... openat resumed>) = 3 [pid 8574] <... memfd_create resumed>) = 3 [pid 5079] fstat(3, [pid 8574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8574] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] getdents64(3, ./strace-static-x86_64: Process 8575 attached [pid 8575] set_robust_list(0x5555559d56e0, 24 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8575] <... set_robust_list resumed>) = 0 [pid 5079] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] chdir("./104" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] <... chdir resumed>) = 0 [pid 5079] lstat("./104/binderfs", [pid 8575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8575] setpgid(0, 0 [pid 5079] unlink("./104/binderfs" [pid 8575] <... setpgid resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 8575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] write(3, "1000", 4 [pid 5079] lstat("./104/file0", [pid 8575] <... write resumed>) = 4 [pid 8575] close(3 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8575] <... close resumed>) = 0 [pid 5079] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] <... symlink resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8575] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 4 [pid 8575] <... futex resumed>) = 0 [pid 5079] fstat(4, [pid 8575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8575] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] getdents64(4, [pid 8575] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8575] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8575] <... clone resumed>, parent_tid=[8576], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8576 [pid 5079] close(4 [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... close resumed>) = 0 [pid 8575] <... futex resumed>) = 0 [pid 5079] rmdir("./104/file0" [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... rmdir resumed>) = 0 [pid 5079] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8576 attached ) = -1 EINVAL (Invalid argument) [pid 8576] set_robust_list(0x7ff2b37749e0, 24 [ 231.638326][ T27] audit: type=1804 audit(1680236915.052:626): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/104/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 5079] lstat("./104/.log", [pid 8576] <... set_robust_list resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8576] memfd_create("syzkaller", 0 [pid 5079] unlink("./104/.log") = 0 [pid 8576] <... memfd_create resumed>) = 3 [pid 5079] getdents64(3, [pid 8576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 8576] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./104") = 0 [pid 5079] mkdir("./105", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8577 ./strace-static-x86_64: Process 8577 attached [pid 8577] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8577] chdir("./105") = 0 [pid 8577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8577] setpgid(0, 0) = 0 [pid 8577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8577] write(3, "1000", 4) = 4 [pid 8577] close(3) = 0 [pid 8577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8577] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8577] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8577] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8578], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8578 [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8578 attached [pid 8578] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8578] memfd_create("syzkaller", 0) = 3 [pid 8578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8572] <... write resumed>) = 16777216 [pid 8572] munmap(0x7ff2ab354000, 16777216 [pid 8570] <... write resumed>) = 16777216 [pid 8570] munmap(0x7ff2ab354000, 16777216 [pid 8572] <... munmap resumed>) = 0 [pid 8572] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8572] ioctl(4, LOOP_SET_FD, 3 [pid 8570] <... munmap resumed>) = 0 [pid 8572] <... ioctl resumed>) = 0 [pid 8571] <... write resumed>) = 16777216 [pid 8570] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8572] close(3 [pid 8570] <... openat resumed>) = 4 [pid 8572] <... close resumed>) = 0 [pid 8570] ioctl(4, LOOP_SET_FD, 3 [pid 8572] mkdir("./file0", 0777 [pid 8571] munmap(0x7ff2ab354000, 16777216 [pid 8572] <... mkdir resumed>) = 0 [pid 8572] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8571] <... munmap resumed>) = 0 [pid 8571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8571] ioctl(4, LOOP_SET_FD, 3 [pid 8570] <... ioctl resumed>) = 0 [pid 8570] close(3) = 0 [pid 8570] mkdir("./file0", 0777) = 0 [ 232.445674][ T8572] loop4: detected capacity change from 0 to 32768 [ 232.457854][ T8570] loop2: detected capacity change from 0 to 32768 [ 232.470146][ T8572] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (8572) [ 232.476336][ T8571] loop0: detected capacity change from 0 to 32768 [pid 8570] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8571] <... ioctl resumed>) = 0 [pid 8571] close(3) = 0 [pid 8571] mkdir("./file0", 0777 [pid 8574] <... write resumed>) = 16777216 [pid 8574] munmap(0x7ff2ab354000, 16777216 [pid 8571] <... mkdir resumed>) = 0 [pid 8571] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8570] <... mount resumed>) = -1 EEXIST (File exists) [pid 8574] <... munmap resumed>) = 0 [pid 8574] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 232.513319][ T8570] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8570) [ 232.529499][ T8572] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 232.540131][ T8572] BTRFS info (device loop4): setting nodatasum [ 232.550386][ T8574] loop5: detected capacity change from 0 to 32768 [pid 8574] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8570] ioctl(4, LOOP_CLR_FD [pid 8574] close(3) = 0 [pid 8574] mkdir("./file0", 0777) = 0 [pid 8574] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8576] <... write resumed>) = 16777216 [pid 8576] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8576] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8576] ioctl(4, LOOP_SET_FD, 3 [pid 8571] <... mount resumed>) = -1 EEXIST (File exists) [pid 8571] ioctl(4, LOOP_CLR_FD [pid 8576] <... ioctl resumed>) = 0 [pid 8576] close(3) = 0 [ 232.550745][ T8571] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8571) [ 232.565344][ T8572] BTRFS info (device loop4): allowing degraded mounts [ 232.574626][ T8572] BTRFS info (device loop4): use zlib compression, level 3 [ 232.595178][ T8572] BTRFS info (device loop4): using free space tree [ 232.600789][ T8576] loop3: detected capacity change from 0 to 32768 [pid 8576] mkdir("./file0", 0777) = 0 [pid 8576] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8578] <... write resumed>) = 16777216 [pid 8578] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8578] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8578] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8574] <... mount resumed>) = -1 EEXIST (File exists) [pid 8578] close(3 [pid 8574] ioctl(4, LOOP_CLR_FD [pid 8578] <... close resumed>) = 0 [pid 8578] mkdir("./file0", 0777) = 0 [ 232.610085][ T8574] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8574) [ 232.636835][ T8578] loop1: detected capacity change from 0 to 32768 [ 232.650425][ T8576] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8576) [pid 8578] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8576] <... mount resumed>) = -1 EEXIST (File exists) [pid 8576] ioctl(4, LOOP_CLR_FD [pid 8578] <... mount resumed>) = -1 EEXIST (File exists) [ 232.679061][ T8578] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8578) [pid 8578] ioctl(4, LOOP_CLR_FD [pid 8570] <... ioctl resumed>) = 0 [pid 8570] close(4) = 0 [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8570] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8567] <... futex resumed>) = 0 [pid 8570] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] <... openat resumed>) = 3 [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8570] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8570] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8567] <... futex resumed>) = 0 [pid 8570] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8570] <... futex resumed>) = 0 [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8570] openat(AT_FDCWD, ".log", O_RDONLY [pid 8567] <... futex resumed>) = 0 [pid 8570] <... openat resumed>) = 4 [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8570] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8567] <... futex resumed>) = 0 [pid 8570] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8571] <... ioctl resumed>) = 0 [pid 8570] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8570] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] exit_group(0 [pid 8570] <... futex resumed>) = ? [pid 8567] <... exit_group resumed>) = ? [pid 8571] close(4 [ 232.793754][ T8572] BTRFS info (device loop4): enabling ssd optimizations [ 232.806867][ T27] audit: type=1804 audit(1680236916.282:627): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/104/.log" dev="sda1" ino=1162 res=1 errno=0 [ 232.811027][ T8572] BTRFS info (device loop4): auto enabling async discard [pid 8570] +++ exited with 0 +++ [pid 8567] +++ exited with 0 +++ [pid 8571] <... close resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8567, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... restart_syscall resumed>) = 0 [pid 8571] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8569] <... futex resumed>) = 0 [pid 5080] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8571] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8571] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8574] <... ioctl resumed>) = 0 [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 8574] close(4 [pid 8571] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 5080] fstat(3, [pid 8574] <... close resumed>) = 0 [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8569] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 8572] <... mount resumed>) = 0 [pid 8571] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8571] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8573] <... futex resumed>) = 0 [pid 8572] <... openat resumed>) = 3 [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8574] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8572] chdir("./file0" [pid 8571] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 5080] lstat("./104/binderfs", [pid 8574] <... openat resumed>) = 3 [pid 8572] <... chdir resumed>) = 0 [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] ioctl(4, LOOP_CLR_FD [pid 8571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8569] <... futex resumed>) = 0 [pid 5080] unlink("./104/binderfs" [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 8572] <... ioctl resumed>) = 0 [pid 8571] openat(AT_FDCWD, ".log", O_RDONLY [ 232.886801][ T8572] BTRFS info (device loop4): checking UUID tree [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... unlink resumed>) = 0 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] close(4 [pid 8571] <... openat resumed>) = 4 [pid 5080] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8573] <... futex resumed>) = 0 [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8571] <... futex resumed>) = 0 [pid 5080] lstat("./104/file0", [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./104/file0") = 0 [pid 5080] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./104/.log", [pid 8574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8572] <... close resumed>) = 0 [pid 8569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8574] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8572] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] unlink("./104/.log" [pid 8578] <... ioctl resumed>) = 0 [pid 8574] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8572] <... futex resumed>) = 1 [pid 8571] <... futex resumed>) = 0 [pid 8569] <... futex resumed>) = 1 [pid 8568] <... futex resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 8578] close(4 [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8571] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8568] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 8578] <... close resumed>) = 0 [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 8572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8571] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8568] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(3 [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8573] <... futex resumed>) = 0 [pid 8572] <... openat resumed>) = 4 [pid 8571] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] openat(AT_FDCWD, ".log", O_RDONLY [ 232.935976][ T27] audit: type=1804 audit(1680236916.412:628): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/103/.log" dev="sda1" ino=1163 res=1 errno=0 [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8572] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8569] exit_group(0 [pid 5080] rmdir("./104" [pid 8578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8577] <... futex resumed>) = 0 [pid 8574] <... openat resumed>) = 4 [pid 8572] <... futex resumed>) = 1 [pid 8571] <... futex resumed>) = ? [pid 8569] <... exit_group resumed>) = ? [pid 8568] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 8578] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8571] +++ exited with 0 +++ [pid 8569] +++ exited with 0 +++ [pid 8568] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./105", 0777 [pid 8578] <... openat resumed>) = 3 [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 8572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8568] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8568] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8569, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=21 /* 0.21 s */} --- [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8573] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [ 232.977580][ T27] audit: type=1804 audit(1680236916.452:629): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/105/.log" dev="sda1" ino=1164 res=1 errno=0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... restart_syscall resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5078] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8596 [pid 5078] <... openat resumed>) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8577] <... futex resumed>) = 0 [pid 8574] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5078] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8596 attached ) = -1 EINVAL (Invalid argument) [pid 8596] set_robust_list(0x5555559d56e0, 24 [pid 5078] lstat("./103/binderfs", [pid 8596] <... set_robust_list resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8596] chdir("./105" [pid 8578] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8574] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] unlink("./103/binderfs" [pid 8596] <... chdir resumed>) = 0 [pid 8578] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... unlink resumed>) = 0 [pid 8596] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 5078] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] <... prctl resumed>) = 0 [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] setpgid(0, 0 [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] <... futex resumed>) = ? [pid 8573] <... exit_group resumed>) = ? [pid 5078] lstat("./103/file0", [pid 8596] <... setpgid resumed>) = 0 [pid 8578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8577] <... futex resumed>) = 0 [pid 8576] <... ioctl resumed>) = 0 [pid 8574] +++ exited with 0 +++ [pid 8573] +++ exited with 0 +++ [pid 8568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8578] openat(AT_FDCWD, ".log", O_RDONLY [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8576] close(4 [pid 8568] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8573, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=27 /* 0.27 s */} --- [ 233.026518][ T8572] BTRFS info (device loop4): balance: start -s [ 233.046962][ T8572] BTRFS info (device loop4): relocating block group 1048576 flags system [pid 5078] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] <... openat resumed>) = 3 [pid 8578] <... openat resumed>) = 4 [pid 8576] <... close resumed>) = 0 [pid 8568] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] write(3, "1000", 4 [pid 8568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8596] <... write resumed>) = 4 [pid 8568] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 8596] close(3 [pid 8568] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] fstat(4, [pid 8596] <... close resumed>) = 0 [pid 8568] <... mprotect resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8596] symlink("/dev/binderfs", "./binderfs" [pid 8568] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... openat resumed>) = 3 [pid 5078] getdents64(4, [pid 8596] <... symlink resumed>) = 0 [pid 5084] fstat(3, [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8596] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] <... clone resumed>, parent_tid=[8598], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8598 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 8596] <... futex resumed>) = 0 [pid 8568] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8568] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] close(4 [pid 8596] <... mmap resumed>) = 0x7ff2b3754000 [pid 8568] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 8596] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./103/file0"./strace-static-x86_64: Process 8598 attached [pid 8596] <... mprotect resumed>) = 0 [pid 5084] lstat("./105/binderfs", [pid 5078] <... rmdir resumed>) = 0 [pid 8598] set_robust_list(0x7ff2ac3539e0, 24 [pid 8596] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] umount2("./103/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8598] <... set_robust_list resumed>) = 0 [pid 5084] unlink("./105/binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8598] openat(AT_FDCWD, ".log", O_RDONLY [pid 8596] <... clone resumed>, parent_tid=[8599], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8599 [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5078] lstat("./103/.log", [pid 8598] <... openat resumed>) = 5 [pid 8596] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8576] <... futex resumed>) = 1 [pid 8575] <... futex resumed>) = 0 [pid 5084] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8598] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] <... futex resumed>) = 0 [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8576] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./103/.log"./strace-static-x86_64: Process 8599 attached [pid 8598] <... futex resumed>) = 1 [pid 8596] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8577] <... futex resumed>) = 0 [pid 8576] <... openat resumed>) = 3 [pid 8575] <... futex resumed>) = 0 [pid 8568] <... futex resumed>) = 0 [pid 5084] lstat("./105/file0", [pid 5078] <... unlink resumed>) = 0 [pid 8598] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8568] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, [pid 8598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8568] <... futex resumed>) = 0 [pid 5084] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8598] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8568] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(3 [pid 8599] set_robust_list(0x7ff2b37749e0, 24 [pid 8578] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 8599] <... set_robust_list resumed>) = 0 [pid 8578] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8576] <... futex resumed>) = 1 [pid 8575] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5078] rmdir("./103" [pid 8599] memfd_create("syzkaller", 0 [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8576] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(4, [pid 5078] <... rmdir resumed>) = 0 [pid 8599] <... memfd_create resumed>) = 3 [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8576] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8575] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] mkdir("./104", 0777 [pid 8599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] exit_group(0 [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(4, [pid 5078] <... mkdir resumed>) = 0 [pid 8599] <... mmap resumed>) = 0x7ff2ab354000 [pid 8578] <... futex resumed>) = ? [pid 8577] <... exit_group resumed>) = ? [pid 8576] <... futex resumed>) = 0 [pid 8575] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [ 233.091402][ T27] audit: type=1804 audit(1680236916.562:630): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/105/.log" dev="sda1" ino=1139 res=1 errno=0 [ 233.126958][ T8572] BTRFS info (device loop4): balance: ended with status: 0 [ 233.132398][ T8598] BTRFS info (device loop4): scrub: started on devid 1 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 8578] +++ exited with 0 +++ [pid 8577] +++ exited with 0 +++ [pid 8576] openat(AT_FDCWD, ".log", O_RDONLY [pid 8575] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 8576] <... openat resumed>) = 4 [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] close(4 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] <... close resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8577, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5078] close(3 [pid 8576] <... futex resumed>) = 1 [pid 8575] <... futex resumed>) = 0 [pid 8572] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] rmdir("./105/file0" [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... close resumed>) = 0 [pid 8576] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] <... futex resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8575] <... futex resumed>) = 0 [pid 8572] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8576] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8600 [pid 5084] lstat("./105/.log", [pid 5079] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8576] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8600 attached [pid 5084] unlink("./105/.log" [pid 5079] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8600] set_robust_list(0x5555559d56e0, 24 [pid 8598] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 8600] <... set_robust_list resumed>) = 0 [pid 8598] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8576] <... futex resumed>) = 1 [pid 8575] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 5079] fstat(3, [pid 8600] chdir("./104" [pid 8598] <... futex resumed>) = 0 [pid 8576] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8575] exit_group(0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8600] <... chdir resumed>) = 0 [pid 8598] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8576] <... futex resumed>) = ? [pid 8575] <... exit_group resumed>) = ? [pid 8568] exit_group(0 [pid 5084] close(3 [pid 5079] getdents64(3, [pid 8600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8576] +++ exited with 0 +++ [pid 8568] <... exit_group resumed>) = ? [pid 5084] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8600] <... prctl resumed>) = 0 [pid 8598] <... futex resumed>) = ? [pid 8575] +++ exited with 0 +++ [pid 8572] <... futex resumed>) = ? [pid 5084] rmdir("./105" [pid 5079] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] setpgid(0, 0 [pid 8598] +++ exited with 0 +++ [pid 8572] +++ exited with 0 +++ [pid 8568] +++ exited with 0 +++ [pid 5084] <... rmdir resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8575, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] <... setpgid resumed>) = 0 [pid 5084] mkdir("./106", 0777 [pid 5079] lstat("./105/binderfs", [pid 8600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... mkdir resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8568, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=32 /* 0.32 s */} --- [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8600] <... openat resumed>) = 3 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5079] unlink("./105/binderfs" [pid 8600] write(3, "1000", 4 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... restart_syscall resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 8600] <... write resumed>) = 4 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5079] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] close(3 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 233.160569][ T27] audit: type=1804 audit(1680236916.592:631): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/104/file0/.log" dev="loop4" ino=263 res=1 errno=0 [ 233.190530][ T8598] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 8600] <... close resumed>) = 0 [pid 5084] close(3 [pid 5083] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./105/file0", [pid 8600] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8600] <... symlink resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 3 [pid 5079] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 5081] fstat(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] <... futex resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8601 [pid 5083] fstat(3, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 5079] <... openat resumed>) = 4 [pid 8600] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] getdents64(3, [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] fstat(4, [pid 8600] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5081] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8600] <... mprotect resumed>) = 0 [pid 5083] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 8600] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./104/binderfs", [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] lstat("./104/binderfs", [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] getdents64(4, [pid 8600] <... clone resumed>, parent_tid=[8602], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8602 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./104/binderfs" [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./104/binderfs" [pid 5081] <... unlink resumed>) = 0 [pid 5079] close(4 [pid 8600] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5081] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 ./strace-static-x86_64: Process 8602 attached ./strace-static-x86_64: Process 8601 attached [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./105/file0" [pid 8602] set_robust_list(0x7ff2b37749e0, 24 [pid 8601] set_robust_list(0x5555559d56e0, 24 [pid 5081] lstat("./104/file0", [pid 5079] <... rmdir resumed>) = 0 [pid 8602] <... set_robust_list resumed>) = 0 [pid 8601] <... set_robust_list resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8602] memfd_create("syzkaller", 0 [pid 8601] chdir("./106" [pid 5081] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8602] <... memfd_create resumed>) = 3 [pid 8601] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./105/.log", [pid 8602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8601] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8602] <... mmap resumed>) = 0x7ff2ab354000 [pid 8601] <... prctl resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5079] unlink("./105/.log" [pid 5081] fstat(4, [pid 5079] <... unlink resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5081] getdents64(4, [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] close(3 [pid 8601] setpgid(0, 0 [pid 5081] getdents64(4, [pid 5079] <... close resumed>) = 0 [pid 8601] <... setpgid resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] rmdir("./105" [pid 8601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] close(4 [pid 5079] <... rmdir resumed>) = 0 [pid 8601] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5079] mkdir("./106", 0777 [pid 5081] rmdir("./104/file0" [pid 5079] <... mkdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8601] write(3, "1000", 4 [pid 5081] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5081] lstat("./104/.log", [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] close(3 [pid 8601] <... write resumed>) = 4 [pid 5081] unlink("./104/.log" [pid 5079] <... close resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8601] close(3 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8603 [pid 5081] close(3) = 0 [pid 8601] <... close resumed>) = 0 [pid 5081] rmdir("./104" [pid 8601] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./105", 0777 [pid 8601] <... symlink resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8603 attached [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8603] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... openat resumed>) = 3 [pid 8603] <... set_robust_list resumed>) = 0 [ 233.296746][ T27] audit: type=1804 audit(1680236916.662:632): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/104/.log" dev="sda1" ino=1151 res=1 errno=0 [pid 8601] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 8603] chdir("./106" [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8603] <... chdir resumed>) = 0 [pid 5081] close(3 [pid 8603] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8601] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 8603] <... prctl resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8603] setpgid(0, 0 [pid 8601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8603] <... setpgid resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8604 [pid 8603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8601] <... mmap resumed>) = 0x7ff2b3754000 [pid 8603] <... openat resumed>) = 3 [pid 8601] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8603] write(3, "1000", 4 [pid 8601] <... mprotect resumed>) = 0 [pid 8603] <... write resumed>) = 4 [pid 8601] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8603] close(3./strace-static-x86_64: Process 8604 attached ) = 0 [pid 8601] <... clone resumed>, parent_tid=[8605], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8605 [pid 8604] set_robust_list(0x5555559d56e0, 24 [pid 8603] symlink("/dev/binderfs", "./binderfs" [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... set_robust_list resumed>) = 0 [pid 8603] <... symlink resumed>) = 0 [pid 8601] <... futex resumed>) = 0 [pid 8604] chdir("./105" [pid 8603] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8604] <... chdir resumed>) = 0 [pid 8603] <... futex resumed>) = 0 [pid 8604] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8604] <... prctl resumed>) = 0 [pid 8603] <... mmap resumed>) = 0x7ff2b3754000 ./strace-static-x86_64: Process 8605 attached [pid 8604] setpgid(0, 0 [pid 8603] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8605] set_robust_list(0x7ff2b37749e0, 24 [pid 8604] <... setpgid resumed>) = 0 [pid 8603] <... mprotect resumed>) = 0 [pid 8605] <... set_robust_list resumed>) = 0 [pid 8604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8603] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... umount2 resumed>) = 0 [pid 8605] memfd_create("syzkaller", 0 [pid 8604] <... openat resumed>) = 3 [pid 5083] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8605] <... memfd_create resumed>) = 3 [pid 8604] write(3, "1000", 4 [pid 8603] <... clone resumed>, parent_tid=[8606], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8606 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8604] <... write resumed>) = 4 [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./104/file0", [pid 8605] <... mmap resumed>) = 0x7ff2ab354000 [pid 8604] close(3 [pid 8603] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8606 attached [pid 8604] <... close resumed>) = 0 [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8606] set_robust_list(0x7ff2b37749e0, 24 [pid 8604] symlink("/dev/binderfs", "./binderfs" [pid 8606] <... set_robust_list resumed>) = 0 [pid 8604] <... symlink resumed>) = 0 [pid 8606] memfd_create("syzkaller", 0 [pid 8604] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] <... memfd_create resumed>) = 3 [pid 8604] <... futex resumed>) = 0 [pid 5083] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8606] <... mmap resumed>) = 0x7ff2ab354000 [pid 8604] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8604] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... openat resumed>) = 4 [pid 8604] <... mprotect resumed>) = 0 [pid 5083] fstat(4, [pid 8604] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, [pid 8604] <... clone resumed>, parent_tid=[8607], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8607 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 8604] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] close(4) = 0 ./strace-static-x86_64: Process 8607 attached [pid 5083] rmdir("./104/file0" [pid 8607] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 8607] memfd_create("syzkaller", 0 [pid 5083] getdents64(3, [pid 8607] <... memfd_create resumed>) = 3 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] close(3 [pid 8607] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./104") = 0 [pid 5083] mkdir("./105", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8608 ./strace-static-x86_64: Process 8608 attached [pid 8608] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8608] chdir("./105") = 0 [pid 8608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8608] setpgid(0, 0) = 0 [pid 8608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8608] write(3, "1000", 4) = 4 [pid 8608] close(3) = 0 [pid 8608] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8608] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8608] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8608] <... clone resumed>, parent_tid=[8609], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8609 [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8609 attached [pid 8609] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8609] memfd_create("syzkaller", 0) = 3 [pid 8609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8599] <... write resumed>) = 16777216 [pid 8599] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8599] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8599] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8599] close(3) = 0 [pid 8599] mkdir("./file0", 0777) = 0 [ 234.023386][ T8599] loop2: detected capacity change from 0 to 32768 [ 234.055929][ T8599] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor373 (8599) [ 234.101831][ T8599] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [pid 8599] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8602] <... write resumed>) = 16777216 [pid 8602] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8602] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8602] ioctl(4, LOOP_SET_FD, 3) = 0 [ 234.156106][ T8599] BTRFS info (device loop2): setting nodatasum [ 234.167173][ T8599] BTRFS info (device loop2): allowing degraded mounts [ 234.187229][ T8602] loop0: detected capacity change from 0 to 32768 [pid 8602] close(3) = 0 [pid 8602] mkdir("./file0", 0777) = 0 [pid 8602] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8605] <... write resumed>) = 16777216 [pid 8605] munmap(0x7ff2ab354000, 16777216 [pid 8602] <... mount resumed>) = -1 EEXIST (File exists) [pid 8605] <... munmap resumed>) = 0 [pid 8605] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8602] ioctl(4, LOOP_CLR_FD [ 234.204236][ T8599] BTRFS info (device loop2): use zlib compression, level 3 [ 234.225946][ T8599] BTRFS info (device loop2): using free space tree [ 234.226134][ T8602] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8602) [pid 8605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8605] close(3) = 0 [pid 8605] mkdir("./file0", 0777 [pid 8606] <... write resumed>) = 16777216 [pid 8606] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8605] <... mkdir resumed>) = 0 [pid 8605] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8606] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8606] ioctl(4, LOOP_SET_FD, 3 [pid 8607] <... write resumed>) = 16777216 [pid 8607] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8607] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8607] close(3) = 0 [pid 8607] mkdir("./file0", 0777) = 0 [ 234.277379][ T8605] loop5: detected capacity change from 0 to 32768 [ 234.299883][ T8606] loop1: detected capacity change from 0 to 32768 [ 234.308099][ T8605] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8605) [ 234.311326][ T8607] loop3: detected capacity change from 0 to 32768 [pid 8607] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8606] <... ioctl resumed>) = 0 [pid 8606] close(3) = 0 [pid 8606] mkdir("./file0", 0777) = 0 [pid 8606] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8605] <... mount resumed>) = -1 EEXIST (File exists) [pid 8605] ioctl(4, LOOP_CLR_FD [pid 8607] <... mount resumed>) = -1 EEXIST (File exists) [pid 8607] ioctl(4, LOOP_CLR_FD [pid 8606] <... mount resumed>) = -1 EEXIST (File exists) [pid 8606] ioctl(4, LOOP_CLR_FD [pid 8609] <... write resumed>) = 16777216 [ 234.331613][ T8607] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8607) [ 234.344105][ T8606] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8606) [pid 8609] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8609] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8609] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8609] close(3) = 0 [pid 8609] mkdir("./file0", 0777) = 0 [ 234.395650][ T8609] loop4: detected capacity change from 0 to 32768 [ 234.461983][ T8609] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8609) [ 234.485399][ T8599] BTRFS info (device loop2): enabling ssd optimizations [ 234.492361][ T8599] BTRFS info (device loop2): auto enabling async discard [pid 8609] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 8609] ioctl(4, LOOP_CLR_FD [pid 8599] <... mount resumed>) = 0 [pid 8599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8599] chdir("./file0") = 0 [pid 8599] ioctl(4, LOOP_CLR_FD) = 0 [ 234.527492][ T8599] BTRFS info (device loop2): checking UUID tree [pid 8605] <... ioctl resumed>) = 0 [pid 8599] close(4) = 0 [pid 8599] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8599] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8605] close(4 [pid 8596] <... futex resumed>) = 0 [pid 8605] <... close resumed>) = 0 [pid 8596] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8601] <... futex resumed>) = 0 [pid 8605] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] <... openat resumed>) = 3 [pid 8601] <... futex resumed>) = 0 [pid 8599] <... futex resumed>) = 0 [pid 8596] <... futex resumed>) = 1 [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8599] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8605] <... futex resumed>) = 0 [pid 8601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8599] <... openat resumed>) = 4 [pid 8596] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8605] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8599] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8605] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8601] <... futex resumed>) = 0 [pid 8599] <... futex resumed>) = 0 [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8599] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8605] <... futex resumed>) = 0 [pid 8601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8605] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8601] <... futex resumed>) = 0 [pid 8596] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] openat(AT_FDCWD, ".log", O_RDONLY [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8599] <... futex resumed>) = 0 [pid 8596] <... futex resumed>) = 1 [pid 8605] <... openat resumed>) = 4 [pid 8599] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8605] <... futex resumed>) = 1 [pid 8601] <... futex resumed>) = 0 [pid 8605] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8601] <... futex resumed>) = 0 [pid 8605] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8605] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8601] <... futex resumed>) = 0 [pid 8605] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8601] exit_group(0 [pid 8605] <... futex resumed>) = ? [pid 8601] <... exit_group resumed>) = ? [pid 8605] +++ exited with 0 +++ [pid 8601] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8601, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5084] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 234.614081][ T27] audit: type=1804 audit(1680236918.082:633): pid=8605 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/106/.log" dev="sda1" ino=1162 res=1 errno=0 [ 234.620666][ T8599] BTRFS info (device loop2): balance: start -s [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./106/binderfs") = 0 [pid 5084] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./106/file0") = 0 [pid 8606] <... ioctl resumed>) = 0 [pid 8596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8602] <... ioctl resumed>) = 0 [pid 8596] <... futex resumed>) = 0 [pid 5084] lstat("./106/.log", [pid 8596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8606] close(4 [pid 8596] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] unlink("./106/.log" [pid 8596] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8602] close(4 [pid 8596] <... mprotect resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 8606] <... close resumed>) = 0 [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] getdents64(3, [pid 8602] <... close resumed>) = 0 [pid 8606] <... futex resumed>) = 1 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8603] <... futex resumed>) = 0 [pid 5084] close(3 [pid 8596] <... clone resumed>, parent_tid=[8628], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8628 [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 8596] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] <... futex resumed>) = 0 [pid 8596] <... futex resumed>) = 0 [pid 5084] rmdir("./106" [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8596] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8606] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5084] <... rmdir resumed>) = 0 [pid 8606] <... openat resumed>) = 3 [pid 5084] mkdir("./107", 0777 [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8628 attached [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] <... futex resumed>) = 1 [pid 8600] <... futex resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 8606] <... futex resumed>) = 1 [pid 8628] set_robust_list(0x7ff2ac3539e0, 24 [pid 8602] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8603] <... futex resumed>) = 0 [pid 8600] <... futex resumed>) = 0 [pid 8602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8628] <... set_robust_list resumed>) = 0 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 3 [pid 8628] openat(AT_FDCWD, ".log", O_RDONLY [pid 8603] <... futex resumed>) = 0 [pid 8628] <... openat resumed>) = 5 [pid 8606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8602] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 8606] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8628] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8602] <... futex resumed>) = 1 [pid 8600] <... futex resumed>) = 0 [pid 8628] <... futex resumed>) = 1 [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] <... futex resumed>) = 0 [pid 5084] close(3 [pid 8628] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8606] <... futex resumed>) = 0 [pid 8603] <... futex resumed>) = 1 [pid 8602] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 8606] openat(AT_FDCWD, ".log", O_RDONLY [pid 8600] <... futex resumed>) = 0 [pid 8596] <... futex resumed>) = 0 [pid 8607] <... ioctl resumed>) = 0 [pid 8606] <... openat resumed>) = 4 [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8602] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8607] close(4 [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8596] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] <... futex resumed>) = 0 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8607] <... close resumed>) = 0 [pid 8603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] <... futex resumed>) = 0 [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8629 [pid 8607] <... futex resumed>) = 1 [pid 8606] <... futex resumed>) = 0 [pid 8604] <... futex resumed>) = 0 [pid 8603] <... futex resumed>) = 1 [pid 8602] openat(AT_FDCWD, ".log", O_RDONLY [pid 8600] <... futex resumed>) = 0 [pid 8606] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8607] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8602] <... openat resumed>) = 4 [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... futex resumed>) = 0 [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8606] <... futex resumed>) = 1 [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8603] <... futex resumed>) = 0 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8602] <... futex resumed>) = 1 [pid 8600] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8629 attached [pid 8607] <... openat resumed>) = 3 [pid 8603] exit_group(0 [pid 8602] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] <... futex resumed>) = ? [pid 8603] <... exit_group resumed>) = ? [pid 8602] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8600] <... futex resumed>) = 0 [pid 8607] <... futex resumed>) = 1 [pid 8606] +++ exited with 0 +++ [pid 8604] <... futex resumed>) = 0 [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8603] +++ exited with 0 +++ [pid 8604] <... futex resumed>) = 0 [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 234.721495][ T8599] BTRFS info (device loop2): relocating block group 1048576 flags system [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8629] set_robust_list(0x5555559d56e0, 24 [pid 8609] <... ioctl resumed>) = 0 [pid 8607] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8602] <... futex resumed>) = 1 [pid 8600] <... futex resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8603, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 8629] <... set_robust_list resumed>) = 0 [pid 8609] close(4 [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8600] exit_group(0 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 8629] chdir("./107" [pid 8607] <... futex resumed>) = 1 [pid 8600] <... exit_group resumed>) = ? [pid 8604] <... futex resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 8602] <... futex resumed>) = ? [pid 8607] openat(AT_FDCWD, ".log", O_RDONLY [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] +++ exited with 0 +++ [pid 8600] +++ exited with 0 +++ [pid 8607] <... openat resumed>) = 4 [pid 8604] <... futex resumed>) = 0 [pid 8629] <... chdir resumed>) = 0 [pid 8609] <... close resumed>) = 0 [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8600, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=26 /* 0.26 s */} --- [pid 8629] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] <... futex resumed>) = 0 [pid 8604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 8629] <... prctl resumed>) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8608] <... futex resumed>) = 0 [pid 8607] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... restart_syscall resumed>) = 0 [pid 8629] setpgid(0, 0 [pid 8609] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8604] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8608] <... futex resumed>) = 0 [pid 8607] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8629] <... setpgid resumed>) = 0 [pid 8609] <... openat resumed>) = 3 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 3 [pid 8607] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] fstat(3, [pid 5078] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8629] <... openat resumed>) = 3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8608] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8609] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 8607] <... futex resumed>) = 1 [pid 5078] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8604] <... futex resumed>) = 0 [pid 8629] write(3, "1000", 4 [pid 8608] <... futex resumed>) = 0 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8629] <... write resumed>) = 4 [pid 8609] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8607] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8604] exit_group(0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... openat resumed>) = 3 [pid 8629] close(3 [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] <... futex resumed>) = ? [pid 8604] <... exit_group resumed>) = ? [pid 8596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(3, [pid 8629] <... close resumed>) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8607] +++ exited with 0 +++ [pid 8604] +++ exited with 0 +++ [pid 8608] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8629] symlink("/dev/binderfs", "./binderfs" [pid 8609] openat(AT_FDCWD, ".log", O_RDONLY [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8604, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5079] lstat("./106/binderfs", [pid 5078] getdents64(3, [pid 8629] <... symlink resumed>) = 0 [pid 8609] <... openat resumed>) = 4 [pid 8608] <... futex resumed>) = 0 [pid 5081] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] unlink("./106/binderfs" [pid 5081] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] fstat(3, [pid 5078] lstat("./104/binderfs", [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8608] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5079] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./104/binderfs" [pid 8629] <... futex resumed>) = 0 [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... unlink resumed>) = 0 [pid 8608] <... futex resumed>) = 0 [pid 8609] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8609] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8629] <... mmap resumed>) = 0x7ff2b3754000 [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./106/file0", [pid 8629] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8609] <... futex resumed>) = 1 [pid 8608] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8608] exit_group(0) = ? [pid 5081] lstat("./105/binderfs", [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8629] <... mprotect resumed>) = 0 [pid 8609] +++ exited with 0 +++ [pid 8608] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8608, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./105/binderfs" [pid 5079] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./104/file0", [pid 8629] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... unlink resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5083] <... openat resumed>) = 3 [pid 5078] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] fstat(3, [pid 5079] fstat(4, ./strace-static-x86_64: Process 8630 attached [pid 8629] <... clone resumed>, parent_tid=[8630], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8630 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8629] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 5078] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8629] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... openat resumed>) = 4 [pid 8629] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] lstat("./105/file0", [pid 5079] getdents64(4, [pid 5078] fstat(4, [pid 8630] set_robust_list(0x7ff2b37749e0, 24 [pid 8599] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5083] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(4 [pid 5078] getdents64(4, [pid 5083] lstat("./105/binderfs", [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] rmdir("./106/file0" [pid 5078] getdents64(4, [pid 5083] unlink("./105/binderfs" [pid 5081] <... openat resumed>) = 4 [ 234.823938][ T8628] BTRFS info (device loop2): scrub: started on devid 1 [ 234.825217][ T8599] BTRFS info (device loop2): balance: ended with status: 0 [pid 8630] <... set_robust_list resumed>) = 0 [pid 8599] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 5081] fstat(4, [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8599] <... futex resumed>) = 0 [pid 8599] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8630] memfd_create("syzkaller", 0 [pid 5083] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4 [pid 8630] <... memfd_create resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 8630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] lstat("./105/file0", [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] lstat("./106/.log", [pid 5078] rmdir("./104/file0" [pid 8630] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] unlink("./106/.log" [pid 5078] <... rmdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(4 [pid 5079] <... unlink resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] rmdir("./105/file0" [pid 5078] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] getdents64(3, [pid 8628] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=16, data_bytes_scrubbed=12288, tree_bytes_scrubbed=65536, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8628] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 8628] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8596] exit_group(0 [pid 8599] <... futex resumed>) = ? [pid 8596] <... exit_group resumed>) = ? [pid 5083] <... openat resumed>) = 4 [pid 8599] +++ exited with 0 +++ [pid 5081] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] <... futex resumed>) = ? [pid 5083] fstat(4, [pid 5079] close(3 [pid 5078] lstat("./104/.log", [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] getdents64(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./106" [pid 5078] unlink("./104/.log" [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... rmdir resumed>) = 0 [pid 5083] getdents64(4, [pid 5078] <... unlink resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] lstat("./105/.log", [pid 5078] getdents64(3, [pid 5079] mkdir("./107", 0777 [pid 5083] close(4 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8628] +++ exited with 0 +++ [pid 8596] +++ exited with 0 +++ [pid 5083] <... close resumed>) = 0 [pid 5081] unlink("./105/.log" [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] close(3 [pid 5083] rmdir("./105/file0" [pid 5081] <... unlink resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8596, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] rmdir("./104" [pid 5081] getdents64(3, [pid 5083] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... rmdir resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 5081] close(3 [pid 5080] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] rmdir("./105" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... rmdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] mkdir("./105", 0777 [pid 5083] lstat("./105/.log", [pid 5081] mkdir("./106", 0777 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8631 [pid 5078] <... mkdir resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] unlink("./105/.log" [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... unlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5081] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5083] getdents64(3, [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] close(3 [pid 5080] lstat("./105/binderfs", [pid 5078] <... openat resumed>) = 3 [pid 5081] close(3 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] unlink("./105/binderfs" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5080] <... unlink resumed>) = 0 [pid 5083] rmdir("./105" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 234.868411][ T8628] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [pid 5080] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./106", 0777 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8632 [pid 5078] close(3 [pid 5083] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8631 attached [pid 8631] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8631] chdir("./107" [pid 5078] <... close resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8632 attached [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8633 [pid 8631] <... chdir resumed>) = 0 [pid 8632] set_robust_list(0x5555559d56e0, 24 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8631] setpgid(0, 0 [pid 5083] close(3 [pid 8631] <... setpgid resumed>) = 0 [pid 8632] <... set_robust_list resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 8631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8631] <... openat resumed>) = 3 [pid 8631] write(3, "1000", 4) = 4 [pid 8631] close(3) = 0 [pid 8631] symlink("/dev/binderfs", "./binderfs" [pid 8632] chdir("./106" [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8634 [pid 8631] <... symlink resumed>) = 0 [pid 8632] <... chdir resumed>) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8633 attached [pid 8632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8633] set_robust_list(0x5555559d56e0, 24 [pid 8632] setpgid(0, 0 [pid 8631] <... mmap resumed>) = 0x7ff2b3754000 ./strace-static-x86_64: Process 8634 attached [pid 8633] <... set_robust_list resumed>) = 0 [pid 8632] <... setpgid resumed>) = 0 [pid 8631] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8634] set_robust_list(0x5555559d56e0, 24 [pid 8633] chdir("./105" [pid 8632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8631] <... mprotect resumed>) = 0 [pid 8634] <... set_robust_list resumed>) = 0 [pid 8633] <... chdir resumed>) = 0 [pid 8632] <... openat resumed>) = 3 [pid 8631] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8634] chdir("./106" [pid 8633] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8632] write(3, "1000", 4 [pid 8634] <... chdir resumed>) = 0 [pid 8633] <... prctl resumed>) = 0 [pid 8634] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8633] setpgid(0, 0 [pid 8632] <... write resumed>) = 4 [pid 8631] <... clone resumed>, parent_tid=[8635], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8635 [pid 8634] <... prctl resumed>) = 0 [pid 8633] <... setpgid resumed>) = 0 [pid 8632] close(3 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8634] setpgid(0, 0 [pid 8633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8631] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8635 attached [pid 8634] <... setpgid resumed>) = 0 [pid 8633] <... openat resumed>) = 3 [pid 8632] <... close resumed>) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8635] set_robust_list(0x7ff2b37749e0, 24 [pid 8633] write(3, "1000", 4 [pid 8635] <... set_robust_list resumed>) = 0 [pid 8633] <... write resumed>) = 4 [pid 8635] memfd_create("syzkaller", 0 [pid 8633] close(3 [pid 8635] <... memfd_create resumed>) = 3 [pid 8633] <... close resumed>) = 0 [pid 8635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8633] symlink("/dev/binderfs", "./binderfs" [pid 8635] <... mmap resumed>) = 0x7ff2ab354000 [pid 8634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8633] <... symlink resumed>) = 0 [pid 8632] symlink("/dev/binderfs", "./binderfs" [pid 8634] <... openat resumed>) = 3 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8633] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8632] <... symlink resumed>) = 0 [pid 8634] write(3, "1000", 4 [pid 8633] <... mprotect resumed>) = 0 [pid 8634] <... write resumed>) = 4 [pid 8633] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8632] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8634] close(3 [pid 8632] <... futex resumed>) = 0 [pid 8634] <... close resumed>) = 0 [pid 8633] <... clone resumed>, parent_tid=[8636], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8636 [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8634] symlink("/dev/binderfs", "./binderfs" [pid 8632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8636 attached [pid 8636] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8636] memfd_create("syzkaller", 0 [pid 5080] <... umount2 resumed>) = 0 [pid 8636] <... memfd_create resumed>) = 3 [pid 8636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8634] <... symlink resumed>) = 0 [pid 8632] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8634] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8632] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8634] <... futex resumed>) = 0 [pid 8632] <... mprotect resumed>) = 0 [pid 8634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8632] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8634] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] lstat("./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8634] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5080] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8632] <... clone resumed>, parent_tid=[8637], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8637 [pid 8634] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8634] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8632] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] fstat(4, [pid 8634] <... clone resumed>, parent_tid=[8638], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8638 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 8634] <... futex resumed>) = 0 [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4./strace-static-x86_64: Process 8637 attached ) = 0 [pid 5080] rmdir("./105/file0" [pid 8637] set_robust_list(0x7ff2b37749e0, 24 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, ./strace-static-x86_64: Process 8638 attached [pid 8638] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8638] memfd_create("syzkaller", 0 [pid 8637] <... set_robust_list resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 8637] memfd_create("syzkaller", 0 [pid 5080] <... close resumed>) = 0 [pid 8638] <... memfd_create resumed>) = 3 [pid 8638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8637] <... memfd_create resumed>) = 3 [pid 5080] rmdir("./105" [pid 8637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... rmdir resumed>) = 0 [pid 8637] <... mmap resumed>) = 0x7ff2ab354000 [pid 5080] mkdir("./106", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = 0 [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8639 ./strace-static-x86_64: Process 8639 attached [pid 8639] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8639] chdir("./106") = 0 [pid 8630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8639] setpgid(0, 0) = 0 [pid 8639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8639] write(3, "1000", 4) = 4 [pid 8639] close(3) = 0 [pid 8639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8639] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8639] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8639] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8640], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8640 [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8640 attached [pid 8640] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8640] memfd_create("syzkaller", 0) = 3 [pid 8640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8630] <... write resumed>) = 16777216 [pid 8630] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8630] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8630] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8630] close(3) = 0 [pid 8630] mkdir("./file0", 0777) = 0 [ 235.646417][ T8630] loop5: detected capacity change from 0 to 32768 [ 235.682209][ T8630] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (8630) [ 235.749492][ T8630] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 235.786361][ T8630] BTRFS info (device loop5): setting nodatasum [ 235.792556][ T8630] BTRFS info (device loop5): allowing degraded mounts [pid 8630] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8635] <... write resumed>) = 16777216 [pid 8635] munmap(0x7ff2ab354000, 16777216) = 0 [ 235.835328][ T8630] BTRFS info (device loop5): use zlib compression, level 3 [ 235.842570][ T8630] BTRFS info (device loop5): using free space tree [pid 8635] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8635] close(3) = 0 [pid 8635] mkdir("./file0", 0777) = 0 [pid 8635] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8640] <... write resumed>) = 16777216 [pid 8635] <... mount resumed>) = -1 EEXIST (File exists) [pid 8640] munmap(0x7ff2ab354000, 16777216 [pid 8638] <... write resumed>) = 16777216 [pid 8635] ioctl(4, LOOP_CLR_FD [pid 8640] <... munmap resumed>) = 0 [pid 8638] munmap(0x7ff2ab354000, 16777216 [pid 8640] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8638] <... munmap resumed>) = 0 [pid 8636] <... write resumed>) = 16777216 [pid 8640] ioctl(4, LOOP_SET_FD, 3 [ 235.907977][ T8635] loop1: detected capacity change from 0 to 32768 [ 235.929927][ T8635] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8635) [pid 8638] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8636] munmap(0x7ff2ab354000, 16777216 [pid 8640] <... ioctl resumed>) = 0 [pid 8638] <... openat resumed>) = 4 [pid 8638] ioctl(4, LOOP_SET_FD, 3 [pid 8636] <... munmap resumed>) = 0 [pid 8636] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8640] close(3 [pid 8638] <... ioctl resumed>) = 0 [pid 8640] <... close resumed>) = 0 [pid 8638] close(3 [pid 8636] <... openat resumed>) = 4 [pid 8640] mkdir("./file0", 0777 [pid 8638] <... close resumed>) = 0 [pid 8636] ioctl(4, LOOP_SET_FD, 3 [pid 8640] <... mkdir resumed>) = 0 [pid 8638] mkdir("./file0", 0777 [pid 8637] <... write resumed>) = 16777216 [pid 8640] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 235.966632][ T8640] loop2: detected capacity change from 0 to 32768 [ 235.974304][ T8638] loop4: detected capacity change from 0 to 32768 [ 235.991556][ T8636] loop0: detected capacity change from 0 to 32768 [pid 8638] <... mkdir resumed>) = 0 [pid 8637] munmap(0x7ff2ab354000, 16777216 [pid 8638] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8637] <... munmap resumed>) = 0 [pid 8637] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8637] ioctl(4, LOOP_SET_FD, 3 [pid 8636] <... ioctl resumed>) = 0 [pid 8636] close(3) = 0 [pid 8636] mkdir("./file0", 0777) = 0 [pid 8636] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8637] <... ioctl resumed>) = 0 [pid 8637] close(3) = 0 [pid 8637] mkdir("./file0", 0777 [pid 8640] <... mount resumed>) = -1 EEXIST (File exists) [pid 8637] <... mkdir resumed>) = 0 [pid 8637] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 236.010349][ T8640] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8640) [ 236.028830][ T8637] loop3: detected capacity change from 0 to 32768 [ 236.041681][ T8638] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8638) [pid 8640] ioctl(4, LOOP_CLR_FD [pid 8638] <... mount resumed>) = -1 EEXIST (File exists) [pid 8635] <... ioctl resumed>) = 0 [pid 8638] ioctl(4, LOOP_CLR_FD [pid 8635] close(4) = 0 [pid 8636] <... mount resumed>) = -1 EEXIST (File exists) [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8635] <... futex resumed>) = 1 [pid 8635] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8636] ioctl(4, LOOP_CLR_FD [pid 8635] <... openat resumed>) = 3 [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8635] <... futex resumed>) = 1 [pid 8635] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8635] <... futex resumed>) = 1 [pid 8635] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8635] <... futex resumed>) = 1 [pid 8635] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] exit_group(0) = ? [pid 8635] <... futex resumed>) = ? [pid 8635] +++ exited with 0 +++ [pid 8631] +++ exited with 0 +++ [pid 8637] <... mount resumed>) = -1 EEXIST (File exists) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8631, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 5079] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8637] ioctl(4, LOOP_CLR_FD [pid 5079] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./107/binderfs") = 0 [pid 5079] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./107/file0") = 0 [pid 5079] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./107/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./107/.log") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./107") = 0 [pid 5079] mkdir("./108", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 236.062386][ T8636] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8636) [ 236.074685][ T8637] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8637) [ 236.095828][ T8630] BTRFS info (device loop5): enabling ssd optimizations [ 236.102794][ T8630] BTRFS info (device loop5): auto enabling async discard [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 236.111703][ T8630] BTRFS info (device loop5): checking UUID tree [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8630] <... mount resumed>) = 0 [pid 8630] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8658 [pid 8630] <... openat resumed>) = 3 [pid 8630] chdir("./file0") = 0 [pid 8630] ioctl(4, LOOP_CLR_FD) = 0 [pid 8630] close(4) = 0 [pid 8630] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] <... futex resumed>) = 0 [pid 8630] <... futex resumed>) = 1 [pid 8629] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8630] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8629] <... futex resumed>) = 0 [pid 8629] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8638] <... ioctl resumed>) = 0 [pid 8630] <... openat resumed>) = 4 [pid 8638] close(4 [pid 8630] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8638] <... close resumed>) = 0 [pid 8630] <... futex resumed>) = 1 [pid 8629] <... futex resumed>) = 0 [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8630] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8629] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8658 attached [pid 8638] <... futex resumed>) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8629] <... futex resumed>) = 0 [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8634] <... futex resumed>) = 0 [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8658] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8658] chdir("./108") = 0 [pid 8658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8658] setpgid(0, 0 [pid 8638] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8658] <... setpgid resumed>) = 0 [pid 8658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8658] write(3, "1000", 4) = 4 [pid 8658] close(3) = 0 [pid 8658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8658] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8638] <... openat resumed>) = 3 [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8638] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... mmap resumed>) = 0x7ff2b3754000 [pid 8638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8634] <... futex resumed>) = 0 [pid 8629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8658] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8638] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8629] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... mprotect resumed>) = 0 [pid 8638] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8629] <... futex resumed>) = 0 [pid 8658] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8658] <... clone resumed>, parent_tid=[8659], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8659 [pid 8629] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8658] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] <... mprotect resumed>) = 0 [pid 8658] <... futex resumed>) = 0 [pid 8629] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8658] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8629] <... clone resumed>, parent_tid=[8660], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8660 [pid 8629] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 236.226731][ T8630] BTRFS info (device loop5): balance: start -s [ 236.234473][ T8630] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 8629] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8638] <... futex resumed>) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8638] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8638] openat(AT_FDCWD, ".log", O_RDONLY./strace-static-x86_64: Process 8660 attached ./strace-static-x86_64: Process 8659 attached ) = 4 [pid 8660] set_robust_list(0x7ff2ac3539e0, 24 [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8660] <... set_robust_list resumed>) = 0 [pid 8659] set_robust_list(0x7ff2b37749e0, 24 [pid 8638] <... futex resumed>) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8659] <... set_robust_list resumed>) = 0 [pid 8638] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8634] <... futex resumed>) = 0 [pid 8638] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8660] openat(AT_FDCWD, ".log", O_RDONLY [pid 8659] memfd_create("syzkaller", 0 [pid 8638] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8660] <... openat resumed>) = 5 [pid 8659] <... memfd_create resumed>) = 3 [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8660] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8638] <... futex resumed>) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8629] <... futex resumed>) = 0 [pid 8660] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8659] <... mmap resumed>) = 0x7ff2ab354000 [pid 8638] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8634] exit_group(0 [pid 8629] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8638] <... futex resumed>) = ? [pid 8634] <... exit_group resumed>) = ? [pid 8629] <... futex resumed>) = 0 [pid 8660] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8638] +++ exited with 0 +++ [pid 8629] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8634] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8634, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./106/binderfs") = 0 [pid 5083] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./106/file0") = 0 [pid 5083] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./106/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./106/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./106") = 0 [pid 5083] mkdir("./107", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8662 ./strace-static-x86_64: Process 8662 attached [pid 8662] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8662] chdir("./107" [pid 8636] <... ioctl resumed>) = 0 [pid 8662] <... chdir resumed>) = 0 [pid 8636] close(4 [pid 8662] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8636] <... close resumed>) = 0 [pid 8662] <... prctl resumed>) = 0 [pid 8640] <... ioctl resumed>) = 0 [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [ 236.387424][ T8660] BTRFS info (device loop5): scrub: started on devid 1 [ 236.416128][ T8630] BTRFS info (device loop5): balance: ended with status: 0 [pid 8662] setpgid(0, 0 [pid 8636] <... futex resumed>) = 1 [pid 8633] <... futex resumed>) = 0 [pid 8662] <... setpgid resumed>) = 0 [pid 8636] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8640] close(4 [pid 8636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8633] <... futex resumed>) = 0 [pid 8662] <... openat resumed>) = 3 [pid 8640] <... close resumed>) = 0 [pid 8636] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8662] write(3, "1000", 4 [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] <... write resumed>) = 4 [pid 8636] <... openat resumed>) = 3 [pid 8662] close(3 [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] <... close resumed>) = 0 [pid 8662] symlink("/dev/binderfs", "./binderfs" [pid 8640] <... futex resumed>) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8636] <... futex resumed>) = 1 [pid 8633] <... futex resumed>) = 0 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8639] <... futex resumed>) = 0 [pid 8662] <... symlink resumed>) = 0 [pid 8640] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8636] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... openat resumed>) = 3 [pid 8636] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8633] <... futex resumed>) = 0 [pid 8662] <... futex resumed>) = 0 [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8640] <... futex resumed>) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8636] <... futex resumed>) = 0 [pid 8633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... mmap resumed>) = 0x7ff2b3754000 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8636] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8639] <... futex resumed>) = 0 [pid 8636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... mprotect resumed>) = 0 [pid 8640] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8636] openat(AT_FDCWD, ".log", O_RDONLY [pid 8633] <... futex resumed>) = 0 [pid 8662] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8640] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8663 attached ) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8636] <... openat resumed>) = 4 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8663] set_robust_list(0x7ff2b37749e0, 24 [pid 8662] <... clone resumed>, parent_tid=[8663], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8663 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8663] <... set_robust_list resumed>) = 0 [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8639] <... futex resumed>) = 0 [pid 8663] memfd_create("syzkaller", 0 [pid 8662] <... futex resumed>) = 0 [pid 8660] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8640] openat(AT_FDCWD, ".log", O_RDONLY [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8636] <... futex resumed>) = 0 [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8663] <... memfd_create resumed>) = 3 [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8660] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... openat resumed>) = 4 [pid 8636] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8633] <... futex resumed>) = 0 [pid 8663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8660] <... futex resumed>) = 0 [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8636] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8660] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8640] <... futex resumed>) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8630] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8639] <... futex resumed>) = 0 [pid 8630] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] exit_group(0 [pid 8660] <... futex resumed>) = ? [pid 8640] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8630] <... futex resumed>) = ? [pid 8629] <... exit_group resumed>) = ? [ 236.449168][ T8660] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [ 236.471286][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 236.471298][ T27] audit: type=1804 audit(1680236919.942:642): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/105/.log" dev="sda1" ino=1152 res=1 errno=0 [pid 8663] <... mmap resumed>) = 0x7ff2ab354000 [pid 8660] +++ exited with 0 +++ [pid 8640] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8630] +++ exited with 0 +++ [pid 8629] +++ exited with 0 +++ [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] exit_group(0 [pid 8640] <... futex resumed>) = ? [pid 8639] <... exit_group resumed>) = ? [pid 8636] <... futex resumed>) = 1 [pid 8633] <... futex resumed>) = 0 [pid 8640] +++ exited with 0 +++ [pid 8639] +++ exited with 0 +++ [pid 8636] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8633] exit_group(0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8629, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=27 /* 0.27 s */} --- [pid 8636] <... futex resumed>) = ? [pid 8633] <... exit_group resumed>) = ? [pid 5084] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8639, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8637] <... ioctl resumed>) = 0 [pid 8636] +++ exited with 0 +++ [pid 8633] +++ exited with 0 +++ [pid 5084] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8633, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=25 /* 0.25 s */} --- [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8637] close(4 [pid 5080] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(3, [pid 5080] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5080] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 5084] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(3, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] lstat("./107/binderfs", [pid 5080] getdents64(3, [pid 5078] getdents64(3, [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] unlink("./107/binderfs" [pid 5080] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./106/binderfs", [pid 5078] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./105/binderfs" [pid 5080] unlink("./106/binderfs" [pid 5078] <... unlink resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5078] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./105/file0", [pid 5080] lstat("./106/file0", [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8637] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 4 [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 4 [pid 5078] fstat(4, [pid 8637] <... futex resumed>) = 1 [pid 8632] <... futex resumed>) = 0 [pid 5080] fstat(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 8637] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8632] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8637] <... openat resumed>) = 3 [pid 5080] getdents64(4, [pid 5078] getdents64(4, [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8637] <... futex resumed>) = 1 [pid 8632] <... futex resumed>) = 0 [pid 5080] close(4 [pid 5078] close(4 [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 8637] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5078] <... close resumed>) = 0 [pid 5080] rmdir("./106/file0" [pid 5078] rmdir("./105/file0" [pid 8637] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 8637] <... futex resumed>) = 1 [pid 8632] <... futex resumed>) = 0 [pid 5080] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8637] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8632] <... futex resumed>) = 0 [pid 5080] lstat("./106/.log", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8637] openat(AT_FDCWD, ".log", O_RDONLY [ 236.537746][ T27] audit: type=1804 audit(1680236919.992:643): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/106/.log" dev="sda1" ino=1158 res=1 errno=0 [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8637] <... openat resumed>) = 4 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] lstat("./105/.log", [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] unlink("./106/.log" [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8632] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... unlink resumed>) = 0 [pid 8637] <... futex resumed>) = 0 [pid 8637] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] unlink("./105/.log" [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... unlink resumed>) = 0 [pid 8637] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5080] getdents64(3, [pid 8637] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, [pid 8637] <... futex resumed>) = 1 [pid 8632] <... futex resumed>) = 0 [pid 5080] close(3 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8632] exit_group(0) = ? [ 236.596854][ T27] audit: type=1804 audit(1680236920.072:644): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/106/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 8637] +++ exited with 0 +++ [pid 8632] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8632, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=32 /* 0.32 s */} --- [pid 5080] <... close resumed>) = 0 [pid 5078] close(3 [pid 5080] rmdir("./106") = 0 [pid 5078] <... close resumed>) = 0 [pid 5080] mkdir("./107", 0777 [pid 5078] rmdir("./105" [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./106", 0777 [pid 5081] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5081] fstat(3, [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] getdents64(3, [pid 5078] close(3 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... close resumed>) = 0 [pid 5081] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./106/binderfs", ./strace-static-x86_64: Process 8665 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8665 [pid 5081] unlink("./106/binderfs" [pid 8665] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8664 [pid 8665] <... set_robust_list resumed>) = 0 [pid 5081] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] chdir("./106") = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] lstat("./106/file0", [pid 8665] <... prctl resumed>) = 0 [pid 8665] setpgid(0, 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8665] <... setpgid resumed>) = 0 [pid 5081] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8665] write(3, "1000", 4 [pid 5081] <... openat resumed>) = 4 [pid 8665] <... write resumed>) = 4 [pid 5081] fstat(4, [pid 8665] close(3) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8665] symlink("/dev/binderfs", "./binderfs" [pid 5081] getdents64(4, [pid 8665] <... symlink resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8664 attached [pid 8665] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 8665] <... futex resumed>) = 0 [pid 8664] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8664] <... set_robust_list resumed>) = 0 [pid 5081] close(4 [pid 8665] <... mmap resumed>) = 0x7ff2b3754000 [pid 8664] chdir("./107" [pid 5081] <... close resumed>) = 0 [pid 8665] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8664] <... chdir resumed>) = 0 [pid 5081] rmdir("./106/file0" [pid 8665] <... mprotect resumed>) = 0 [pid 8664] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8665] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8664] <... prctl resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 8664] setpgid(0, 0 [pid 5081] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] <... clone resumed>, parent_tid=[8666], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8666 [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] <... futex resumed>) = 0 [pid 8664] <... setpgid resumed>) = 0 [pid 5081] lstat("./106/.log", [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 ./strace-static-x86_64: Process 8666 attached [pid 8664] <... openat resumed>) = 3 [pid 5081] unlink("./106/.log" [pid 8666] set_robust_list(0x7ff2b37749e0, 24 [pid 8664] write(3, "1000", 4 [pid 8666] <... set_robust_list resumed>) = 0 [pid 8664] <... write resumed>) = 4 [pid 5081] <... unlink resumed>) = 0 [pid 8664] close(3) = 0 [pid 5081] getdents64(3, [pid 8666] memfd_create("syzkaller", 0 [pid 8664] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8666] <... memfd_create resumed>) = 3 [pid 8664] <... symlink resumed>) = 0 [pid 5081] close(3 [pid 8666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8664] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 8666] <... mmap resumed>) = 0x7ff2ab354000 [pid 8664] <... futex resumed>) = 0 [pid 8664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] rmdir("./106" [pid 8664] <... mmap resumed>) = 0x7ff2b3754000 [pid 8664] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8664] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8667], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8667 [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8667 attached [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./107", 0777 [pid 8667] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8667] <... set_robust_list resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 8667] memfd_create("syzkaller", 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8667] <... memfd_create resumed>) = 3 [pid 5081] close(3 [pid 8667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8667] <... mmap resumed>) = 0x7ff2ab354000 ./strace-static-x86_64: Process 8668 attached [pid 8663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8668] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8668 [pid 8668] <... set_robust_list resumed>) = 0 [pid 8668] chdir("./107") = 0 [pid 8668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8668] setpgid(0, 0) = 0 [pid 8668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8668] write(3, "1000", 4) = 4 [pid 8668] close(3) = 0 [pid 8668] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8668] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8668] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8668] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8669], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8669 [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8669 attached [pid 8669] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8669] memfd_create("syzkaller", 0) = 3 [pid 8669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./107/file0") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./107") = 0 [pid 5084] mkdir("./108", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8670 ./strace-static-x86_64: Process 8670 attached [pid 8670] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8670] chdir("./108") = 0 [pid 8670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8670] setpgid(0, 0) = 0 [pid 8670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8670] write(3, "1000", 4) = 4 [pid 8670] close(3) = 0 [pid 8670] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8670] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8670] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8670] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8671], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8671 [pid 8670] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8670] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8671 attached [pid 8671] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8671] memfd_create("syzkaller", 0) = 3 [pid 8671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8659] <... write resumed>) = 16777216 [pid 8659] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8659] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8659] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8659] close(3) = 0 [pid 8659] mkdir("./file0", 0777) = 0 [pid 8659] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8663] <... write resumed>) = 16777216 [ 237.206713][ T8659] loop1: detected capacity change from 0 to 32768 [ 237.229076][ T8659] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (8659) [pid 8663] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8663] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 237.268417][ T8659] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 237.305359][ T8659] BTRFS info (device loop1): setting nodatasum [ 237.311831][ T8659] BTRFS info (device loop1): allowing degraded mounts [pid 8663] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8663] close(3) = 0 [pid 8663] mkdir("./file0", 0777) = 0 [pid 8663] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 237.319732][ T8663] loop4: detected capacity change from 0 to 32768 [ 237.331974][ T8659] BTRFS info (device loop1): use zlib compression, level 3 [ 237.349050][ T8663] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8663) [ 237.360554][ T8659] BTRFS info (device loop1): using free space tree [pid 8663] ioctl(4, LOOP_CLR_FD [pid 8671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8659] <... mount resumed>) = 0 [pid 8666] <... write resumed>) = 16777216 [pid 8659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8667] <... write resumed>) = 16777216 [pid 8659] <... openat resumed>) = 3 [pid 8659] chdir("./file0" [pid 8667] munmap(0x7ff2ab354000, 16777216 [pid 8659] <... chdir resumed>) = 0 [ 237.499348][ T8659] BTRFS info (device loop1): enabling ssd optimizations [ 237.507642][ T8659] BTRFS info (device loop1): auto enabling async discard [ 237.515721][ T8659] BTRFS info (device loop1): checking UUID tree [pid 8659] ioctl(4, LOOP_CLR_FD) = 0 [pid 8659] close(4) = 0 [pid 8659] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8659] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8667] <... munmap resumed>) = 0 [pid 8667] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8658] <... futex resumed>) = 0 [pid 8667] <... openat resumed>) = 4 [pid 8658] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8667] ioctl(4, LOOP_SET_FD, 3 [pid 8659] <... futex resumed>) = 0 [pid 8658] <... futex resumed>) = 1 [pid 8659] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 8659] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8659] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8658] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8667] <... ioctl resumed>) = 0 [pid 8658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8667] close(3 [pid 8658] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8667] <... close resumed>) = 0 [pid 8666] munmap(0x7ff2ab354000, 16777216 [pid 8659] <... futex resumed>) = 0 [pid 8658] <... futex resumed>) = 1 [pid 8667] mkdir("./file0", 0777 [pid 8659] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8658] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8667] <... mkdir resumed>) = 0 [pid 8666] <... munmap resumed>) = 0 [pid 8667] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 237.569744][ T8667] loop2: detected capacity change from 0 to 32768 [ 237.603184][ T8659] BTRFS info (device loop1): balance: start -s [pid 8666] ioctl(4, LOOP_SET_FD, 3 [pid 8667] <... mount resumed>) = -1 EEXIST (File exists) [pid 8667] ioctl(4, LOOP_CLR_FD [pid 8663] <... ioctl resumed>) = 0 [pid 8658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8663] close(4 [pid 8658] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] <... ioctl resumed>) = 0 [pid 8666] close(3) = 0 [pid 8658] <... futex resumed>) = 0 [pid 8663] <... close resumed>) = 0 [pid 8658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... mmap resumed>) = 0x7ff2ac333000 [pid 8666] mkdir("./file0", 0777) = 0 [pid 8666] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8662] <... futex resumed>) = 0 [pid 8658] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8663] <... futex resumed>) = 1 [ 237.616663][ T8667] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8667) [ 237.618293][ T8666] loop0: detected capacity change from 0 to 32768 [ 237.644680][ T8659] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 8669] <... write resumed>) = 16777216 [pid 8663] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... mprotect resumed>) = 0 [pid 8663] <... openat resumed>) = 3 [pid 8662] <... futex resumed>) = 0 [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8658] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8663] <... futex resumed>) = 0 [pid 8662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8663] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... clone resumed>, parent_tid=[8690], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8690 [pid 8663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... futex resumed>) = 0 [pid 8658] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8690 attached [pid 8663] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8658] <... futex resumed>) = 0 [pid 8690] set_robust_list(0x7ff2ac3539e0, 24 [pid 8669] munmap(0x7ff2ab354000, 16777216 [pid 8663] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8658] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8690] <... set_robust_list resumed>) = 0 [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8690] openat(AT_FDCWD, ".log", O_RDONLY [pid 8669] <... munmap resumed>) = 0 [pid 8663] <... futex resumed>) = 1 [pid 8662] <... futex resumed>) = 0 [ 237.685712][ T8666] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8666) [pid 8663] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8690] <... openat resumed>) = 5 [pid 8669] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... futex resumed>) = 0 [pid 8690] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8669] <... openat resumed>) = 4 [pid 8663] openat(AT_FDCWD, ".log", O_RDONLY [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8690] <... futex resumed>) = 1 [pid 8669] ioctl(4, LOOP_SET_FD, 3 [pid 8666] <... mount resumed>) = -1 EEXIST (File exists) [pid 8663] <... openat resumed>) = 4 [pid 8658] <... futex resumed>) = 0 [pid 8690] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8666] ioctl(4, LOOP_CLR_FD [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8669] <... ioctl resumed>) = 0 [pid 8663] <... futex resumed>) = 1 [pid 8662] <... futex resumed>) = 0 [pid 8658] <... futex resumed>) = 1 [pid 8690] <... futex resumed>) = 0 [ 237.731185][ T27] audit: type=1804 audit(1680236921.202:645): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/108/file0/.log" dev="loop1" ino=263 res=1 errno=0 [ 237.765806][ T8669] loop3: detected capacity change from 0 to 32768 [pid 8690] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8669] close(3 [pid 8663] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8669] <... close resumed>) = 0 [pid 8663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... futex resumed>) = 0 [pid 8669] mkdir("./file0", 0777 [pid 8663] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8669] <... mkdir resumed>) = 0 [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8669] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8663] <... futex resumed>) = 0 [pid 8662] exit_group(0) = ? [pid 8663] +++ exited with 0 +++ [pid 8662] +++ exited with 0 +++ [ 237.778786][ T8659] BTRFS info (device loop1): balance: ended with status: 0 [ 237.794022][ T8690] BTRFS info (device loop1): scrub: started on devid 1 [ 237.812250][ T8669] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8669) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8662, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5083] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./107/binderfs") = 0 [pid 5083] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] getdents64(4, [pid 8669] <... mount resumed>) = -1 EEXIST (File exists) [pid 8659] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8669] ioctl(4, LOOP_CLR_FD [pid 8659] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(4 [pid 8659] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 8659] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] rmdir("./107/file0") = 0 [pid 5083] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./107/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./107/.log" [pid 8690] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 8690] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 8690] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8690] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8658] exit_group(0 [pid 5083] close(3 [pid 8690] <... futex resumed>) = ? [pid 8659] <... futex resumed>) = ? [pid 8658] <... exit_group resumed>) = ? [pid 5083] <... close resumed>) = 0 [pid 8690] +++ exited with 0 +++ [pid 8659] +++ exited with 0 +++ [pid 5083] rmdir("./107" [pid 8658] +++ exited with 0 +++ [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./108", 0777 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8658, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 5083] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 237.845330][ T27] audit: type=1804 audit(1680236921.232:646): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/107/.log" dev="sda1" ino=1160 res=1 errno=0 [ 237.869005][ T8690] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5079] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8691 [pid 5079] <... openat resumed>) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8691 attached [pid 5079] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8691] set_robust_list(0x5555559d56e0, 24 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8691] <... set_robust_list resumed>) = 0 [pid 5079] lstat("./108/binderfs", [pid 8691] chdir("./108" [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8691] <... chdir resumed>) = 0 [pid 5079] unlink("./108/binderfs" [pid 8691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... unlink resumed>) = 0 [pid 8691] <... prctl resumed>) = 0 [pid 5079] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8691] setpgid(0, 0) = 0 [pid 8691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8691] write(3, "1000", 4) = 4 [pid 8691] close(3) = 0 [pid 8691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8691] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8667] <... ioctl resumed>) = 0 [pid 8691] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8667] close(4 [pid 8691] <... mprotect resumed>) = 0 [pid 8667] <... close resumed>) = 0 [pid 8691] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8692], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8692 [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8664] <... futex resumed>) = 0 [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8664] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8692 attached [pid 8667] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8692] set_robust_list(0x7ff2b37749e0, 24 [pid 8667] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = 0 [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] <... set_robust_list resumed>) = 0 [pid 8667] <... futex resumed>) = 1 [pid 8664] <... futex resumed>) = 0 [pid 5079] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8664] <... futex resumed>) = 0 [pid 8667] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8692] memfd_create("syzkaller", 0 [pid 8667] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8692] <... memfd_create resumed>) = 3 [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./108/file0", [pid 8692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8667] <... futex resumed>) = 1 [pid 8664] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8692] <... mmap resumed>) = 0x7ff2ab354000 [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8664] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8667] openat(AT_FDCWD, ".log", O_RDONLY [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8667] <... openat resumed>) = 4 [pid 5079] <... openat resumed>) = 4 [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8664] <... futex resumed>) = 0 [pid 5079] fstat(4, [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8666] <... ioctl resumed>) = 0 [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8664] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 8667] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8667] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] getdents64(4, [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8667] <... futex resumed>) = 1 [pid 8664] <... futex resumed>) = 0 [pid 5079] close(4 [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8664] exit_group(0 [pid 5079] <... close resumed>) = 0 [pid 8667] <... futex resumed>) = ? [pid 8664] <... exit_group resumed>) = ? [pid 5079] rmdir("./108/file0" [pid 8667] +++ exited with 0 +++ [pid 8664] +++ exited with 0 +++ [pid 5079] <... rmdir resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8664, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5080] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, [ 238.088100][ T27] audit: type=1804 audit(1680236921.562:647): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/107/.log" dev="sda1" ino=1156 res=1 errno=0 [pid 5080] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5079] close(3 [pid 5080] fstat(3, [pid 5079] <... close resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] rmdir("./108" [pid 5080] getdents64(3, [pid 8666] close(4 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... rmdir resumed>) = 0 [pid 8666] <... close resumed>) = 0 [pid 5080] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8666] <... futex resumed>) = 1 [pid 8665] <... futex resumed>) = 0 [pid 5080] lstat("./107/binderfs", [pid 8666] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8671] <... write resumed>) = 16777216 [pid 8666] <... openat resumed>) = 3 [pid 8665] <... futex resumed>) = 0 [pid 5080] unlink("./107/binderfs" [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... unlink resumed>) = 0 [pid 5079] mkdir("./109", 0777 [pid 8666] <... futex resumed>) = 0 [pid 8665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8666] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... mkdir resumed>) = 0 [pid 8669] <... ioctl resumed>) = 0 [pid 8666] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8665] <... futex resumed>) = 0 [pid 5080] lstat("./107/file0", [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8671] munmap(0x7ff2ab354000, 16777216 [pid 8666] <... futex resumed>) = 0 [pid 8665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 8671] <... munmap resumed>) = 0 [pid 8666] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8669] close(4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 8671] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8669] <... close resumed>) = 0 [pid 8666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8665] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8671] <... openat resumed>) = 4 [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] openat(AT_FDCWD, ".log", O_RDONLY [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 4 [pid 5079] close(3 [pid 8671] ioctl(4, LOOP_SET_FD, 3 [pid 8669] <... futex resumed>) = 1 [pid 8668] <... futex resumed>) = 0 [pid 8666] <... openat resumed>) = 4 [pid 5080] fstat(4, [pid 8669] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... close resumed>) = 0 [pid 8669] <... openat resumed>) = 3 [pid 8668] <... futex resumed>) = 0 [pid 8666] <... futex resumed>) = 1 [pid 8665] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8666] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8669] <... futex resumed>) = 0 [pid 8668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8665] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 8669] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8693 [pid 8669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8668] <... futex resumed>) = 0 [pid 8666] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] close(4./strace-static-x86_64: Process 8693 attached [pid 8669] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 8693] set_robust_list(0x5555559d56e0, 24 [pid 8669] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8666] <... futex resumed>) = 1 [pid 8665] <... futex resumed>) = 0 [pid 5080] rmdir("./107/file0" [pid 8693] <... set_robust_list resumed>) = 0 [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8665] exit_group(0 [pid 5080] <... rmdir resumed>) = 0 [pid 8693] chdir("./109" [pid 8669] <... futex resumed>) = 1 [pid 8668] <... futex resumed>) = 0 [pid 8666] <... futex resumed>) = ? [pid 8665] <... exit_group resumed>) = ? [pid 5080] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8693] <... chdir resumed>) = 0 [pid 8669] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] +++ exited with 0 +++ [pid 8665] +++ exited with 0 +++ [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8668] <... futex resumed>) = 0 [pid 5080] lstat("./107/.log", [pid 8693] <... prctl resumed>) = 0 [pid 8669] openat(AT_FDCWD, ".log", O_RDONLY [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8665, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 8693] setpgid(0, 0 [pid 8669] <... openat resumed>) = 4 [ 238.185369][ T27] audit: type=1804 audit(1680236921.652:648): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/106/.log" dev="sda1" ino=1139 res=1 errno=0 [ 238.185840][ T8671] loop5: detected capacity change from 0 to 32768 [pid 5080] unlink("./107/.log" [pid 5078] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5078] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5080] close(3 [pid 5078] fstat(3, [pid 5080] <... close resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] rmdir("./107" [pid 5078] getdents64(3, [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] mkdir("./108", 0777 [pid 5078] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] lstat("./106/binderfs", [pid 5080] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] unlink("./106/binderfs" [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... unlink resumed>) = 0 [pid 5080] close(3 [pid 5078] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8694 [pid 5078] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8693] <... setpgid resumed>) = 0 [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8694 attached [pid 5078] getdents64(4, [pid 8694] set_robust_list(0x5555559d56e0, 24 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8694] <... set_robust_list resumed>) = 0 [pid 5078] close(4 [pid 8694] chdir("./108" [pid 5078] <... close resumed>) = 0 [pid 8694] <... chdir resumed>) = 0 [pid 8693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8669] <... futex resumed>) = 1 [pid 8668] <... futex resumed>) = 0 [pid 5078] rmdir("./106/file0" [pid 8694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8693] <... openat resumed>) = 3 [pid 8669] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... rmdir resumed>) = 0 [pid 8694] <... prctl resumed>) = 0 [pid 8693] write(3, "1000", 4 [pid 8669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8668] <... futex resumed>) = 0 [pid 5078] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8694] setpgid(0, 0 [pid 8693] <... write resumed>) = 4 [pid 8669] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8694] <... setpgid resumed>) = 0 [pid 8693] close(3 [pid 8669] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] lstat("./106/.log", [pid 8694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8693] <... close resumed>) = 0 [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8694] <... openat resumed>) = 3 [pid 8693] symlink("/dev/binderfs", "./binderfs" [pid 8669] <... futex resumed>) = 1 [pid 8668] <... futex resumed>) = 0 [pid 5078] unlink("./106/.log" [pid 8694] write(3, "1000", 4 [pid 8693] <... symlink resumed>) = 0 [pid 8669] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8668] exit_group(0 [pid 5078] <... unlink resumed>) = 0 [pid 8694] <... write resumed>) = 4 [pid 8693] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8671] <... ioctl resumed>) = 0 [pid 8669] <... futex resumed>) = ? [pid 8668] <... exit_group resumed>) = ? [pid 5078] getdents64(3, [pid 8694] close(3 [pid 8693] <... futex resumed>) = 0 [pid 8671] close(3 [pid 8669] +++ exited with 0 +++ [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [ 238.255335][ T27] audit: type=1804 audit(1680236921.722:649): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/107/.log" dev="sda1" ino=1155 res=1 errno=0 [pid 8694] <... close resumed>) = 0 [pid 8693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8671] <... close resumed>) = 0 [pid 8668] +++ exited with 0 +++ [pid 5078] close(3 [pid 8694] symlink("/dev/binderfs", "./binderfs" [pid 8693] <... mmap resumed>) = 0x7ff2b3754000 [pid 8671] mkdir("./file0", 0777 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8668, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=18 /* 0.18 s */} --- [pid 5078] <... close resumed>) = 0 [pid 8694] <... symlink resumed>) = 0 [pid 8693] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8671] <... mkdir resumed>) = 0 [pid 5078] rmdir("./106" [pid 8694] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] <... mprotect resumed>) = 0 [pid 8671] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5078] <... rmdir resumed>) = 0 [pid 8694] <... futex resumed>) = 0 [pid 8693] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] mkdir("./107", 0777 [pid 8694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... mkdir resumed>) = 0 [pid 8694] <... mmap resumed>) = 0x7ff2b3754000 [pid 8693] <... clone resumed>, parent_tid=[8695], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8695 [pid 5081] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8694] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 8694] <... mprotect resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] ioctl(3, LOOP_CLR_FD [pid 8694] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8693] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] fstat(3, [pid 5078] close(3 [pid 8694] <... clone resumed>, parent_tid=[8696], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8696 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 8694] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8694] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8694] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8697 ./strace-static-x86_64: Process 8696 attached [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8696] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] lstat("./107/binderfs", [pid 8696] <... set_robust_list resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8696] memfd_create("syzkaller", 0 [pid 5081] unlink("./107/binderfs" [pid 8696] <... memfd_create resumed>) = 3 [pid 5081] <... unlink resumed>) = 0 [pid 8696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8696] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8697 attached ./strace-static-x86_64: Process 8695 attached [pid 8692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... openat resumed>) = 4 [pid 8697] set_robust_list(0x5555559d56e0, 24 [pid 8695] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] fstat(4, [pid 8697] <... set_robust_list resumed>) = 0 [pid 8695] <... set_robust_list resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 8697] chdir("./107" [pid 5081] rmdir("./107/file0" [pid 8695] memfd_create("syzkaller", 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./107/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8697] <... chdir resumed>) = 0 [pid 8695] <... memfd_create resumed>) = 3 [ 238.323299][ T8671] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (8671) [pid 5081] unlink("./107/.log" [pid 8697] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... unlink resumed>) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./107") = 0 [pid 5081] mkdir("./108", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 8697] <... prctl resumed>) = 0 [pid 8695] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8698 [pid 8697] setpgid(0, 0./strace-static-x86_64: Process 8698 attached ) = 0 [pid 8698] set_robust_list(0x5555559d56e0, 24 [pid 8697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8698] <... set_robust_list resumed>) = 0 [pid 8697] <... openat resumed>) = 3 [pid 8698] chdir("./108" [pid 8697] write(3, "1000", 4 [pid 8698] <... chdir resumed>) = 0 [pid 8697] <... write resumed>) = 4 [pid 8698] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8697] close(3 [pid 8698] <... prctl resumed>) = 0 [pid 8697] <... close resumed>) = 0 [pid 8698] setpgid(0, 0 [pid 8697] symlink("/dev/binderfs", "./binderfs" [pid 8698] <... setpgid resumed>) = 0 [pid 8697] <... symlink resumed>) = 0 [pid 8698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8697] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8698] <... openat resumed>) = 3 [pid 8697] <... futex resumed>) = 0 [pid 8698] write(3, "1000", 4 [pid 8697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8698] <... write resumed>) = 4 [pid 8697] <... mmap resumed>) = 0x7ff2b3754000 [pid 8698] close(3 [pid 8697] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8698] <... close resumed>) = 0 [pid 8697] <... mprotect resumed>) = 0 [pid 8698] symlink("/dev/binderfs", "./binderfs" [pid 8697] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8698] <... symlink resumed>) = 0 [pid 8698] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8697] <... clone resumed>, parent_tid=[8699], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8699 [pid 8698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 238.381803][ T8671] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 238.415492][ T8671] BTRFS info (device loop5): setting nodatasum [ 238.421821][ T8671] BTRFS info (device loop5): allowing degraded mounts [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8699 attached [pid 8698] <... mmap resumed>) = 0x7ff2b3754000 [pid 8697] <... futex resumed>) = 0 [pid 8699] set_robust_list(0x7ff2b37749e0, 24 [pid 8698] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8699] <... set_robust_list resumed>) = 0 [pid 8698] <... mprotect resumed>) = 0 [pid 8698] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8699] memfd_create("syzkaller", 0) = 3 [pid 8699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8698] <... clone resumed>, parent_tid=[8700], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8700 [pid 8699] <... mmap resumed>) = 0x7ff2ab354000 [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8700 attached [pid 8700] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8700] memfd_create("syzkaller", 0) = 3 [pid 8700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 238.479071][ T8671] BTRFS info (device loop5): use zlib compression, level 3 [ 238.518207][ T8671] BTRFS info (device loop5): using free space tree [pid 8696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8692] <... write resumed>) = 16777216 [ 238.725369][ T8671] BTRFS info (device loop5): enabling ssd optimizations [ 238.739116][ T8671] BTRFS info (device loop5): auto enabling async discard [pid 8692] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8692] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8671] <... mount resumed>) = 0 [pid 8692] ioctl(4, LOOP_SET_FD, 3 [pid 8671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8671] chdir("./file0") = 0 [pid 8671] ioctl(4, LOOP_CLR_FD) = 0 [pid 8671] close(4 [pid 8692] <... ioctl resumed>) = 0 [pid 8671] <... close resumed>) = 0 [pid 8671] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] close(3 [pid 8671] <... futex resumed>) = 1 [pid 8670] <... futex resumed>) = 0 [pid 8692] <... close resumed>) = 0 [pid 8671] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8670] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] mkdir("./file0", 0777 [pid 8671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8670] <... futex resumed>) = 0 [pid 8671] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8670] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8692] <... mkdir resumed>) = 0 [pid 8671] <... openat resumed>) = 4 [ 238.778824][ T8671] BTRFS info (device loop5): checking UUID tree [ 238.798197][ T8692] loop4: detected capacity change from 0 to 32768 [pid 8692] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8671] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8670] <... futex resumed>) = 0 [pid 8671] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8670] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8671] <... futex resumed>) = 0 [pid 8670] <... futex resumed>) = 1 [pid 8671] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8670] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8692] <... mount resumed>) = -1 EEXIST (File exists) [ 238.819084][ T8692] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8692) [ 238.842878][ T8671] BTRFS info (device loop5): balance: start -s [pid 8692] ioctl(4, LOOP_CLR_FD [pid 8670] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8670] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8670] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8670] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8719], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8719 [pid 8670] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8670] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8719 attached [pid 8700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 238.874729][ T8671] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 8719] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 8719] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 8719] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8670] <... futex resumed>) = 0 [pid 8719] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8670] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8719] <... futex resumed>) = 0 [pid 8670] <... futex resumed>) = 1 [pid 8719] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 238.923308][ T27] audit: type=1804 audit(1680236922.392:650): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/108/file0/.log" dev="loop5" ino=263 res=1 errno=0 [pid 8670] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8719] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [ 238.988362][ T8719] BTRFS info (device loop5): scrub: started on devid 1 [ 238.996611][ T8671] BTRFS info (device loop5): balance: ended with status: 0 [ 239.013599][ T8719] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 8719] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8671] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8719] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8671] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8670] exit_group(0 [pid 8719] <... futex resumed>) = ? [pid 8671] <... futex resumed>) = ? [pid 8670] <... exit_group resumed>) = ? [pid 8719] +++ exited with 0 +++ [pid 8671] +++ exited with 0 +++ [pid 8670] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8670, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 5084] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./108/binderfs") = 0 [pid 5084] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8696] <... write resumed>) = 16777216 [pid 8692] <... ioctl resumed>) = 0 [pid 8692] close(4) = 0 [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8691] <... futex resumed>) = 0 [pid 8692] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] <... openat resumed>) = 3 [pid 8691] <... futex resumed>) = 0 [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8692] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8691] <... futex resumed>) = 0 [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8696] munmap(0x7ff2ab354000, 16777216 [pid 8692] <... futex resumed>) = 0 [pid 8691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8692] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8691] <... futex resumed>) = 0 [pid 5084] lstat("./108/file0", [pid 8692] openat(AT_FDCWD, ".log", O_RDONLY [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8692] <... openat resumed>) = 4 [pid 5084] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./108/file0") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./108") = 0 [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] mkdir("./109", 0777 [pid 8696] <... munmap resumed>) = 0 [pid 8692] <... futex resumed>) = 1 [pid 8691] <... futex resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 8692] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8696] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8691] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 8692] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] ioctl(3, LOOP_CLR_FD [pid 8692] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... ioctl resumed>) = 0 [pid 8696] <... openat resumed>) = 4 [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 8696] ioctl(4, LOOP_SET_FD, 3 [pid 8692] <... futex resumed>) = 1 [pid 8691] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 8692] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8691] exit_group(0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8720 [pid 8692] <... futex resumed>) = ? [pid 8691] <... exit_group resumed>) = ? [pid 8692] +++ exited with 0 +++ [pid 8691] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8691, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- ./strace-static-x86_64: Process 8720 attached [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 8720] set_robust_list(0x5555559d56e0, 24 [pid 8696] <... ioctl resumed>) = 0 [pid 8695] <... write resumed>) = 16777216 [pid 5083] <... restart_syscall resumed>) = 0 [pid 8720] <... set_robust_list resumed>) = 0 [pid 8720] chdir("./109" [pid 8696] close(3 [pid 8720] <... chdir resumed>) = 0 [pid 8696] <... close resumed>) = 0 [pid 5083] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8720] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8696] mkdir("./file0", 0777 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8720] <... prctl resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8720] setpgid(0, 0 [pid 8696] <... mkdir resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 8720] <... setpgid resumed>) = 0 [pid 5083] fstat(3, [pid 8696] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8720] <... openat resumed>) = 3 [ 239.246743][ T27] audit: type=1804 audit(1680236922.722:651): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/108/.log" dev="sda1" ino=1154 res=1 errno=0 [ 239.277394][ T8696] loop2: detected capacity change from 0 to 32768 [pid 5083] getdents64(3, [pid 8720] write(3, "1000", 4 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8720] <... write resumed>) = 4 [pid 5083] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8720] close(3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8720] <... close resumed>) = 0 [pid 5083] lstat("./108/binderfs", [pid 8720] symlink("/dev/binderfs", "./binderfs" [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8720] <... symlink resumed>) = 0 [pid 5083] unlink("./108/binderfs" [pid 8720] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 8720] <... futex resumed>) = 0 [pid 5083] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8720] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] lstat("./108/file0", [pid 8720] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8720] <... mprotect resumed>) = 0 [pid 5083] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8720] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8720] <... clone resumed>, parent_tid=[8721], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8721 [pid 8695] munmap(0x7ff2ab354000, 16777216 [pid 5083] <... openat resumed>) = 4 [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] <... munmap resumed>) = 0 [pid 5083] fstat(4, [pid 8720] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] getdents64(4, [pid 8695] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8721 attached [pid 8695] <... openat resumed>) = 4 [pid 5083] getdents64(4, [pid 8721] set_robust_list(0x7ff2b37749e0, 24 [pid 8695] ioctl(4, LOOP_SET_FD, 3 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8721] <... set_robust_list resumed>) = 0 [pid 8695] <... ioctl resumed>) = 0 [pid 5083] close(4 [pid 8721] memfd_create("syzkaller", 0 [pid 5083] <... close resumed>) = 0 [pid 8721] <... memfd_create resumed>) = 3 [pid 5083] rmdir("./108/file0" [pid 8721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] <... rmdir resumed>) = 0 [pid 8721] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] umount2("./108/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./108/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./108/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./108") = 0 [ 239.313364][ T8696] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor373 (8696) [ 239.336270][ T8695] loop1: detected capacity change from 0 to 32768 [pid 5083] mkdir("./109", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 8695] close(3 [pid 5083] <... close resumed>) = 0 [pid 8695] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8695] mkdir("./file0", 0777) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8722 [pid 8695] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,"./strace-static-x86_64: Process 8722 attached [ 239.365351][ T8696] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 239.375370][ T8695] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8695) [pid 8722] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8695] <... mount resumed>) = -1 EEXIST (File exists) [pid 8722] chdir("./109") = 0 [pid 8695] ioctl(4, LOOP_CLR_FD [pid 8722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8722] setpgid(0, 0) = 0 [pid 8722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8722] write(3, "1000", 4) = 4 [pid 8722] close(3) = 0 [pid 8722] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8722] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8722] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8722] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8723], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8723 [pid 8722] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8723 attached ) = 0 [pid 8699] <... write resumed>) = 16777216 [pid 8723] set_robust_list(0x7ff2b37749e0, 24 [pid 8722] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8699] munmap(0x7ff2ab354000, 16777216 [pid 8723] <... set_robust_list resumed>) = 0 [pid 8699] <... munmap resumed>) = 0 [pid 8723] memfd_create("syzkaller", 0 [ 239.406588][ T8696] BTRFS info (device loop2): setting nodatasum [ 239.412827][ T8696] BTRFS info (device loop2): allowing degraded mounts [pid 8699] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8723] <... memfd_create resumed>) = 3 [pid 8700] <... write resumed>) = 16777216 [pid 8699] <... openat resumed>) = 4 [pid 8723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8700] munmap(0x7ff2ab354000, 16777216 [pid 8699] ioctl(4, LOOP_SET_FD, 3 [pid 8723] <... mmap resumed>) = 0x7ff2ab354000 [pid 8700] <... munmap resumed>) = 0 [pid 8700] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8700] ioctl(4, LOOP_SET_FD, 3 [pid 8699] <... ioctl resumed>) = 0 [ 239.454113][ T8696] BTRFS info (device loop2): use zlib compression, level 3 [ 239.461753][ T8696] BTRFS info (device loop2): using free space tree [ 239.469125][ T8699] loop0: detected capacity change from 0 to 32768 [pid 8700] <... ioctl resumed>) = 0 [pid 8699] close(3) = 0 [pid 8700] close(3 [pid 8699] mkdir("./file0", 0777 [pid 8700] <... close resumed>) = 0 [pid 8699] <... mkdir resumed>) = 0 [pid 8700] mkdir("./file0", 0777) = 0 [pid 8699] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 239.506568][ T8700] loop3: detected capacity change from 0 to 32768 [ 239.540758][ T8699] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8699) [pid 8700] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8699] <... mount resumed>) = -1 EEXIST (File exists) [pid 8700] <... mount resumed>) = -1 EEXIST (File exists) [pid 8700] ioctl(4, LOOP_CLR_FD [ 239.552015][ T8700] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8700) [pid 8699] ioctl(4, LOOP_CLR_FD [pid 8721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8696] <... mount resumed>) = 0 [pid 8696] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8696] chdir("./file0") = 0 [pid 8696] ioctl(4, LOOP_CLR_FD) = 0 [pid 8696] close(4) = 0 [pid 8696] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8694] <... futex resumed>) = 0 [pid 8696] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8694] <... futex resumed>) = 0 [ 239.695463][ T8696] BTRFS info (device loop2): enabling ssd optimizations [ 239.702448][ T8696] BTRFS info (device loop2): auto enabling async discard [ 239.710732][ T8696] BTRFS info (device loop2): checking UUID tree [pid 8696] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8694] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8696] <... openat resumed>) = 4 [pid 8696] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8694] <... futex resumed>) = 0 [pid 8696] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8695] <... ioctl resumed>) = 0 [pid 8694] <... futex resumed>) = 0 [pid 8696] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8694] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] close(4 [pid 8700] <... ioctl resumed>) = 0 [pid 8695] <... close resumed>) = 0 [pid 8694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8700] close(4 [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8694] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] <... close resumed>) = 0 [pid 8695] <... futex resumed>) = 1 [pid 8694] <... futex resumed>) = 0 [ 239.804417][ T8696] BTRFS info (device loop2): balance: start -s [ 239.825980][ T8696] BTRFS info (device loop2): relocating block group 1048576 flags system [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] <... futex resumed>) = 1 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8694] <... mmap resumed>) = 0x7ff2ac333000 [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8694] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8698] <... futex resumed>) = 0 [pid 8695] <... openat resumed>) = 3 [pid 8694] <... mprotect resumed>) = 0 [pid 8700] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8694] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8700] <... openat resumed>) = 3 [pid 8695] <... futex resumed>) = 1 [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] <... clone resumed>, parent_tid=[8742], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8742 [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8742 attached [pid 8700] <... futex resumed>) = 1 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8694] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] <... futex resumed>) = 0 [pid 8742] set_robust_list(0x7ff2ac3539e0, 24 [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8694] <... futex resumed>) = 0 [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8742] <... set_robust_list resumed>) = 0 [pid 8700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8698] <... futex resumed>) = 0 [pid 8695] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8694] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8742] openat(AT_FDCWD, ".log", O_RDONLY [pid 8700] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8742] <... openat resumed>) = 5 [pid 8700] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8699] <... ioctl resumed>) = 0 [pid 8695] <... futex resumed>) = 1 [pid 8693] <... futex resumed>) = 0 [pid 8742] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8742] <... futex resumed>) = 1 [pid 8700] <... futex resumed>) = 1 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8694] <... futex resumed>) = 0 [pid 8693] <... futex resumed>) = 0 [pid 8742] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] openat(AT_FDCWD, ".log", O_RDONLY [pid 8694] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8699] close(4 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... openat resumed>) = 4 [pid 8694] <... futex resumed>) = 0 [pid 8742] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8700] openat(AT_FDCWD, ".log", O_RDONLY [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8694] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] <... futex resumed>) = 1 [pid 8700] <... openat resumed>) = 4 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] <... futex resumed>) = 1 [pid 8699] <... close resumed>) = 0 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = 0 [pid 8693] <... futex resumed>) = 1 [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8699] <... futex resumed>) = 1 [pid 8698] <... futex resumed>) = 0 [pid 8697] <... futex resumed>) = 0 [pid 8695] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8700] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8699] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8697] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = 1 [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8699] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8700] <... futex resumed>) = 1 [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8693] exit_group(0 [pid 8699] <... openat resumed>) = 3 [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] <... futex resumed>) = 0 [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] <... exit_group resumed>) = ? [pid 8699] <... futex resumed>) = 1 [pid 8698] exit_group(0 [pid 8697] <... futex resumed>) = 0 [pid 8700] <... futex resumed>) = ? [pid 8699] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8698] <... exit_group resumed>) = ? [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] <... futex resumed>) = ? [pid 8700] +++ exited with 0 +++ [pid 8699] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8698] +++ exited with 0 +++ [pid 8697] <... futex resumed>) = 0 [pid 8695] +++ exited with 0 +++ [pid 8693] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8693, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8698, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5081] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8699] <... futex resumed>) = 0 [pid 8697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8699] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8697] <... futex resumed>) = 0 [pid 5081] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] fstat(3, [pid 5081] lstat("./108/binderfs", [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] getdents64(3, [pid 5081] unlink("./108/binderfs" [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8699] openat(AT_FDCWD, ".log", O_RDONLY [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... unlink resumed>) = 0 [pid 5079] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8699] <... openat resumed>) = 4 [pid 5081] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./109/binderfs", [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./108/file0", [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8699] <... futex resumed>) = 1 [pid 8697] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] unlink("./109/binderfs" [pid 8699] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 8699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8697] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8699] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8699] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... openat resumed>) = 4 [pid 5079] lstat("./109/file0", [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8696] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5081] fstat(4, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8699] <... futex resumed>) = 1 [pid 8697] <... futex resumed>) = 0 [pid 8696] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8742] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8699] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8697] exit_group(0 [pid 8696] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8742] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8699] <... futex resumed>) = ? [pid 8697] <... exit_group resumed>) = ? [pid 8696] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] exit_group(0 [pid 5081] getdents64(4, [pid 5079] <... openat resumed>) = 4 [pid 8742] <... futex resumed>) = ? [pid 8699] +++ exited with 0 +++ [pid 8697] +++ exited with 0 +++ [pid 8696] <... futex resumed>) = ? [pid 8694] <... exit_group resumed>) = ? [ 239.997236][ T8742] BTRFS info (device loop2): scrub: started on devid 1 [ 240.012669][ T8696] BTRFS info (device loop2): balance: ended with status: 0 [ 240.026136][ T8742] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] fstat(4, [pid 8742] +++ exited with 0 +++ [pid 8696] +++ exited with 0 +++ [pid 8694] +++ exited with 0 +++ [pid 5081] close(4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8697, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5081] rmdir("./108/file0" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8694, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=31 /* 0.31 s */} --- [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... rmdir resumed>) = 0 [pid 5080] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./108/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] close(4 [pid 5078] <... openat resumed>) = 3 [pid 5081] lstat("./108/.log", [pid 5080] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5078] fstat(3, [pid 8721] <... write resumed>) = 16777216 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] fstat(3, [pid 5079] rmdir("./109/file0" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8721] munmap(0x7ff2ab354000, 16777216 [pid 5081] unlink("./108/.log" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 8721] <... munmap resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5079] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8721] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] getdents64(3, [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8721] <... openat resumed>) = 4 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./109/.log", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8721] ioctl(4, LOOP_SET_FD, 3 [pid 5081] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] lstat("./107/binderfs", [pid 5081] <... close resumed>) = 0 [pid 5080] lstat("./108/binderfs", [pid 5079] unlink("./109/.log" [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] rmdir("./108" [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] unlink("./107/binderfs" [pid 5081] <... rmdir resumed>) = 0 [pid 5080] unlink("./108/binderfs" [pid 5079] getdents64(3, [pid 5078] <... unlink resumed>) = 0 [pid 8721] <... ioctl resumed>) = 0 [pid 5081] mkdir("./109", 0777 [pid 5080] <... unlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8721] close(3 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8721] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 5078] lstat("./107/file0", [pid 8721] mkdir("./file0", 0777 [pid 5081] <... openat resumed>) = 3 [pid 5079] rmdir("./109" [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8721] <... mkdir resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5079] <... rmdir resumed>) = 0 [pid 5078] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8721] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] mkdir("./110", 0777 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... openat resumed>) = 4 [pid 8721] <... mount resumed>) = -1 EEXIST (File exists) [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... openat resumed>) = 3 [pid 5078] fstat(4, [pid 8721] ioctl(4, LOOP_CLR_FD [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8743 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] getdents64(4, [ 240.106971][ T8721] loop5: detected capacity change from 0 to 32768 [ 240.140560][ T8721] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8721) [pid 5079] close(3 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8743 attached [pid 5078] close(4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8744 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./107/file0" [pid 8743] set_robust_list(0x5555559d56e0, 24 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8743] <... set_robust_list resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8744 attached [pid 8743] chdir("./109" [pid 5078] lstat("./107/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./107/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 8743] <... chdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 8744] set_robust_list(0x5555559d56e0, 24 [pid 8743] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] rmdir("./107" [pid 8744] <... set_robust_list resumed>) = 0 [pid 8743] <... prctl resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 8744] chdir("./110" [pid 8743] setpgid(0, 0 [pid 5078] mkdir("./108", 0777 [pid 8744] <... chdir resumed>) = 0 [pid 8743] <... setpgid resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 8744] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8744] <... prctl resumed>) = 0 [pid 8743] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 8744] setpgid(0, 0 [pid 8743] write(3, "1000", 4 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 8744] <... setpgid resumed>) = 0 [pid 8743] <... write resumed>) = 4 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8743] close(3 [pid 5078] close(3 [pid 8744] <... openat resumed>) = 3 [pid 8743] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8745 ./strace-static-x86_64: Process 8745 attached [pid 8745] set_robust_list(0x5555559d56e0, 24 [pid 8744] write(3, "1000", 4 [pid 8743] symlink("/dev/binderfs", "./binderfs" [pid 8745] <... set_robust_list resumed>) = 0 [pid 8744] <... write resumed>) = 4 [pid 8743] <... symlink resumed>) = 0 [pid 8723] <... write resumed>) = 16777216 [pid 8745] chdir("./108" [pid 8744] close(3 [pid 8743] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8723] munmap(0x7ff2ab354000, 16777216 [pid 8745] <... chdir resumed>) = 0 [pid 8744] <... close resumed>) = 0 [pid 8743] <... futex resumed>) = 0 [pid 8745] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8744] symlink("/dev/binderfs", "./binderfs" [pid 8743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8723] <... munmap resumed>) = 0 [pid 8745] <... prctl resumed>) = 0 [pid 8744] <... symlink resumed>) = 0 [pid 8745] setpgid(0, 0 [pid 8744] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8743] <... mmap resumed>) = 0x7ff2b3754000 [pid 8723] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8745] <... setpgid resumed>) = 0 [pid 8744] <... futex resumed>) = 0 [pid 8743] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8723] <... openat resumed>) = 4 [pid 8745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8743] <... mprotect resumed>) = 0 [pid 8723] ioctl(4, LOOP_SET_FD, 3 [pid 8745] <... openat resumed>) = 3 [pid 8744] <... mmap resumed>) = 0x7ff2b3754000 [pid 8743] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8745] write(3, "1000", 4) = 4 [pid 8745] close(3) = 0 [pid 8745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8745] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8744] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8745] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8744] <... mprotect resumed>) = 0 [pid 8743] <... clone resumed>, parent_tid=[8746], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8746 ./strace-static-x86_64: Process 8746 attached [pid 8745] <... mprotect resumed>) = 0 [pid 8744] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8723] <... ioctl resumed>) = 0 [pid 8746] set_robust_list(0x7ff2b37749e0, 24 [pid 8745] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8743] <... futex resumed>) = 0 [pid 8723] close(3./strace-static-x86_64: Process 8747 attached [pid 8746] <... set_robust_list resumed>) = 0 [pid 8744] <... clone resumed>, parent_tid=[8747], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8747 [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8723] <... close resumed>) = 0 [pid 8747] set_robust_list(0x7ff2b37749e0, 24 [pid 8746] memfd_create("syzkaller", 0 [pid 8745] <... clone resumed>, parent_tid=[8748], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8748 [pid 8744] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8723] mkdir("./file0", 0777 [pid 8747] <... set_robust_list resumed>) = 0 [pid 8746] <... memfd_create resumed>) = 3 [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8744] <... futex resumed>) = 0 [pid 8723] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8748 attached [pid 8747] memfd_create("syzkaller", 0 [pid 8746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8745] <... futex resumed>) = 0 [pid 8744] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8723] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8748] set_robust_list(0x7ff2b37749e0, 24 [pid 8747] <... memfd_create resumed>) = 3 [pid 8746] <... mmap resumed>) = 0x7ff2ab354000 [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 240.277214][ T8723] loop4: detected capacity change from 0 to 32768 [pid 8748] <... set_robust_list resumed>) = 0 [pid 8748] memfd_create("syzkaller", 0) = 3 [pid 8748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 240.315688][ T8723] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (8723) [pid 8721] <... ioctl resumed>) = 0 [pid 8721] close(4) = 0 [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8720] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8721] <... futex resumed>) = 0 [pid 8720] <... futex resumed>) = 1 [pid 8721] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8721] <... openat resumed>) = 3 [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8721] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8720] <... futex resumed>) = 0 [pid 8721] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8721] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8720] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8720] <... futex resumed>) = 0 [pid 8721] openat(AT_FDCWD, ".log", O_RDONLY [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8721] <... openat resumed>) = 4 [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8720] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8720] <... futex resumed>) = 0 [pid 8721] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = 0 [pid 8721] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8720] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [ 240.382300][ T8723] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 240.416297][ T8723] BTRFS info (device loop4): setting nodatasum [pid 8720] exit_group(0 [pid 8721] <... futex resumed>) = ? [pid 8720] <... exit_group resumed>) = ? [pid 8721] +++ exited with 0 +++ [pid 8720] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8720, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5084] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./109/binderfs") = 0 [pid 5084] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, [pid 5080] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] close(4 [pid 5080] lstat("./108/file0", [pid 5084] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] rmdir("./109/file0" [pid 5080] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] lstat("./109/.log", [pid 5080] <... openat resumed>) = 4 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] fstat(4, [pid 5084] unlink("./109/.log" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5080] getdents64(4, [pid 5084] getdents64(3, [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(4, [pid 5084] close(3 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... close resumed>) = 0 [pid 5080] close(4 [pid 5084] rmdir("./109" [pid 5080] <... close resumed>) = 0 [ 240.457926][ T8723] BTRFS info (device loop4): allowing degraded mounts [ 240.464733][ T8723] BTRFS info (device loop4): use zlib compression, level 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5080] rmdir("./108/file0" [pid 5084] mkdir("./110", 0777 [pid 5080] <... rmdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5080] close(3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] rmdir("./108" [pid 5084] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5080] mkdir("./109", 0777 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8749 [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8750 attached , child_tidptr=0x5555559d56d0) = 8750 ./strace-static-x86_64: Process 8749 attached [pid 8750] set_robust_list(0x5555559d56e0, 24 [pid 8749] set_robust_list(0x5555559d56e0, 24 [pid 8750] <... set_robust_list resumed>) = 0 [pid 8749] <... set_robust_list resumed>) = 0 [pid 8750] chdir("./109" [pid 8749] chdir("./110" [pid 8750] <... chdir resumed>) = 0 [pid 8749] <... chdir resumed>) = 0 [pid 8750] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8749] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8750] <... prctl resumed>) = 0 [pid 8749] <... prctl resumed>) = 0 [pid 8750] setpgid(0, 0 [pid 8749] setpgid(0, 0 [pid 8750] <... setpgid resumed>) = 0 [pid 8749] <... setpgid resumed>) = 0 [pid 8750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8750] <... openat resumed>) = 3 [pid 8749] <... openat resumed>) = 3 [pid 8750] write(3, "1000", 4 [pid 8749] write(3, "1000", 4 [pid 8750] <... write resumed>) = 4 [pid 8749] <... write resumed>) = 4 [pid 8750] close(3 [pid 8749] close(3 [ 240.524835][ T8723] BTRFS info (device loop4): using free space tree [pid 8750] <... close resumed>) = 0 [pid 8749] <... close resumed>) = 0 [pid 8750] symlink("/dev/binderfs", "./binderfs" [pid 8749] symlink("/dev/binderfs", "./binderfs" [pid 8750] <... symlink resumed>) = 0 [pid 8749] <... symlink resumed>) = 0 [pid 8750] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] <... futex resumed>) = 0 [pid 8749] <... futex resumed>) = 0 [pid 8750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8750] <... mmap resumed>) = 0x7ff2b3754000 [pid 8749] <... mmap resumed>) = 0x7ff2b3754000 [pid 8750] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8749] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8750] <... mprotect resumed>) = 0 [pid 8749] <... mprotect resumed>) = 0 [pid 8750] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8749] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8750] <... clone resumed>, parent_tid=[8755], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8755 [pid 8749] <... clone resumed>, parent_tid=[8756], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8756 [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] <... futex resumed>) = 0 [pid 8749] <... futex resumed>) = 0 [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8755 attached [pid 8755] set_robust_list(0x7ff2b37749e0, 24./strace-static-x86_64: Process 8756 attached ) = 0 [pid 8756] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8756] memfd_create("syzkaller", 0) = 3 [pid 8755] memfd_create("syzkaller", 0 [pid 8756] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8755] <... memfd_create resumed>) = 3 [pid 8756] <... mmap resumed>) = 0x7ff2ab354000 [pid 8755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8755] <... mmap resumed>) = 0x7ff2ab354000 [pid 8747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8748] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8723] <... mount resumed>) = 0 [pid 8723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8723] chdir("./file0") = 0 [pid 8723] ioctl(4, LOOP_CLR_FD) = 0 [pid 8723] close(4) = 0 [ 240.715472][ T8723] BTRFS info (device loop4): enabling ssd optimizations [ 240.722464][ T8723] BTRFS info (device loop4): auto enabling async discard [ 240.732266][ T8723] BTRFS info (device loop4): checking UUID tree [pid 8723] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8722] <... futex resumed>) = 0 [pid 8723] <... futex resumed>) = 1 [pid 8722] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8723] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8722] <... futex resumed>) = 0 [pid 8722] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8723] <... openat resumed>) = 4 [pid 8723] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8722] <... futex resumed>) = 0 [pid 8722] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8723] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8722] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8722] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8722] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8722] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8771], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8771 [pid 8722] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8771 attached [pid 8771] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 8771] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 8771] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8771] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8722] <... futex resumed>) = 0 [pid 8771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8722] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8771] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 240.812371][ T8723] BTRFS info (device loop4): balance: start -s [ 240.837628][ T8723] BTRFS info (device loop4): relocating block group 1048576 flags system [pid 8722] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8746] <... write resumed>) = 16777216 [pid 8746] munmap(0x7ff2ab354000, 16777216 [pid 8771] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8771] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8723] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8746] <... munmap resumed>) = 0 [pid 8746] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 240.926478][ T8771] BTRFS info (device loop4): scrub: started on devid 1 [ 240.934395][ T8723] BTRFS info (device loop4): balance: ended with status: 0 [ 240.947573][ T8771] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 8746] ioctl(4, LOOP_SET_FD, 3 [pid 8771] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8723] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] exit_group(0) = ? [pid 8771] <... futex resumed>) = ? [pid 8771] +++ exited with 0 +++ [pid 8723] +++ exited with 0 +++ [pid 8722] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8722, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8746] <... ioctl resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8746] close(3 [pid 5083] lstat("./109/binderfs", [pid 8746] <... close resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8746] mkdir("./file0", 0777 [pid 5083] unlink("./109/binderfs" [pid 8746] <... mkdir resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 8746] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 240.997084][ T8746] loop3: detected capacity change from 0 to 32768 [pid 5083] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8756] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8746] <... mount resumed>) = -1 EEXIST (File exists) [pid 8746] ioctl(4, LOOP_CLR_FD [ 241.058159][ T8746] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8746) [pid 8755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8747] <... write resumed>) = 16777216 [pid 8747] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8747] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8747] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8747] close(3) = 0 [pid 8747] mkdir("./file0", 0777) = 0 [pid 8747] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8748] <... write resumed>) = 16777216 [pid 8748] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8748] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 241.299708][ T8747] loop1: detected capacity change from 0 to 32768 [ 241.316520][ T8747] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (8747) [pid 8748] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8748] close(3) = 0 [pid 8748] mkdir("./file0", 0777) = 0 [pid 8748] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8746] <... ioctl resumed>) = 0 [pid 8746] close(4) = 0 [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8746] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8746] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8746] openat(AT_FDCWD, ".log", O_RDONLY [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8746] <... openat resumed>) = 4 [ 241.357857][ T8748] loop0: detected capacity change from 0 to 32768 [ 241.371264][ T8748] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8748) [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... mount resumed>) = -1 EEXIST (File exists) [pid 8748] ioctl(4, LOOP_CLR_FD [pid 8746] <... futex resumed>) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8746] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8746] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8743] exit_group(0) = ? [pid 8746] +++ exited with 0 +++ [pid 8743] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8743, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=20 /* 0.20 s */} --- [pid 5081] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./109/binderfs") = 0 [pid 5081] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = 0 [pid 5081] lstat("./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./109/file0") = 0 [pid 5081] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./109/.log", [pid 5083] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] unlink("./109/.log" [pid 5083] lstat("./109/file0", [pid 5081] <... unlink resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 5083] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5083] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5081] rmdir("./109" [pid 5083] fstat(4, [pid 5081] <... rmdir resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] mkdir("./110", 0777 [pid 5083] getdents64(4, [pid 5081] <... mkdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] getdents64(4, [pid 5081] <... openat resumed>) = 3 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5083] close(4 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] <... close resumed>) = 0 [pid 5081] close(3 [pid 5083] rmdir("./109/file0" [pid 5081] <... close resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8772 [pid 5083] close(3) = 0 [pid 5083] rmdir("./109") = 0 [pid 5083] mkdir("./110", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8773 ./strace-static-x86_64: Process 8772 attached [pid 8772] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8772] chdir("./110") = 0 [pid 8772] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8772] setpgid(0, 0) = 0 [pid 8772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8773 attached ) = 3 [pid 8773] set_robust_list(0x5555559d56e0, 24 [pid 8772] write(3, "1000", 4 [pid 8773] <... set_robust_list resumed>) = 0 [pid 8772] <... write resumed>) = 4 [pid 8773] chdir("./110" [ 241.418428][ T8747] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 241.455375][ T8747] BTRFS info (device loop1): setting nodatasum [pid 8772] close(3 [pid 8773] <... chdir resumed>) = 0 [pid 8772] <... close resumed>) = 0 [pid 8773] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8772] symlink("/dev/binderfs", "./binderfs" [pid 8773] <... prctl resumed>) = 0 [pid 8772] <... symlink resumed>) = 0 [pid 8773] setpgid(0, 0 [pid 8772] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8773] <... setpgid resumed>) = 0 [pid 8772] <... futex resumed>) = 0 [pid 8773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8773] <... openat resumed>) = 3 [pid 8772] <... mmap resumed>) = 0x7ff2b3754000 [pid 8773] write(3, "1000", 4 [pid 8772] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8773] <... write resumed>) = 4 [pid 8772] <... mprotect resumed>) = 0 [pid 8773] close(3 [pid 8772] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8773] <... close resumed>) = 0 [pid 8773] symlink("/dev/binderfs", "./binderfs" [pid 8772] <... clone resumed>, parent_tid=[8774], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8774 [pid 8773] <... symlink resumed>) = 0 [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8773] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8772] <... futex resumed>) = 0 [pid 8773] <... futex resumed>) = 0 [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8773] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8773] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8775], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8775 [pid 8773] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8773] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8775 attached [pid 8775] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8775] memfd_create("syzkaller", 0./strace-static-x86_64: Process 8774 attached ) = 3 [pid 8775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8774] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8774] memfd_create("syzkaller", 0) = 3 [pid 8774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 241.504724][ T8747] BTRFS info (device loop1): allowing degraded mounts [ 241.541339][ T8747] BTRFS info (device loop1): use zlib compression, level 3 [pid 8756] <... write resumed>) = 16777216 [pid 8756] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8756] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 241.576756][ T8747] BTRFS info (device loop1): using free space tree [pid 8756] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8756] close(3) = 0 [pid 8756] mkdir("./file0", 0777) = 0 [pid 8756] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8755] <... write resumed>) = 16777216 [pid 8755] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8755] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8755] ioctl(4, LOOP_SET_FD, 3 [pid 8756] <... mount resumed>) = -1 EEXIST (File exists) [pid 8756] ioctl(4, LOOP_CLR_FD [pid 8755] <... ioctl resumed>) = 0 [pid 8755] close(3) = 0 [pid 8755] mkdir("./file0", 0777) = 0 [ 241.617618][ T8756] loop5: detected capacity change from 0 to 32768 [ 241.632413][ T8756] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8756) [ 241.641948][ T8755] loop2: detected capacity change from 0 to 32768 [pid 8755] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8748] <... ioctl resumed>) = 0 [pid 8748] close(4) = 0 [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8745] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8748] <... futex resumed>) = 0 [pid 8748] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8748] <... openat resumed>) = 3 [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8748] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... futex resumed>) = 0 [pid 8745] <... futex resumed>) = 1 [pid 8748] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8748] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8745] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8745] <... futex resumed>) = 0 [pid 8748] openat(AT_FDCWD, ".log", O_RDONLY [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8748] <... openat resumed>) = 4 [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8745] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8745] <... futex resumed>) = 0 [pid 8748] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 241.721920][ T8755] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8755) [ 241.744281][ T27] kauditd_printk_skb: 7 callbacks suppressed [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8755] <... mount resumed>) = -1 EEXIST (File exists) [pid 8748] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8755] ioctl(4, LOOP_CLR_FD [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8745] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8745] exit_group(0 [pid 8748] <... futex resumed>) = ? [pid 8745] <... exit_group resumed>) = ? [pid 8748] +++ exited with 0 +++ [pid 8745] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8745, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} --- [pid 5078] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 241.744294][ T27] audit: type=1804 audit(1680236925.212:659): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/108/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 5078] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./108/binderfs") = 0 [pid 5078] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./108/file0") = 0 [pid 5078] umount2("./108/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./108/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./108/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./108") = 0 [pid 5078] mkdir("./109", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8792 [ 241.838530][ T8747] BTRFS info (device loop1): enabling ssd optimizations [ 241.865515][ T8747] BTRFS info (device loop1): auto enabling async discard ./strace-static-x86_64: Process 8792 attached [pid 8792] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8792] chdir("./109") = 0 [pid 8792] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8792] setpgid(0, 0) = 0 [pid 8792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8792] write(3, "1000", 4) = 4 [pid 8792] close(3) = 0 [pid 8792] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8792] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8792] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8792] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8794], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8794 [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8794 attached [pid 8794] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8794] memfd_create("syzkaller", 0 [pid 8747] <... mount resumed>) = 0 [pid 8794] <... memfd_create resumed>) = 3 [pid 8747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8747] <... openat resumed>) = 3 [pid 8794] <... mmap resumed>) = 0x7ff2ab354000 [ 241.896601][ T8747] BTRFS info (device loop1): checking UUID tree [pid 8747] chdir("./file0") = 0 [pid 8747] ioctl(4, LOOP_CLR_FD) = 0 [pid 8747] close(4) = 0 [pid 8747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8744] <... futex resumed>) = 0 [pid 8747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8744] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8747] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8744] <... futex resumed>) = 0 [pid 8747] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8744] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8755] <... ioctl resumed>) = 0 [pid 8747] <... openat resumed>) = 4 [pid 8747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8755] close(4 [pid 8747] <... futex resumed>) = 1 [pid 8744] <... futex resumed>) = 0 [pid 8747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8755] <... close resumed>) = 0 [pid 8747] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8744] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8747] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8744] <... futex resumed>) = 0 [pid 8755] <... futex resumed>) = 1 [pid 8750] <... futex resumed>) = 0 [pid 8744] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8755] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8750] <... futex resumed>) = 0 [pid 8756] <... ioctl resumed>) = 0 [pid 8756] close(4) = 0 [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8755] <... openat resumed>) = 3 [pid 8756] <... futex resumed>) = 1 [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] <... futex resumed>) = 0 [pid 8756] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8756] <... openat resumed>) = 3 [pid 8755] <... futex resumed>) = 0 [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8755] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8750] <... futex resumed>) = 0 [pid 8756] <... futex resumed>) = 1 [pid 8755] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8755] <... futex resumed>) = 0 [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] <... futex resumed>) = 0 [pid 8756] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8755] openat(AT_FDCWD, ".log", O_RDONLY [pid 8750] <... futex resumed>) = 0 [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 242.028457][ T8747] BTRFS info (device loop1): balance: start -s [ 242.037088][ T8747] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 8756] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8755] <... openat resumed>) = 4 [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] <... futex resumed>) = 0 [pid 8756] openat(AT_FDCWD, ".log", O_RDONLY [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8756] <... openat resumed>) = 4 [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] <... futex resumed>) = 0 [pid 8756] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8756] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] exit_group(0 [pid 8744] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = ? [pid 8755] <... futex resumed>) = 1 [pid 8750] <... futex resumed>) = 0 [pid 8749] <... exit_group resumed>) = ? [pid 8744] <... futex resumed>) = 0 [pid 8756] +++ exited with 0 +++ [pid 8755] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] +++ exited with 0 +++ [pid 8744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8750] <... futex resumed>) = 0 [pid 8744] <... mmap resumed>) = 0x7ff2ac333000 [pid 8755] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8744] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8749, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 8755] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8744] <... mprotect resumed>) = 0 [pid 5084] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8744] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8755] <... futex resumed>) = 1 [pid 8750] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8755] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8750] exit_group(0 [pid 8744] <... clone resumed>, parent_tid=[8796], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8796 [pid 5084] <... openat resumed>) = 3 [pid 8755] <... futex resumed>) = ? [pid 8750] <... exit_group resumed>) = ? [pid 8744] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(3, [pid 8755] +++ exited with 0 +++ [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8750] +++ exited with 0 +++ [pid 8744] <... futex resumed>) = 0 [pid 5084] getdents64(3, ./strace-static-x86_64: Process 8796 attached [pid 8744] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8750, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 8796] set_robust_list(0x7ff2ac3539e0, 24 [pid 5084] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8796] <... set_robust_list resumed>) = 0 [ 242.077605][ T27] audit: type=1804 audit(1680236925.552:660): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/109/.log" dev="sda1" ino=1158 res=1 errno=0 [pid 5084] unlink("./110/binderfs" [pid 8796] openat(AT_FDCWD, ".log", O_RDONLY [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./110/file0", [pid 5080] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5084] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(3, [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] getdents64(3, [pid 5084] <... openat resumed>) = 4 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8796] <... openat resumed>) = 5 [pid 5084] fstat(4, [pid 5080] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8796] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8796] <... futex resumed>) = 1 [pid 8744] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 5080] lstat("./109/binderfs", [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] getdents64(4, [pid 5080] unlink("./109/binderfs" [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5084] close(4 [pid 5080] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8744] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8744] <... futex resumed>) = 0 [pid 5084] rmdir("./110/file0" [pid 5080] lstat("./109/file0", [pid 8744] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./110/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8796] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5084] lstat("./110/.log", [pid 5080] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5084] unlink("./110/.log" [pid 5080] fstat(4, [pid 5084] <... unlink resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, [pid 5080] getdents64(4, [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] close(3 [pid 5080] getdents64(4, [pid 5084] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] rmdir("./110" [pid 5080] close(4 [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5084] mkdir("./111", 0777 [pid 5080] rmdir("./109/file0" [pid 5084] <... mkdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5080] lstat("./109/.log", [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] close(3 [ 242.147562][ T8747] BTRFS info (device loop1): balance: ended with status: 0 [ 242.159007][ T27] audit: type=1804 audit(1680236925.552:661): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/110/.log" dev="sda1" ino=1160 res=1 errno=0 [ 242.182370][ T8796] BTRFS info (device loop1): scrub: started on devid 1 [pid 5080] unlink("./109/.log" [pid 8747] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] <... close resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8797 [pid 5080] close(3 [pid 8747] <... futex resumed>) = 0 [pid 8744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... close resumed>) = 0 [pid 8747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] rmdir("./109") = 0 ./strace-static-x86_64: Process 8797 attached [pid 5080] mkdir("./110", 0777 [pid 8797] set_robust_list(0x5555559d56e0, 24 [pid 8796] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 8797] <... set_robust_list resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8797] chdir("./111" [pid 5080] <... openat resumed>) = 3 [pid 8797] <... chdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 8797] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8796] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8797] <... prctl resumed>) = 0 [pid 8796] <... futex resumed>) = 0 [pid 8774] <... write resumed>) = 16777216 [ 242.217944][ T8796] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 8744] exit_group(0 [pid 5080] close(3 [pid 8797] setpgid(0, 0 [pid 8744] <... exit_group resumed>) = ? [pid 5080] <... close resumed>) = 0 [pid 8797] <... setpgid resumed>) = 0 [pid 8774] munmap(0x7ff2ab354000, 16777216 [pid 8747] <... futex resumed>) = ? [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8796] +++ exited with 0 +++ [pid 8747] +++ exited with 0 +++ [pid 8744] +++ exited with 0 +++ [pid 8797] <... openat resumed>) = 3 [pid 8774] <... munmap resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8798 ./strace-static-x86_64: Process 8798 attached [pid 8797] write(3, "1000", 4 [pid 8774] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8744, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 8797] <... write resumed>) = 4 [pid 8774] <... openat resumed>) = 4 [pid 5079] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8798] set_robust_list(0x5555559d56e0, 24 [pid 8797] close(3 [pid 8774] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8798] <... set_robust_list resumed>) = 0 [pid 8797] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8797] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... openat resumed>) = 3 [pid 8797] <... symlink resumed>) = 0 [pid 5079] fstat(3, [pid 8797] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8797] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 8798] chdir("./110" [pid 8797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 8798] <... chdir resumed>) = 0 [pid 8797] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8798] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8797] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8774] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8798] <... prctl resumed>) = 0 [pid 8797] <... mprotect resumed>) = 0 [pid 8775] <... write resumed>) = 16777216 [pid 8774] close(3 [pid 5079] lstat("./110/binderfs", [pid 8798] setpgid(0, 0 [pid 8797] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8775] munmap(0x7ff2ab354000, 16777216 [pid 8774] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8798] <... setpgid resumed>) = 0 [pid 5079] unlink("./110/binderfs" [pid 8798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8797] <... clone resumed>, parent_tid=[8799], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8799 [pid 8775] <... munmap resumed>) = 0 [pid 8774] mkdir("./file0", 0777 [pid 5079] <... unlink resumed>) = 0 [pid 8798] <... openat resumed>) = 3 [pid 8797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8775] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8774] <... mkdir resumed>) = 0 [pid 5079] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8799 attached [pid 8798] write(3, "1000", 4 [pid 8797] <... futex resumed>) = 0 [pid 8775] <... openat resumed>) = 4 [pid 8774] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8799] set_robust_list(0x7ff2b37749e0, 24 [pid 8798] <... write resumed>) = 4 [ 242.255535][ T27] audit: type=1804 audit(1680236925.632:662): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/110/file0/.log" dev="loop1" ino=263 res=1 errno=0 [ 242.289365][ T8774] loop3: detected capacity change from 0 to 32768 [pid 8797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8775] ioctl(4, LOOP_SET_FD, 3 [pid 8799] <... set_robust_list resumed>) = 0 [pid 8798] close(3 [pid 8775] <... ioctl resumed>) = 0 [pid 8799] memfd_create("syzkaller", 0 [pid 8798] <... close resumed>) = 0 [pid 8775] close(3 [pid 8774] <... mount resumed>) = -1 EEXIST (File exists) [pid 8799] <... memfd_create resumed>) = 3 [pid 8798] symlink("/dev/binderfs", "./binderfs" [pid 8775] <... close resumed>) = 0 [ 242.324959][ T8774] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8774) [ 242.336165][ T8775] loop4: detected capacity change from 0 to 32768 [pid 8774] ioctl(4, LOOP_CLR_FD [pid 8799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8798] <... symlink resumed>) = 0 [pid 8775] mkdir("./file0", 0777 [pid 8799] <... mmap resumed>) = 0x7ff2ab354000 [pid 8798] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8775] <... mkdir resumed>) = 0 [pid 8798] <... futex resumed>) = 0 [pid 8775] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8798] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8798] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8800], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8800 [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8800 attached [pid 8800] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8800] memfd_create("syzkaller", 0) = 3 [pid 8800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 242.444864][ T8775] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (8775) [ 242.498507][ T8775] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 242.538151][ T8775] BTRFS info (device loop4): setting nodatasum [pid 8794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5079] <... umount2 resumed>) = 0 [ 242.579795][ T8775] BTRFS info (device loop4): allowing degraded mounts [ 242.607129][ T8775] BTRFS info (device loop4): use zlib compression, level 3 [ 242.614363][ T8775] BTRFS info (device loop4): using free space tree [pid 5079] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./110/file0") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./110") = 0 [pid 5079] mkdir("./111", 0777 [pid 8774] <... ioctl resumed>) = 0 [pid 8774] close(4 [pid 5079] <... mkdir resumed>) = 0 [pid 8774] <... close resumed>) = 0 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8772] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 3 [pid 8774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8772] <... futex resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 8774] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8774] <... openat resumed>) = 3 [pid 5079] close(3 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... close resumed>) = 0 [pid 8774] <... futex resumed>) = 1 [pid 8772] <... futex resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8772] <... futex resumed>) = 0 [pid 8774] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8774] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8807 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8772] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8807 attached [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] set_robust_list(0x5555559d56e0, 24 [pid 8774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8772] <... futex resumed>) = 0 [pid 8807] <... set_robust_list resumed>) = 0 [pid 8774] openat(AT_FDCWD, ".log", O_RDONLY [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8807] chdir("./111" [pid 8774] <... openat resumed>) = 4 [pid 8807] <... chdir resumed>) = 0 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8774] <... futex resumed>) = 0 [pid 8807] <... prctl resumed>) = 0 [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] setpgid(0, 0) = 0 [pid 8807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8807] write(3, "1000", 4) = 4 [pid 8807] close(3 [pid 8772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... close resumed>) = 0 [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] symlink("/dev/binderfs", "./binderfs" [pid 8774] <... futex resumed>) = 0 [pid 8772] <... futex resumed>) = 1 [pid 8807] <... symlink resumed>) = 0 [pid 8774] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8807] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8774] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8807] <... futex resumed>) = 0 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8774] <... futex resumed>) = 1 [pid 8772] <... futex resumed>) = 0 [pid 8807] <... mmap resumed>) = 0x7ff2b3754000 [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8772] exit_group(0 [pid 8807] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8774] <... futex resumed>) = ? [pid 8772] <... exit_group resumed>) = ? [pid 8807] <... mprotect resumed>) = 0 [pid 8774] +++ exited with 0 +++ [pid 8807] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8772] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8772, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 8807] <... clone resumed>, parent_tid=[8812], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8812 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... restart_syscall resumed>) = 0 [pid 8807] <... futex resumed>) = 0 [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8812 attached [pid 5081] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8812] set_robust_list(0x7ff2b37749e0, 24 [pid 8799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... openat resumed>) = 3 [pid 8812] <... set_robust_list resumed>) = 0 [pid 5081] fstat(3, [pid 8812] memfd_create("syzkaller", 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8812] <... memfd_create resumed>) = 3 [ 242.727151][ T27] audit: type=1804 audit(1680236926.202:663): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/110/.log" dev="sda1" ino=1154 res=1 errno=0 [pid 5081] getdents64(3, [pid 8812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8812] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./110/binderfs") = 0 [pid 5081] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./110/file0") = 0 [pid 5081] umount2("./110/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./110/.log", [pid 8800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./110/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./110") = 0 [pid 5081] mkdir("./111", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8818 ./strace-static-x86_64: Process 8818 attached [pid 8818] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8818] chdir("./111") = 0 [pid 8818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8818] setpgid(0, 0) = 0 [pid 8818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8818] write(3, "1000", 4) = 4 [pid 8818] close(3) = 0 [pid 8818] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8818] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8818] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8818] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8820], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8820 [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8820 attached [pid 8820] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8820] memfd_create("syzkaller", 0) = 3 [pid 8794] <... write resumed>) = 16777216 [pid 8820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8775] <... mount resumed>) = 0 [pid 8794] munmap(0x7ff2ab354000, 16777216 [pid 8775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8794] <... munmap resumed>) = 0 [pid 8775] <... openat resumed>) = 3 [pid 8775] chdir("./file0") = 0 [pid 8794] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8775] ioctl(4, LOOP_CLR_FD [pid 8794] <... openat resumed>) = 4 [pid 8775] <... ioctl resumed>) = 0 [pid 8794] ioctl(4, LOOP_SET_FD, 3 [ 242.907413][ T8775] BTRFS info (device loop4): enabling ssd optimizations [ 242.917099][ T8775] BTRFS info (device loop4): auto enabling async discard [ 242.945437][ T8775] BTRFS info (device loop4): checking UUID tree [pid 8775] close(4 [pid 8794] <... ioctl resumed>) = 0 [pid 8775] <... close resumed>) = 0 [pid 8794] close(3) = 0 [pid 8775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] mkdir("./file0", 0777 [pid 8775] <... futex resumed>) = 1 [pid 8773] <... futex resumed>) = 0 [pid 8800] <... write resumed>) = 16777216 [pid 8794] <... mkdir resumed>) = 0 [pid 8775] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8773] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8800] munmap(0x7ff2ab354000, 16777216 [pid 8794] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8773] <... futex resumed>) = 0 [pid 8800] <... munmap resumed>) = 0 [pid 8775] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8773] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8800] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8775] <... openat resumed>) = 4 [pid 8800] ioctl(4, LOOP_SET_FD, 3 [pid 8775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8773] <... futex resumed>) = 0 [pid 8775] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8773] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 242.986045][ T8794] loop0: detected capacity change from 0 to 32768 [ 243.008848][ T8794] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8794) [ 243.024283][ T8800] loop2: detected capacity change from 0 to 32768 [pid 8773] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8800] <... ioctl resumed>) = 0 [pid 8800] close(3) = 0 [pid 8800] mkdir("./file0", 0777) = 0 [pid 8794] <... mount resumed>) = -1 EEXIST (File exists) [pid 8800] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8794] ioctl(4, LOOP_CLR_FD [pid 8773] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8773] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8800] <... mount resumed>) = -1 EEXIST (File exists) [pid 8773] <... mmap resumed>) = 0x7ff2ac333000 [pid 8800] ioctl(4, LOOP_CLR_FD [pid 8773] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [ 243.046383][ T8775] BTRFS info (device loop4): balance: start -s [ 243.054084][ T8775] BTRFS info (device loop4): relocating block group 1048576 flags system [ 243.075671][ T8800] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8800) [pid 8773] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8823], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8823 [pid 8773] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8773] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8823 attached [pid 8823] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 8823] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 8823] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8823] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8773] <... futex resumed>) = 0 [pid 8773] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8823] <... futex resumed>) = 0 [pid 8773] <... futex resumed>) = 1 [pid 8823] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 243.149245][ T27] audit: type=1804 audit(1680236926.622:664): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/110/file0/.log" dev="loop4" ino=263 res=1 errno=0 [ 243.167241][ T8775] BTRFS info (device loop4): balance: ended with status: 0 [ 243.182248][ T8823] BTRFS info (device loop4): scrub: started on devid 1 [pid 8773] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8775] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8773] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8775] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [ 243.216428][ T8823] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 8820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8823] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8823] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8823] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8773] exit_group(0 [pid 8823] <... futex resumed>) = ? [pid 8775] <... futex resumed>) = ? [pid 8773] <... exit_group resumed>) = ? [pid 8823] +++ exited with 0 +++ [pid 8775] +++ exited with 0 +++ [pid 8773] +++ exited with 0 +++ [pid 8812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8773, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=26 /* 0.26 s */} --- [pid 5083] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./110/binderfs") = 0 [pid 5083] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5083] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./110/file0") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./110") = 0 [pid 5083] mkdir("./111", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8824 ./strace-static-x86_64: Process 8824 attached [pid 8824] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8824] chdir("./111") = 0 [pid 8824] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8824] setpgid(0, 0) = 0 [pid 8824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8824] write(3, "1000", 4) = 4 [pid 8824] close(3) = 0 [pid 8800] <... ioctl resumed>) = 0 [pid 8794] <... ioctl resumed>) = 0 [pid 8824] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8824] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8824] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8824] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8800] close(4 [pid 8824] <... clone resumed>, parent_tid=[8825], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8825 [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8825 attached [pid 8825] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8825] memfd_create("syzkaller", 0) = 3 [pid 8825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8794] close(4) = 0 [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8792] <... futex resumed>) = 0 [pid 8794] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] <... openat resumed>) = 3 [pid 8792] <... futex resumed>) = 0 [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8794] <... futex resumed>) = 0 [pid 8792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8794] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8800] <... close resumed>) = 0 [pid 8794] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8792] <... futex resumed>) = 0 [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8794] <... futex resumed>) = 0 [pid 8792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8800] <... futex resumed>) = 1 [pid 8798] <... futex resumed>) = 0 [pid 8794] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8792] <... futex resumed>) = 0 [pid 8798] <... futex resumed>) = 0 [pid 8794] openat(AT_FDCWD, ".log", O_RDONLY [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8800] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8794] <... openat resumed>) = 4 [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8792] <... futex resumed>) = 0 [pid 8794] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8792] <... futex resumed>) = 0 [pid 8794] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8794] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8792] <... futex resumed>) = 0 [pid 8794] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8792] exit_group(0 [pid 8794] <... futex resumed>) = ? [pid 8792] <... exit_group resumed>) = ? [pid 8794] +++ exited with 0 +++ [pid 8792] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8792, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 5078] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./109/binderfs") = 0 [pid 5078] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./109/file0", [pid 8800] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./109/file0" [pid 8800] <... futex resumed>) = 1 [pid 8798] <... futex resumed>) = 0 [ 243.473157][ T27] audit: type=1804 audit(1680236926.942:665): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/109/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 5078] <... rmdir resumed>) = 0 [pid 8800] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8798] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8800] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] lstat("./109/.log", [pid 8800] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./109/.log" [pid 8800] <... futex resumed>) = 1 [pid 8798] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 8800] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, [pid 8800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8798] <... futex resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8800] openat(AT_FDCWD, ".log", O_RDONLY [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] close(3 [pid 8800] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] rmdir("./109" [pid 8800] <... futex resumed>) = 1 [pid 8798] <... futex resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 8800] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mkdir("./110", 0777 [pid 8800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8798] <... futex resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8800] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8826 [pid 8800] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8798] <... futex resumed>) = 0 [pid 8800] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8798] exit_group(0./strace-static-x86_64: Process 8826 attached [pid 8800] <... futex resumed>) = ? [pid 8798] <... exit_group resumed>) = ? [pid 8826] set_robust_list(0x5555559d56e0, 24 [pid 8800] +++ exited with 0 +++ [pid 8799] <... write resumed>) = 16777216 [pid 8826] <... set_robust_list resumed>) = 0 [pid 8799] munmap(0x7ff2ab354000, 16777216 [pid 8798] +++ exited with 0 +++ [pid 8826] chdir("./110" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8798, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 8826] <... chdir resumed>) = 0 [pid 8799] <... munmap resumed>) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 8826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8799] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... restart_syscall resumed>) = 0 [pid 8826] <... prctl resumed>) = 0 [pid 8799] <... openat resumed>) = 4 [pid 8826] setpgid(0, 0 [pid 8799] ioctl(4, LOOP_SET_FD, 3 [pid 8826] <... setpgid resumed>) = 0 [ 243.553028][ T27] audit: type=1804 audit(1680236927.022:666): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/110/.log" dev="sda1" ino=1153 res=1 errno=0 [pid 5080] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8826] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8826] write(3, "1000", 4 [pid 5080] <... openat resumed>) = 3 [pid 8826] <... write resumed>) = 4 [pid 5080] fstat(3, [pid 8826] close(3 [pid 8799] <... ioctl resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8826] <... close resumed>) = 0 [pid 8799] close(3 [pid 5080] getdents64(3, [pid 8826] symlink("/dev/binderfs", "./binderfs" [pid 8799] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8826] <... symlink resumed>) = 0 [pid 8799] mkdir("./file0", 0777 [pid 5080] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8799] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8826] <... futex resumed>) = 0 [pid 8799] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5080] lstat("./110/binderfs", [pid 8826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8826] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] unlink("./110/binderfs" [pid 8826] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... unlink resumed>) = 0 [pid 8826] <... mprotect resumed>) = 0 [pid 5080] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./110/file0", [pid 8826] <... clone resumed>, parent_tid=[8827], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8827 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8826] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8826] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 8827 attached [pid 5080] fstat(4, [pid 8827] set_robust_list(0x7ff2b37749e0, 24 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8827] <... set_robust_list resumed>) = 0 [pid 5080] getdents64(4, [pid 8827] memfd_create("syzkaller", 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8827] <... memfd_create resumed>) = 3 [pid 5080] getdents64(4, [pid 8827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8827] <... mmap resumed>) = 0x7ff2ab354000 [pid 5080] close(4) = 0 [pid 5080] rmdir("./110/file0") = 0 [pid 5080] umount2("./110/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./110/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./110/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./110") = 0 [pid 5080] mkdir("./111", 0777) = 0 [ 243.607878][ T8799] loop5: detected capacity change from 0 to 32768 [ 243.624395][ T8799] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (8799) [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8828 ./strace-static-x86_64: Process 8828 attached [pid 8828] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8828] chdir("./111") = 0 [pid 8828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8828] setpgid(0, 0) = 0 [pid 8828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8828] write(3, "1000", 4) = 4 [pid 8828] close(3) = 0 [pid 8828] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8828] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8828] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8829], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8829 [ 243.697658][ T8799] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 243.735375][ T8799] BTRFS info (device loop5): setting nodatasum [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8829 attached [pid 8829] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8829] memfd_create("syzkaller", 0) = 3 [pid 8829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 243.741571][ T8799] BTRFS info (device loop5): allowing degraded mounts [pid 8820] <... write resumed>) = 16777216 [pid 8820] munmap(0x7ff2ab354000, 16777216 [pid 8812] <... write resumed>) = 16777216 [pid 8820] <... munmap resumed>) = 0 [pid 8820] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 243.815378][ T8799] BTRFS info (device loop5): use zlib compression, level 3 [ 243.822618][ T8799] BTRFS info (device loop5): using free space tree [pid 8820] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8820] close(3) = 0 [pid 8820] mkdir("./file0", 0777) = 0 [pid 8825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8812] munmap(0x7ff2ab354000, 16777216 [pid 8820] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8812] <... munmap resumed>) = 0 [pid 8812] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8812] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8812] close(3) = 0 [pid 8812] mkdir("./file0", 0777) = 0 [ 243.859318][ T8820] loop3: detected capacity change from 0 to 32768 [ 243.881080][ T8812] loop1: detected capacity change from 0 to 32768 [ 243.882400][ T8820] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8820) [pid 8812] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8820] <... mount resumed>) = -1 EEXIST (File exists) [pid 8820] ioctl(4, LOOP_CLR_FD [pid 8812] <... mount resumed>) = -1 EEXIST (File exists) [ 243.939318][ T8812] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8812) [pid 8812] ioctl(4, LOOP_CLR_FD [pid 8829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8825] <... write resumed>) = 16777216 [pid 8799] <... mount resumed>) = 0 [pid 8825] munmap(0x7ff2ab354000, 16777216 [pid 8799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8825] <... munmap resumed>) = 0 [pid 8799] chdir("./file0" [pid 8825] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8799] <... chdir resumed>) = 0 [pid 8825] <... openat resumed>) = 4 [pid 8799] ioctl(4, LOOP_CLR_FD [pid 8825] ioctl(4, LOOP_SET_FD, 3 [pid 8799] <... ioctl resumed>) = 0 [ 244.135705][ T8799] BTRFS info (device loop5): enabling ssd optimizations [ 244.142694][ T8799] BTRFS info (device loop5): auto enabling async discard [ 244.166275][ T8799] BTRFS info (device loop5): checking UUID tree [pid 8825] <... ioctl resumed>) = 0 [pid 8799] close(4 [pid 8825] close(3 [pid 8799] <... close resumed>) = 0 [pid 8825] <... close resumed>) = 0 [pid 8799] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8825] mkdir("./file0", 0777 [pid 8799] <... futex resumed>) = 1 [pid 8797] <... futex resumed>) = 0 [pid 8825] <... mkdir resumed>) = 0 [pid 8820] <... ioctl resumed>) = 0 [pid 8799] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8825] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8820] close(4 [pid 8799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8797] <... futex resumed>) = 0 [pid 8820] <... close resumed>) = 0 [pid 8799] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8799] <... openat resumed>) = 4 [ 244.191104][ T8825] loop4: detected capacity change from 0 to 32768 [pid 8820] <... futex resumed>) = 1 [pid 8818] <... futex resumed>) = 0 [pid 8799] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8799] <... futex resumed>) = 1 [pid 8797] <... futex resumed>) = 0 [pid 8820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8818] <... futex resumed>) = 0 [pid 8799] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8797] <... futex resumed>) = 0 [pid 8820] <... openat resumed>) = 3 [pid 8799] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8825] <... mount resumed>) = -1 EEXIST (File exists) [pid 8820] <... futex resumed>) = 1 [pid 8818] <... futex resumed>) = 0 [pid 8825] ioctl(4, LOOP_CLR_FD [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8812] <... ioctl resumed>) = 0 [pid 8820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8818] <... futex resumed>) = 0 [pid 8820] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8820] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8818] <... futex resumed>) = 0 [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [ 244.242462][ T8825] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8825) [ 244.278245][ T8799] BTRFS info (device loop5): balance: start -s [pid 8812] close(4 [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8820] openat(AT_FDCWD, ".log", O_RDONLY [pid 8818] <... futex resumed>) = 0 [pid 8820] <... openat resumed>) = 4 [pid 8797] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8797] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] <... futex resumed>) = 0 [pid 8818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8797] <... futex resumed>) = 0 [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8818] <... futex resumed>) = 0 [pid 8812] <... close resumed>) = 0 [pid 8797] <... mmap resumed>) = 0x7ff2ac333000 [pid 8820] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8820] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8797] <... mprotect resumed>) = 0 [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [ 244.302018][ T8799] BTRFS info (device loop5): relocating block group 1048576 flags system [ 244.316452][ T27] audit: type=1804 audit(1680236927.792:667): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/111/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 8797] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8820] <... futex resumed>) = 1 [pid 8818] <... futex resumed>) = 0 [pid 8812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... futex resumed>) = 0 [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] exit_group(0 [pid 8812] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8797] <... clone resumed>, parent_tid=[8848], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8848 ./strace-static-x86_64: Process 8848 attached [pid 8820] <... futex resumed>) = ? [pid 8818] <... exit_group resumed>) = ? [pid 8820] +++ exited with 0 +++ [pid 8812] <... openat resumed>) = 3 [pid 8797] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8848] set_robust_list(0x7ff2ac3539e0, 24 [pid 8818] +++ exited with 0 +++ [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] <... futex resumed>) = 0 [pid 8848] <... set_robust_list resumed>) = 0 [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8797] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8818, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 8848] openat(AT_FDCWD, ".log", O_RDONLY [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8848] <... openat resumed>) = 5 [pid 8812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... futex resumed>) = 0 [pid 5081] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8848] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8812] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8848] <... futex resumed>) = 1 [pid 8812] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8797] <... futex resumed>) = 0 [pid 5081] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./111/binderfs" [pid 8848] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 8848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8797] <... futex resumed>) = 0 [pid 5081] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8848] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... futex resumed>) = 0 [pid 5081] lstat("./111/file0", [pid 8812] openat(AT_FDCWD, ".log", O_RDONLY [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8812] <... openat resumed>) = 4 [pid 5081] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 244.396704][ T27] audit: type=1804 audit(1680236927.872:668): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/111/file0/.log" dev="loop5" ino=263 res=1 errno=0 [ 244.427776][ T8799] BTRFS info (device loop5): balance: ended with status: 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8799] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8799] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4 [pid 8812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... futex resumed>) = 0 [pid 8799] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 8812] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8799] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] rmdir("./111/file0") = 0 [pid 5081] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./111/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./111/.log") = 0 [pid 8812] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] getdents64(3, [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 8848] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8797] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... close resumed>) = 0 [pid 8848] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] exit_group(0 [pid 8797] exit_group(0 [pid 5081] rmdir("./111" [pid 8848] <... futex resumed>) = ? [pid 8812] <... futex resumed>) = ? [pid 8807] <... exit_group resumed>) = ? [pid 8799] <... futex resumed>) = ? [pid 8797] <... exit_group resumed>) = ? [pid 5081] <... rmdir resumed>) = 0 [pid 8848] +++ exited with 0 +++ [pid 8812] +++ exited with 0 +++ [pid 5081] mkdir("./112", 0777 [pid 8807] +++ exited with 0 +++ [pid 8799] +++ exited with 0 +++ [pid 8797] +++ exited with 0 +++ [pid 5081] <... mkdir resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8797, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8807, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 5081] <... openat resumed>) = 3 [ 244.443377][ T8848] BTRFS info (device loop5): scrub: started on devid 1 [ 244.458847][ T8848] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5084] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8825] <... ioctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8825] close(4 [pid 5084] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... openat resumed>) = 3 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... openat resumed>) = 3 [pid 5084] fstat(3, [pid 5079] fstat(3, [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8849 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8825] <... close resumed>) = 0 [pid 5084] getdents64(3, [pid 5079] getdents64(3, [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5084] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8849 attached [pid 8825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8824] <... futex resumed>) = 0 [pid 5084] lstat("./111/binderfs", [pid 5079] lstat("./111/binderfs", [pid 8849] set_robust_list(0x5555559d56e0, 24 [pid 8825] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8849] <... set_robust_list resumed>) = 0 [pid 8825] <... openat resumed>) = 3 [pid 5084] unlink("./111/binderfs" [pid 5079] unlink("./111/binderfs" [pid 8849] chdir("./112" [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 8849] <... chdir resumed>) = 0 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5084] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8849] <... prctl resumed>) = 0 [pid 8825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8824] <... futex resumed>) = 0 [pid 5079] lstat("./111/file0", [pid 8849] setpgid(0, 0 [pid 8825] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8849] <... setpgid resumed>) = 0 [pid 8825] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8849] <... openat resumed>) = 3 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8849] write(3, "1000", 4 [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 4 [pid 8849] <... write resumed>) = 4 [pid 8825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8824] <... futex resumed>) = 0 [pid 5079] fstat(4, [pid 8849] close(3 [pid 8825] openat(AT_FDCWD, ".log", O_RDONLY [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8849] <... close resumed>) = 0 [pid 8825] <... openat resumed>) = 4 [pid 5079] getdents64(4, [pid 8849] symlink("/dev/binderfs", "./binderfs" [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8849] <... symlink resumed>) = 0 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 8849] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8849] <... futex resumed>) = 0 [pid 8829] <... write resumed>) = 16777216 [pid 8827] <... write resumed>) = 16777216 [pid 8825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8824] <... futex resumed>) = 0 [pid 5079] close(4 [pid 8849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8829] munmap(0x7ff2ab354000, 16777216 [pid 8827] munmap(0x7ff2ab354000, 16777216 [pid 8825] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 8849] <... mmap resumed>) = 0x7ff2b3754000 [pid 8829] <... munmap resumed>) = 0 [pid 8827] <... munmap resumed>) = 0 [pid 8825] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] rmdir("./111/file0" [pid 8849] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8829] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8827] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8849] <... mprotect resumed>) = 0 [pid 8829] <... openat resumed>) = 4 [pid 8827] <... openat resumed>) = 4 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 8849] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8829] ioctl(4, LOOP_SET_FD, 3 [pid 8827] ioctl(4, LOOP_SET_FD, 3 [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] exit_group(0 [pid 5079] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8827] <... ioctl resumed>) = 0 [pid 8825] <... futex resumed>) = ? [pid 8824] <... exit_group resumed>) = ? [pid 5084] <... umount2 resumed>) = 0 [pid 8849] <... clone resumed>, parent_tid=[8850], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8850 [pid 8825] +++ exited with 0 +++ [pid 8824] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8849] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8829] <... ioctl resumed>) = 0 [pid 8827] close(3 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8824, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=25 /* 0.25 s */} --- [pid 8849] <... futex resumed>) = 0 [pid 8849] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8829] close(3 [pid 8827] <... close resumed>) = 0 [pid 8829] <... close resumed>) = 0 [pid 8827] mkdir("./file0", 0777 [pid 8829] mkdir("./file0", 0777 [pid 8827] <... mkdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./111/.log", [pid 8829] <... mkdir resumed>) = 0 [pid 8827] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5084] lstat("./111/file0", [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8829] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./111/.log" [pid 5084] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8850 attached [pid 8850] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8850] memfd_create("syzkaller", 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] getdents64(3, [pid 8850] <... memfd_create resumed>) = 3 [pid 8850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5084] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... openat resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5083] fstat(3, [pid 5079] close(3 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] fstat(4, [pid 5079] <... close resumed>) = 0 [pid 5083] getdents64(3, [pid 5079] rmdir("./111" [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... rmdir resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, [pid 5083] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(4, [pid 5079] mkdir("./112", 0777 [pid 5083] lstat("./111/binderfs", [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] close(4 [pid 5079] <... mkdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./111/file0" [pid 5083] unlink("./111/binderfs") = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(3, [pid 5083] lstat("./111/file0", [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5084] close(3 [pid 5083] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 244.631118][ T8829] loop2: detected capacity change from 0 to 32768 [ 244.637990][ T8827] loop0: detected capacity change from 0 to 32768 [ 244.652864][ T8827] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor373 (8827) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] rmdir("./111" [pid 5083] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] close(3 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5079] <... close resumed>) = 0 [pid 5084] mkdir("./112", 0777 [pid 5083] fstat(4, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8851 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./111/file0") = 0 [pid 5083] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8851 attached [pid 8829] <... mount resumed>) = -1 EEXIST (File exists) [pid 5083] lstat("./111/.log", [pid 8851] set_robust_list(0x5555559d56e0, 24 [pid 8829] ioctl(4, LOOP_CLR_FD [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8851] <... set_robust_list resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] unlink("./111/.log" [pid 8851] chdir("./112" [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] getdents64(3, [pid 8851] <... chdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8852 [pid 5083] close(3 [pid 8851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] <... close resumed>) = 0 [pid 8851] <... prctl resumed>) = 0 [pid 5083] rmdir("./111"./strace-static-x86_64: Process 8852 attached [pid 8851] setpgid(0, 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./112", 0777 [pid 8852] set_robust_list(0x5555559d56e0, 24 [pid 8851] <... setpgid resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8852] <... set_robust_list resumed>) = 0 [pid 8851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 8852] chdir("./112" [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8852] <... chdir resumed>) = 0 [pid 8851] <... openat resumed>) = 3 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8853 [pid 8852] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8851] write(3, "1000", 4 [pid 8852] <... prctl resumed>) = 0 [pid 8851] <... write resumed>) = 4 [pid 8852] setpgid(0, 0 [pid 8851] close(3 [pid 8852] <... setpgid resumed>) = 0 [pid 8851] <... close resumed>) = 0 [pid 8852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8852] <... openat resumed>) = 3 [pid 8851] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] write(3, "1000", 4./strace-static-x86_64: Process 8853 attached [pid 8851] <... futex resumed>) = 0 [pid 8852] <... write resumed>) = 4 [pid 8853] set_robust_list(0x5555559d56e0, 24 [pid 8852] close(3 [pid 8851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8852] <... close resumed>) = 0 [pid 8853] <... set_robust_list resumed>) = 0 [pid 8852] symlink("/dev/binderfs", "./binderfs" [pid 8851] <... mmap resumed>) = 0x7ff2b3754000 [pid 8852] <... symlink resumed>) = 0 [pid 8853] chdir("./112" [pid 8852] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8851] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8853] <... chdir resumed>) = 0 [pid 8852] <... futex resumed>) = 0 [pid 8851] <... mprotect resumed>) = 0 [pid 8853] prctl(PR_SET_PDEATHSIG, SIGKILL [ 244.685897][ T8829] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8829) [ 244.713404][ T8827] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [pid 8851] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8853] <... prctl resumed>) = 0 [pid 8852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8853] setpgid(0, 0 [pid 8852] <... mmap resumed>) = 0x7ff2b3754000 [pid 8851] <... clone resumed>, parent_tid=[8854], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8854 [pid 8853] <... setpgid resumed>) = 0 [pid 8852] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8852] <... mprotect resumed>) = 0 [pid 8851] <... futex resumed>) = 0 [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8854 attached [pid 8854] set_robust_list(0x7ff2b37749e0, 24 [pid 8853] <... openat resumed>) = 3 [pid 8852] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8853] write(3, "1000", 4) = 4 [pid 8854] <... set_robust_list resumed>) = 0 [pid 8853] close(3 [pid 8852] <... clone resumed>, parent_tid=[8855], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8855 [pid 8854] memfd_create("syzkaller", 0 [pid 8853] <... close resumed>) = 0 [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... memfd_create resumed>) = 3 [pid 8854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8853] symlink("/dev/binderfs", "./binderfs" [pid 8852] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8855 attached [pid 8853] <... symlink resumed>) = 0 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8855] set_robust_list(0x7ff2b37749e0, 24 [pid 8853] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8855] <... set_robust_list resumed>) = 0 [pid 8855] memfd_create("syzkaller", 0 [pid 8853] <... futex resumed>) = 0 [pid 8855] <... memfd_create resumed>) = 3 [pid 8853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 244.775454][ T8827] BTRFS info (device loop0): setting nodatasum [pid 8855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8853] <... mmap resumed>) = 0x7ff2b3754000 [pid 8853] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8853] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8856], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8856 [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8856 attached [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8856] set_robust_list(0x7ff2b37749e0, 24) = 0 [ 244.816368][ T8827] BTRFS info (device loop0): allowing degraded mounts [pid 8856] memfd_create("syzkaller", 0) = 3 [pid 8856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8829] <... ioctl resumed>) = 0 [pid 8829] close(4) = 0 [ 244.866088][ T8827] BTRFS info (device loop0): use zlib compression, level 3 [ 244.889225][ T8827] BTRFS info (device loop0): using free space tree [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8828] <... futex resumed>) = 0 [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8829] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8828] <... futex resumed>) = 0 [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8829] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8828] <... futex resumed>) = 0 [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 8829] <... futex resumed>) = 0 [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8829] openat(AT_FDCWD, ".log", O_RDONLY [pid 8828] <... futex resumed>) = 0 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8829] <... openat resumed>) = 4 [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8828] <... futex resumed>) = 0 [pid 8829] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8829] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8829] <... futex resumed>) = 0 [pid 8828] exit_group(0) = ? [pid 8829] +++ exited with 0 +++ [pid 8828] +++ exited with 0 +++ [pid 8850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8828, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5080] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./111/binderfs") = 0 [pid 5080] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./111/file0") = 0 [pid 5080] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./111/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./111/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./111") = 0 [pid 5080] mkdir("./112", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8863 ./strace-static-x86_64: Process 8863 attached [pid 8863] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8863] chdir("./112") = 0 [pid 8863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8863] setpgid(0, 0) = 0 [pid 8863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8863] write(3, "1000", 4) = 4 [pid 8863] close(3) = 0 [pid 8863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8863] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8863] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8863] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8870 attached [pid 8870] set_robust_list(0x7ff2b37749e0, 24 [pid 8863] <... clone resumed>, parent_tid=[8870], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8870 [pid 8870] <... set_robust_list resumed>) = 0 [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] memfd_create("syzkaller", 0 [pid 8863] <... futex resumed>) = 0 [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8870] <... memfd_create resumed>) = 3 [pid 8870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 245.132885][ T8827] BTRFS info (device loop0): enabling ssd optimizations [ 245.147831][ T8827] BTRFS info (device loop0): auto enabling async discard [pid 8854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8827] <... mount resumed>) = 0 [pid 8827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8827] chdir("./file0") = 0 [pid 8827] ioctl(4, LOOP_CLR_FD) = 0 [pid 8827] close(4 [pid 8855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8827] <... close resumed>) = 0 [ 245.219646][ T8827] BTRFS info (device loop0): checking UUID tree [pid 8827] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8826] <... futex resumed>) = 0 [pid 8827] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8826] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8826] <... futex resumed>) = 0 [pid 8827] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8826] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8827] <... openat resumed>) = 4 [pid 8827] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8826] <... futex resumed>) = 0 [pid 8827] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8826] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8826] <... futex resumed>) = 0 [pid 8827] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8826] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8854] <... write resumed>) = 16777216 [pid 8854] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8854] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8826] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8854] <... openat resumed>) = 4 [pid 8826] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8826] <... mprotect resumed>) = 0 [pid 8826] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8877 attached [pid 8854] ioctl(4, LOOP_SET_FD, 3 [pid 8826] <... clone resumed>, parent_tid=[8877], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8877 [ 245.305641][ T8827] BTRFS info (device loop0): balance: start -s [ 245.313414][ T8827] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8826] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... ioctl resumed>) = 0 [pid 8826] <... futex resumed>) = 0 [pid 8826] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8877] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 8877] openat(AT_FDCWD, ".log", O_RDONLY [pid 8854] close(3 [pid 8877] <... openat resumed>) = 5 [pid 8854] <... close resumed>) = 0 [pid 8877] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8854] mkdir("./file0", 0777 [pid 8826] <... futex resumed>) = 0 [pid 8877] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8826] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... mkdir resumed>) = 0 [pid 8877] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8826] <... futex resumed>) = 0 [pid 8826] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8877] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8854] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 245.366646][ T8854] loop1: detected capacity change from 0 to 32768 [ 245.395403][ T8854] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8854) [pid 8854] ioctl(4, LOOP_CLR_FD [pid 8826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8877] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [ 245.463643][ T8877] BTRFS info (device loop0): scrub: started on devid 1 [ 245.464525][ T8827] BTRFS info (device loop0): balance: ended with status: 0 [ 245.482015][ T8877] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [pid 8877] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8877] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8827] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8827] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8827] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8826] exit_group(0) = ? [pid 8827] <... futex resumed>) = ? [pid 8877] <... futex resumed>) = ? [pid 8827] +++ exited with 0 +++ [pid 8877] +++ exited with 0 +++ [pid 8826] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8826, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5078] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./110/binderfs") = 0 [pid 5078] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8850] <... write resumed>) = 16777216 [pid 5078] <... umount2 resumed>) = 0 [pid 5078] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./110/file0") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./110") = 0 [pid 5078] mkdir("./111", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 8850] munmap(0x7ff2ab354000, 16777216 [pid 5078] <... ioctl resumed>) = 0 [pid 8850] <... munmap resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8878 [pid 8850] <... openat resumed>) = 4 [pid 8850] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8878 attached [pid 8878] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8878] chdir("./111") = 0 [pid 8850] <... ioctl resumed>) = 0 [pid 8878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8850] close(3 [pid 8878] <... prctl resumed>) = 0 [pid 8850] <... close resumed>) = 0 [pid 8878] setpgid(0, 0 [pid 8850] mkdir("./file0", 0777 [pid 8878] <... setpgid resumed>) = 0 [pid 8878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8850] <... mkdir resumed>) = 0 [pid 8878] <... openat resumed>) = 3 [pid 8878] write(3, "1000", 4 [pid 8850] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8878] <... write resumed>) = 4 [pid 8878] close(3) = 0 [pid 8878] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8878] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8878] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8878] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8879], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8879 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8855] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 8879 attached [pid 8854] <... ioctl resumed>) = 0 [pid 8879] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8879] memfd_create("syzkaller", 0) = 3 [ 245.746608][ T8850] loop3: detected capacity change from 0 to 32768 [ 245.768933][ T8850] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor373 (8850) [pid 8879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8855] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8855] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8855] ioctl(4, LOOP_SET_FD, 3 [pid 8854] close(4) = 0 [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8851] <... futex resumed>) = 0 [pid 8854] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8854] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8851] <... futex resumed>) = 0 [pid 8854] <... openat resumed>) = 3 [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8854] <... futex resumed>) = 0 [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8851] <... futex resumed>) = 0 [pid 8854] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8854] <... futex resumed>) = 0 [pid 8854] openat(AT_FDCWD, ".log", O_RDONLY [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... openat resumed>) = 4 [pid 8851] <... futex resumed>) = 0 [ 245.823292][ T8850] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 245.836982][ T8855] loop5: detected capacity change from 0 to 32768 [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8855] <... ioctl resumed>) = 0 [pid 8854] <... futex resumed>) = 0 [pid 8851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8855] close(3) = 0 [pid 8854] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8855] mkdir("./file0", 0777) = 0 [pid 8854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8851] <... futex resumed>) = 0 [pid 8855] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8854] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8854] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8851] <... futex resumed>) = 0 [pid 8854] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8851] exit_group(0 [pid 8854] <... futex resumed>) = ? [pid 8851] <... exit_group resumed>) = ? [pid 8854] +++ exited with 0 +++ [pid 8851] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8851, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=22 /* 0.22 s */} --- [pid 5079] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5079] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./112/binderfs") = 0 [pid 8855] <... mount resumed>) = -1 EEXIST (File exists) [pid 5079] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8856] <... write resumed>) = 16777216 [ 245.885529][ T8850] BTRFS info (device loop3): setting nodatasum [ 245.891733][ T8850] BTRFS info (device loop3): allowing degraded mounts [ 245.902982][ T8855] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8855) [pid 8855] ioctl(4, LOOP_CLR_FD [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./112/file0", [pid 8856] munmap(0x7ff2ab354000, 16777216 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8856] <... munmap resumed>) = 0 [pid 5079] fstat(4, [pid 8856] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8856] <... openat resumed>) = 4 [pid 5079] getdents64(4, [pid 8856] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./112/file0") = 0 [pid 5079] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./112/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./112/.log") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./112") = 0 [pid 5079] mkdir("./113", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8856] <... ioctl resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8880 [pid 8856] close(3) = 0 ./strace-static-x86_64: Process 8880 attached [pid 8856] mkdir("./file0", 0777 [pid 8880] set_robust_list(0x5555559d56e0, 24 [pid 8870] <... write resumed>) = 16777216 [pid 8856] <... mkdir resumed>) = 0 [ 245.941620][ T8850] BTRFS info (device loop3): use zlib compression, level 3 [ 245.955533][ T8856] loop4: detected capacity change from 0 to 32768 [ 245.972130][ T8850] BTRFS info (device loop3): using free space tree [pid 8856] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8880] <... set_robust_list resumed>) = 0 [pid 8870] munmap(0x7ff2ab354000, 16777216 [pid 8880] chdir("./113") = 0 [pid 8870] <... munmap resumed>) = 0 [pid 8880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8870] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8880] <... prctl resumed>) = 0 [pid 8870] <... openat resumed>) = 4 [pid 8880] setpgid(0, 0 [pid 8870] ioctl(4, LOOP_SET_FD, 3 [pid 8880] <... setpgid resumed>) = 0 [pid 8880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8870] <... ioctl resumed>) = 0 [pid 8880] write(3, "1000", 4 [pid 8870] close(3 [pid 8880] <... write resumed>) = 4 [pid 8870] <... close resumed>) = 0 [pid 8880] close(3 [pid 8870] mkdir("./file0", 0777 [pid 8880] <... close resumed>) = 0 [pid 8880] symlink("/dev/binderfs", "./binderfs" [pid 8856] <... mount resumed>) = -1 EEXIST (File exists) [pid 8880] <... symlink resumed>) = 0 [pid 8880] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] <... mkdir resumed>) = 0 [pid 8880] <... futex resumed>) = 0 [pid 8870] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8856] ioctl(4, LOOP_CLR_FD [pid 8880] <... mmap resumed>) = 0x7ff2b3754000 [ 246.015805][ T8856] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8856) [ 246.043936][ T8870] loop2: detected capacity change from 0 to 32768 [pid 8880] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8880] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8886], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8886 [pid 8880] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8880] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8886 attached [pid 8886] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8886] memfd_create("syzkaller", 0) = 3 [pid 8886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8870] <... mount resumed>) = -1 EEXIST (File exists) [pid 8886] <... mmap resumed>) = 0x7ff2ab354000 [ 246.065683][ T8870] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8870) [pid 8870] ioctl(4, LOOP_CLR_FD [pid 8879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8856] <... ioctl resumed>) = 0 [pid 8856] close(4) = 0 [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8853] <... futex resumed>) = 0 [pid 8856] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8856] <... openat resumed>) = 3 [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8853] <... futex resumed>) = 0 [pid 8856] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8856] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8853] <... futex resumed>) = 0 [pid 8856] openat(AT_FDCWD, ".log", O_RDONLY [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8856] <... openat resumed>) = 4 [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8853] <... futex resumed>) = 0 [pid 8856] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8856] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8855] <... ioctl resumed>) = 0 [pid 8853] exit_group(0 [pid 8856] <... futex resumed>) = ? [pid 8853] <... exit_group resumed>) = ? [pid 8856] +++ exited with 0 +++ [pid 8853] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8853, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=34 /* 0.34 s */} --- [pid 5083] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./112/binderfs") = 0 [pid 5083] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 246.261304][ T8850] BTRFS info (device loop3): enabling ssd optimizations [ 246.277465][ T8850] BTRFS info (device loop3): auto enabling async discard [pid 5083] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8855] close(4 [pid 5083] close(4 [pid 8886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8855] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] rmdir("./112/file0" [pid 8855] <... futex resumed>) = 1 [pid 8852] <... futex resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 8855] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8855] <... openat resumed>) = 3 [pid 8852] <... futex resumed>) = 0 [pid 5083] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8855] <... futex resumed>) = 0 [pid 8852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8855] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./112/.log", [pid 8855] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8852] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] unlink("./112/.log" [pid 8855] <... futex resumed>) = 0 [pid 8852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... unlink resumed>) = 0 [pid 8855] openat(AT_FDCWD, ".log", O_RDONLY [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 8855] <... openat resumed>) = 4 [pid 8852] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] close(3 [pid 8855] <... futex resumed>) = 0 [pid 8852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... close resumed>) = 0 [pid 8855] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] rmdir("./112" [pid 8855] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8852] <... futex resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] mkdir("./113", 0777 [pid 8855] <... futex resumed>) = 0 [pid 8852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... mkdir resumed>) = 0 [pid 8855] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8852] exit_group(0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8855] <... futex resumed>) = ? [pid 8852] <... exit_group resumed>) = ? [pid 5083] <... openat resumed>) = 3 [pid 8855] +++ exited with 0 +++ [pid 8852] +++ exited with 0 +++ [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8852, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 5083] close(3 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5083] <... close resumed>) = 0 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8899 [pid 5084] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8899 attached [pid 8850] <... mount resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] set_robust_list(0x5555559d56e0, 24 [pid 8850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 246.328107][ T8850] BTRFS info (device loop3): checking UUID tree [pid 5084] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8899] <... set_robust_list resumed>) = 0 [pid 8850] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 8899] chdir("./113" [pid 8850] chdir("./file0" [pid 5084] fstat(3, [pid 8850] <... chdir resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8850] ioctl(4, LOOP_CLR_FD [pid 5084] getdents64(3, [pid 8899] <... chdir resumed>) = 0 [pid 8850] <... ioctl resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8850] close(4 [pid 8899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8850] <... close resumed>) = 0 [pid 5084] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] setpgid(0, 0 [pid 8850] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] <... setpgid resumed>) = 0 [pid 8849] <... futex resumed>) = 0 [pid 8850] <... futex resumed>) = 1 [pid 8849] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./112/binderfs", [pid 8899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8850] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8849] <... futex resumed>) = 0 [pid 8849] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./112/binderfs" [pid 8899] <... openat resumed>) = 3 [pid 8850] <... openat resumed>) = 4 [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] write(3, "1000", 4 [pid 8850] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] <... write resumed>) = 4 [pid 8850] <... futex resumed>) = 1 [pid 8849] <... futex resumed>) = 0 [pid 8899] close(3 [pid 8850] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8849] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./112/file0", [pid 8899] <... close resumed>) = 0 [pid 8849] <... futex resumed>) = 0 [pid 8849] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... openat resumed>) = 4 [pid 8899] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] fstat(4, [pid 8899] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8899] <... mprotect resumed>) = 0 [pid 5084] getdents64(4, [pid 8899] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, [pid 8899] <... clone resumed>, parent_tid=[8900], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8900 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(4 [pid 8899] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 ./strace-static-x86_64: Process 8900 attached [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] rmdir("./112/file0" [pid 8900] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] <... rmdir resumed>) = 0 [pid 8900] <... set_robust_list resumed>) = 0 [pid 5084] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8900] memfd_create("syzkaller", 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8900] <... memfd_create resumed>) = 3 [pid 5084] lstat("./112/.log", [pid 8900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8900] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] unlink("./112/.log") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./112") = 0 [pid 5084] mkdir("./113", 0777) = 0 [pid 8849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8849] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8849] <... futex resumed>) = 0 [pid 8849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 5084] <... openat resumed>) = 3 [pid 8849] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 8849] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8849] <... clone resumed>, parent_tid=[8902], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8902 [pid 5084] close(3 [pid 8849] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8849] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8902 attached [pid 8902] set_robust_list(0x7ff2ac3539e0, 24) = 0 [ 246.424276][ T8850] BTRFS info (device loop3): balance: start -s [ 246.446173][ T8850] BTRFS info (device loop3): relocating block group 1048576 flags system [pid 8902] openat(AT_FDCWD, ".log", O_RDONLY [pid 5084] <... close resumed>) = 0 [pid 8902] <... openat resumed>) = 5 [pid 8902] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8849] <... futex resumed>) = 0 [pid 8849] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8849] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8902] <... futex resumed>) = 1 [pid 8902] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8903 ./strace-static-x86_64: Process 8903 attached [pid 8903] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8879] <... write resumed>) = 16777216 [pid 8903] chdir("./113") = 0 [pid 8903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8903] setpgid(0, 0) = 0 [pid 8903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8903] write(3, "1000", 4) = 4 [pid 8870] <... ioctl resumed>) = 0 [pid 8870] close(4 [pid 8903] close(3) = 0 [pid 8903] symlink("/dev/binderfs", "./binderfs" [pid 8870] <... close resumed>) = 0 [pid 8903] <... symlink resumed>) = 0 [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8863] <... futex resumed>) = 0 [pid 8849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8903] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] munmap(0x7ff2ab354000, 16777216 [pid 8870] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8903] <... futex resumed>) = 0 [pid 8870] <... openat resumed>) = 3 [pid 8863] <... futex resumed>) = 0 [pid 8903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8903] <... mmap resumed>) = 0x7ff2b3754000 [pid 8870] <... futex resumed>) = 0 [pid 8863] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8903] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8879] <... munmap resumed>) = 0 [pid 8870] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8903] <... mprotect resumed>) = 0 [pid 8879] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8863] <... futex resumed>) = 0 [pid 8903] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8879] <... openat resumed>) = 4 [pid 8870] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8870] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8863] <... futex resumed>) = 0 [pid 8870] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8863] <... futex resumed>) = 0 [pid 8870] openat(AT_FDCWD, ".log", O_RDONLY [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8870] <... openat resumed>) = 4 [ 246.558759][ T8902] BTRFS info (device loop3): scrub: started on devid 1 [ 246.559695][ T8850] BTRFS info (device loop3): balance: ended with status: 0 [ 246.586801][ T8902] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] ioctl(4, LOOP_SET_FD, 3 [pid 8870] <... futex resumed>) = 1 [pid 8863] <... futex resumed>) = 0 [pid 8870] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8863] <... futex resumed>) = 0 [pid 8870] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8870] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8863] <... futex resumed>) = 0 [pid 8870] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8863] exit_group(0 [pid 8870] <... futex resumed>) = ? [pid 8863] <... exit_group resumed>) = ? [pid 8870] +++ exited with 0 +++ [pid 8863] +++ exited with 0 +++ [pid 8903] <... clone resumed>, parent_tid=[8904], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8904 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8863, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=24 /* 0.24 s */} --- [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8903] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, [pid 8879] <... ioctl resumed>) = 0 [pid 8850] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8879] close(3 [pid 8850] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8879] <... close resumed>) = 0 [pid 8850] <... futex resumed>) = 0 [pid 5080] getdents64(3, ./strace-static-x86_64: Process 8904 attached [pid 8904] set_robust_list(0x7ff2b37749e0, 24 [pid 8879] mkdir("./file0", 0777 [pid 8850] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8904] <... set_robust_list resumed>) = 0 [pid 8902] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8879] <... mkdir resumed>) = 0 [pid 8904] memfd_create("syzkaller", 0 [pid 8902] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [ 246.604312][ T8879] loop0: detected capacity change from 0 to 32768 [pid 8879] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5080] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8904] <... memfd_create resumed>) = 3 [pid 8902] <... futex resumed>) = 0 [pid 8849] exit_group(0 [pid 8904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8849] <... exit_group resumed>) = ? [pid 8904] <... mmap resumed>) = 0x7ff2ab354000 [pid 8902] +++ exited with 0 +++ [pid 8850] <... futex resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8850] +++ exited with 0 +++ [pid 8849] +++ exited with 0 +++ [pid 5080] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8849, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=28 /* 0.28 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5080] unlink("./112/binderfs" [pid 5081] <... restart_syscall resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5080] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5080] lstat("./112/file0", [pid 5081] fstat(3, [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] getdents64(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5080] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] fstat(4, [pid 5081] lstat("./112/binderfs", [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] getdents64(4, [pid 5081] unlink("./112/binderfs" [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./112/file0") = 0 [pid 5080] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./112/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./112/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./112") = 0 [pid 5080] mkdir("./113", 0777 [pid 8879] <... mount resumed>) = -1 EEXIST (File exists) [pid 5080] <... mkdir resumed>) = 0 [pid 8879] ioctl(4, LOOP_CLR_FD [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 246.642730][ T8879] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8879) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8905 ./strace-static-x86_64: Process 8905 attached [pid 8905] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8905] chdir("./113") = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 8905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8905] setpgid(0, 0) = 0 [pid 5081] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8905] <... openat resumed>) = 3 [pid 5081] lstat("./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8905] write(3, "1000", 4 [pid 5081] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] <... write resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8905] close(3) = 0 [pid 5081] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8905] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... openat resumed>) = 4 [pid 8905] <... symlink resumed>) = 0 [pid 5081] fstat(4, [pid 8905] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8905] <... futex resumed>) = 0 [pid 8905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8905] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] getdents64(4, [pid 8905] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8905] <... mprotect resumed>) = 0 [pid 5081] close(4 [pid 8905] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./112/file0" [pid 8905] <... clone resumed>, parent_tid=[8906], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8906 [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 8905] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./112") = 0 ./strace-static-x86_64: Process 8906 attached [pid 5081] mkdir("./113", 0777 [pid 8906] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8906] <... set_robust_list resumed>) = 0 [pid 8906] memfd_create("syzkaller", 0 [pid 5081] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 8906] <... memfd_create resumed>) = 3 [pid 8906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... ioctl resumed>) = 0 [pid 8906] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8907 ./strace-static-x86_64: Process 8907 attached [pid 8907] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8907] chdir("./113") = 0 [pid 8907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8907] setpgid(0, 0) = 0 [pid 8907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8907] write(3, "1000", 4) = 4 [pid 8907] close(3) = 0 [pid 8907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8907] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8907] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8907] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8908], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8908 [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8907] <... futex resumed>) = 0 [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8908 attached [pid 8908] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8908] memfd_create("syzkaller", 0) = 3 [pid 8908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8886] <... write resumed>) = 16777216 [pid 8886] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8886] close(3) = 0 [pid 8886] mkdir("./file0", 0777) = 0 [ 246.957213][ T8886] loop1: detected capacity change from 0 to 32768 [pid 8886] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8879] <... ioctl resumed>) = 0 [pid 8879] close(4) = 0 [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8878] <... futex resumed>) = 0 [pid 8879] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8879] <... openat resumed>) = 3 [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8878] <... futex resumed>) = 0 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8878] <... futex resumed>) = 0 [pid 8879] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8878] <... futex resumed>) = 0 [pid 8879] <... futex resumed>) = 1 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] openat(AT_FDCWD, ".log", O_RDONLY [pid 8878] <... futex resumed>) = 0 [ 246.997770][ T8886] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (8886) [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8879] <... openat resumed>) = 4 [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8878] <... futex resumed>) = 0 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8878] <... futex resumed>) = 0 [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8879] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8878] <... futex resumed>) = 0 [ 247.059633][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 247.059646][ T27] audit: type=1804 audit(1680236930.532:678): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/111/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 8879] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8878] exit_group(0) = ? [pid 8879] <... futex resumed>) = ? [pid 8879] +++ exited with 0 +++ [pid 8878] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8878, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=28 /* 0.28 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./111/binderfs" [pid 8904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... unlink resumed>) = 0 [pid 5078] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./111/file0") = 0 [pid 5078] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./111/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./111/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./111") = 0 [ 247.102595][ T8886] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [pid 5078] mkdir("./112", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8909 ./strace-static-x86_64: Process 8909 attached [pid 8909] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8909] chdir("./112") = 0 [pid 8909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8909] setpgid(0, 0) = 0 [pid 8909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8909] write(3, "1000", 4) = 4 [pid 8909] close(3) = 0 [pid 8909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8909] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8909] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8909] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8910], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8910 [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8910 attached [pid 8910] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8910] memfd_create("syzkaller", 0) = 3 [pid 8910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 247.156216][ T8886] BTRFS info (device loop1): setting nodatasum [ 247.162425][ T8886] BTRFS info (device loop1): allowing degraded mounts [ 247.223620][ T8886] BTRFS info (device loop1): use zlib compression, level 3 [ 247.257914][ T8886] BTRFS info (device loop1): using free space tree [pid 8906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8900] <... write resumed>) = 16777216 [pid 8900] munmap(0x7ff2ab354000, 16777216 [pid 8908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8900] <... munmap resumed>) = 0 [pid 8900] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8900] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8900] close(3) = 0 [pid 8900] mkdir("./file0", 0777) = 0 [pid 8900] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8904] <... write resumed>) = 16777216 [pid 8904] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8904] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 247.378959][ T8900] loop4: detected capacity change from 0 to 32768 [ 247.416663][ T8900] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8900) [pid 8904] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8904] close(3) = 0 [pid 8904] mkdir("./file0", 0777) = 0 [ 247.451844][ T8904] loop5: detected capacity change from 0 to 32768 [pid 8904] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8904] <... mount resumed>) = -1 EEXIST (File exists) [pid 8900] <... mount resumed>) = -1 EEXIST (File exists) [pid 8904] ioctl(4, LOOP_CLR_FD [ 247.495482][ T8904] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8904) [ 247.525418][ T8886] BTRFS info (device loop1): enabling ssd optimizations [ 247.546151][ T8886] BTRFS info (device loop1): auto enabling async discard [pid 8900] ioctl(4, LOOP_CLR_FD [pid 8886] <... mount resumed>) = 0 [pid 8886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8886] chdir("./file0") = 0 [pid 8886] ioctl(4, LOOP_CLR_FD [pid 8908] <... write resumed>) = 16777216 [pid 8886] <... ioctl resumed>) = 0 [pid 8908] munmap(0x7ff2ab354000, 16777216 [pid 8886] close(4) = 0 [pid 8886] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8880] <... futex resumed>) = 0 [pid 8886] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8880] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8880] <... futex resumed>) = 0 [ 247.602610][ T8886] BTRFS info (device loop1): checking UUID tree [pid 8886] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8880] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8908] <... munmap resumed>) = 0 [pid 8886] <... openat resumed>) = 4 [pid 8908] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8886] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8908] <... openat resumed>) = 4 [pid 8886] <... futex resumed>) = 1 [pid 8880] <... futex resumed>) = 0 [pid 8908] ioctl(4, LOOP_SET_FD, 3 [pid 8886] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8880] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8880] <... futex resumed>) = 0 [pid 8886] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8880] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8908] <... ioctl resumed>) = 0 [pid 8908] close(3) = 0 [pid 8908] mkdir("./file0", 0777) = 0 [ 247.685567][ T8908] loop3: detected capacity change from 0 to 32768 [ 247.694508][ T8886] BTRFS info (device loop1): balance: start -s [ 247.717945][ T8908] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8908) [pid 8908] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 8908] ioctl(4, LOOP_CLR_FD [pid 8880] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8880] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8880] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8880] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8929], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8929 [pid 8880] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8880] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8929 attached [pid 8929] set_robust_list(0x7ff2ac3539e0, 24) = 0 [ 247.720423][ T8886] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 8929] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 8904] <... ioctl resumed>) = 0 [pid 8929] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8906] <... write resumed>) = 16777216 [pid 8904] close(4 [pid 8880] <... futex resumed>) = 0 [pid 8929] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8906] munmap(0x7ff2ab354000, 16777216 [pid 8904] <... close resumed>) = 0 [pid 8880] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8880] <... futex resumed>) = 0 [pid 8929] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8906] <... munmap resumed>) = 0 [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8880] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8904] <... futex resumed>) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8906] <... openat resumed>) = 4 [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8904] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8906] ioctl(4, LOOP_SET_FD, 3 [ 247.781630][ T27] audit: type=1804 audit(1680236931.252:679): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/113/file0/.log" dev="loop1" ino=263 res=1 errno=0 [pid 8904] <... openat resumed>) = 3 [pid 8906] <... ioctl resumed>) = 0 [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] close(3 [pid 8904] <... futex resumed>) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8906] <... close resumed>) = 0 [pid 8904] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] mkdir("./file0", 0777 [pid 8904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8903] <... futex resumed>) = 0 [pid 8904] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... mkdir resumed>) = 0 [pid 8904] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8906] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8904] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8904] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8903] <... futex resumed>) = 0 [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8880] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 247.836206][ T8906] loop2: detected capacity change from 0 to 32768 [ 247.853417][ T8906] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8906) [pid 8904] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8904] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8903] exit_group(0 [pid 8900] <... ioctl resumed>) = 0 [pid 8906] <... mount resumed>) = -1 EEXIST (File exists) [pid 8904] <... futex resumed>) = ? [pid 8903] <... exit_group resumed>) = ? [pid 8906] ioctl(4, LOOP_CLR_FD [pid 8904] +++ exited with 0 +++ [pid 8903] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8903, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=21 /* 0.21 s */} --- [ 247.869424][ T27] audit: type=1804 audit(1680236931.342:680): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/113/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 5084] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./113/binderfs") = 0 [pid 5084] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./113/file0", [pid 8900] close(4 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8900] <... close resumed>) = 0 [pid 5084] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 4 [pid 8900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8899] <... futex resumed>) = 0 [pid 5084] fstat(4, [pid 8900] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8900] <... openat resumed>) = 3 [pid 5084] getdents64(4, [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8899] <... futex resumed>) = 0 [pid 5084] close(4 [pid 8900] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [ 247.932671][ T8929] BTRFS info (device loop1): scrub: started on devid 1 [ 247.942812][ T8886] BTRFS info (device loop1): balance: ended with status: 0 [pid 8900] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] rmdir("./113/file0" [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8899] <... futex resumed>) = 0 [pid 5084] lstat("./113/.log", [pid 8900] openat(AT_FDCWD, ".log", O_RDONLY [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8900] <... openat resumed>) = 4 [pid 5084] unlink("./113/.log" [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8899] <... futex resumed>) = 0 [pid 5084] close(3 [pid 8900] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [pid 8900] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] rmdir("./113" [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] mkdir("./114", 0777 [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] exit_group(0 [pid 5084] <... mkdir resumed>) = 0 [pid 8900] <... futex resumed>) = ? [pid 8899] <... exit_group resumed>) = ? [pid 8886] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8900] +++ exited with 0 +++ [pid 8899] +++ exited with 0 +++ [pid 8886] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 8886] <... futex resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 8886] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8899, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=25 /* 0.25 s */} --- [pid 8908] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8930 [pid 5083] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8908] close(4 [pid 5083] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8908] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(3, ./strace-static-x86_64: Process 8930 attached [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8930] set_robust_list(0x5555559d56e0, 24 [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 8930] <... set_robust_list resumed>) = 0 [pid 8908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8907] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8930] chdir("./114" [pid 8908] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] <... chdir resumed>) = 0 [pid 8908] <... openat resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8930] setpgid(0, 0) = 0 [pid 8930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./113/binderfs", [pid 8930] <... openat resumed>) = 3 [pid 8930] write(3, "1000", 4) = 4 [pid 8930] close(3 [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8930] <... close resumed>) = 0 [ 247.988210][ T8929] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 247.998424][ T27] audit: type=1804 audit(1680236931.472:681): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/113/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 8929] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./113/binderfs" [pid 8930] symlink("/dev/binderfs", "./binderfs" [pid 8929] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8907] <... futex resumed>) = 0 [pid 8880] exit_group(0 [pid 8930] <... symlink resumed>) = 0 [pid 8886] <... futex resumed>) = ? [pid 8880] <... exit_group resumed>) = ? [pid 8930] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8886] +++ exited with 0 +++ [pid 8930] <... futex resumed>) = 0 [pid 8930] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8929] <... futex resumed>) = ? [pid 8908] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... unlink resumed>) = 0 [pid 8930] <... mmap resumed>) = 0x7ff2b3754000 [pid 8929] +++ exited with 0 +++ [pid 8908] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8880] +++ exited with 0 +++ [pid 5083] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8930] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8931], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8931 [pid 8930] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8880, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 8930] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] lstat("./113/file0", [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8931 attached [pid 8908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8907] <... futex resumed>) = 0 [pid 5083] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8931] set_robust_list(0x7ff2b37749e0, 24 [pid 8908] openat(AT_FDCWD, ".log", O_RDONLY [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8931] <... set_robust_list resumed>) = 0 [pid 8908] <... openat resumed>) = 4 [pid 5083] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8931] memfd_create("syzkaller", 0) = 3 [pid 8931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5083] <... openat resumed>) = 4 [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(4, [pid 5079] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 5079] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8907] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 3 [pid 5083] getdents64(4, [pid 8908] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] fstat(3, [pid 8908] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] close(4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./113/file0" [pid 5079] getdents64(3, [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... rmdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] exit_group(0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8908] <... futex resumed>) = ? [pid 8907] <... exit_group resumed>) = ? [pid 5083] lstat("./113/.log", [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8908] +++ exited with 0 +++ [pid 8907] +++ exited with 0 +++ [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./113/.log" [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8907, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=22 /* 0.22 s */} --- [pid 5079] lstat("./113/binderfs", [pid 8910] <... write resumed>) = 16777216 [pid 5083] <... unlink resumed>) = 0 [ 248.116834][ T27] audit: type=1804 audit(1680236931.592:682): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/113/.log" dev="sda1" ino=1158 res=1 errno=0 [pid 5083] getdents64(3, [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./113/binderfs" [pid 5083] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... unlink resumed>) = 0 [pid 5083] rmdir("./113" [pid 5081] <... openat resumed>) = 3 [pid 5079] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... rmdir resumed>) = 0 [pid 5081] fstat(3, [pid 5083] mkdir("./114", 0777 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./113/binderfs", [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] unlink("./113/binderfs" [pid 5083] <... openat resumed>) = 3 [pid 5081] <... unlink resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] close(3 [pid 5081] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] <... close resumed>) = 0 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./113/file0") = 0 [pid 5081] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8910] munmap(0x7ff2ab354000, 16777216 [pid 5081] lstat("./113/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./113/.log") = 0 [pid 8910] <... munmap resumed>) = 0 [pid 5081] getdents64(3, [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./113" [pid 8910] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... rmdir resumed>) = 0 [pid 8910] <... openat resumed>) = 4 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8932 [pid 5081] mkdir("./114", 0777 [pid 8910] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 ./strace-static-x86_64: Process 8932 attached [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8932] set_robust_list(0x5555559d56e0, 24) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8933 [pid 8932] chdir("./114") = 0 [pid 8932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8932] setpgid(0, 0) = 0 [pid 8932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8910] <... ioctl resumed>) = 0 [pid 8932] <... openat resumed>) = 3 [pid 8910] close(3 [pid 8932] write(3, "1000", 4 [pid 8910] <... close resumed>) = 0 ./strace-static-x86_64: Process 8933 attached [pid 8932] <... write resumed>) = 4 [pid 8910] mkdir("./file0", 0777 [pid 8933] set_robust_list(0x5555559d56e0, 24 [pid 8932] close(3 [pid 8910] <... mkdir resumed>) = 0 [pid 8933] <... set_robust_list resumed>) = 0 [pid 8932] <... close resumed>) = 0 [pid 8910] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8933] chdir("./114" [pid 8932] symlink("/dev/binderfs", "./binderfs" [pid 8933] <... chdir resumed>) = 0 [pid 8932] <... symlink resumed>) = 0 [pid 8933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8932] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8933] <... prctl resumed>) = 0 [pid 8932] <... futex resumed>) = 0 [pid 8933] setpgid(0, 0 [pid 8932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8933] <... setpgid resumed>) = 0 [pid 8932] <... mmap resumed>) = 0x7ff2b3754000 [pid 8933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8932] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8933] <... openat resumed>) = 3 [pid 8932] <... mprotect resumed>) = 0 [pid 8933] write(3, "1000", 4 [pid 8932] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8933] <... write resumed>) = 4 [pid 8933] close(3 [pid 8932] <... clone resumed>, parent_tid=[8934], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8934 [pid 8933] <... close resumed>) = 0 [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8933] symlink("/dev/binderfs", "./binderfs" [pid 8932] <... futex resumed>) = 0 [pid 8933] <... symlink resumed>) = 0 [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8933] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 ./strace-static-x86_64: Process 8934 attached [pid 8933] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8934] set_robust_list(0x7ff2b37749e0, 24 [pid 8933] <... mprotect resumed>) = 0 [pid 8934] <... set_robust_list resumed>) = 0 [pid 8933] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8934] memfd_create("syzkaller", 0) = 3 [pid 8933] <... clone resumed>, parent_tid=[8935], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8935 [pid 8934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8934] <... mmap resumed>) = 0x7ff2ab354000 [pid 8933] <... futex resumed>) = 0 [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8935 attached [pid 8935] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8935] memfd_create("syzkaller", 0) = 3 [pid 8935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8910] <... mount resumed>) = -1 EEXIST (File exists) [ 248.216928][ T8910] loop0: detected capacity change from 0 to 32768 [ 248.242834][ T8910] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8910) [pid 8910] ioctl(4, LOOP_CLR_FD [pid 8906] <... ioctl resumed>) = 0 [pid 8906] close(4) = 0 [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8905] <... futex resumed>) = 0 [pid 8906] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... openat resumed>) = 3 [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8905] <... futex resumed>) = 0 [pid 8906] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8905] <... futex resumed>) = 0 [pid 8906] openat(AT_FDCWD, ".log", O_RDONLY [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... openat resumed>) = 4 [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8905] <... futex resumed>) = 0 [pid 8906] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] exit_group(0 [pid 8906] <... futex resumed>) = ? [pid 8905] <... exit_group resumed>) = ? [pid 8906] +++ exited with 0 +++ [pid 8905] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8905, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5080] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 248.406725][ T27] audit: type=1804 audit(1680236931.882:683): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/113/.log" dev="sda1" ino=1156 res=1 errno=0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./113/binderfs") = 0 [pid 5080] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./113/file0") = 0 [pid 5080] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./113/.log", [pid 8931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./113/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./113") = 0 [pid 5080] mkdir("./114", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8936 ./strace-static-x86_64: Process 8936 attached [pid 8936] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8936] chdir("./114") = 0 [pid 8936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8936] setpgid(0, 0) = 0 [pid 8936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8936] write(3, "1000", 4) = 4 [pid 8936] close(3) = 0 [pid 8936] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8936] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8936] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8936] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8937], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8937 [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8937 attached [pid 8937] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8937] memfd_create("syzkaller", 0) = 3 [pid 8937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8910] <... ioctl resumed>) = 0 [pid 5079] close(4 [pid 8910] close(4 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./113/file0" [pid 8910] <... close resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 8910] <... futex resumed>) = 1 [pid 8909] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 8910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8909] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 8910] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] rmdir("./113" [pid 8910] <... openat resumed>) = 3 [pid 5079] <... rmdir resumed>) = 0 [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] mkdir("./114", 0777 [pid 8910] <... futex resumed>) = 1 [pid 8909] <... futex resumed>) = 0 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... mkdir resumed>) = 0 [pid 8910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8909] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8910] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 3 [pid 8910] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8910] <... futex resumed>) = 1 [pid 8909] <... futex resumed>) = 0 [pid 5079] close(3 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8909] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 8910] openat(AT_FDCWD, ".log", O_RDONLY [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8910] <... openat resumed>) = 4 [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8909] <... futex resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8938 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8909] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8938 attached [pid 8910] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8938] set_robust_list(0x5555559d56e0, 24 [pid 8910] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8938] <... set_robust_list resumed>) = 0 [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8938] chdir("./114" [pid 8910] <... futex resumed>) = 1 [pid 8909] <... futex resumed>) = 0 [pid 8938] <... chdir resumed>) = 0 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] exit_group(0 [pid 8938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8910] <... futex resumed>) = ? [pid 8909] <... exit_group resumed>) = ? [pid 8938] <... prctl resumed>) = 0 [pid 8910] +++ exited with 0 +++ [pid 8938] setpgid(0, 0 [pid 8909] +++ exited with 0 +++ [pid 8938] <... setpgid resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8909, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 8938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 8938] <... openat resumed>) = 3 [pid 5078] <... restart_syscall resumed>) = 0 [pid 8938] write(3, "1000", 4) = 4 [pid 8938] close(3 [pid 5078] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8938] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8938] symlink("/dev/binderfs", "./binderfs" [pid 5078] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8938] <... symlink resumed>) = 0 [ 248.667118][ T27] audit: type=1804 audit(1680236932.142:684): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/112/.log" dev="sda1" ino=1153 res=1 errno=0 [pid 5078] <... openat resumed>) = 3 [pid 8938] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] fstat(3, [pid 8938] <... futex resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] getdents64(3, [pid 8938] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8938] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5078] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8938] <... mprotect resumed>) = 0 [pid 8935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8938] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8938] <... clone resumed>, parent_tid=[8939], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8939 [pid 5078] unlink("./112/binderfs" [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8939 attached [pid 8938] <... futex resumed>) = 0 [pid 5078] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8939] set_robust_list(0x7ff2b37749e0, 24 [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8939] <... set_robust_list resumed>) = 0 [pid 5078] lstat("./112/file0", [pid 8939] memfd_create("syzkaller", 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8939] <... memfd_create resumed>) = 3 [pid 5078] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8939] <... mmap resumed>) = 0x7ff2ab354000 [pid 5078] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./112/file0") = 0 [pid 5078] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./112/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./112/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./112") = 0 [pid 5078] mkdir("./113", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8940 ./strace-static-x86_64: Process 8940 attached [pid 8940] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8940] chdir("./113") = 0 [pid 8940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8940] setpgid(0, 0) = 0 [pid 8940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8940] write(3, "1000", 4) = 4 [pid 8940] close(3) = 0 [pid 8940] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8940] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8940] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8940] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8941], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8941 [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8941 attached [pid 8941] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8931] <... write resumed>) = 16777216 [pid 8941] memfd_create("syzkaller", 0) = 3 [pid 8931] munmap(0x7ff2ab354000, 16777216 [pid 8941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8931] <... munmap resumed>) = 0 [pid 8941] <... mmap resumed>) = 0x7ff2ab354000 [pid 8931] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8931] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8931] close(3) = 0 [pid 8931] mkdir("./file0", 0777) = 0 [ 248.906577][ T8931] loop5: detected capacity change from 0 to 32768 [ 248.936488][ T8931] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (8931) [ 248.995689][ T8931] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 249.004949][ T8931] BTRFS info (device loop5): setting nodatasum [pid 8931] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 249.050047][ T8931] BTRFS info (device loop5): allowing degraded mounts [ 249.086153][ T8931] BTRFS info (device loop5): use zlib compression, level 3 [ 249.109000][ T8931] BTRFS info (device loop5): using free space tree [pid 8939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8935] <... write resumed>) = 16777216 [pid 8935] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8935] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8935] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8935] close(3) = 0 [pid 8935] mkdir("./file0", 0777) = 0 [pid 8935] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 8935] ioctl(4, LOOP_CLR_FD [pid 8937] <... write resumed>) = 16777216 [pid 8937] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8937] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 249.191647][ T8935] loop3: detected capacity change from 0 to 32768 [ 249.209924][ T8935] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8935) [pid 8937] ioctl(4, LOOP_SET_FD, 3 [pid 8941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8937] <... ioctl resumed>) = 0 [pid 8937] close(3) = 0 [pid 8937] mkdir("./file0", 0777) = 0 [pid 8934] <... write resumed>) = 16777216 [pid 8937] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8934] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8934] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8934] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8934] close(3) = 0 [pid 8934] mkdir("./file0", 0777) = 0 [ 249.254670][ T8937] loop2: detected capacity change from 0 to 32768 [ 249.278930][ T8937] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8937) [ 249.297930][ T8934] loop4: detected capacity change from 0 to 32768 [pid 8934] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8937] <... mount resumed>) = -1 EEXIST (File exists) [pid 8937] ioctl(4, LOOP_CLR_FD [pid 8934] <... mount resumed>) = -1 EEXIST (File exists) [ 249.324811][ T8934] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8934) [pid 8934] ioctl(4, LOOP_CLR_FD [pid 8935] <... ioctl resumed>) = 0 [pid 8935] close(4) = 0 [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8933] <... futex resumed>) = 0 [pid 8935] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] <... openat resumed>) = 3 [pid 8933] <... futex resumed>) = 0 [ 249.394097][ T8931] BTRFS info (device loop5): enabling ssd optimizations [ 249.403490][ T8931] BTRFS info (device loop5): auto enabling async discard [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8935] <... futex resumed>) = 0 [pid 8933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8935] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8933] <... futex resumed>) = 0 [pid 8935] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8935] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8933] <... futex resumed>) = 0 [pid 8935] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8933] <... futex resumed>) = 0 [pid 8935] openat(AT_FDCWD, ".log", O_RDONLY [ 249.446432][ T8931] BTRFS info (device loop5): checking UUID tree [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8937] <... ioctl resumed>) = 0 [pid 8935] <... openat resumed>) = 4 [pid 8931] <... mount resumed>) = 0 [pid 8937] close(4 [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8937] <... close resumed>) = 0 [pid 8935] <... futex resumed>) = 1 [pid 8931] <... openat resumed>) = 3 [pid 8933] <... futex resumed>) = 0 [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8933] <... futex resumed>) = 0 [pid 8937] <... futex resumed>) = 1 [pid 8936] <... futex resumed>) = 0 [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8937] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] <... openat resumed>) = 3 [pid 8936] <... futex resumed>) = 0 [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8937] <... futex resumed>) = 0 [pid 8936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8937] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8936] <... futex resumed>) = 0 [pid 8935] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8931] chdir("./file0" [pid 8935] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8931] <... chdir resumed>) = 0 [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8931] ioctl(4, LOOP_CLR_FD [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8935] <... futex resumed>) = 1 [pid 8933] <... futex resumed>) = 0 [pid 8931] <... ioctl resumed>) = 0 [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8933] exit_group(0 [pid 8931] close(4 [pid 8937] <... futex resumed>) = 1 [pid 8936] <... futex resumed>) = 0 [pid 8935] <... futex resumed>) = ? [pid 8933] <... exit_group resumed>) = ? [pid 8931] <... close resumed>) = 0 [pid 8937] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] +++ exited with 0 +++ [pid 8933] +++ exited with 0 +++ [pid 8931] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8936] <... futex resumed>) = 0 [pid 8931] <... futex resumed>) = 1 [pid 8930] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8933, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=29 /* 0.29 s */} --- [pid 8937] openat(AT_FDCWD, ".log", O_RDONLY [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8931] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8930] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] <... openat resumed>) = 4 [pid 8931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8930] <... futex resumed>) = 0 [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8931] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8930] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8937] <... futex resumed>) = 1 [ 249.477355][ T27] audit: type=1804 audit(1680236932.952:685): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/114/.log" dev="sda1" ino=1159 res=1 errno=0 [pid 8936] <... futex resumed>) = 0 [pid 8937] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8931] <... openat resumed>) = 4 [pid 8937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8936] <... futex resumed>) = 0 [pid 8931] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8931] <... futex resumed>) = 1 [pid 8930] <... futex resumed>) = 0 [pid 8937] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8931] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8930] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8936] <... futex resumed>) = 0 [pid 8937] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8936] exit_group(0 [pid 8937] <... futex resumed>) = ? [pid 8936] <... exit_group resumed>) = ? [pid 8931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8930] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8937] +++ exited with 0 +++ [pid 8936] +++ exited with 0 +++ [pid 8931] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8930] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8936, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=23 /* 0.23 s */} --- [pid 5081] fstat(3, [pid 5080] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5080] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... openat resumed>) = 3 [pid 5081] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] lstat("./114/binderfs", [pid 5080] getdents64(3, [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] unlink("./114/binderfs" [pid 5080] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./114/binderfs", [pid 5081] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] unlink("./114/binderfs" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... unlink resumed>) = 0 [pid 8930] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8930] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 5080] lstat("./114/file0", [pid 8930] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8930] <... mmap resumed>) = 0x7ff2ac333000 [pid 5081] getdents64(4, [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8930] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] <... mprotect resumed>) = 0 [pid 5081] getdents64(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8930] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] close(4 [pid 5080] <... openat resumed>) = 4 [pid 8930] <... clone resumed>, parent_tid=[8960], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8960 [pid 5081] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 8930] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./114/file0" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8930] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 8930] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8960 attached [pid 5081] lstat("./114/.log", [pid 5080] getdents64(4, [pid 8960] set_robust_list(0x7ff2ac3539e0, 24 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8960] <... set_robust_list resumed>) = 0 [pid 5081] unlink("./114/.log" [pid 5080] close(4 [pid 8960] openat(AT_FDCWD, ".log", O_RDONLY [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 8960] <... openat resumed>) = 5 [pid 5081] getdents64(3, [ 249.562568][ T8931] BTRFS info (device loop5): balance: start -s [ 249.566167][ T27] audit: type=1804 audit(1680236933.002:686): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/114/.log" dev="sda1" ino=1161 res=1 errno=0 [ 249.594871][ T8931] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 5080] rmdir("./114/file0" [pid 8960] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8960] <... futex resumed>) = 1 [pid 8930] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 8960] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8930] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5080] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] <... futex resumed>) = 0 [pid 5081] rmdir("./114" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8930] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... rmdir resumed>) = 0 [pid 5080] lstat("./114/.log", [pid 5081] mkdir("./115", 0777 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] unlink("./114/.log" [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... unlink resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] getdents64(3, [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5081] close(3 [pid 5080] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] rmdir("./114" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./115", 0777 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8961 [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 8939] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 8961 attached [pid 8961] set_robust_list(0x5555559d56e0, 24 [pid 5080] <... close resumed>) = 0 [pid 8961] <... set_robust_list resumed>) = 0 [pid 8961] chdir("./115" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8961] <... chdir resumed>) = 0 [pid 8930] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8961] setpgid(0, 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8962 [pid 8961] <... setpgid resumed>) = 0 [pid 8961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8961] write(3, "1000", 4) = 4 [pid 8961] close(3) = 0 [pid 8961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8961] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 249.687210][ T8960] BTRFS info (device loop5): scrub: started on devid 1 [ 249.702701][ T8931] BTRFS info (device loop5): balance: ended with status: 0 [ 249.703070][ T27] audit: type=1804 audit(1680236933.112:687): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/114/file0/.log" dev="loop5" ino=263 res=1 errno=0 [pid 8939] munmap(0x7ff2ab354000, 16777216 [pid 8961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8939] <... munmap resumed>) = 0 [pid 8961] <... mmap resumed>) = 0x7ff2b3754000 [pid 8961] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8961] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8962 attached [pid 8962] set_robust_list(0x5555559d56e0, 24 [pid 8961] <... clone resumed>, parent_tid=[8963], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8963 [pid 8939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8962] <... set_robust_list resumed>) = 0 [pid 8961] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... openat resumed>) = 4 [pid 8962] chdir("./115" [pid 8961] <... futex resumed>) = 0 [pid 8939] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8963 attached [pid 8962] <... chdir resumed>) = 0 [pid 8961] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8941] <... write resumed>) = 16777216 [pid 8963] set_robust_list(0x7ff2b37749e0, 24 [pid 8962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8941] munmap(0x7ff2ab354000, 16777216 [pid 8963] <... set_robust_list resumed>) = 0 [pid 8963] memfd_create("syzkaller", 0) = 3 [pid 8962] <... prctl resumed>) = 0 [pid 8963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8962] setpgid(0, 0 [pid 8963] <... mmap resumed>) = 0x7ff2ab354000 [pid 8962] <... setpgid resumed>) = 0 [pid 8960] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8934] <... ioctl resumed>) = 0 [pid 8962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8960] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8941] <... munmap resumed>) = 0 [pid 8931] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8962] <... openat resumed>) = 3 [pid 8960] <... futex resumed>) = 0 [pid 8941] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8931] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8962] write(3, "1000", 4 [pid 8960] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8941] <... openat resumed>) = 4 [pid 8931] <... futex resumed>) = 0 [pid 8930] exit_group(0 [pid 8962] <... write resumed>) = 4 [pid 8960] <... futex resumed>) = ? [pid 8941] ioctl(4, LOOP_SET_FD, 3 [pid 8930] <... exit_group resumed>) = ? [ 249.734098][ T8960] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [ 249.752932][ T8939] loop1: detected capacity change from 0 to 32768 [pid 8962] close(3 [pid 8960] +++ exited with 0 +++ [pid 8939] <... ioctl resumed>) = 0 [pid 8939] close(3) = 0 [pid 8939] mkdir("./file0", 0777) = 0 [pid 8939] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8934] close(4 [pid 8931] +++ exited with 0 +++ [pid 8934] <... close resumed>) = 0 [pid 8930] +++ exited with 0 +++ [pid 8962] <... close resumed>) = 0 [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8930, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 8962] symlink("/dev/binderfs", "./binderfs" [pid 8934] <... futex resumed>) = 1 [pid 8932] <... futex resumed>) = 0 [pid 8962] <... symlink resumed>) = 0 [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8962] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8932] <... futex resumed>) = 0 [pid 8941] <... ioctl resumed>) = 0 [pid 8962] <... futex resumed>) = 0 [pid 8941] close(3 [pid 8934] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8941] <... close resumed>) = 0 [pid 8934] <... openat resumed>) = 3 [pid 8962] <... mmap resumed>) = 0x7ff2b3754000 [pid 8941] mkdir("./file0", 0777 [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8962] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8934] <... futex resumed>) = 1 [pid 8932] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8962] <... mprotect resumed>) = 0 [pid 8941] <... mkdir resumed>) = 0 [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8962] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8941] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8932] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 8934] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] fstat(3, [pid 8962] <... clone resumed>, parent_tid=[8964], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8964 [pid 8934] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, ./strace-static-x86_64: Process 8964 attached [pid 8962] <... futex resumed>) = 0 [pid 8934] <... futex resumed>) = 1 [pid 8932] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 8964] set_robust_list(0x7ff2b37749e0, 24 [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8964] <... set_robust_list resumed>) = 0 [pid 8934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8932] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8964] memfd_create("syzkaller", 0 [pid 8934] openat(AT_FDCWD, ".log", O_RDONLY [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] lstat("./114/binderfs", [pid 8964] <... memfd_create resumed>) = 3 [pid 8934] <... openat resumed>) = 4 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./114/binderfs" [pid 8964] <... mmap resumed>) = 0x7ff2ab354000 [pid 8934] <... futex resumed>) = 1 [pid 8932] <... futex resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [ 249.790577][ T8941] loop0: detected capacity change from 0 to 32768 [ 249.799332][ T8939] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8939) [pid 5084] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... mount resumed>) = -1 EEXIST (File exists) [pid 8939] ioctl(4, LOOP_CLR_FD [pid 8934] <... futex resumed>) = 0 [pid 8932] <... futex resumed>) = 1 [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8934] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8932] <... futex resumed>) = 0 [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8932] exit_group(0) = ? [pid 8934] <... futex resumed>) = ? [pid 8934] +++ exited with 0 +++ [pid 8932] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8932, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5083] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8941] <... mount resumed>) = -1 EEXIST (File exists) [pid 5083] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8941] ioctl(4, LOOP_CLR_FD [pid 5083] <... openat resumed>) = 3 [ 249.852999][ T8941] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8941) [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./114/binderfs") = 0 [pid 5083] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./114/file0") = 0 [pid 5083] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./114/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./114/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./114") = 0 [pid 5083] mkdir("./115", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8965 ./strace-static-x86_64: Process 8965 attached [pid 8965] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8965] chdir("./115") = 0 [pid 8965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8965] setpgid(0, 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8965] <... setpgid resumed>) = 0 [pid 5084] lstat("./114/file0", [pid 8965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8965] <... openat resumed>) = 3 [pid 5084] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8965] write(3, "1000", 4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8965] <... write resumed>) = 4 [pid 5084] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8965] close(3 [pid 5084] <... openat resumed>) = 4 [pid 8965] <... close resumed>) = 0 [pid 5084] fstat(4, [pid 8965] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8965] <... symlink resumed>) = 0 [pid 5084] getdents64(4, [pid 8965] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8965] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 8965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8965] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] close(4 [pid 8965] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... close resumed>) = 0 [pid 8965] <... mprotect resumed>) = 0 [pid 5084] rmdir("./114/file0" [pid 8965] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... rmdir resumed>) = 0 [pid 5084] getdents64(3, [pid 8965] <... clone resumed>, parent_tid=[8966], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8966 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 8965] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] rmdir("./114"./strace-static-x86_64: Process 8966 attached [pid 8966] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] <... rmdir resumed>) = 0 [pid 8966] <... set_robust_list resumed>) = 0 [pid 5084] mkdir("./115", 0777 [pid 8966] memfd_create("syzkaller", 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8966] <... memfd_create resumed>) = 3 [pid 8966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... openat resumed>) = 3 [pid 8966] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] ioctl(3, LOOP_CLR_FD) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8967 ./strace-static-x86_64: Process 8967 attached [pid 8967] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8967] chdir("./115") = 0 [pid 8967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8967] setpgid(0, 0) = 0 [pid 8967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8967] write(3, "1000", 4) = 4 [pid 8967] close(3) = 0 [pid 8967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8967] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8967] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8967] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8968], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8968 [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8968 attached [pid 8968] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8968] memfd_create("syzkaller", 0) = 3 [pid 8968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8939] <... ioctl resumed>) = 0 [pid 8939] close(4) = 0 [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8941] <... ioctl resumed>) = 0 [pid 8939] <... futex resumed>) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8938] <... futex resumed>) = 0 [pid 8941] close(4 [pid 8939] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8939] <... openat resumed>) = 3 [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8938] <... futex resumed>) = 0 [pid 8963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8939] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8939] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8938] <... futex resumed>) = 0 [pid 8939] openat(AT_FDCWD, ".log", O_RDONLY [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8939] <... openat resumed>) = 4 [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8938] <... futex resumed>) = 0 [pid 8939] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8939] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] exit_group(0 [pid 8939] <... futex resumed>) = ? [pid 8938] <... exit_group resumed>) = ? [pid 8939] +++ exited with 0 +++ [pid 8938] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8938, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5079] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./114/binderfs") = 0 [pid 5079] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8941] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8941] <... futex resumed>) = 1 [pid 8940] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 8941] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8941] <... openat resumed>) = 3 [pid 8940] <... futex resumed>) = 0 [pid 5079] close(4 [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 8941] <... futex resumed>) = 0 [pid 8940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] rmdir("./114/file0" [pid 8941] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... rmdir resumed>) = 0 [pid 8941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8940] <... futex resumed>) = 0 [pid 5079] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8941] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./114/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8941] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] unlink("./114/.log" [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... unlink resumed>) = 0 [pid 8941] <... futex resumed>) = 1 [pid 8940] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 8941] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8940] <... futex resumed>) = 0 [pid 5079] close(3 [pid 8941] openat(AT_FDCWD, ".log", O_RDONLY [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./114" [pid 8941] <... openat resumed>) = 4 [pid 5079] <... rmdir resumed>) = 0 [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] mkdir("./115", 0777 [pid 8941] <... futex resumed>) = 1 [pid 8940] <... futex resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 8941] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8940] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 8941] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] ioctl(3, LOOP_CLR_FD [pid 8941] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 8941] <... futex resumed>) = 1 [pid 8940] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 8941] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8940] exit_group(0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8941] <... futex resumed>) = ? [pid 8940] <... exit_group resumed>) = ? [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8969 [pid 8941] +++ exited with 0 +++ [pid 8940] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8940, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- ./strace-static-x86_64: Process 8969 attached [pid 8969] set_robust_list(0x5555559d56e0, 24) = 0 [pid 5078] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8969] chdir("./115") = 0 [pid 8969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8969] setpgid(0, 0) = 0 [pid 8969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8969] write(3, "1000", 4 [pid 5078] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8969] <... write resumed>) = 4 [pid 8969] close(3) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 8969] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8969] <... symlink resumed>) = 0 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, [pid 8969] <... futex resumed>) = 0 [pid 8969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8969] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8969] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8969] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] lstat("./113/binderfs", [pid 8969] <... clone resumed>, parent_tid=[8970], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8970 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./113/binderfs" [pid 8969] <... futex resumed>) = 0 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... unlink resumed>) = 0 [pid 5078] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8970 attached [pid 8970] set_robust_list(0x7ff2b37749e0, 24 [pid 5078] <... openat resumed>) = 4 [pid 8970] <... set_robust_list resumed>) = 0 [pid 5078] fstat(4, [pid 8970] memfd_create("syzkaller", 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8970] <... memfd_create resumed>) = 3 [pid 5078] getdents64(4, [pid 8970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./113/file0") = 0 [pid 5078] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./113/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./113/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] close(3) = 0 [pid 5078] rmdir("./113") = 0 [pid 5078] mkdir("./114", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8971 ./strace-static-x86_64: Process 8971 attached [pid 8971] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8971] chdir("./114") = 0 [pid 8971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8971] setpgid(0, 0) = 0 [pid 8971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8971] write(3, "1000", 4) = 4 [pid 8971] close(3) = 0 [pid 8971] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8971] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8971] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8972], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8972 [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8972 attached [pid 8972] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8972] memfd_create("syzkaller", 0) = 3 [pid 8972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8972] <... mmap resumed>) = 0x7ff2ab354000 [pid 8963] <... write resumed>) = 16777216 [pid 8963] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8963] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8963] ioctl(4, LOOP_SET_FD, 3 [pid 8970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8964] <... write resumed>) = 16777216 [pid 8963] <... ioctl resumed>) = 0 [pid 8964] munmap(0x7ff2ab354000, 16777216 [pid 8963] close(3 [pid 8964] <... munmap resumed>) = 0 [pid 8963] <... close resumed>) = 0 [pid 8963] mkdir("./file0", 0777 [pid 8964] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8963] <... mkdir resumed>) = 0 [pid 8964] <... openat resumed>) = 4 [pid 8963] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 250.762060][ T8963] loop3: detected capacity change from 0 to 32768 [pid 8964] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8964] close(3) = 0 [pid 8964] mkdir("./file0", 0777) = 0 [ 250.811814][ T8963] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor373 (8963) [ 250.824767][ T8964] loop2: detected capacity change from 0 to 32768 [pid 8964] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8964] <... mount resumed>) = -1 EEXIST (File exists) [pid 8964] ioctl(4, LOOP_CLR_FD [pid 8968] <... write resumed>) = 16777216 [pid 8966] <... write resumed>) = 16777216 [ 250.860922][ T8964] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8964) [ 250.883948][ T8963] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [pid 8968] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8966] munmap(0x7ff2ab354000, 16777216 [pid 8968] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8968] ioctl(4, LOOP_SET_FD, 3 [pid 8966] <... munmap resumed>) = 0 [pid 8966] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8968] <... ioctl resumed>) = 0 [pid 8968] close(3) = 0 [pid 8968] mkdir("./file0", 0777 [pid 8966] <... openat resumed>) = 4 [pid 8968] <... mkdir resumed>) = 0 [pid 8968] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 250.932065][ T8963] BTRFS info (device loop3): setting nodatasum [ 250.940652][ T8968] loop5: detected capacity change from 0 to 32768 [ 250.947812][ T8963] BTRFS info (device loop3): allowing degraded mounts [ 250.965164][ T8968] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8968) [pid 8966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8966] close(3) = 0 [pid 8966] mkdir("./file0", 0777) = 0 [pid 8966] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8968] <... mount resumed>) = -1 EEXIST (File exists) [ 250.977266][ T8966] loop4: detected capacity change from 0 to 32768 [ 250.995832][ T8963] BTRFS info (device loop3): use zlib compression, level 3 [ 251.015420][ T8963] BTRFS info (device loop3): using free space tree [pid 8968] ioctl(4, LOOP_CLR_FD [pid 8966] <... mount resumed>) = -1 EEXIST (File exists) [ 251.023229][ T8966] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8966) [pid 8966] ioctl(4, LOOP_CLR_FD [pid 8964] <... ioctl resumed>) = 0 [pid 8964] close(4) = 0 [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8962] <... futex resumed>) = 0 [pid 8964] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8962] <... futex resumed>) = 0 [pid 8964] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] <... openat resumed>) = 3 [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8962] <... futex resumed>) = 0 [pid 8964] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8964] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8962] <... futex resumed>) = 0 [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] <... futex resumed>) = 0 [pid 8962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8964] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8962] <... futex resumed>) = 0 [pid 8964] openat(AT_FDCWD, ".log", O_RDONLY [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] <... openat resumed>) = 4 [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8962] <... futex resumed>) = 0 [pid 8964] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8962] <... futex resumed>) = 0 [pid 8964] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8962] <... futex resumed>) = 0 [pid 8964] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8962] exit_group(0) = ? [pid 8964] <... futex resumed>) = ? [pid 8964] +++ exited with 0 +++ [pid 8962] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8962, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5080] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 251.172101][ T8963] BTRFS info (device loop3): enabling ssd optimizations [ 251.179620][ T8963] BTRFS info (device loop3): auto enabling async discard [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./115/binderfs") = 0 [pid 5080] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 8963] <... mount resumed>) = 0 [pid 8963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8963] chdir("./file0" [pid 8972] <... write resumed>) = 16777216 [pid 8970] <... write resumed>) = 16777216 [pid 8963] <... chdir resumed>) = 0 [pid 5080] getdents64(4, [pid 8963] ioctl(4, LOOP_CLR_FD) = 0 [pid 8963] close(4 [pid 8972] munmap(0x7ff2ab354000, 16777216 [pid 8963] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8972] <... munmap resumed>) = 0 [pid 8963] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(4 [pid 8963] <... futex resumed>) = 1 [pid 8961] <... futex resumed>) = 0 [pid 8963] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8961] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8972] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8963] <... openat resumed>) = 4 [pid 8961] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 8963] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8961] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8972] <... openat resumed>) = 4 [pid 8963] <... futex resumed>) = 0 [pid 8961] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 251.218891][ T8963] BTRFS info (device loop3): checking UUID tree [pid 5080] rmdir("./115/file0" [pid 8972] ioctl(4, LOOP_SET_FD, 3 [pid 8963] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8961] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 8961] <... futex resumed>) = 0 [pid 8972] <... ioctl resumed>) = 0 [pid 8961] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8970] munmap(0x7ff2ab354000, 16777216 [pid 8972] close(3 [pid 8970] <... munmap resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8972] <... close resumed>) = 0 [pid 5080] lstat("./115/.log", [pid 8972] mkdir("./file0", 0777 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8970] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8970] ioctl(4, LOOP_SET_FD, 3 [pid 8972] <... mkdir resumed>) = 0 [pid 8966] <... ioctl resumed>) = 0 [pid 5080] unlink("./115/.log" [pid 8972] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8970] <... ioctl resumed>) = 0 [pid 8968] <... ioctl resumed>) = 0 [pid 8966] close(4 [pid 5080] <... unlink resumed>) = 0 [pid 8970] close(3 [pid 8968] close(4 [pid 8966] <... close resumed>) = 0 [pid 8968] <... close resumed>) = 0 [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] <... futex resumed>) = 1 [pid 8965] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8968] <... futex resumed>) = 1 [pid 8967] <... futex resumed>) = 0 [pid 8966] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5080] close(3 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8967] <... futex resumed>) = 0 [pid 8966] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 8968] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] rmdir("./115" [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8968] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 8966] <... futex resumed>) = 1 [pid 8965] <... futex resumed>) = 0 [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8968] <... futex resumed>) = 1 [pid 5080] mkdir("./116", 0777 [pid 8967] <... futex resumed>) = 0 [pid 8966] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8965] <... futex resumed>) = 0 [pid 8961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8970] <... close resumed>) = 0 [ 251.283986][ T8972] loop0: detected capacity change from 0 to 32768 [ 251.308182][ T8963] BTRFS info (device loop3): balance: start -s [ 251.316105][ T8970] loop1: detected capacity change from 0 to 32768 [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8961] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8970] mkdir("./file0", 0777 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8961] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 8972] <... mount resumed>) = -1 EEXIST (File exists) [pid 8970] <... mkdir resumed>) = 0 [pid 8968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8967] <... futex resumed>) = 0 [pid 8966] <... futex resumed>) = 1 [pid 8965] <... futex resumed>) = 0 [pid 8961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8970] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8968] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8966] openat(AT_FDCWD, ".log", O_RDONLY [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8961] <... mmap resumed>) = 0x7ff2ac333000 [pid 8965] <... futex resumed>) = 0 [pid 8961] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8966] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 3 [pid 8972] ioctl(4, LOOP_CLR_FD [pid 8968] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8961] <... mprotect resumed>) = 0 [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8961] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] ioctl(3, LOOP_CLR_FD [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8968] <... futex resumed>) = 1 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] <... futex resumed>) = 0 [pid 8966] <... futex resumed>) = 0 [pid 8965] <... futex resumed>) = 0 [pid 8961] <... clone resumed>, parent_tid=[8991], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8991 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8961] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8991 attached [pid 8968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8961] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(3 [pid 8991] set_robust_list(0x7ff2ac3539e0, 24 [pid 8968] openat(AT_FDCWD, ".log", O_RDONLY [pid 8967] <... futex resumed>) = 0 [pid 8966] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8991] <... set_robust_list resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 8991] openat(AT_FDCWD, ".log", O_RDONLY [pid 8968] <... openat resumed>) = 4 [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8966] <... futex resumed>) = 1 [pid 8965] <... futex resumed>) = 0 [pid 8965] exit_group(0) = ? [pid 8991] <... openat resumed>) = 5 [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8992 [pid 8966] +++ exited with 0 +++ [pid 8965] +++ exited with 0 +++ [pid 8968] <... futex resumed>) = 1 [pid 8967] <... futex resumed>) = 0 [pid 8991] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8961] <... futex resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8965, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 8991] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8967] <... futex resumed>) = 0 [pid 8961] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 8992 attached [pid 8968] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8961] <... futex resumed>) = 0 [pid 5083] <... restart_syscall resumed>) = 0 [pid 8961] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8992] set_robust_list(0x5555559d56e0, 24 [pid 8968] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8992] <... set_robust_list resumed>) = 0 [pid 8970] <... mount resumed>) = -1 EEXIST (File exists) [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 8970] ioctl(4, LOOP_CLR_FD [pid 8968] <... futex resumed>) = 1 [pid 8967] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8992] chdir("./116" [pid 5083] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 251.350118][ T8972] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8972) [ 251.350416][ T8963] BTRFS info (device loop3): relocating block group 1048576 flags system [ 251.374054][ T8970] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8970) [pid 5083] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./115/binderfs") = 0 [pid 5083] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./115/file0") = 0 [pid 5083] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./115/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8992] <... chdir resumed>) = 0 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] exit_group(0 [pid 5083] unlink("./115/.log" [pid 8992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8968] <... futex resumed>) = ? [pid 8967] <... exit_group resumed>) = ? [pid 5083] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [pid 8992] <... prctl resumed>) = 0 [pid 8968] +++ exited with 0 +++ [pid 8967] +++ exited with 0 +++ [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./115") = 0 [pid 5083] mkdir("./116", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 8992] setpgid(0, 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8967, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=26 /* 0.26 s */} --- [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8992] <... setpgid resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8993 [pid 8992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8992] <... openat resumed>) = 3 [pid 8992] write(3, "1000", 4./strace-static-x86_64: Process 8993 attached ) = 4 [pid 5084] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8993] set_robust_list(0x5555559d56e0, 24 [pid 8992] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8993] <... set_robust_list resumed>) = 0 [pid 8992] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8993] chdir("./116" [pid 8992] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... openat resumed>) = 3 [pid 8993] <... chdir resumed>) = 0 [pid 8992] <... symlink resumed>) = 0 [pid 8993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8993] setpgid(0, 0) = 0 [pid 8993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8993] write(3, "1000", 4) = 4 [pid 8993] close(3) = 0 [pid 8993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] fstat(3, [pid 8992] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8993] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8992] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8993] <... futex resumed>) = 0 [pid 8993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] getdents64(3, [pid 8993] <... mmap resumed>) = 0x7ff2b3754000 [pid 8993] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8992] <... mmap resumed>) = 0x7ff2b3754000 [pid 8993] <... mprotect resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8993] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8992] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8993] <... clone resumed>, parent_tid=[8994], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8994 [pid 8992] <... mprotect resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8993] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8992] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] lstat("./115/binderfs", [pid 8993] <... futex resumed>) = 0 [pid 8993] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8994 attached [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8994] set_robust_list(0x7ff2b37749e0, 24 [pid 8992] <... clone resumed>, parent_tid=[8995], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8995 [pid 5084] unlink("./115/binderfs" [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8994] <... set_robust_list resumed>) = 0 [pid 8994] memfd_create("syzkaller", 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8994] <... memfd_create resumed>) = 3 [pid 5084] <... openat resumed>) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./115/file0") = 0 [pid 5084] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./115/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] unlink("./115/.log") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./115" [pid 8994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... rmdir resumed>) = 0 [pid 8994] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] mkdir("./116", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 251.524535][ T8991] BTRFS info (device loop3): scrub: started on devid 1 [ 251.525697][ T8963] BTRFS info (device loop3): balance: ended with status: 0 [pid 5084] close(3) = 0 ./strace-static-x86_64: Process 8995 attached [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8995] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8995] memfd_create("syzkaller", 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8996 [pid 8995] <... memfd_create resumed>) = 3 [pid 8995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 8996 attached ) = 0x7ff2ab354000 [pid 8996] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8996] chdir("./116") = 0 [pid 8996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8996] setpgid(0, 0) = 0 [pid 8996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8996] write(3, "1000", 4) = 4 [pid 8996] close(3) = 0 [pid 8996] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8963] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8963] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8963] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 251.568399][ T8991] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [pid 8996] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8991] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8996] <... mmap resumed>) = 0x7ff2b3754000 [pid 8996] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8991] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8996] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8991] <... futex resumed>) = 0 [pid 8961] exit_group(0 [pid 8963] <... futex resumed>) = ? [pid 8961] <... exit_group resumed>) = ? [pid 8963] +++ exited with 0 +++ [pid 8996] <... clone resumed>, parent_tid=[8997], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8997 [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8991] +++ exited with 0 +++ [pid 8961] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8961, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=34 /* 0.34 s */} --- [pid 5081] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5081] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8997 attached [pid 5081] lstat("./115/binderfs", [pid 8997] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8997] <... set_robust_list resumed>) = 0 [pid 5081] unlink("./115/binderfs" [pid 8997] memfd_create("syzkaller", 0 [pid 5081] <... unlink resumed>) = 0 [pid 8997] <... memfd_create resumed>) = 3 [pid 5081] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8972] <... ioctl resumed>) = 0 [pid 8972] close(4) = 0 [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8971] <... futex resumed>) = 0 [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8972] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8971] <... futex resumed>) = 0 [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8972] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8971] <... futex resumed>) = 0 [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8972] openat(AT_FDCWD, ".log", O_RDONLY [pid 8971] <... futex resumed>) = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8972] <... openat resumed>) = 4 [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8971] <... futex resumed>) = 0 [pid 8972] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8972] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8971] <... futex resumed>) = 0 [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 8971] exit_group(0) = ? [pid 8972] <... futex resumed>) = ? [pid 8972] +++ exited with 0 +++ [pid 8971] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8971, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5078] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./114/binderfs") = 0 [pid 5078] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./114/file0") = 0 [pid 5078] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8970] <... ioctl resumed>) = 0 [pid 5078] lstat("./114/.log", [pid 8970] close(4 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./114/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8970] <... close resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./114") = 0 [pid 5078] mkdir("./115", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 8970] <... futex resumed>) = 1 [pid 8969] <... futex resumed>) = 0 [pid 5078] close(3 [pid 8970] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... close resumed>) = 0 [pid 8970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8969] <... futex resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8970] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8998 [pid 8970] <... openat resumed>) = 3 [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8969] <... futex resumed>) = 0 [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8998 attached [pid 8998] set_robust_list(0x5555559d56e0, 24 [pid 8970] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8998] <... set_robust_list resumed>) = 0 [pid 8970] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8998] chdir("./115" [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] <... chdir resumed>) = 0 [pid 8970] <... futex resumed>) = 1 [pid 8969] <... futex resumed>) = 0 [pid 8998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8970] openat(AT_FDCWD, ".log", O_RDONLY [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] <... prctl resumed>) = 0 [pid 8969] <... futex resumed>) = 0 [pid 8998] setpgid(0, 0 [pid 8970] <... openat resumed>) = 4 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8998] <... setpgid resumed>) = 0 [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8970] <... futex resumed>) = 0 [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] <... openat resumed>) = 3 [pid 8970] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8969] <... futex resumed>) = 0 [pid 8998] write(3, "1000", 4 [pid 8970] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8998] <... write resumed>) = 4 [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] close(3) = 0 [pid 8970] <... futex resumed>) = 1 [pid 8969] <... futex resumed>) = 0 [pid 8998] symlink("/dev/binderfs", "./binderfs" [pid 8970] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8969] exit_group(0 [pid 8998] <... symlink resumed>) = 0 [pid 8970] <... futex resumed>) = ? [pid 8969] <... exit_group resumed>) = ? [pid 8998] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8970] +++ exited with 0 +++ [pid 8969] +++ exited with 0 +++ [pid 8998] <... futex resumed>) = 0 [pid 8998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8969, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=25 /* 0.25 s */} --- [pid 8998] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8998] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8998] <... mprotect resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8998] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... openat resumed>) = 3 [pid 5079] fstat(3, [pid 8998] <... clone resumed>, parent_tid=[8999], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8999 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 8998] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./115/binderfs") = 0 [pid 5079] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8999 attached [pid 5079] lstat("./115/file0", [pid 8999] set_robust_list(0x7ff2b37749e0, 24 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8999] <... set_robust_list resumed>) = 0 [pid 5079] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8999] memfd_create("syzkaller", 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8999] <... memfd_create resumed>) = 3 [pid 5079] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... openat resumed>) = 4 [pid 8999] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./115/file0") = 0 [pid 5079] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./115/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./115/.log") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./115") = 0 [pid 5079] mkdir("./116", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9000 ./strace-static-x86_64: Process 9000 attached [pid 9000] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9000] chdir("./116") = 0 [pid 9000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9000] setpgid(0, 0) = 0 [pid 9000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9000] write(3, "1000", 4) = 4 [pid 9000] close(3) = 0 [pid 9000] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9000] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9000] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9000] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9000] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9001], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9001 [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9001 attached [pid 9001] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9001] memfd_create("syzkaller", 0) = 3 [pid 9001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./115/file0") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 8995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] rmdir("./115") = 0 [pid 5081] mkdir("./116", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9002 ./strace-static-x86_64: Process 9002 attached [pid 9002] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9002] chdir("./116") = 0 [pid 9002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9002] setpgid(0, 0) = 0 [pid 9002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9002] write(3, "1000", 4) = 4 [pid 9002] close(3) = 0 [pid 9002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9002] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9002] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9003], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9003 [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9003 attached [pid 9003] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9003] memfd_create("syzkaller", 0) = 3 [pid 9003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8994] <... write resumed>) = 16777216 [pid 8994] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8994] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8994] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8994] close(3) = 0 [pid 8994] mkdir("./file0", 0777) = 0 [ 252.379046][ T8994] loop4: detected capacity change from 0 to 32768 [ 252.417311][ T8994] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (8994) [pid 8994] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 252.473630][ T8994] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 252.504734][ T8994] BTRFS info (device loop4): setting nodatasum [pid 9003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8995] <... write resumed>) = 16777216 [pid 8995] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 252.535312][ T8994] BTRFS info (device loop4): allowing degraded mounts [ 252.542204][ T8994] BTRFS info (device loop4): use zlib compression, level 3 [ 252.553068][ T8994] BTRFS info (device loop4): using free space tree [pid 8995] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8995] close(3) = 0 [pid 8995] mkdir("./file0", 0777) = 0 [pid 8995] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8997] <... write resumed>) = 16777216 [pid 8997] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8997] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8997] ioctl(4, LOOP_SET_FD, 3 [pid 8995] <... mount resumed>) = -1 EEXIST (File exists) [ 252.581438][ T8995] loop2: detected capacity change from 0 to 32768 [ 252.599377][ T8995] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8995) [pid 8995] ioctl(4, LOOP_CLR_FD [pid 8997] <... ioctl resumed>) = 0 [pid 8997] close(3) = 0 [pid 8997] mkdir("./file0", 0777) = 0 [ 252.626225][ T8997] loop5: detected capacity change from 0 to 32768 [pid 8997] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9001] <... write resumed>) = 16777216 [pid 9001] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9001] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9001] ioctl(4, LOOP_SET_FD, 3 [pid 8997] <... mount resumed>) = -1 EEXIST (File exists) [pid 8997] ioctl(4, LOOP_CLR_FD [pid 9001] <... ioctl resumed>) = 0 [pid 9001] close(3) = 0 [pid 9001] mkdir("./file0", 0777) = 0 [ 252.656049][ T8997] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8997) [ 252.690001][ T9001] loop1: detected capacity change from 0 to 32768 [pid 9001] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8999] <... write resumed>) = 16777216 [pid 8999] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8999] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8999] close(3) = 0 [pid 8999] mkdir("./file0", 0777) = 0 [pid 8999] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9001] <... mount resumed>) = -1 EEXIST (File exists) [pid 9001] ioctl(4, LOOP_CLR_FD [pid 8999] <... mount resumed>) = -1 EEXIST (File exists) [ 252.724947][ T9001] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9001) [ 252.736812][ T8999] loop0: detected capacity change from 0 to 32768 [ 252.750972][ T8999] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8999) [pid 8999] ioctl(4, LOOP_CLR_FD [pid 8995] <... ioctl resumed>) = 0 [pid 8995] close(4) = 0 [ 252.797185][ T8994] BTRFS info (device loop4): enabling ssd optimizations [ 252.810713][ T8994] BTRFS info (device loop4): auto enabling async discard [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8992] <... futex resumed>) = 0 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8992] <... futex resumed>) = 0 [pid 8995] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8995] <... openat resumed>) = 3 [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8992] <... futex resumed>) = 0 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8992] <... futex resumed>) = 0 [pid 8997] <... ioctl resumed>) = 0 [pid 8995] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] close(4 [pid 8995] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8997] <... close resumed>) = 0 [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = 1 [pid 8992] <... futex resumed>) = 0 [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8992] <... futex resumed>) = 0 [pid 8997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8996] <... futex resumed>) = 0 [pid 8995] openat(AT_FDCWD, ".log", O_RDONLY [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] <... openat resumed>) = 3 [pid 8995] <... openat resumed>) = 4 [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8995] <... futex resumed>) = 1 [pid 8994] <... mount resumed>) = 0 [pid 8992] <... futex resumed>) = 0 [pid 8999] <... ioctl resumed>) = 0 [pid 8997] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8994] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8999] close(4 [pid 8997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8996] <... futex resumed>) = 0 [pid 8995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8994] <... openat resumed>) = 3 [pid 8992] <... futex resumed>) = 0 [pid 8999] <... close resumed>) = 0 [pid 8997] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8995] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8994] chdir("./file0" [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8995] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8994] <... chdir resumed>) = 0 [pid 8994] ioctl(4, LOOP_CLR_FD [pid 8999] <... futex resumed>) = 1 [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8999] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = 1 [pid 8994] <... ioctl resumed>) = 0 [pid 8992] <... futex resumed>) = 0 [pid 8998] <... futex resumed>) = 0 [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8994] close(4 [ 252.899016][ T8994] BTRFS info (device loop4): checking UUID tree [ 252.921035][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 252.921047][ T27] audit: type=1804 audit(1680236936.392:697): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/116/.log" dev="sda1" ino=1161 res=1 errno=0 [pid 8992] exit_group(0 [pid 8999] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8997] openat(AT_FDCWD, ".log", O_RDONLY [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = ? [pid 8994] <... close resumed>) = 0 [pid 8992] <... exit_group resumed>) = ? [pid 8999] <... openat resumed>) = 3 [pid 8996] <... futex resumed>) = 0 [pid 8997] <... openat resumed>) = 4 [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8995] +++ exited with 0 +++ [pid 8992] +++ exited with 0 +++ [pid 8994] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8992, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 8999] <... futex resumed>) = 1 [pid 8998] <... futex resumed>) = 0 [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8994] <... futex resumed>) = 1 [pid 8993] <... futex resumed>) = 0 [pid 8999] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8994] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8993] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 8999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8998] <... futex resumed>) = 0 [pid 8997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8996] <... futex resumed>) = 0 [pid 8994] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8993] <... futex resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 8999] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8994] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8993] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8999] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8994] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 3 [pid 5080] fstat(3, [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8994] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8999] <... futex resumed>) = 1 [pid 8998] <... futex resumed>) = 0 [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8994] <... futex resumed>) = 1 [pid 8993] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 8999] openat(AT_FDCWD, ".log", O_RDONLY [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8994] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8993] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8998] <... futex resumed>) = 0 [pid 5080] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8999] <... openat resumed>) = 4 [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] exit_group(0 [pid 8994] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8993] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... futex resumed>) = ? [pid 8996] <... exit_group resumed>) = ? [pid 8994] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8993] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] lstat("./116/binderfs", [pid 8999] <... futex resumed>) = 1 [pid 8998] <... futex resumed>) = 0 [ 252.979538][ T27] audit: type=1804 audit(1680236936.452:698): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/116/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 8997] +++ exited with 0 +++ [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8999] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8996] +++ exited with 0 +++ [pid 5080] unlink("./116/binderfs") = 0 [pid 5080] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./116/file0") = 0 [pid 5080] umount2("./116/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./116/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./116/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 8999] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8998] <... futex resumed>) = 0 [pid 5080] rmdir("./116" [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8996, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./117", 0777 [pid 8999] <... futex resumed>) = 0 [pid 8998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8999] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8998] exit_group(0 [pid 5080] <... openat resumed>) = 3 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8999] <... futex resumed>) = ? [pid 8998] <... exit_group resumed>) = ? [pid 8999] +++ exited with 0 +++ [pid 8998] +++ exited with 0 +++ [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9021 [pid 5084] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8998, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=24 /* 0.24 s */} --- [pid 5084] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9021 attached [pid 5084] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9021] set_robust_list(0x5555559d56e0, 24 [pid 5084] fstat(3, [pid 5078] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9021] <... set_robust_list resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9021] chdir("./117" [pid 5084] getdents64(3, [pid 5078] fstat(3, [pid 9021] <... chdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 9021] <... prctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9021] setpgid(0, 0 [pid 8993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] lstat("./116/binderfs", [pid 5078] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9021] <... setpgid resumed>) = 0 [pid 8993] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8993] <... futex resumed>) = 0 [pid 5084] unlink("./116/binderfs" [pid 5078] lstat("./115/binderfs", [pid 9021] <... openat resumed>) = 3 [pid 8993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... unlink resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9021] write(3, "1000", 4 [pid 5078] unlink("./115/binderfs" [pid 9021] <... write resumed>) = 4 [pid 8993] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [ 253.032680][ T8994] BTRFS info (device loop4): balance: start -s [ 253.045584][ T8994] BTRFS info (device loop4): relocating block group 1048576 flags system [pid 9021] close(3 [pid 8993] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9021] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9021] symlink("/dev/binderfs", "./binderfs" [pid 8993] <... mprotect resumed>) = 0 [pid 5084] lstat("./116/file0", [pid 5078] lstat("./115/file0", [pid 9021] <... symlink resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9021] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9021] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9021] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9021] <... mmap resumed>) = 0x7ff2b3754000 [pid 8993] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... openat resumed>) = 4 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9021] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5078] fstat(4, ./strace-static-x86_64: Process 9022 attached [pid 9021] <... mprotect resumed>) = 0 [pid 8993] <... clone resumed>, parent_tid=[9022], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9022 [pid 5084] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9022] set_robust_list(0x7ff2ac3539e0, 24 [pid 9021] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8993] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9021] <... clone resumed>, parent_tid=[9024], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9024 [pid 5078] getdents64(4, [pid 9022] <... set_robust_list resumed>) = 0 [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9001] <... ioctl resumed>) = 0 [pid 8993] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9021] <... futex resumed>) = 0 [pid 5078] close(4 [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./115/file0" [pid 9022] openat(AT_FDCWD, ".log", O_RDONLY [pid 8993] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9024 attached [pid 5084] <... openat resumed>) = 4 [pid 5078] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9024] set_robust_list(0x7ff2b37749e0, 24 [pid 9022] <... openat resumed>) = 5 [pid 8994] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] fstat(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9024] <... set_robust_list resumed>) = 0 [pid 5078] lstat("./115/.log", [pid 9024] memfd_create("syzkaller", 0 [pid 9022] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8994] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9024] <... memfd_create resumed>) = 3 [pid 5078] unlink("./115/.log" [pid 9024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9022] <... futex resumed>) = 1 [pid 8994] <... futex resumed>) = 0 [pid 8993] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 5078] <... unlink resumed>) = 0 [pid 9024] <... mmap resumed>) = 0x7ff2ab354000 [ 253.085256][ T27] audit: type=1804 audit(1680236936.492:699): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/115/.log" dev="sda1" ino=1163 res=1 errno=0 [ 253.097150][ T8994] BTRFS info (device loop4): balance: ended with status: 0 [pid 9022] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9001] close(4 [pid 8994] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8993] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(3, [pid 9003] <... write resumed>) = 16777216 [pid 9001] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 9001] <... futex resumed>) = 1 [pid 9000] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9001] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] rmdir("./115" [pid 9001] <... openat resumed>) = 3 [pid 9000] <... futex resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] mkdir("./116", 0777 [pid 9001] <... futex resumed>) = 0 [pid 9000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... mkdir resumed>) = 0 [pid 9001] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9001] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9000] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9001] <... futex resumed>) = 0 [pid 9000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9001] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 9001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9000] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9001] openat(AT_FDCWD, ".log", O_RDONLY [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9001] <... openat resumed>) = 4 [pid 8994] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8993] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9025 [pid 9001] <... futex resumed>) = 1 [pid 9000] <... futex resumed>) = 0 [pid 9001] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9000] <... futex resumed>) = 0 [pid 9001] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9001] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9000] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9025 attached [pid 9001] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9000] exit_group(0 [pid 9025] set_robust_list(0x5555559d56e0, 24 [pid 9001] <... futex resumed>) = ? [pid 9000] <... exit_group resumed>) = ? [pid 9025] <... set_robust_list resumed>) = 0 [pid 9001] +++ exited with 0 +++ [pid 9000] +++ exited with 0 +++ [pid 9025] chdir("./116" [pid 9003] munmap(0x7ff2ab354000, 16777216 [pid 8994] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8993] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9000, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 9025] <... chdir resumed>) = 0 [ 253.160982][ T27] audit: type=1804 audit(1680236936.622:700): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/116/file0/.log" dev="loop4" ino=263 res=1 errno=0 [pid 9025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9025] setpgid(0, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9025] <... setpgid resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9003] <... munmap resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 9025] <... openat resumed>) = 3 [pid 5079] fstat(3, [pid 9025] write(3, "1000", 4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9025] <... write resumed>) = 4 [pid 5079] getdents64(3, [pid 9025] close(3 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9025] <... close resumed>) = 0 [pid 5079] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9025] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9025] <... symlink resumed>) = 0 [pid 5079] lstat("./116/binderfs", [pid 9025] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9025] <... futex resumed>) = 0 [pid 5079] unlink("./116/binderfs" [pid 9025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... unlink resumed>) = 0 [pid 9025] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9025] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9025] <... mprotect resumed>) = 0 [pid 5079] lstat("./116/file0", [pid 9025] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9025] <... clone resumed>, parent_tid=[9026], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9026 [pid 5084] close(4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9025] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9003] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5084] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9025] <... futex resumed>) = 0 [pid 5084] rmdir("./116/file0" [pid 5079] <... openat resumed>) = 4 [pid 9025] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9003] <... openat resumed>) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9026 attached [pid 9003] ioctl(4, LOOP_SET_FD, 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 9026] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] umount2("./116/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9026] <... set_robust_list resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 9026] memfd_create("syzkaller", 0 [pid 5084] lstat("./116/.log", [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9026] <... memfd_create resumed>) = 3 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] close(4 [pid 9026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] unlink("./116/.log" [pid 5079] <... close resumed>) = 0 [pid 9026] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] <... unlink resumed>) = 0 [pid 5079] rmdir("./116/file0" [pid 9003] <... ioctl resumed>) = 0 [pid 5084] getdents64(3, [pid 5079] <... rmdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] umount2("./116/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./116/.log", [pid 9003] close(3 [pid 5084] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9003] <... close resumed>) = 0 [pid 5084] rmdir("./116" [pid 5079] unlink("./116/.log") = 0 [pid 5079] getdents64(3, [pid 9003] mkdir("./file0", 0777 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5084] <... rmdir resumed>) = 0 [ 253.211650][ T8994] BTRFS info (device loop4): scrub: started on devid 1 [ 253.222474][ T9003] loop3: detected capacity change from 0 to 32768 [ 253.239098][ T8994] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 5079] rmdir("./116" [pid 9003] <... mkdir resumed>) = 0 [pid 8994] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5084] mkdir("./117", 0777 [pid 5079] <... rmdir resumed>) = 0 [pid 5079] mkdir("./117", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9027 ./strace-static-x86_64: Process 9027 attached [pid 9027] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9027] chdir("./117") = 0 [pid 9027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9027] setpgid(0, 0) = 0 [pid 9027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9027] write(3, "1000", 4) = 4 [pid 9027] close(3) = 0 [pid 9027] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9027] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9003] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8994] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mkdir resumed>) = 0 [pid 9027] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9027] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9027] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9027] <... clone resumed>, parent_tid=[9028], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9028 [pid 8994] <... futex resumed>) = 0 [pid 8993] exit_group(0 [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9022] <... futex resumed>) = ? [pid 8993] <... exit_group resumed>) = ? [pid 9027] <... futex resumed>) = 0 [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9028 attached [pid 9028] set_robust_list(0x7ff2b37749e0, 24 [pid 9022] +++ exited with 0 +++ [pid 9028] <... set_robust_list resumed>) = 0 [pid 8994] +++ exited with 0 +++ [pid 9028] memfd_create("syzkaller", 0 [pid 8993] +++ exited with 0 +++ [pid 9028] <... memfd_create resumed>) = 3 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8993, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 9028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5084] <... openat resumed>) = 3 [pid 9003] <... mount resumed>) = -1 EEXIST (File exists) [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9003] ioctl(4, LOOP_CLR_FD [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] close(3 [pid 5083] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5084] <... close resumed>) = 0 [pid 5083] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./116/binderfs") = 0 [pid 5083] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9029 [ 253.259050][ T27] audit: type=1804 audit(1680236936.662:701): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/116/.log" dev="sda1" ino=1152 res=1 errno=0 [ 253.287036][ T9003] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9003) ./strace-static-x86_64: Process 9029 attached [pid 9029] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9029] chdir("./117") = 0 [pid 9029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9029] setpgid(0, 0) = 0 [pid 9029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9029] write(3, "1000", 4) = 4 [pid 9029] close(3) = 0 [pid 9029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9029] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9029] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9029] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9030], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9030 [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9030 attached [pid 9030] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9030] memfd_create("syzkaller", 0) = 3 [pid 9030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5083] <... umount2 resumed>) = 0 [pid 5083] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./116/file0") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./116") = 0 [pid 5083] mkdir("./117", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9031 ./strace-static-x86_64: Process 9031 attached [pid 9031] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9031] chdir("./117") = 0 [pid 9031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9031] setpgid(0, 0) = 0 [pid 9031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9031] write(3, "1000", 4) = 4 [pid 9031] close(3) = 0 [pid 9031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9031] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9031] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9031] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9032], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9032 [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9032 attached [pid 9032] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9032] memfd_create("syzkaller", 0) = 3 [pid 9032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9003] <... ioctl resumed>) = 0 [pid 9003] close(4) = 0 [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9002] <... futex resumed>) = 0 [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9003] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9002] <... futex resumed>) = 0 [pid 9003] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9003] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9002] <... futex resumed>) = 0 [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9003] <... futex resumed>) = 0 [pid 9002] <... futex resumed>) = 0 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9003] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9002] <... futex resumed>) = 0 [pid 9003] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9003] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9002] <... futex resumed>) = 0 [ 253.687215][ T27] audit: type=1804 audit(1680236937.162:702): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/116/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 9003] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9003] <... futex resumed>) = 0 [pid 9002] exit_group(0 [pid 9003] ???() = ? [pid 9002] <... exit_group resumed>) = ? [pid 9003] +++ exited with 0 +++ [pid 9002] +++ exited with 0 +++ [pid 9028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9002, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5081] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./116/binderfs") = 0 [pid 5081] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./116/file0") = 0 [pid 5081] umount2("./116/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./116/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./116/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./116") = 0 [pid 5081] mkdir("./117", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9033 ./strace-static-x86_64: Process 9033 attached [pid 9033] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9033] chdir("./117") = 0 [pid 9033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9033] setpgid(0, 0) = 0 [pid 9033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9033] write(3, "1000", 4) = 4 [pid 9033] close(3) = 0 [pid 9033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9033] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9033] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9033] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9033] <... clone resumed>, parent_tid=[9034], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9034 [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 9034 attached [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9034] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9034] memfd_create("syzkaller", 0) = 3 [pid 9034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9026] <... write resumed>) = 16777216 [pid 9024] <... write resumed>) = 16777216 [pid 9024] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9024] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9024] ioctl(4, LOOP_SET_FD, 3 [pid 9026] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9024] <... ioctl resumed>) = 0 [pid 9026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9026] close(3) = 0 [pid 9026] mkdir("./file0", 0777 [pid 9024] close(3) = 0 [pid 9024] mkdir("./file0", 0777 [pid 9026] <... mkdir resumed>) = 0 [pid 9026] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9024] <... mkdir resumed>) = 0 [ 254.187165][ T9024] loop2: detected capacity change from 0 to 32768 [ 254.195941][ T9026] loop0: detected capacity change from 0 to 32768 [pid 9034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9024] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9028] <... write resumed>) = 16777216 [pid 9028] munmap(0x7ff2ab354000, 16777216 [pid 9024] <... mount resumed>) = -1 EEXIST (File exists) [ 254.225487][ T9026] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor373 (9026) [ 254.257033][ T9024] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9024) [ 254.275798][ T9026] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9024] ioctl(4, LOOP_CLR_FD [pid 9028] <... munmap resumed>) = 0 [pid 9028] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9028] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9028] close(3) = 0 [pid 9028] mkdir("./file0", 0777) = 0 [pid 9028] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9030] <... write resumed>) = 16777216 [pid 9030] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9030] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 254.296560][ T9026] BTRFS info (device loop0): setting nodatasum [ 254.304932][ T9028] loop1: detected capacity change from 0 to 32768 [ 254.322061][ T9028] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9028) [ 254.322227][ T9026] BTRFS info (device loop0): allowing degraded mounts [pid 9030] ioctl(4, LOOP_SET_FD, 3 [pid 9028] <... mount resumed>) = -1 EEXIST (File exists) [pid 9028] ioctl(4, LOOP_CLR_FD [pid 9030] <... ioctl resumed>) = 0 [pid 9030] close(3) = 0 [pid 9030] mkdir("./file0", 0777) = 0 [pid 9032] <... write resumed>) = 16777216 [ 254.359554][ T9030] loop5: detected capacity change from 0 to 32768 [ 254.396739][ T9030] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9030) [pid 9030] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9030] ioctl(4, LOOP_CLR_FD [pid 9032] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9032] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9032] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9032] close(3) = 0 [pid 9032] mkdir("./file0", 0777) = 0 [ 254.407948][ T9026] BTRFS info (device loop0): use zlib compression, level 3 [ 254.429209][ T9026] BTRFS info (device loop0): using free space tree [ 254.441977][ T9032] loop4: detected capacity change from 0 to 32768 [pid 9032] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 254.481615][ T9032] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9032) [pid 9032] ioctl(4, LOOP_CLR_FD [pid 9028] <... ioctl resumed>) = 0 [pid 9024] <... ioctl resumed>) = 0 [pid 9028] close(4 [pid 9030] <... ioctl resumed>) = 0 [pid 9028] <... close resumed>) = 0 [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9028] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9028] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9027] <... futex resumed>) = 0 [pid 9028] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9028] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] close(4 [pid 9028] <... futex resumed>) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9024] close(4 [pid 9030] <... close resumed>) = 0 [pid 9028] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9027] <... futex resumed>) = 0 [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 9028] openat(AT_FDCWD, ".log", O_RDONLY [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... openat resumed>) = 4 [pid 9030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9029] <... futex resumed>) = 0 [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9028] <... futex resumed>) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9030] <... openat resumed>) = 3 [pid 9028] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9027] <... futex resumed>) = 0 [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 9028] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9029] <... futex resumed>) = 0 [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9028] <... futex resumed>) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9030] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9028] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9027] exit_group(0 [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... futex resumed>) = ? [pid 9027] <... exit_group resumed>) = ? [pid 9024] <... close resumed>) = 0 [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 9028] +++ exited with 0 +++ [pid 9027] +++ exited with 0 +++ [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9029] <... futex resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9027, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 9030] openat(AT_FDCWD, ".log", O_RDONLY [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9030] <... openat resumed>) = 4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] fstat(3, [pid 9030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9029] <... futex resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9030] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] getdents64(3, [pid 9030] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] exit_group(0 [pid 5079] lstat("./117/binderfs", [pid 9030] <... futex resumed>) = ? [pid 9029] <... exit_group resumed>) = ? [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9030] +++ exited with 0 +++ [pid 9029] +++ exited with 0 +++ [pid 5079] unlink("./117/binderfs") = 0 [pid 5079] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./117/file0") = 0 [pid 5079] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./117/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./117/.log") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./117" [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... rmdir resumed>) = 0 [pid 9024] <... futex resumed>) = 1 [pid 9021] <... futex resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9029, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 5079] mkdir("./118", 0777 [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9021] <... futex resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 9024] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9024] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 3 [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9024] <... futex resumed>) = 1 [pid 9021] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(3, [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9021] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] close(3 [pid 9024] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(3, [pid 5079] <... close resumed>) = 0 [pid 9024] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9024] <... futex resumed>) = 1 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 254.634782][ T27] audit: type=1804 audit(1680236938.102:703): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/117/.log" dev="sda1" ino=1161 res=1 errno=0 [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] lstat("./117/binderfs", [pid 9021] <... futex resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./117/binderfs" [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9048 ./strace-static-x86_64: Process 9048 attached [pid 9024] <... futex resumed>) = 0 [pid 9021] <... futex resumed>) = 1 [pid 5084] <... unlink resumed>) = 0 [pid 9048] set_robust_list(0x5555559d56e0, 24 [pid 9024] openat(AT_FDCWD, ".log", O_RDONLY [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9048] <... set_robust_list resumed>) = 0 [pid 9024] <... openat resumed>) = 4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9048] chdir("./118" [pid 9032] <... ioctl resumed>) = 0 [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./117/file0", [pid 9024] <... futex resumed>) = 1 [pid 9021] <... futex resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9048] <... chdir resumed>) = 0 [pid 9024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9021] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9032] close(4 [pid 9024] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9024] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... openat resumed>) = 4 [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(4, [pid 9024] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./117/file0") = 0 [pid 5084] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9048] <... prctl resumed>) = 0 [pid 9032] <... close resumed>) = 0 [pid 9021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9048] setpgid(0, 0 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9021] exit_group(0 [pid 5084] lstat("./117/.log", [pid 9048] <... setpgid resumed>) = 0 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [pid 9024] <... futex resumed>) = ? [pid 9021] <... exit_group resumed>) = ? [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... openat resumed>) = 3 [pid 9032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9031] <... futex resumed>) = 0 [pid 9048] write(3, "1000", 4 [pid 9032] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9048] <... write resumed>) = 4 [pid 9032] <... openat resumed>) = 3 [pid 9048] close(3 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... close resumed>) = 0 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [pid 9048] symlink("/dev/binderfs", "./binderfs" [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... symlink resumed>) = 0 [pid 9032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9031] <... futex resumed>) = 0 [pid 9048] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9032] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9024] +++ exited with 0 +++ [pid 9021] +++ exited with 0 +++ [pid 5084] unlink("./117/.log" [pid 9048] <... futex resumed>) = 0 [pid 9032] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9021, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 9048] <... mmap resumed>) = 0x7ff2b3754000 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [pid 5080] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9048] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9048] <... mprotect resumed>) = 0 [pid 9032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9031] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9048] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9032] openat(AT_FDCWD, ".log", O_RDONLY [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 9034] <... write resumed>) = 16777216 [pid 9032] <... openat resumed>) = 4 [pid 5080] fstat(3, ./strace-static-x86_64: Process 9053 attached [pid 9048] <... clone resumed>, parent_tid=[9053], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9053 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9053] set_robust_list(0x7ff2b37749e0, 24 [pid 9048] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [ 254.717142][ T9026] BTRFS info (device loop0): enabling ssd optimizations [ 254.724128][ T9026] BTRFS info (device loop0): auto enabling async discard [ 254.733805][ T9026] BTRFS info (device loop0): checking UUID tree [ 254.742288][ T27] audit: type=1804 audit(1680236938.102:704): pid=9030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/117/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5084] getdents64(3, [pid 5080] getdents64(3, [pid 9053] <... set_robust_list resumed>) = 0 [pid 9048] <... futex resumed>) = 0 [pid 9034] munmap(0x7ff2ab354000, 16777216 [pid 9026] <... mount resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9053] memfd_create("syzkaller", 0 [pid 9026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] close(3 [pid 9053] <... memfd_create resumed>) = 3 [pid 9026] <... openat resumed>) = 3 [pid 5084] <... close resumed>) = 0 [pid 9053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9026] chdir("./file0" [pid 5084] rmdir("./117" [pid 9053] <... mmap resumed>) = 0x7ff2ab354000 [pid 9026] <... chdir resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 9048] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9026] ioctl(4, LOOP_CLR_FD [pid 5084] mkdir("./118", 0777 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9034] <... munmap resumed>) = 0 [pid 9032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9031] <... futex resumed>) = 0 [pid 9026] <... ioctl resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5080] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9034] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9032] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9026] close(4 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9034] <... openat resumed>) = 4 [pid 9032] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9026] <... close resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 9026] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9034] ioctl(4, LOOP_SET_FD, 3 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9026] <... futex resumed>) = 1 [pid 9025] <... futex resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] lstat("./117/binderfs", [pid 9026] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9054 [ 254.772316][ T27] audit: type=1804 audit(1680236938.172:705): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/117/.log" dev="sda1" ino=1150 res=1 errno=0 [ 254.803978][ T9034] loop3: detected capacity change from 0 to 32768 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [pid 9025] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] exit_group(0 [pid 9025] <... futex resumed>) = 1 [pid 5080] unlink("./117/binderfs" [pid 9032] <... futex resumed>) = ? [pid 9031] <... exit_group resumed>) = ? [pid 9025] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9026] <... futex resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 9026] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9032] +++ exited with 0 +++ [pid 9031] +++ exited with 0 +++ [pid 5080] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./117/file0", [pid 9026] <... openat resumed>) = 4 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9031, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9026] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9026] <... futex resumed>) = 1 [pid 9025] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9034] <... ioctl resumed>) = 0 [pid 9026] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9025] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 9054 attached [pid 9034] close(3 [pid 9025] <... futex resumed>) = 0 [pid 9034] <... close resumed>) = 0 [pid 9025] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9054] set_robust_list(0x5555559d56e0, 24 [pid 5080] <... openat resumed>) = 4 [pid 9034] mkdir("./file0", 0777 [pid 5080] fstat(4, [pid 9054] <... set_robust_list resumed>) = 0 [pid 5083] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9054] chdir("./118" [pid 9034] <... mkdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(4, [pid 9054] <... chdir resumed>) = 0 [pid 9034] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5083] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 254.808747][ T27] audit: type=1804 audit(1680236938.222:706): pid=9032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/117/.log" dev="sda1" ino=1156 res=1 errno=0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9054] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] unlink("./117/binderfs" [pid 5080] getdents64(4, [pid 5083] <... unlink resumed>) = 0 [pid 9054] <... prctl resumed>) = 0 [pid 5083] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9054] setpgid(0, 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(4 [pid 9054] <... setpgid resumed>) = 0 [pid 5083] lstat("./117/file0", [pid 5080] <... close resumed>) = 0 [pid 9054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] rmdir("./117/file0" [pid 9054] <... openat resumed>) = 3 [pid 5083] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9054] write(3, "1000", 4 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 9054] <... write resumed>) = 4 [pid 5083] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9054] close(3 [pid 5083] getdents64(4, [pid 5080] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9054] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9054] symlink("/dev/binderfs", "./binderfs" [pid 9025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] getdents64(4, [pid 5080] lstat("./117/.log", [pid 9054] <... symlink resumed>) = 0 [pid 9025] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9054] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9025] <... futex resumed>) = 0 [pid 5083] close(4 [pid 5080] unlink("./117/.log" [pid 9054] <... futex resumed>) = 0 [pid 9025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... close resumed>) = 0 [pid 9054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9034] <... mount resumed>) = -1 EEXIST (File exists) [pid 9025] <... mmap resumed>) = 0x7ff2ac333000 [pid 5083] rmdir("./117/file0" [pid 5080] <... unlink resumed>) = 0 [pid 9054] <... mmap resumed>) = 0x7ff2b3754000 [pid 9034] ioctl(4, LOOP_CLR_FD [pid 9025] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 9054] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9025] <... mprotect resumed>) = 0 [pid 5083] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9054] <... mprotect resumed>) = 0 [pid 9025] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(3 [pid 9054] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] lstat("./117/.log", [pid 5080] <... close resumed>) = 0 [pid 9025] <... clone resumed>, parent_tid=[9056], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9056 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] rmdir("./117" [pid 9054] <... clone resumed>, parent_tid=[9057], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9057 [pid 9025] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./117/.log" [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9025] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9057 attached [pid 9054] <... futex resumed>) = 0 [pid 9025] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] getdents64(3, [pid 5080] mkdir("./118", 0777 [pid 9057] set_robust_list(0x7ff2b37749e0, 24 [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 9057] <... set_robust_list resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 9056 attached [pid 5083] rmdir("./117" [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9057] memfd_create("syzkaller", 0 [pid 9056] set_robust_list(0x7ff2ac3539e0, 24 [pid 5083] <... rmdir resumed>) = 0 [pid 9057] <... memfd_create resumed>) = 3 [pid 9056] <... set_robust_list resumed>) = 0 [pid 5083] mkdir("./118", 0777 [pid 5080] <... openat resumed>) = 3 [pid 9057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9056] openat(AT_FDCWD, ".log", O_RDONLY [pid 5083] <... mkdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9057] <... mmap resumed>) = 0x7ff2ab354000 [pid 9056] <... openat resumed>) = 5 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9056] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 5080] close(3 [pid 9056] <... futex resumed>) = 1 [pid 9025] <... futex resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 9056] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9058 ./strace-static-x86_64: Process 9058 attached [pid 9025] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9056] <... futex resumed>) = 0 [pid 9025] <... futex resumed>) = 1 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9056] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 254.866297][ T9034] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9034) [ 254.871892][ T9026] BTRFS info (device loop0): balance: start -s [ 254.903766][ T9026] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 9025] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9059 [pid 9058] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9058] chdir("./118") = 0 [pid 9058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9058] setpgid(0, 0) = 0 [pid 9058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9058] write(3, "1000", 4./strace-static-x86_64: Process 9059 attached ) = 4 [pid 9058] close(3) = 0 [pid 9059] set_robust_list(0x5555559d56e0, 24 [pid 9058] symlink("/dev/binderfs", "./binderfs" [pid 9059] <... set_robust_list resumed>) = 0 [pid 9058] <... symlink resumed>) = 0 [pid 9058] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9058] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9059] chdir("./118" [pid 9058] <... mprotect resumed>) = 0 [pid 9058] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9059] <... chdir resumed>) = 0 [pid 9058] <... clone resumed>, parent_tid=[9060], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9060 [pid 9059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9059] <... prctl resumed>) = 0 [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9059] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 9060 attached [pid 9059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9059] write(3, "1000", 4 [pid 9060] set_robust_list(0x7ff2b37749e0, 24 [pid 9059] <... write resumed>) = 4 [pid 9060] <... set_robust_list resumed>) = 0 [pid 9059] close(3 [pid 9060] memfd_create("syzkaller", 0) = 3 [pid 9059] <... close resumed>) = 0 [pid 9060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9059] symlink("/dev/binderfs", "./binderfs" [pid 9060] <... mmap resumed>) = 0x7ff2ab354000 [pid 9059] <... symlink resumed>) = 0 [pid 9059] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9059] <... futex resumed>) = 0 [pid 9059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9059] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9059] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9061], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9061 [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9061 attached [pid 9061] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9061] memfd_create("syzkaller", 0) = 3 [pid 9061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 254.994143][ T9056] BTRFS info (device loop0): scrub: started on devid 1 [ 255.008868][ T9026] BTRFS info (device loop0): balance: ended with status: 0 [ 255.021191][ T9056] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [pid 9056] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9056] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9056] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9026] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9026] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9026] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9025] exit_group(0 [pid 9056] <... futex resumed>) = ? [pid 9026] <... futex resumed>) = ? [pid 9025] <... exit_group resumed>) = ? [pid 9056] +++ exited with 0 +++ [pid 9026] +++ exited with 0 +++ [pid 9025] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9025, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=29 /* 0.29 s */} --- [pid 5078] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./116/binderfs") = 0 [pid 5078] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5078] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./116/file0") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./116" [pid 9053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./117", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = 0 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9062 ./strace-static-x86_64: Process 9062 attached [pid 9062] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9062] chdir("./117") = 0 [pid 9062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9062] setpgid(0, 0) = 0 [pid 9062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9062] write(3, "1000", 4) = 4 [pid 9062] close(3) = 0 [pid 9062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9062] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9062] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9062] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9063], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9063 [pid 9034] <... ioctl resumed>) = 0 [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9034] close(4./strace-static-x86_64: Process 9063 attached [pid 9063] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9063] memfd_create("syzkaller", 0) = 3 [pid 9034] <... close resumed>) = 0 [pid 9063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9063] <... mmap resumed>) = 0x7ff2ab354000 [pid 9034] <... futex resumed>) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9033] <... futex resumed>) = 0 [pid 9034] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9034] <... openat resumed>) = 3 [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9033] <... futex resumed>) = 0 [pid 9034] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9034] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9033] <... futex resumed>) = 0 [pid 9034] openat(AT_FDCWD, ".log", O_RDONLY [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9034] <... openat resumed>) = 4 [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9033] <... futex resumed>) = 0 [pid 9034] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9034] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] exit_group(0 [pid 9034] <... futex resumed>) = ? [pid 9033] <... exit_group resumed>) = ? [pid 9034] +++ exited with 0 +++ [pid 9033] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9033, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./117/binderfs") = 0 [pid 5081] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4 [pid 9057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./117/file0") = 0 [pid 5081] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./117/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./117/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./117") = 0 [pid 5081] mkdir("./118", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9064 ./strace-static-x86_64: Process 9064 attached [pid 9064] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9064] chdir("./118") = 0 [pid 9064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9064] setpgid(0, 0) = 0 [pid 9064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9064] write(3, "1000", 4) = 4 [pid 9064] close(3) = 0 [pid 9064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9064] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9064] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9064] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9065], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9065 [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9065 attached [pid 9065] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9065] memfd_create("syzkaller", 0 [pid 9060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9065] <... memfd_create resumed>) = 3 [pid 9065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 255.516756][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.523065][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [pid 9061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9053] <... write resumed>) = 16777216 [pid 9053] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9053] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9053] close(3) = 0 [pid 9053] mkdir("./file0", 0777) = 0 [ 255.816627][ T9053] loop1: detected capacity change from 0 to 32768 [ 255.841471][ T9053] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (9053) [pid 9053] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9057] <... write resumed>) = 16777216 [pid 9057] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9057] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9057] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9057] close(3) = 0 [pid 9057] mkdir("./file0", 0777) = 0 [ 255.987509][ T9057] loop5: detected capacity change from 0 to 32768 [ 255.994567][ T9053] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 256.018698][ T9053] BTRFS info (device loop1): setting nodatasum [pid 9057] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9060] <... write resumed>) = 16777216 [ 256.035337][ T9053] BTRFS info (device loop1): allowing degraded mounts [ 256.042128][ T9053] BTRFS info (device loop1): use zlib compression, level 3 [ 256.056068][ T9057] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9057) [pid 9057] ioctl(4, LOOP_CLR_FD [pid 9061] <... write resumed>) = 16777216 [pid 9060] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9060] ioctl(4, LOOP_SET_FD, 3 [pid 9061] munmap(0x7ff2ab354000, 16777216 [pid 9060] <... ioctl resumed>) = 0 [pid 9061] <... munmap resumed>) = 0 [pid 9061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9060] close(3 [pid 9061] ioctl(4, LOOP_SET_FD, 3 [ 256.115419][ T9053] BTRFS info (device loop1): using free space tree [ 256.128717][ T9060] loop4: detected capacity change from 0 to 32768 [pid 9060] <... close resumed>) = 0 [pid 9061] <... ioctl resumed>) = 0 [pid 9060] mkdir("./file0", 0777) = 0 [pid 9060] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9061] close(3) = 0 [pid 9061] mkdir("./file0", 0777) = 0 [ 256.158108][ T9061] loop2: detected capacity change from 0 to 32768 [ 256.169374][ T9060] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9060) [pid 9061] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9060] <... mount resumed>) = -1 EEXIST (File exists) [pid 9060] ioctl(4, LOOP_CLR_FD [pid 9061] <... mount resumed>) = -1 EEXIST (File exists) [pid 9061] ioctl(4, LOOP_CLR_FD [pid 9063] <... write resumed>) = 16777216 [pid 9063] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 256.238086][ T9061] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9061) [ 256.285003][ T9063] loop0: detected capacity change from 0 to 32768 [pid 9063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9063] close(3) = 0 [pid 9063] mkdir("./file0", 0777) = 0 [pid 9063] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9061] <... ioctl resumed>) = 0 [pid 9061] close(4 [pid 9063] <... mount resumed>) = -1 EEXIST (File exists) [pid 9061] <... close resumed>) = 0 [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9063] ioctl(4, LOOP_CLR_FD [pid 9061] <... futex resumed>) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9059] <... futex resumed>) = 0 [pid 9061] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9061] <... openat resumed>) = 3 [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9059] <... futex resumed>) = 0 [pid 9061] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9061] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9059] <... futex resumed>) = 0 [pid 9061] openat(AT_FDCWD, ".log", O_RDONLY [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9061] <... openat resumed>) = 4 [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9059] <... futex resumed>) = 0 [pid 9061] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9061] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [ 256.397111][ T9063] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9063) [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9057] <... ioctl resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] exit_group(0) = ? [pid 9061] <... futex resumed>) = ? [pid 9057] close(4 [pid 9061] +++ exited with 0 +++ [pid 9059] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9059, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5080] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9065] <... write resumed>) = 16777216 [pid 9057] <... close resumed>) = 0 [pid 9065] munmap(0x7ff2ab354000, 16777216 [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] <... munmap resumed>) = 0 [pid 9057] <... futex resumed>) = 1 [pid 9054] <... futex resumed>) = 0 [pid 9065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] <... openat resumed>) = 4 [pid 9057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9054] <... futex resumed>) = 0 [pid 9065] ioctl(4, LOOP_SET_FD, 3 [pid 9057] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9057] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9054] <... futex resumed>) = 0 [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9054] <... futex resumed>) = 0 [pid 9057] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9057] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] fstat(3, [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9057] <... futex resumed>) = 1 [pid 9054] <... futex resumed>) = 0 [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9054] <... futex resumed>) = 0 [pid 9057] openat(AT_FDCWD, ".log", O_RDONLY [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9057] <... openat resumed>) = 4 [pid 5080] getdents64(3, [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9054] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9054] <... futex resumed>) = 0 [pid 9065] <... ioctl resumed>) = 0 [pid 9057] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9065] close(3 [pid 9057] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] lstat("./118/binderfs", [pid 9065] <... close resumed>) = 0 [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] mkdir("./file0", 0777 [pid 9057] <... futex resumed>) = 1 [pid 9054] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9065] <... mkdir resumed>) = 0 [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] exit_group(0 [pid 5080] unlink("./118/binderfs" [pid 9065] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9057] <... futex resumed>) = ? [ 256.453714][ T9053] BTRFS info (device loop1): enabling ssd optimizations [ 256.461059][ T9053] BTRFS info (device loop1): auto enabling async discard [ 256.483901][ T9065] loop3: detected capacity change from 0 to 32768 [ 256.491844][ T9053] BTRFS info (device loop1): checking UUID tree [pid 9054] <... exit_group resumed>) = ? [pid 5080] <... unlink resumed>) = 0 [pid 9057] +++ exited with 0 +++ [pid 9054] +++ exited with 0 +++ [pid 5080] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9054, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=19 /* 0.19 s */} --- [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./118/file0", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] fstat(3, [pid 5080] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5084] getdents64(3, [pid 5080] fstat(4, [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] lstat("./118/binderfs", [pid 5080] getdents64(4, [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] unlink("./118/binderfs" [pid 5080] close(4 [pid 5084] <... unlink resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5084] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./118/file0" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 5084] lstat("./118/file0", [pid 5080] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./118/.log", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] unlink("./118/.log" [pid 5084] <... openat resumed>) = 4 [pid 5080] <... unlink resumed>) = 0 [pid 5084] fstat(4, [pid 5080] getdents64(3, [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] getdents64(4, [pid 5080] close(3 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... close resumed>) = 0 [pid 5084] getdents64(4, [pid 5080] rmdir("./118" [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5084] close(4 [pid 5080] mkdir("./119", 0777 [pid 5084] <... close resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5084] rmdir("./118/file0" [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5084] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9065] <... mount resumed>) = -1 EEXIST (File exists) [pid 9053] <... mount resumed>) = 0 [pid 5084] lstat("./118/.log", [ 256.526499][ T9065] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9065) [pid 5080] close(3 [pid 9053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 9053] <... openat resumed>) = 3 [pid 5084] unlink("./118/.log" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9053] chdir("./file0" [pid 5084] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 9083 attached [pid 9053] <... chdir resumed>) = 0 [pid 5084] getdents64(3, [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9083 [pid 9053] ioctl(4, LOOP_CLR_FD [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9053] <... ioctl resumed>) = 0 [pid 5084] close(3 [pid 9053] close(4 [pid 5084] <... close resumed>) = 0 [pid 9053] <... close resumed>) = 0 [pid 5084] rmdir("./118" [pid 9053] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 9053] <... futex resumed>) = 1 [pid 9048] <... futex resumed>) = 0 [pid 5084] mkdir("./119", 0777 [pid 9083] set_robust_list(0x5555559d56e0, 24 [pid 9053] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9048] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mkdir resumed>) = 0 [pid 9065] ioctl(4, LOOP_CLR_FD [pid 9053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9048] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9083] <... set_robust_list resumed>) = 0 [pid 9053] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9048] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 3 [pid 9083] chdir("./119" [pid 9053] <... openat resumed>) = 4 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9053] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9053] <... futex resumed>) = 1 [pid 9048] <... futex resumed>) = 0 [pid 5084] close(3 [pid 9053] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9048] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 9053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9048] <... futex resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9083] <... chdir resumed>) = 0 [pid 9053] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9048] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9084 [pid 9083] <... prctl resumed>) = 0 [pid 9083] setpgid(0, 0./strace-static-x86_64: Process 9084 attached ) = 0 [pid 9084] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9084] chdir("./119" [pid 9083] <... openat resumed>) = 3 [pid 9084] <... chdir resumed>) = 0 [pid 9083] write(3, "1000", 4 [pid 9084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9083] <... write resumed>) = 4 [pid 9084] <... prctl resumed>) = 0 [pid 9084] setpgid(0, 0) = 0 [pid 9084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9083] close(3 [pid 9084] write(3, "1000", 4) = 4 [pid 9083] <... close resumed>) = 0 [pid 9084] close(3 [pid 9083] symlink("/dev/binderfs", "./binderfs" [pid 9084] <... close resumed>) = 0 [pid 9084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9084] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] <... symlink resumed>) = 0 [pid 9084] <... futex resumed>) = 0 [pid 9083] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9083] <... futex resumed>) = 0 [pid 9084] <... mmap resumed>) = 0x7ff2b3754000 [pid 9083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9084] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9083] <... mmap resumed>) = 0x7ff2b3754000 [pid 9084] <... mprotect resumed>) = 0 [pid 9084] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9083] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9084] <... clone resumed>, parent_tid=[9086], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9086 [pid 9083] <... mprotect resumed>) = 0 [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9084] <... futex resumed>) = 0 [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9086 attached [pid 9083] <... clone resumed>, parent_tid=[9087], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9087 [pid 9086] set_robust_list(0x7ff2b37749e0, 24 [pid 9083] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 256.637520][ T9053] BTRFS info (device loop1): balance: start -s [pid 9083] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9086] <... set_robust_list resumed>) = 0 [pid 9048] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9086] memfd_create("syzkaller", 0 [pid 9048] <... futex resumed>) = 0 [pid 9086] <... memfd_create resumed>) = 3 [pid 9048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9048] <... mmap resumed>) = 0x7ff2ac333000 [pid 9086] <... mmap resumed>) = 0x7ff2ab354000 [pid 9048] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9048] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9060] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 9087 attached [pid 9060] close(4 [pid 9048] <... clone resumed>, parent_tid=[9088], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9088 [pid 9060] <... close resumed>) = 0 [pid 9048] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... futex resumed>) = 0 [pid 9060] <... futex resumed>) = 1 [pid 9048] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 9088 attached [pid 9088] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 9088] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 9088] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9048] <... futex resumed>) = 0 [pid 9088] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9048] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9048] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9087] set_robust_list(0x7ff2b37749e0, 24 [pid 9058] <... futex resumed>) = 0 [pid 9087] <... set_robust_list resumed>) = 0 [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9060] <... futex resumed>) = 0 [pid 9058] <... futex resumed>) = 1 [pid 9087] memfd_create("syzkaller", 0 [pid 9060] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9087] <... memfd_create resumed>) = 3 [pid 9060] <... openat resumed>) = 3 [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] <... mmap resumed>) = 0x7ff2ab354000 [pid 9060] <... futex resumed>) = 0 [pid 9058] <... futex resumed>) = 1 [pid 9060] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 256.705647][ T9053] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9060] <... futex resumed>) = 0 [pid 9058] <... futex resumed>) = 1 [pid 9060] openat(AT_FDCWD, ".log", O_RDONLY [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9060] <... openat resumed>) = 4 [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9058] <... futex resumed>) = 0 [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9058] <... futex resumed>) = 0 [pid 9060] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9060] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9058] <... futex resumed>) = 0 [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9058] exit_group(0 [pid 9060] <... futex resumed>) = ? [pid 9058] <... exit_group resumed>) = ? [pid 9060] +++ exited with 0 +++ [pid 9058] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9058, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=23 /* 0.23 s */} --- [pid 9063] <... ioctl resumed>) = 0 [pid 9063] close(4 [pid 5083] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9063] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9063] <... futex resumed>) = 1 [pid 5083] <... openat resumed>) = 3 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] fstat(3, [pid 9062] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 9063] <... futex resumed>) = 0 [pid 9062] <... futex resumed>) = 1 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9063] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9063] <... openat resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./118/binderfs", [pid 9063] <... futex resumed>) = 1 [pid 9062] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 256.788433][ T9088] BTRFS info (device loop1): scrub: started on devid 1 [ 256.789294][ T9053] BTRFS info (device loop1): balance: ended with status: 0 [ 256.826493][ T9088] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./118/binderfs" [pid 9063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9062] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 9088] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9063] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9088] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9063] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9088] <... futex resumed>) = 0 [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./118/file0", [pid 9088] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9063] <... futex resumed>) = 1 [pid 9062] <... futex resumed>) = 0 [pid 9053] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9053] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9062] <... futex resumed>) = 0 [pid 9053] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9063] openat(AT_FDCWD, ".log", O_RDONLY [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9053] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9048] exit_group(0 [pid 5083] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9088] <... futex resumed>) = ? [pid 9063] <... openat resumed>) = 4 [pid 9053] <... futex resumed>) = ? [pid 9048] <... exit_group resumed>) = ? [pid 5083] <... openat resumed>) = 4 [pid 9088] +++ exited with 0 +++ [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(4, [pid 9063] <... futex resumed>) = 1 [pid 9062] <... futex resumed>) = 0 [pid 9053] +++ exited with 0 +++ [pid 9048] +++ exited with 0 +++ [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9048, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 9063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9062] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9063] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] getdents64(4, [pid 9063] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(4 [pid 9063] <... futex resumed>) = 1 [pid 9062] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9062] exit_group(0 [pid 5083] rmdir("./118/file0" [pid 5079] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9063] <... futex resumed>) = ? [pid 9062] <... exit_group resumed>) = ? [pid 5083] <... rmdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9063] +++ exited with 0 +++ [pid 9062] +++ exited with 0 +++ [pid 5083] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 3 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9062, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5083] lstat("./118/.log", [pid 5079] fstat(3, [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] unlink("./118/.log" [pid 5079] getdents64(3, [pid 5078] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... unlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] getdents64(3, [pid 5079] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5083] close(3 [pid 5079] lstat("./118/binderfs", [pid 5078] fstat(3, [pid 5083] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] rmdir("./118" [pid 5079] unlink("./118/binderfs" [pid 5078] getdents64(3, [pid 5083] <... rmdir resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] mkdir("./119", 0777 [pid 5079] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] lstat("./117/binderfs", [pid 5083] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5078] unlink("./117/binderfs" [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... unlink resumed>) = 0 [pid 5083] close(3 [pid 5078] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9089 [pid 5078] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./117/file0") = 0 [pid 5078] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = 0 [pid 5078] lstat("./117/.log", ./strace-static-x86_64: Process 9089 attached {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9089] set_robust_list(0x5555559d56e0, 24 [pid 5078] unlink("./117/.log" [pid 5079] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 9089] <... set_robust_list resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 9089] chdir("./119" [pid 5079] lstat("./118/file0", [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] close(3 [pid 5079] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./117" [pid 9089] <... chdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... rmdir resumed>) = 0 [pid 9089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9065] <... ioctl resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] mkdir("./118", 0777 [pid 5079] fstat(4, [pid 5078] <... mkdir resumed>) = 0 [pid 9089] <... prctl resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9089] setpgid(0, 0 [pid 5079] getdents64(4, [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5079] close(4 [pid 5078] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] rmdir("./118/file0") = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9090 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./118") = 0 ./strace-static-x86_64: Process 9090 attached [pid 9089] <... setpgid resumed>) = 0 [pid 5079] mkdir("./119", 0777 [pid 9090] set_robust_list(0x5555559d56e0, 24 [pid 9089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... mkdir resumed>) = 0 [pid 9090] <... set_robust_list resumed>) = 0 [pid 9089] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9090] chdir("./118" [pid 9089] write(3, "1000", 4 [pid 5079] <... openat resumed>) = 3 [pid 9090] <... chdir resumed>) = 0 [pid 9089] <... write resumed>) = 4 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9089] close(3 [pid 5079] <... ioctl resumed>) = 0 [pid 9090] <... prctl resumed>) = 0 [pid 9089] <... close resumed>) = 0 [pid 5079] close(3 [pid 9090] setpgid(0, 0 [pid 9089] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... close resumed>) = 0 [pid 9090] <... setpgid resumed>) = 0 [pid 9089] <... symlink resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9089] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9090] <... openat resumed>) = 3 [pid 9089] <... futex resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9091 [pid 9090] write(3, "1000", 4 [pid 9089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9090] <... write resumed>) = 4 [pid 9089] <... mmap resumed>) = 0x7ff2b3754000 [pid 9090] close(3 [pid 9089] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9065] close(4./strace-static-x86_64: Process 9091 attached [pid 9090] <... close resumed>) = 0 [pid 9089] <... mprotect resumed>) = 0 [pid 9091] set_robust_list(0x5555559d56e0, 24 [pid 9090] symlink("/dev/binderfs", "./binderfs" [pid 9091] <... set_robust_list resumed>) = 0 [pid 9090] <... symlink resumed>) = 0 [pid 9089] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9065] <... close resumed>) = 0 [pid 9091] chdir("./119" [pid 9090] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] <... chdir resumed>) = 0 [pid 9090] <... futex resumed>) = 0 [pid 9089] <... clone resumed>, parent_tid=[9092], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9092 [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] <... futex resumed>) = 1 [pid 9064] <... futex resumed>) = 0 [pid 9091] <... prctl resumed>) = 0 [pid 9090] <... mmap resumed>) = 0x7ff2b3754000 [pid 9089] <... futex resumed>) = 0 [pid 9065] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9092 attached [pid 9091] setpgid(0, 0 [pid 9090] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9065] <... openat resumed>) = 3 [pid 9064] <... futex resumed>) = 0 [pid 9091] <... setpgid resumed>) = 0 [pid 9090] <... mprotect resumed>) = 0 [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9090] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9065] <... futex resumed>) = 0 [pid 9064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9092] set_robust_list(0x7ff2b37749e0, 24 [pid 9091] <... openat resumed>) = 3 [pid 9065] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9092] <... set_robust_list resumed>) = 0 [pid 9091] write(3, "1000", 4 [pid 9090] <... clone resumed>, parent_tid=[9093], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9093 [pid 9065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9064] <... futex resumed>) = 0 [pid 9092] memfd_create("syzkaller", 0 [pid 9091] <... write resumed>) = 4 [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9092] <... memfd_create resumed>) = 3 [pid 9091] close(3 [pid 9090] <... futex resumed>) = 0 [pid 9092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9091] <... close resumed>) = 0 [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9065] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) ./strace-static-x86_64: Process 9093 attached [pid 9091] symlink("/dev/binderfs", "./binderfs" [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9093] set_robust_list(0x7ff2b37749e0, 24 [pid 9092] <... mmap resumed>) = 0x7ff2ab354000 [pid 9091] <... symlink resumed>) = 0 [pid 9065] <... futex resumed>) = 1 [pid 9064] <... futex resumed>) = 0 [pid 9093] <... set_robust_list resumed>) = 0 [pid 9091] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9093] memfd_create("syzkaller", 0 [pid 9091] <... futex resumed>) = 0 [pid 9093] <... memfd_create resumed>) = 3 [pid 9091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9091] <... mmap resumed>) = 0x7ff2b3754000 [pid 9093] <... mmap resumed>) = 0x7ff2ab354000 [pid 9091] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9065] openat(AT_FDCWD, ".log", O_RDONLY [pid 9064] <... futex resumed>) = 0 [pid 9091] <... clone resumed>, parent_tid=[9094], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9094 [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9065] <... openat resumed>) = 4 [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9064] <... futex resumed>) = 0 [pid 9065] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9064] <... futex resumed>) = 0 [pid 9065] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9065] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9064] <... futex resumed>) = 0 [pid 9065] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9064] exit_group(0 [pid 9065] <... futex resumed>) = ? [pid 9064] <... exit_group resumed>) = ? [pid 9065] +++ exited with 0 +++ [pid 9064] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9064, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=22 /* 0.22 s */} --- ./strace-static-x86_64: Process 9094 attached [pid 9087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9094] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9094] <... set_robust_list resumed>) = 0 [pid 5081] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9094] memfd_create("syzkaller", 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9094] <... memfd_create resumed>) = 3 [pid 5081] unlink("./118/binderfs") = 0 [pid 5081] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9094] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] lstat("./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./118/file0") = 0 [pid 5081] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./118/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./118/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./118") = 0 [pid 5081] mkdir("./119", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9095 ./strace-static-x86_64: Process 9095 attached [pid 9095] set_robust_list(0x5555559d56e0, 24 [pid 9086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9095] <... set_robust_list resumed>) = 0 [pid 9095] chdir("./119") = 0 [pid 9095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9095] setpgid(0, 0) = 0 [pid 9095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9095] write(3, "1000", 4) = 4 [pid 9095] close(3) = 0 [pid 9095] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9095] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9095] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9096], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9096 [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9096 attached [pid 9096] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9096] memfd_create("syzkaller", 0) = 3 [pid 9096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9087] <... write resumed>) = 16777216 [pid 9096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9087] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9087] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9087] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9087] close(3) = 0 [pid 9087] mkdir("./file0", 0777) = 0 [ 257.661275][ T9087] loop2: detected capacity change from 0 to 32768 [ 257.698141][ T9087] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor373 (9087) [pid 9087] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9086] <... write resumed>) = 16777216 [pid 9086] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9086] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 257.775738][ T9087] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 257.784992][ T9087] BTRFS info (device loop2): setting nodatasum [ 257.796318][ T9086] loop5: detected capacity change from 0 to 32768 [ 257.815340][ T9087] BTRFS info (device loop2): allowing degraded mounts [pid 9086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9086] close(3) = 0 [pid 9086] mkdir("./file0", 0777) = 0 [pid 9086] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 257.822124][ T9087] BTRFS info (device loop2): use zlib compression, level 3 [ 257.845556][ T9086] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9086) [ 257.865567][ T9087] BTRFS info (device loop2): using free space tree [pid 9086] ioctl(4, LOOP_CLR_FD [pid 9092] <... write resumed>) = 16777216 [pid 9092] munmap(0x7ff2ab354000, 16777216 [pid 9093] <... write resumed>) = 16777216 [pid 9093] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9093] ioctl(4, LOOP_SET_FD, 3 [pid 9092] <... munmap resumed>) = 0 [pid 9092] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9092] ioctl(4, LOOP_SET_FD, 3 [pid 9093] <... ioctl resumed>) = 0 [pid 9094] <... write resumed>) = 16777216 [pid 9093] close(3 [pid 9094] munmap(0x7ff2ab354000, 16777216 [pid 9093] <... close resumed>) = 0 [pid 9094] <... munmap resumed>) = 0 [pid 9093] mkdir("./file0", 0777) = 0 [pid 9093] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9094] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9094] ioctl(4, LOOP_SET_FD, 3 [pid 9093] <... mount resumed>) = -1 EEXIST (File exists) [pid 9093] ioctl(4, LOOP_CLR_FD [pid 9092] <... ioctl resumed>) = 0 [pid 9092] close(3) = 0 [ 257.995258][ T9093] loop0: detected capacity change from 0 to 32768 [ 257.997191][ T9092] loop4: detected capacity change from 0 to 32768 [ 258.023726][ T9093] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9093) [ 258.039083][ T9094] loop1: detected capacity change from 0 to 32768 [pid 9092] mkdir("./file0", 0777) = 0 [pid 9094] <... ioctl resumed>) = 0 [pid 9094] close(3 [pid 9092] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9094] <... close resumed>) = 0 [pid 9094] mkdir("./file0", 0777) = 0 [pid 9094] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9092] <... mount resumed>) = -1 EEXIST (File exists) [pid 9092] ioctl(4, LOOP_CLR_FD [pid 9094] <... mount resumed>) = -1 EEXIST (File exists) [pid 9094] ioctl(4, LOOP_CLR_FD [pid 9086] <... ioctl resumed>) = 0 [ 258.065154][ T9092] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9092) [ 258.078672][ T9094] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9094) [ 258.090846][ T9087] BTRFS info (device loop2): enabling ssd optimizations [ 258.098679][ T9087] BTRFS info (device loop2): auto enabling async discard [pid 9086] close(4) = 0 [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9084] <... futex resumed>) = 0 [pid 9086] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9086] <... openat resumed>) = 3 [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9087] <... mount resumed>) = 0 [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9084] <... futex resumed>) = 0 [pid 9087] <... openat resumed>) = 3 [pid 9086] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9087] chdir("./file0" [ 258.144555][ T9087] BTRFS info (device loop2): checking UUID tree [pid 9086] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9087] <... chdir resumed>) = 0 [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] ioctl(4, LOOP_CLR_FD [pid 9086] <... futex resumed>) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9087] <... ioctl resumed>) = 0 [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] close(4 [pid 9086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9084] <... futex resumed>) = 0 [pid 9093] <... ioctl resumed>) = 0 [pid 9087] <... close resumed>) = 0 [pid 9086] openat(AT_FDCWD, ".log", O_RDONLY [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9093] close(4 [pid 9087] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9096] <... write resumed>) = 16777216 [pid 9096] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9096] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9096] ioctl(4, LOOP_SET_FD, 3 [pid 9093] <... close resumed>) = 0 [pid 9087] <... futex resumed>) = 1 [pid 9086] <... openat resumed>) = 4 [pid 9083] <... futex resumed>) = 0 [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9093] <... futex resumed>) = 1 [pid 9090] <... futex resumed>) = 0 [pid 9087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9086] <... futex resumed>) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9083] <... futex resumed>) = 0 [pid 9093] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9090] <... futex resumed>) = 0 [pid 9093] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9087] <... openat resumed>) = 4 [pid 9086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9084] <... futex resumed>) = 0 [pid 9093] <... openat resumed>) = 3 [pid 9087] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9086] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] <... futex resumed>) = 1 [pid 9086] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9083] <... futex resumed>) = 0 [pid 9093] <... futex resumed>) = 1 [pid 9090] <... futex resumed>) = 0 [pid 9087] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9093] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9086] <... futex resumed>) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9083] <... futex resumed>) = 0 [pid 9093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9090] <... futex resumed>) = 0 [pid 9087] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] exit_group(0 [pid 9083] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9093] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9086] <... futex resumed>) = ? [pid 9084] <... exit_group resumed>) = ? [pid 9093] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9086] +++ exited with 0 +++ [pid 9084] +++ exited with 0 +++ [ 258.231273][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 258.231286][ T27] audit: type=1804 audit(1680236941.702:715): pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/119/.log" dev="sda1" ino=1161 res=1 errno=0 [ 258.249294][ T9096] loop3: detected capacity change from 0 to 32768 [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9084, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 9093] <... futex resumed>) = 1 [pid 9090] <... futex resumed>) = 0 [pid 9093] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9090] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 9093] openat(AT_FDCWD, ".log", O_RDONLY [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9093] <... openat resumed>) = 4 [pid 5084] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./119/binderfs") = 0 [pid 5084] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./119/file0") = 0 [pid 5084] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./119/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] unlink("./119/.log" [pid 9083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... unlink resumed>) = 0 [pid 9083] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 9083] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] close(3 [pid 9083] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] <... close resumed>) = 0 [pid 9083] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] rmdir("./119" [pid 9083] <... mprotect resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 9083] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] mkdir("./120", 0777./strace-static-x86_64: Process 9115 attached [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mkdir resumed>) = 0 [pid 9093] <... futex resumed>) = 1 [pid 9090] <... futex resumed>) = 0 [pid 9083] <... clone resumed>, parent_tid=[9115], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9115 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9115] set_robust_list(0x7ff2ac3539e0, 24 [pid 9093] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 9115] <... set_robust_list resumed>) = 0 [pid 9093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9090] <... futex resumed>) = 0 [pid 9083] <... futex resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9115] openat(AT_FDCWD, ".log", O_RDONLY [pid 9093] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9083] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9115] <... openat resumed>) = 5 [pid 9093] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [ 258.311742][ T9087] BTRFS info (device loop2): balance: start -s [ 258.327166][ T9087] BTRFS info (device loop2): relocating block group 1048576 flags system [ 258.337276][ T27] audit: type=1804 audit(1680236941.812:716): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/118/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5084] close(3 [pid 9115] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9092] <... ioctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9116 [pid 9096] <... ioctl resumed>) = 0 [pid 9096] close(3) = 0 [pid 9096] mkdir("./file0", 0777) = 0 [pid 9096] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,"./strace-static-x86_64: Process 9116 attached [pid 9115] <... futex resumed>) = 1 [pid 9093] <... futex resumed>) = 1 [pid 9092] close(4 [pid 9090] <... futex resumed>) = 0 [pid 9083] <... futex resumed>) = 0 [pid 9083] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9115] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9090] exit_group(0 [pid 9083] <... futex resumed>) = 0 [pid 9116] set_robust_list(0x5555559d56e0, 24 [pid 9092] <... close resumed>) = 0 [pid 9090] <... exit_group resumed>) = ? [pid 9083] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] <... set_robust_list resumed>) = 0 [pid 9093] +++ exited with 0 +++ [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9090] +++ exited with 0 +++ [pid 9116] chdir("./120" [pid 9092] <... futex resumed>) = 1 [pid 9089] <... futex resumed>) = 0 [pid 9116] <... chdir resumed>) = 0 [pid 9092] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9090, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 9116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9089] <... futex resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 9116] <... prctl resumed>) = 0 [pid 9092] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... restart_syscall resumed>) = 0 [pid 9116] setpgid(0, 0 [pid 9092] <... openat resumed>) = 3 [pid 9116] <... setpgid resumed>) = 0 [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9092] <... futex resumed>) = 1 [pid 9089] <... futex resumed>) = 0 [pid 9116] <... openat resumed>) = 3 [pid 9092] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [ 258.380381][ T27] audit: type=1804 audit(1680236941.842:717): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/119/file0/.log" dev="loop2" ino=263 res=1 errno=0 [ 258.397775][ T9096] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9096) [ 258.408921][ T9087] BTRFS info (device loop2): balance: ended with status: 0 [ 258.417436][ T9115] BTRFS info (device loop2): scrub: started on devid 1 [pid 9116] write(3, "1000", 4 [pid 9092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9089] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9116] <... write resumed>) = 4 [pid 9092] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] close(3 [pid 9092] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9116] <... close resumed>) = 0 [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] symlink("/dev/binderfs", "./binderfs" [pid 9092] <... futex resumed>) = 1 [pid 9089] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9116] <... symlink resumed>) = 0 [pid 9092] openat(AT_FDCWD, ".log", O_RDONLY [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9092] <... openat resumed>) = 4 [pid 9087] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5078] fstat(3, [pid 9096] <... mount resumed>) = -1 EEXIST (File exists) [pid 9096] ioctl(4, LOOP_CLR_FD [pid 9089] <... futex resumed>) = 0 [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, [pid 9116] <... futex resumed>) = 0 [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9092] <... futex resumed>) = 1 [pid 9089] <... futex resumed>) = 0 [pid 9087] <... futex resumed>) = 0 [pid 5078] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9116] <... mmap resumed>) = 0x7ff2b3754000 [pid 9092] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9116] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9092] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9089] <... futex resumed>) = 0 [pid 5078] lstat("./118/binderfs", [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] <... mprotect resumed>) = 0 [pid 9089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9116] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9092] <... futex resumed>) = 0 [pid 9089] exit_group(0 [pid 5078] unlink("./118/binderfs" [pid 9089] <... exit_group resumed>) = ? [pid 9083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... unlink resumed>) = 0 [pid 9092] +++ exited with 0 +++ [pid 9089] +++ exited with 0 +++ [pid 9116] <... clone resumed>, parent_tid=[9117], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9117 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9089, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=24 /* 0.24 s */} --- [pid 5078] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9116] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9116] <... futex resumed>) = 0 [pid 9094] <... ioctl resumed>) = 0 [pid 5083] lstat("./119/binderfs", [pid 5078] lstat("./118/file0", [pid 9116] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./119/binderfs" [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9115] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9094] close(4 [pid 5083] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 9117 attached [pid 9115] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9094] <... close resumed>) = 0 [pid 5083] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9117] set_robust_list(0x7ff2b37749e0, 24 [pid 9115] <... futex resumed>) = 0 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9117] <... set_robust_list resumed>) = 0 [pid 9115] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9094] <... futex resumed>) = 1 [pid 9091] <... futex resumed>) = 0 [ 258.471174][ T27] audit: type=1804 audit(1680236941.942:718): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/119/.log" dev="sda1" ino=1157 res=1 errno=0 [ 258.501913][ T9115] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [pid 9083] exit_group(0 [pid 5083] lstat("./119/file0", [pid 5078] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9117] memfd_create("syzkaller", 0 [pid 9115] <... futex resumed>) = ? [pid 9094] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] <... futex resumed>) = ? [pid 9083] <... exit_group resumed>) = ? [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 4 [pid 9117] <... memfd_create resumed>) = 3 [pid 9115] +++ exited with 0 +++ [pid 9094] <... openat resumed>) = 3 [pid 9091] <... futex resumed>) = 0 [pid 9087] +++ exited with 0 +++ [pid 9083] +++ exited with 0 +++ [pid 5083] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(4, [pid 9117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9117] <... mmap resumed>) = 0x7ff2ab354000 [pid 9094] <... futex resumed>) = 0 [pid 9091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9094] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 4 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9083, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=26 /* 0.26 s */} --- [pid 5078] getdents64(4, [pid 9094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] fstat(4, [pid 9094] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9094] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9091] <... futex resumed>) = 0 [pid 5083] getdents64(4, [pid 5080] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9094] <... futex resumed>) = 0 [pid 5083] getdents64(4, [pid 9094] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(4 [pid 5080] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9094] <... futex resumed>) = 0 [pid 9091] <... futex resumed>) = 1 [pid 5083] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5078] close(4 [pid 9094] openat(AT_FDCWD, ".log", O_RDONLY [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] rmdir("./119/file0" [pid 5080] fstat(3, [pid 9094] <... openat resumed>) = 4 [pid 5083] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9094] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9094] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] lstat("./119/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./119/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./119") = 0 [pid 5083] mkdir("./120", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 9091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... close resumed>) = 0 [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./118/file0" [pid 9094] <... futex resumed>) = 0 [pid 9091] <... futex resumed>) = 1 [pid 9094] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9118 [pid 9094] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(3, [pid 5078] <... rmdir resumed>) = 0 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9094] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 9118 attached [pid 9118] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9118] chdir("./120") = 0 [pid 9118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9118] setpgid(0, 0) = 0 [pid 9118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9118] <... openat resumed>) = 3 [pid 9091] exit_group(0 [pid 5080] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9118] write(3, "1000", 4 [pid 9094] <... futex resumed>) = ? [pid 9091] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./118/.log", [pid 9118] <... write resumed>) = 4 [pid 9094] +++ exited with 0 +++ [pid 9118] close(3) = 0 [pid 9118] symlink("/dev/binderfs", "./binderfs" [pid 9091] +++ exited with 0 +++ [pid 5080] lstat("./119/binderfs", [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9091, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=33 /* 0.33 s */} --- [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./118/.log" [pid 5080] unlink("./119/binderfs" [pid 9118] <... symlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9118] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... unlink resumed>) = 0 [pid 5079] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 9118] <... futex resumed>) = 0 [pid 5080] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9118] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] close(3 [pid 9118] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9118] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9119], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9119 [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./118" [pid 5079] getdents64(3, [pid 5078] <... rmdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] mkdir("./119", 0777./strace-static-x86_64: Process 9119 attached [pid 9119] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 5079] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] lstat("./119/binderfs", [pid 5078] <... openat resumed>) = 3 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./119/binderfs" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9119] memfd_create("syzkaller", 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9119] <... memfd_create resumed>) = 3 [pid 5079] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [ 258.591741][ T27] audit: type=1804 audit(1680236942.062:719): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/119/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 9119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5079] lstat("./119/file0", [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9120 attached [pid 9120] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9120] chdir("./119") = 0 [pid 5079] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9120 [pid 5079] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9120] setpgid(0, 0 [pid 5079] fstat(4, [pid 9120] <... setpgid resumed>) = 0 [pid 9120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9120] write(3, "1000", 4) = 4 [pid 9120] close(3) = 0 [pid 9120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9120] <... mmap resumed>) = 0x7ff2b3754000 [pid 9120] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5079] getdents64(4, [pid 9120] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9121], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9121 [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./119/file0") = 0 [pid 5079] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9121 attached [pid 5079] lstat("./119/.log", [pid 9121] set_robust_list(0x7ff2b37749e0, 24 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9121] <... set_robust_list resumed>) = 0 [pid 5079] unlink("./119/.log" [pid 9121] memfd_create("syzkaller", 0 [pid 5079] <... unlink resumed>) = 0 [pid 9121] <... memfd_create resumed>) = 3 [pid 5079] getdents64(3, [pid 9121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9121] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] close(3) = 0 [pid 5079] rmdir("./119") = 0 [pid 5079] mkdir("./120", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 9096] <... ioctl resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9096] close(4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9122 [pid 9096] <... close resumed>) = 0 [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9095] <... futex resumed>) = 0 [pid 9096] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9096] <... openat resumed>) = 3 [pid 9095] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9122 attached [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9122] set_robust_list(0x5555559d56e0, 24 [pid 9096] <... futex resumed>) = 0 [pid 9095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9122] <... set_robust_list resumed>) = 0 [pid 9096] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9122] chdir("./120" [pid 9096] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9095] <... futex resumed>) = 0 [pid 9122] <... chdir resumed>) = 0 [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9096] <... futex resumed>) = 0 [pid 9095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9122] setpgid(0, 0 [pid 9096] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9122] <... setpgid resumed>) = 0 [pid 9096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9095] <... futex resumed>) = 0 [pid 9122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9096] openat(AT_FDCWD, ".log", O_RDONLY [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9122] <... openat resumed>) = 3 [pid 9122] write(3, "1000", 4 [pid 9096] <... openat resumed>) = 4 [pid 9122] <... write resumed>) = 4 [pid 9122] close(3) = 0 [pid 9122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9122] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9122] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9123], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9123 [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9095] <... futex resumed>) = 0 [pid 9096] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9096] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9095] <... futex resumed>) = 0 [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9096] <... futex resumed>) = 0 [pid 9095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 9123 attached [pid 9096] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9095] exit_group(0 [pid 9123] set_robust_list(0x7ff2b37749e0, 24 [pid 9096] <... futex resumed>) = ? [pid 9095] <... exit_group resumed>) = ? [pid 9096] +++ exited with 0 +++ [pid 9123] <... set_robust_list resumed>) = 0 [pid 9095] +++ exited with 0 +++ [pid 9123] memfd_create("syzkaller", 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9095, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 9123] <... memfd_create resumed>) = 3 [pid 9123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5081] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./119/binderfs") = 0 [pid 5081] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [ 258.786438][ T27] audit: type=1804 audit(1680236942.262:720): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/119/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 5081] rmdir("./119/file0") = 0 [pid 5081] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./119/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./119/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./119") = 0 [pid 5081] mkdir("./120", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9124 ./strace-static-x86_64: Process 9124 attached [pid 9124] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9124] chdir("./120") = 0 [pid 9124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9124] setpgid(0, 0) = 0 [pid 9124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9124] write(3, "1000", 4) = 4 [pid 9124] close(3) = 0 [pid 9124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9124] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9124] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9124] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9125], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9125 ./strace-static-x86_64: Process 9125 attached [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9125] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9124] <... futex resumed>) = 0 [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9125] memfd_create("syzkaller", 0) = 3 [pid 9125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./119/file0") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./119") = 0 [pid 5080] mkdir("./120", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9126 ./strace-static-x86_64: Process 9126 attached [pid 9126] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9126] chdir("./120") = 0 [pid 9126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9126] setpgid(0, 0 [pid 9119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9126] <... setpgid resumed>) = 0 [pid 9126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9126] write(3, "1000", 4) = 4 [pid 9126] close(3) = 0 [pid 9126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9126] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9126] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9126] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9127], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9127 [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9127 attached [pid 9127] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9127] memfd_create("syzkaller", 0 [pid 9121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9127] <... memfd_create resumed>) = 3 [pid 9127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9117] <... write resumed>) = 16777216 [pid 9117] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9117] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9117] ioctl(4, LOOP_SET_FD, 3 [pid 9127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9117] <... ioctl resumed>) = 0 [pid 9117] close(3) = 0 [pid 9117] mkdir("./file0", 0777) = 0 [ 259.490289][ T9117] loop5: detected capacity change from 0 to 32768 [ 259.539376][ T9117] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (9117) [pid 9117] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9119] <... write resumed>) = 16777216 [pid 9119] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9119] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9119] ioctl(4, LOOP_SET_FD, 3 [pid 9121] <... write resumed>) = 16777216 [pid 9119] <... ioctl resumed>) = 0 [pid 9121] munmap(0x7ff2ab354000, 16777216 [pid 9119] close(3) = 0 [ 259.579780][ T9117] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 259.599461][ T9119] loop4: detected capacity change from 0 to 32768 [ 259.608476][ T9117] BTRFS info (device loop5): setting nodatasum [pid 9119] mkdir("./file0", 0777 [pid 9121] <... munmap resumed>) = 0 [pid 9119] <... mkdir resumed>) = 0 [pid 9121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9121] ioctl(4, LOOP_SET_FD, 3 [pid 9119] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9119] ioctl(4, LOOP_CLR_FD [pid 9121] <... ioctl resumed>) = 0 [pid 9121] close(3) = 0 [pid 9123] <... write resumed>) = 16777216 [pid 9121] mkdir("./file0", 0777) = 0 [ 259.625335][ T9117] BTRFS info (device loop5): allowing degraded mounts [ 259.627840][ T9121] loop0: detected capacity change from 0 to 32768 [ 259.635559][ T9117] BTRFS info (device loop5): use zlib compression, level 3 [ 259.647003][ T9119] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9119) [ 259.666742][ T9117] BTRFS info (device loop5): using free space tree [pid 9121] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9125] <... write resumed>) = 16777216 [pid 9125] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9123] munmap(0x7ff2ab354000, 16777216 [pid 9121] <... mount resumed>) = -1 EEXIST (File exists) [pid 9125] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9123] <... munmap resumed>) = 0 [pid 9121] ioctl(4, LOOP_CLR_FD [pid 9125] <... openat resumed>) = 4 [pid 9123] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9125] ioctl(4, LOOP_SET_FD, 3 [pid 9123] <... openat resumed>) = 4 [pid 9125] <... ioctl resumed>) = 0 [pid 9123] ioctl(4, LOOP_SET_FD, 3 [pid 9125] close(3) = 0 [pid 9123] <... ioctl resumed>) = 0 [pid 9125] mkdir("./file0", 0777 [pid 9123] close(3 [pid 9125] <... mkdir resumed>) = 0 [pid 9123] <... close resumed>) = 0 [pid 9125] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9123] mkdir("./file0", 0777) = 0 [ 259.693717][ T9121] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9121) [ 259.716139][ T9125] loop3: detected capacity change from 0 to 32768 [ 259.724268][ T9123] loop1: detected capacity change from 0 to 32768 [pid 9123] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9125] <... mount resumed>) = -1 EEXIST (File exists) [pid 9125] ioctl(4, LOOP_CLR_FD [pid 9123] <... mount resumed>) = -1 EEXIST (File exists) [ 259.749874][ T9125] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9125) [ 259.785455][ T9123] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9123) [pid 9123] ioctl(4, LOOP_CLR_FD [pid 9121] <... ioctl resumed>) = 0 [pid 9121] close(4) = 0 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9120] <... futex resumed>) = 0 [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9121] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9120] <... futex resumed>) = 0 [pid 9121] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9121] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9120] <... futex resumed>) = 0 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9121] <... futex resumed>) = 0 [pid 9120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9121] openat(AT_FDCWD, ".log", O_RDONLY [pid 9123] <... ioctl resumed>) = 0 [pid 9121] <... openat resumed>) = 4 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9123] close(4) = 0 [pid 9121] <... futex resumed>) = 0 [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9121] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9120] <... futex resumed>) = 0 [ 259.920644][ T27] audit: type=1804 audit(1680236943.392:721): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/119/.log" dev="sda1" ino=1160 res=1 errno=0 [ 259.955518][ T9117] BTRFS info (device loop5): enabling ssd optimizations [ 259.962488][ T9117] BTRFS info (device loop5): auto enabling async discard [pid 9123] <... futex resumed>) = 1 [pid 9122] <... futex resumed>) = 0 [pid 9121] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9123] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9123] <... openat resumed>) = 3 [pid 9121] <... futex resumed>) = 1 [pid 9120] <... futex resumed>) = 0 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9121] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9120] exit_group(0 [pid 9119] <... ioctl resumed>) = 0 [pid 9123] <... futex resumed>) = 1 [pid 9122] <... futex resumed>) = 0 [pid 9121] <... futex resumed>) = ? [pid 9120] <... exit_group resumed>) = ? [pid 9123] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] close(4 [pid 9123] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9121] +++ exited with 0 +++ [pid 9120] +++ exited with 0 +++ [pid 9117] <... mount resumed>) = 0 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9123] <... futex resumed>) = 1 [pid 9122] <... futex resumed>) = 0 [pid 9117] <... openat resumed>) = 3 [pid 9123] openat(AT_FDCWD, ".log", O_RDONLY [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... close resumed>) = 0 [ 259.985571][ T9117] BTRFS info (device loop5): checking UUID tree [pid 9117] chdir("./file0" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9120, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 9122] <... futex resumed>) = 0 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9123] <... openat resumed>) = 4 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] <... futex resumed>) = 1 [pid 9118] <... futex resumed>) = 0 [pid 9117] <... chdir resumed>) = 0 [pid 5078] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9119] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... openat resumed>) = 3 [pid 9118] <... futex resumed>) = 0 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] <... futex resumed>) = 0 [pid 9118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9119] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9118] <... futex resumed>) = 0 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] <... futex resumed>) = 0 [pid 9118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9119] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9118] <... futex resumed>) = 0 [pid 9119] openat(AT_FDCWD, ".log", O_RDONLY [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] <... openat resumed>) = 4 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9118] <... futex resumed>) = 0 [pid 9119] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9118] <... futex resumed>) = 0 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9117] ioctl(4, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9123] <... futex resumed>) = 1 [pid 9122] <... futex resumed>) = 0 [pid 9119] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9117] <... ioctl resumed>) = 0 [pid 9123] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9117] close(4 [pid 5078] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9123] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9122] <... futex resumed>) = 0 [pid 9119] <... futex resumed>) = 1 [pid 9118] <... futex resumed>) = 0 [pid 9117] <... close resumed>) = 0 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9118] exit_group(0 [pid 9117] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 3 [pid 9123] <... futex resumed>) = 0 [pid 9122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9119] <... futex resumed>) = ? [pid 9118] <... exit_group resumed>) = ? [pid 9117] <... futex resumed>) = 1 [pid 9116] <... futex resumed>) = 0 [pid 9123] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9122] exit_group(0 [pid 9119] +++ exited with 0 +++ [pid 9118] +++ exited with 0 +++ [pid 9117] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9116] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] fstat(3, [pid 9123] <... futex resumed>) = ? [pid 9122] <... exit_group resumed>) = ? [pid 9117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9116] <... futex resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9118, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=30 /* 0.30 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... restart_syscall resumed>) = 0 [pid 9123] +++ exited with 0 +++ [pid 9122] +++ exited with 0 +++ [pid 9117] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9116] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] getdents64(3, [pid 5083] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9122, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5083] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... restart_syscall resumed>) = 0 [pid 9117] <... openat resumed>) = 4 [pid 5083] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9117] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(3, [pid 5078] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9117] <... futex resumed>) = 1 [pid 9116] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9117] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9116] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./119/binderfs", [pid 9117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9116] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [ 260.019670][ T27] audit: type=1804 audit(1680236943.492:722): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/120/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5079] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9117] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9116] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] fstat(3, [pid 5083] lstat("./120/binderfs", [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] getdents64(3, [pid 5083] unlink("./120/binderfs" [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] <... unlink resumed>) = 0 [pid 5079] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./120/binderfs", [pid 5083] lstat("./120/file0", [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] unlink("./120/binderfs" [pid 5083] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... openat resumed>) = 4 [pid 5079] lstat("./120/file0", [pid 5083] fstat(4, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] getdents64(4, [pid 5079] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] fstat(4, [pid 5083] close(4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 5083] rmdir("./120/file0" [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9127] <... write resumed>) = 16777216 [pid 5083] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 9127] munmap(0x7ff2ab354000, 16777216 [pid 5083] umount2("./120/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(4 [pid 5083] lstat("./120/.log", [pid 5079] <... close resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] rmdir("./120/file0" [pid 5083] unlink("./120/.log" [pid 5079] <... rmdir resumed>) = 0 [pid 9127] <... munmap resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5079] umount2("./120/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9127] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] lstat("./120/.log", [pid 9127] ioctl(4, LOOP_SET_FD, 3 [pid 5083] close(3 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9125] <... ioctl resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5079] unlink("./120/.log" [pid 5078] unlink("./119/binderfs" [pid 5083] rmdir("./120" [pid 5079] <... unlink resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5079] getdents64(3, [pid 5083] mkdir("./121", 0777 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9127] <... ioctl resumed>) = 0 [pid 9125] close(4 [pid 5083] <... mkdir resumed>) = 0 [pid 5079] close(3 [pid 5078] <... unlink resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5079] rmdir("./120" [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5079] <... rmdir resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] mkdir("./121", 0777 [pid 5083] close(3 [pid 5079] <... mkdir resumed>) = 0 [pid 9127] close(3 [pid 9125] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9127] <... close resumed>) = 0 [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... openat resumed>) = 3 [pid 9127] mkdir("./file0", 0777 [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9146 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 9127] <... mkdir resumed>) = 0 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 260.076203][ T27] audit: type=1804 audit(1680236943.492:723): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/120/.log" dev="sda1" ino=1163 res=1 errno=0 [ 260.101112][ T9127] loop2: detected capacity change from 0 to 32768 [ 260.109039][ T9117] BTRFS info (device loop5): balance: start -s [ 260.117030][ T9117] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 5078] lstat("./119/file0", [pid 9127] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9124] <... futex resumed>) = 0 [pid 9125] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9147 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9125] <... openat resumed>) = 3 [pid 5078] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9146 attached ./strace-static-x86_64: Process 9147 attached [pid 9146] set_robust_list(0x5555559d56e0, 24 [pid 9147] set_robust_list(0x5555559d56e0, 24 [pid 9146] <... set_robust_list resumed>) = 0 [pid 9147] <... set_robust_list resumed>) = 0 [pid 9146] chdir("./121" [pid 9147] chdir("./121" [pid 9146] <... chdir resumed>) = 0 [pid 9147] <... chdir resumed>) = 0 [pid 9146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9146] <... prctl resumed>) = 0 [pid 9147] <... prctl resumed>) = 0 [pid 9146] setpgid(0, 0 [pid 9147] setpgid(0, 0 [pid 9146] <... setpgid resumed>) = 0 [pid 9147] <... setpgid resumed>) = 0 [pid 9146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9146] <... openat resumed>) = 3 [pid 9147] <... openat resumed>) = 3 [pid 9146] write(3, "1000", 4 [pid 9147] write(3, "1000", 4 [pid 9146] <... write resumed>) = 4 [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9147] <... write resumed>) = 4 [pid 9146] close(3 [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 9116] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9147] close(3 [pid 9146] <... close resumed>) = 0 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] <... futex resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9147] <... close resumed>) = 0 [pid 9146] symlink("/dev/binderfs", "./binderfs" [pid 9147] symlink("/dev/binderfs", "./binderfs" [pid 9146] <... symlink resumed>) = 0 [pid 9147] <... symlink resumed>) = 0 [pid 9146] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9124] <... futex resumed>) = 0 [pid 9116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... openat resumed>) = 4 [pid 9147] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9146] <... futex resumed>) = 0 [pid 9125] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] <... mmap resumed>) = 0x7ff2ac333000 [pid 5078] fstat(4, [pid 9147] <... futex resumed>) = 0 [pid 9146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9125] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9116] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9146] <... mmap resumed>) = 0x7ff2b3754000 [pid 9127] <... mount resumed>) = -1 EEXIST (File exists) [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] <... mprotect resumed>) = 0 [pid 9147] <... mmap resumed>) = 0x7ff2b3754000 [pid 9146] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9127] ioctl(4, LOOP_CLR_FD [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 9116] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] getdents64(4, [pid 9147] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9146] <... mprotect resumed>) = 0 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9147] <... mprotect resumed>) = 0 [pid 9146] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9124] <... futex resumed>) = 0 [pid 9116] <... clone resumed>, parent_tid=[9148], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9148 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [ 260.152833][ T9127] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9127) [ 260.168699][ T9117] BTRFS info (device loop5): balance: ended with status: 0 [pid 9147] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9125] openat(AT_FDCWD, ".log", O_RDONLY [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(4, ./strace-static-x86_64: Process 9148 attached [pid 9146] <... clone resumed>, parent_tid=[9149], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9149 [pid 9125] <... openat resumed>) = 4 [pid 9116] <... futex resumed>) = 0 [pid 9148] set_robust_list(0x7ff2ac3539e0, 24 [pid 9147] <... clone resumed>, parent_tid=[9150], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9150 [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9148] <... set_robust_list resumed>) = 0 [pid 9147] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9146] <... futex resumed>) = 0 [pid 9148] openat(AT_FDCWD, ".log", O_RDONLY [pid 9147] <... futex resumed>) = 0 [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9149 attached [pid 9148] <... openat resumed>) = 5 [pid 9147] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9149] set_robust_list(0x7ff2b37749e0, 24 [pid 9148] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9149] <... set_robust_list resumed>) = 0 [pid 9148] <... futex resumed>) = 0 [pid 9149] memfd_create("syzkaller", 0 [pid 9148] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9149] <... memfd_create resumed>) = 3 [pid 9149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9116] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 5078] close(4 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... close resumed>) = 0 [pid 9148] <... futex resumed>) = 0 [pid 9125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9124] <... futex resumed>) = 0 [pid 9116] <... futex resumed>) = 1 [pid 5078] rmdir("./119/file0"./strace-static-x86_64: Process 9150 attached [pid 9148] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9125] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 260.194133][ T27] audit: type=1804 audit(1680236943.662:724): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/120/.log" dev="sda1" ino=1154 res=1 errno=0 [pid 9116] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9150] set_robust_list(0x7ff2b37749e0, 24 [pid 9125] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9117] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9150] <... set_robust_list resumed>) = 0 [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9117] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9150] memfd_create("syzkaller", 0 [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 9117] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9150] <... memfd_create resumed>) = 3 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] exit_group(0 [pid 9117] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] lstat("./119/.log", [pid 9150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9125] <... futex resumed>) = ? [pid 9124] <... exit_group resumed>) = ? [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9150] <... mmap resumed>) = 0x7ff2ab354000 [pid 9125] +++ exited with 0 +++ [pid 9124] +++ exited with 0 +++ [pid 5078] unlink("./119/.log" [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9124, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=27 /* 0.27 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... unlink resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5078] getdents64(3, [pid 9116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] rmdir("./119" [pid 5081] <... openat resumed>) = 3 [pid 5081] fstat(3, [pid 5078] <... rmdir resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] mkdir("./120", 0777 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... mkdir resumed>) = 0 [pid 5081] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./120/binderfs", [pid 5078] <... openat resumed>) = 3 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5081] unlink("./120/binderfs" [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... unlink resumed>) = 0 [pid 5078] close(3 [pid 5081] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 260.235659][ T9148] BTRFS info (device loop5): scrub: started on devid 1 [ 260.262389][ T9148] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9151 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9151 attached [pid 5081] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9151] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... openat resumed>) = 4 [pid 9151] <... set_robust_list resumed>) = 0 [pid 5081] fstat(4, [pid 9151] chdir("./120" [pid 9148] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9151] <... chdir resumed>) = 0 [pid 9148] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 9151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9148] <... futex resumed>) = 0 [pid 9116] exit_group(0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9151] <... prctl resumed>) = 0 [pid 9117] <... futex resumed>) = ? [pid 9116] <... exit_group resumed>) = ? [pid 5081] getdents64(4, [pid 9151] setpgid(0, 0 [pid 9148] +++ exited with 0 +++ [pid 9117] +++ exited with 0 +++ [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9151] <... setpgid resumed>) = 0 [pid 9116] +++ exited with 0 +++ [pid 5081] close(4 [pid 9151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9116, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=28 /* 0.28 s */} --- [pid 5081] <... close resumed>) = 0 [pid 9151] <... openat resumed>) = 3 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5081] rmdir("./120/file0" [pid 9151] write(3, "1000", 4 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 9151] <... write resumed>) = 4 [pid 5081] umount2("./120/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9151] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9151] <... close resumed>) = 0 [pid 5084] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./120/.log", [pid 9151] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9151] <... symlink resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] unlink("./120/.log" [pid 9151] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5081] <... unlink resumed>) = 0 [pid 9151] <... futex resumed>) = 0 [pid 5084] fstat(3, [pid 5081] getdents64(3, [pid 9151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9151] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] getdents64(3, [pid 5081] close(3 [pid 9151] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5081] <... close resumed>) = 0 [pid 9151] <... mprotect resumed>) = 0 [pid 5084] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] rmdir("./120" [pid 9151] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... rmdir resumed>) = 0 [pid 5084] lstat("./120/binderfs", [pid 5081] mkdir("./121", 0777 [pid 9151] <... clone resumed>, parent_tid=[9152], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9152 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 9151] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./120/binderfs" [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9151] <... futex resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5081] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9152 attached [pid 9151] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 9152] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 5081] close(3 [pid 9152] memfd_create("syzkaller", 0 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9153 [pid 9152] <... memfd_create resumed>) = 3 [pid 9152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 ./strace-static-x86_64: Process 9153 attached [pid 9153] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9153] chdir("./121") = 0 [pid 9153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9153] setpgid(0, 0) = 0 [pid 9153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9153] write(3, "1000", 4) = 4 [pid 9153] close(3) = 0 [pid 9153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9153] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9153] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9153] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9154], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9154 [pid 9153] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9153] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9154 attached [pid 9154] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9154] memfd_create("syzkaller", 0) = 3 [pid 9154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9127] <... ioctl resumed>) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./120/file0") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./120") = 0 [pid 5084] mkdir("./121", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = 0 [pid 5084] close(3) = 0 [pid 9127] close(4 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9127] <... close resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9155 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9155 attached ) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9155] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9155] chdir("./121") = 0 [pid 9155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9155] setpgid(0, 0) = 0 [pid 9155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] write(3, "1000", 4 [pid 9127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9126] <... futex resumed>) = 0 [pid 9155] <... write resumed>) = 4 [pid 9127] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9155] close(3 [pid 9127] <... openat resumed>) = 3 [pid 9155] <... close resumed>) = 0 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] symlink("/dev/binderfs", "./binderfs" [pid 9127] <... futex resumed>) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9155] <... symlink resumed>) = 0 [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9126] <... futex resumed>) = 0 [pid 9155] <... futex resumed>) = 0 [pid 9127] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9127] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9155] <... mmap resumed>) = 0x7ff2b3754000 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9127] <... futex resumed>) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9155] <... mprotect resumed>) = 0 [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9126] <... futex resumed>) = 0 [pid 9127] openat(AT_FDCWD, ".log", O_RDONLY [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9155] <... clone resumed>, parent_tid=[9156], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9156 [pid 9127] <... openat resumed>) = 4 ./strace-static-x86_64: Process 9156 attached [pid 9155] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9156] set_robust_list(0x7ff2b37749e0, 24 [pid 9155] <... futex resumed>) = 0 [pid 9127] <... futex resumed>) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9156] <... set_robust_list resumed>) = 0 [pid 9155] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9156] memfd_create("syzkaller", 0 [pid 9127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9126] <... futex resumed>) = 0 [pid 9156] <... memfd_create resumed>) = 3 [pid 9127] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9127] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9156] <... mmap resumed>) = 0x7ff2ab354000 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] exit_group(0 [pid 9127] <... futex resumed>) = ? [pid 9126] <... exit_group resumed>) = ? [pid 9127] +++ exited with 0 +++ [pid 9126] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9126, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=30 /* 0.30 s */} --- [pid 5080] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./120/binderfs") = 0 [pid 5080] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 9149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] rmdir("./120/file0") = 0 [pid 5080] umount2("./120/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./120/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./120/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./120") = 0 [pid 5080] mkdir("./121", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9157 ./strace-static-x86_64: Process 9157 attached [pid 9157] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9157] chdir("./121") = 0 [pid 9157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9157] setpgid(0, 0) = 0 [pid 9157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9157] write(3, "1000", 4) = 4 [pid 9157] close(3) = 0 [pid 9157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9157] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9157] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9157] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9158], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9158 [pid 9157] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9157] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9158 attached [pid 9158] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9158] memfd_create("syzkaller", 0) = 3 [pid 9158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9150] <... write resumed>) = 16777216 [pid 9150] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9150] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9150] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9150] close(3) = 0 [pid 9150] mkdir("./file0", 0777) = 0 [pid 9150] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9149] <... write resumed>) = 16777216 [pid 9149] munmap(0x7ff2ab354000, 16777216 [pid 9158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9149] <... munmap resumed>) = 0 [pid 9149] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 261.147441][ T9150] loop1: detected capacity change from 0 to 32768 [ 261.179354][ T9150] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (9150) [pid 9149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9149] close(3) = 0 [pid 9149] mkdir("./file0", 0777) = 0 [ 261.199715][ T9149] loop4: detected capacity change from 0 to 32768 [ 261.230432][ T9150] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9149] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 261.245021][ T9149] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9149) [ 261.275334][ T9150] BTRFS info (device loop1): setting nodatasum [ 261.281521][ T9150] BTRFS info (device loop1): allowing degraded mounts [pid 9149] ioctl(4, LOOP_CLR_FD [pid 9152] <... write resumed>) = 16777216 [pid 9152] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 261.305333][ T9150] BTRFS info (device loop1): use zlib compression, level 3 [ 261.312557][ T9150] BTRFS info (device loop1): using free space tree [pid 9152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9152] close(3) = 0 [pid 9152] mkdir("./file0", 0777) = 0 [pid 9152] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9154] <... write resumed>) = 16777216 [pid 9154] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9154] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 261.356582][ T9152] loop0: detected capacity change from 0 to 32768 [ 261.373788][ T9152] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9152) [pid 9154] ioctl(4, LOOP_SET_FD, 3 [pid 9152] <... mount resumed>) = -1 EEXIST (File exists) [pid 9152] ioctl(4, LOOP_CLR_FD [pid 9154] <... ioctl resumed>) = 0 [pid 9154] close(3) = 0 [pid 9154] mkdir("./file0", 0777) = 0 [pid 9154] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9156] <... write resumed>) = 16777216 [pid 9156] munmap(0x7ff2ab354000, 16777216 [pid 9154] <... mount resumed>) = -1 EEXIST (File exists) [pid 9156] <... munmap resumed>) = 0 [pid 9154] ioctl(4, LOOP_CLR_FD [pid 9156] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 261.418242][ T9154] loop3: detected capacity change from 0 to 32768 [ 261.441019][ T9154] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9154) [pid 9156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9156] close(3 [pid 9149] <... ioctl resumed>) = 0 [pid 9156] <... close resumed>) = 0 [pid 9149] close(4 [pid 9156] mkdir("./file0", 0777 [pid 9149] <... close resumed>) = 0 [pid 9156] <... mkdir resumed>) = 0 [pid 9156] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 261.483983][ T9156] loop5: detected capacity change from 0 to 32768 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] <... futex resumed>) = 0 [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9149] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9156] <... mount resumed>) = -1 EEXIST (File exists) [pid 9149] <... openat resumed>) = 3 [pid 9156] ioctl(4, LOOP_CLR_FD [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9146] <... futex resumed>) = 0 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9146] <... futex resumed>) = 0 [pid 9149] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9149] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9146] <... futex resumed>) = 0 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [ 261.524973][ T9156] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9156) [pid 9149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9146] <... futex resumed>) = 0 [pid 9149] openat(AT_FDCWD, ".log", O_RDONLY [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9149] <... openat resumed>) = 4 [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9146] <... futex resumed>) = 0 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9146] <... futex resumed>) = 0 [pid 9149] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9149] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9146] <... futex resumed>) = 0 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] exit_group(0 [pid 9149] <... futex resumed>) = ? [pid 9146] <... exit_group resumed>) = ? [pid 9149] +++ exited with 0 +++ [pid 9146] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9146, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=26 /* 0.26 s */} --- [pid 5083] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./121/binderfs") = 0 [pid 5083] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9158] <... write resumed>) = 16777216 [pid 5083] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, [pid 9158] munmap(0x7ff2ab354000, 16777216 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, [pid 9158] <... munmap resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 9158] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] rmdir("./121/file0" [pid 9158] <... openat resumed>) = 4 [pid 5083] <... rmdir resumed>) = 0 [ 261.598070][ T9150] BTRFS info (device loop1): enabling ssd optimizations [ 261.605048][ T9150] BTRFS info (device loop1): auto enabling async discard [pid 9158] ioctl(4, LOOP_SET_FD, 3 [pid 5083] umount2("./121/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9158] <... ioctl resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./121/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./121/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 9152] <... ioctl resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./121") = 0 [pid 5083] mkdir("./122", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 9158] close(3 [pid 9154] <... ioctl resumed>) = 0 [pid 9152] close(4 [pid 5083] <... close resumed>) = 0 [pid 9158] <... close resumed>) = 0 [pid 9154] close(4 [pid 9152] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9158] mkdir("./file0", 0777 [pid 9154] <... close resumed>) = 0 [pid 9152] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9158] <... mkdir resumed>) = 0 [pid 9154] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9152] <... futex resumed>) = 1 [pid 9151] <... futex resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9176 ./strace-static-x86_64: Process 9176 attached [pid 9158] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9154] <... futex resumed>) = 1 [pid 9153] <... futex resumed>) = 0 [ 261.646347][ T9158] loop2: detected capacity change from 0 to 32768 [ 261.674901][ T9150] BTRFS info (device loop1): checking UUID tree [pid 9152] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9151] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9176] set_robust_list(0x5555559d56e0, 24 [pid 9158] <... mount resumed>) = -1 EEXIST (File exists) [pid 9154] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9153] futex(0x7ff2b3854788, FUTEX_W