./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3738948201 <...> atacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8539] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] unlink("./103/binderfs" [pid 8539] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... unlink resumed>) = 0 [pid 5080] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8545] close(4) = 0 [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8539] <... futex resumed>) = 1 [pid 8538] <... futex resumed>) = 0 [pid 8538] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8538] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8543] <... futex resumed>) = 0 [pid 8539] openat(AT_FDCWD, ".log", O_RDONLY [pid 8543] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] <... futex resumed>) = 0 [pid 8543] <... futex resumed>) = 1 [pid 8539] <... openat resumed>) = 4 [pid 8543] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8539] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8539] <... futex resumed>) = 1 [pid 8538] <... futex resumed>) = 0 [pid 8545] <... openat resumed>) = 3 [pid 8539] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8538] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8538] <... futex resumed>) = 0 [pid 8545] <... futex resumed>) = 1 [pid 8538] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8543] <... futex resumed>) = 0 [pid 8539] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8543] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8539] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8545] <... futex resumed>) = 0 [pid 8543] <... futex resumed>) = 1 [pid 8539] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8543] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8539] <... futex resumed>) = 1 [pid 8538] <... futex resumed>) = 0 [pid 8545] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8539] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8538] exit_group(0 [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8539] <... futex resumed>) = ? [pid 8538] <... exit_group resumed>) = ? [pid 8547] <... mount resumed>) = -1 EEXIST (File exists) [pid 8545] <... futex resumed>) = 1 [pid 8543] <... futex resumed>) = 0 [pid 8539] +++ exited with 0 +++ [pid 8538] +++ exited with 0 +++ [pid 8547] ioctl(4, LOOP_CLR_FD [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8543] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8538, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 8545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 231.147780][ T8547] loop1: detected capacity change from 0 to 32768 [ 231.170124][ T8547] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8547) [pid 8543] <... futex resumed>) = 0 [pid 8545] openat(AT_FDCWD, ".log", O_RDONLY [pid 8543] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8545] <... openat resumed>) = 4 [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8543] <... futex resumed>) = 0 [pid 5078] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8543] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8543] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8545] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8543] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8545] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8545] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 3 [pid 8545] <... futex resumed>) = 1 [pid 8545] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8543] <... futex resumed>) = 0 [pid 5078] fstat(3, [pid 8543] exit_group(0 [pid 8545] <... futex resumed>) = ? [pid 8543] <... exit_group resumed>) = ? [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8545] +++ exited with 0 +++ [pid 8543] +++ exited with 0 +++ [pid 5078] getdents64(3, [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8543, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=37 /* 0.37 s */} --- [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./102/binderfs", [pid 5083] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] fstat(3, [pid 5078] unlink("./102/binderfs" [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [pid 5078] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./102/file0", [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./103/binderfs", [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./103/binderfs" [pid 5078] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 4 [pid 5083] lstat("./103/file0", [pid 5080] <... umount2 resumed>) = 0 [pid 5078] fstat(4, [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./103/file0", [pid 5078] getdents64(4, [pid 5083] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5080] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] getdents64(4, [pid 5080] <... openat resumed>) = 4 [pid 5078] close(4 [pid 8542] <... ioctl resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] fstat(4, [pid 5078] <... close resumed>) = 0 [pid 5083] getdents64(4, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./102/file0" [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(4, [pid 5083] close(4 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... rmdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 5078] umount2("./102/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] rmdir("./103/file0" [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(4) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] rmdir("./103/file0" [pid 5078] lstat("./102/.log", [pid 5083] umount2("./103/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] lstat("./103/.log", [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] unlink("./102/.log" [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] close(3 [pid 5083] unlink("./103/.log" [pid 5080] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5080] rmdir("./103" [pid 5078] getdents64(3, [pid 5083] getdents64(3, [pid 5080] <... rmdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] mkdir("./104", 0777 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 5080] <... mkdir resumed>) = 0 [pid 5078] close(3 [pid 5083] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] rmdir("./103" [pid 5080] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5083] mkdir("./104", 0777 [pid 5080] <... ioctl resumed>) = 0 [pid 5078] rmdir("./102" [pid 5080] close(3 [pid 5083] <... mkdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] mkdir("./103", 0777 [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8567 [pid 8542] close(4 [pid 5078] <... mkdir resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8542] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] close(3 [pid 5078] <... openat resumed>) = 3 [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8568 ./strace-static-x86_64: Process 8567 attached [pid 5078] close(3 [pid 8567] set_robust_list(0x5555559d56e0, 24 [pid 5078] <... close resumed>) = 0 [pid 8567] <... set_robust_list resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8567] chdir("./104") = 0 [pid 8567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8569 [pid 8567] setpgid(0, 0 [pid 8542] <... futex resumed>) = 1 [pid 8541] <... futex resumed>) = 0 [pid 8567] <... setpgid resumed>) = 0 [pid 8542] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8541] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8569 attached ./strace-static-x86_64: Process 8568 attached [pid 8567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8542] <... openat resumed>) = 3 [pid 8541] <... futex resumed>) = 0 [pid 8569] set_robust_list(0x5555559d56e0, 24 [pid 8568] set_robust_list(0x5555559d56e0, 24 [pid 8567] <... openat resumed>) = 3 [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8541] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8569] <... set_robust_list resumed>) = 0 [pid 8568] <... set_robust_list resumed>) = 0 [pid 8567] write(3, "1000", 4 [pid 8542] <... futex resumed>) = 0 [pid 8541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8569] chdir("./103" [pid 8568] chdir("./104" [pid 8567] <... write resumed>) = 4 [pid 8542] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8541] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] <... chdir resumed>) = 0 [pid 8568] <... chdir resumed>) = 0 [pid 8567] close(3 [pid 8542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8541] <... futex resumed>) = 0 [pid 8569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8568] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8567] <... close resumed>) = 0 [pid 8542] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8541] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8569] <... prctl resumed>) = 0 [pid 8568] <... prctl resumed>) = 0 [pid 8567] symlink("/dev/binderfs", "./binderfs" [pid 8542] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8569] setpgid(0, 0 [pid 8568] setpgid(0, 0 [pid 8567] <... symlink resumed>) = 0 [pid 8569] <... setpgid resumed>) = 0 [pid 8568] <... setpgid resumed>) = 0 [pid 8567] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8567] <... futex resumed>) = 0 [pid 8542] <... futex resumed>) = 1 [pid 8541] <... futex resumed>) = 0 [pid 8569] <... openat resumed>) = 3 [pid 8568] <... openat resumed>) = 3 [pid 8567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8542] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8541] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] write(3, "1000", 4 [pid 8568] write(3, "1000", 4 [pid 8567] <... mmap resumed>) = 0x7ff2b3754000 [pid 8542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8541] <... futex resumed>) = 0 [pid 8569] <... write resumed>) = 4 [pid 8568] <... write resumed>) = 4 [pid 8567] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8542] openat(AT_FDCWD, ".log", O_RDONLY [pid 8541] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8569] close(3 [pid 8568] close(3 [pid 8567] <... mprotect resumed>) = 0 [pid 8542] <... openat resumed>) = 4 [pid 8569] <... close resumed>) = 0 [pid 8568] <... close resumed>) = 0 [pid 8567] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] symlink("/dev/binderfs", "./binderfs" [pid 8568] symlink("/dev/binderfs", "./binderfs" [pid 8542] <... futex resumed>) = 1 [pid 8541] <... futex resumed>) = 0 [pid 8569] <... symlink resumed>) = 0 [pid 8568] <... symlink resumed>) = 0 [pid 8567] <... clone resumed>, parent_tid=[8570], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8570 [pid 8542] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8541] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8570 attached [pid 8569] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8542] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8541] <... futex resumed>) = 0 [pid 8570] set_robust_list(0x7ff2b37749e0, 24 [pid 8569] <... futex resumed>) = 0 [pid 8568] <... futex resumed>) = 0 [pid 8567] <... futex resumed>) = 0 [pid 8542] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8541] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] <... set_robust_list resumed>) = 0 [pid 8569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8542] <... futex resumed>) = 0 [pid 8541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8570] memfd_create("syzkaller", 0 [pid 8569] <... mmap resumed>) = 0x7ff2b3754000 [pid 8568] <... mmap resumed>) = 0x7ff2b3754000 [pid 8542] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8541] exit_group(0 [pid 8570] <... memfd_create resumed>) = 3 [pid 8569] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8568] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8542] <... futex resumed>) = ? [pid 8541] <... exit_group resumed>) = ? [pid 8570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8569] <... mprotect resumed>) = 0 [pid 8568] <... mprotect resumed>) = 0 [pid 8569] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8568] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8542] +++ exited with 0 +++ [pid 8541] +++ exited with 0 +++ [pid 8570] <... mmap resumed>) = 0x7ff2ab354000 [pid 8569] <... clone resumed>, parent_tid=[8571], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8571 [pid 8568] <... clone resumed>, parent_tid=[8572], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8572 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8541, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=22 /* 0.22 s */} --- [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 8569] <... futex resumed>) = 0 [pid 8568] <... futex resumed>) = 0 [pid 5084] <... restart_syscall resumed>) = 0 [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8568] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8544] <... ioctl resumed>) = 0 [pid 5084] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8571 attached [pid 5084] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8571] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] <... openat resumed>) = 3 [pid 8571] <... set_robust_list resumed>) = 0 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8572 attached [pid 8571] memfd_create("syzkaller", 0 [pid 5084] getdents64(3, [pid 8572] set_robust_list(0x7ff2b37749e0, 24 [pid 8571] <... memfd_create resumed>) = 3 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8572] <... set_robust_list resumed>) = 0 [pid 8571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8571] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] lstat("./104/binderfs", [pid 8572] memfd_create("syzkaller", 0 [pid 8544] close(4 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8572] <... memfd_create resumed>) = 3 [pid 8544] <... close resumed>) = 0 [pid 5084] unlink("./104/binderfs" [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8540] <... futex resumed>) = 0 [pid 8544] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8540] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8544] <... openat resumed>) = 3 [pid 8540] <... futex resumed>) = 0 [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8540] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8544] <... futex resumed>) = 0 [pid 8540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8544] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8540] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8544] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8540] <... futex resumed>) = 0 [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8540] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8544] <... futex resumed>) = 0 [pid 8540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8544] openat(AT_FDCWD, ".log", O_RDONLY [pid 8540] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8544] <... openat resumed>) = 4 [pid 8540] <... futex resumed>) = 0 [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8540] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8544] <... futex resumed>) = 0 [pid 8540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8544] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8540] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 8544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8540] <... futex resumed>) = 0 [pid 5084] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8544] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 231.409480][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 231.409494][ T27] audit: type=1804 audit(1680236914.882:624): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/104/.log" dev="sda1" ino=1151 res=1 errno=0 [pid 8540] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8544] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] lstat("./104/file0", [pid 8572] <... mmap resumed>) = 0x7ff2ab354000 [pid 8544] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8544] <... futex resumed>) = 1 [pid 8540] <... futex resumed>) = 0 [pid 5084] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8544] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8540] exit_group(0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8544] <... futex resumed>) = ? [pid 8540] <... exit_group resumed>) = ? [pid 5084] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8544] +++ exited with 0 +++ [pid 8540] +++ exited with 0 +++ [pid 5084] <... openat resumed>) = 4 [pid 5084] fstat(4, [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8540, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./104/file0" [pid 5081] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5084] lstat("./104/.log", [pid 5081] fstat(3, [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] unlink("./104/.log" [pid 5081] getdents64(3, [pid 5084] <... unlink resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] getdents64(3, [pid 5081] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] close(3 [pid 5081] lstat("./103/binderfs", [pid 5084] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8547] <... ioctl resumed>) = 0 [pid 5084] rmdir("./104" [pid 5081] unlink("./103/binderfs" [pid 5084] <... rmdir resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5084] mkdir("./105", 0777 [pid 5081] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... openat resumed>) = 3 [pid 5081] lstat("./103/file0", [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... close resumed>) = 0 [pid 8547] close(4) = 0 [pid 5081] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... openat resumed>) = 4 [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8546] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 8547] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8546] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8573 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8547] <... openat resumed>) = 3 [pid 8546] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8546] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8547] <... futex resumed>) = 0 [pid 8546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] getdents64(4, ./strace-static-x86_64: Process 8573 attached [pid 8547] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8546] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8573] set_robust_list(0x5555559d56e0, 24 [pid 8547] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8546] <... futex resumed>) = 0 [ 231.508629][ T27] audit: type=1804 audit(1680236914.952:625): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/103/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 5081] close(4 [pid 8573] <... set_robust_list resumed>) = 0 [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8546] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 8573] chdir("./105" [pid 8547] <... futex resumed>) = 0 [pid 8546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] rmdir("./103/file0" [pid 8573] <... chdir resumed>) = 0 [pid 8547] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8546] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8573] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8546] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 8547] openat(AT_FDCWD, ".log", O_RDONLY [pid 8546] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./103/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8573] <... prctl resumed>) = 0 [pid 8547] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8573] setpgid(0, 0 [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./103/.log", [pid 8573] <... setpgid resumed>) = 0 [pid 8547] <... futex resumed>) = 1 [pid 8546] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8547] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8546] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] unlink("./103/.log" [pid 8573] <... openat resumed>) = 3 [pid 8547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8546] <... futex resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 8573] write(3, "1000", 4 [pid 8547] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8546] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(3, [pid 8573] <... write resumed>) = 4 [pid 8547] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8573] close(3 [pid 8547] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 8573] <... close resumed>) = 0 [pid 8547] <... futex resumed>) = 1 [pid 8546] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 8573] symlink("/dev/binderfs", "./binderfs" [pid 8547] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8546] exit_group(0 [pid 5081] rmdir("./103" [pid 8573] <... symlink resumed>) = 0 [pid 8547] <... futex resumed>) = ? [pid 8546] <... exit_group resumed>) = ? [pid 8573] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8547] +++ exited with 0 +++ [pid 8546] +++ exited with 0 +++ [pid 5081] <... rmdir resumed>) = 0 [pid 8573] <... futex resumed>) = 0 [pid 5081] mkdir("./104", 0777 [pid 8573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8546, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 8573] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 8573] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5079] <... restart_syscall resumed>) = 0 [pid 8573] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 8573] <... clone resumed>, parent_tid=[8574], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8574 [pid 5081] close(3 [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5079] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8573] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8574 attached [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8574] set_robust_list(0x7ff2b37749e0, 24 [pid 5079] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8574] <... set_robust_list resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8575 [pid 8574] memfd_create("syzkaller", 0 [pid 5079] <... openat resumed>) = 3 [pid 8574] <... memfd_create resumed>) = 3 [pid 5079] fstat(3, [pid 8574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8574] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] getdents64(3, ./strace-static-x86_64: Process 8575 attached [pid 8575] set_robust_list(0x5555559d56e0, 24 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8575] <... set_robust_list resumed>) = 0 [pid 5079] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] chdir("./104" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] <... chdir resumed>) = 0 [pid 5079] lstat("./104/binderfs", [pid 8575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8575] setpgid(0, 0 [pid 5079] unlink("./104/binderfs" [pid 8575] <... setpgid resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 8575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] write(3, "1000", 4 [pid 5079] lstat("./104/file0", [pid 8575] <... write resumed>) = 4 [pid 8575] close(3 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8575] <... close resumed>) = 0 [pid 5079] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] <... symlink resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8575] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 4 [pid 8575] <... futex resumed>) = 0 [pid 5079] fstat(4, [pid 8575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8575] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] getdents64(4, [pid 8575] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8575] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8575] <... clone resumed>, parent_tid=[8576], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8576 [pid 5079] close(4 [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... close resumed>) = 0 [pid 8575] <... futex resumed>) = 0 [pid 5079] rmdir("./104/file0" [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... rmdir resumed>) = 0 [pid 5079] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8576 attached ) = -1 EINVAL (Invalid argument) [pid 8576] set_robust_list(0x7ff2b37749e0, 24 [ 231.638326][ T27] audit: type=1804 audit(1680236915.052:626): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/104/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 5079] lstat("./104/.log", [pid 8576] <... set_robust_list resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8576] memfd_create("syzkaller", 0 [pid 5079] unlink("./104/.log") = 0 [pid 8576] <... memfd_create resumed>) = 3 [pid 5079] getdents64(3, [pid 8576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 8576] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./104") = 0 [pid 5079] mkdir("./105", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8577 ./strace-static-x86_64: Process 8577 attached [pid 8577] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8577] chdir("./105") = 0 [pid 8577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8577] setpgid(0, 0) = 0 [pid 8577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8577] write(3, "1000", 4) = 4 [pid 8577] close(3) = 0 [pid 8577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8577] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8577] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8577] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8578], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8578 [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8578 attached [pid 8578] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8578] memfd_create("syzkaller", 0) = 3 [pid 8578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8572] <... write resumed>) = 16777216 [pid 8572] munmap(0x7ff2ab354000, 16777216 [pid 8570] <... write resumed>) = 16777216 [pid 8570] munmap(0x7ff2ab354000, 16777216 [pid 8572] <... munmap resumed>) = 0 [pid 8572] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8572] ioctl(4, LOOP_SET_FD, 3 [pid 8570] <... munmap resumed>) = 0 [pid 8572] <... ioctl resumed>) = 0 [pid 8571] <... write resumed>) = 16777216 [pid 8570] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8572] close(3 [pid 8570] <... openat resumed>) = 4 [pid 8572] <... close resumed>) = 0 [pid 8570] ioctl(4, LOOP_SET_FD, 3 [pid 8572] mkdir("./file0", 0777 [pid 8571] munmap(0x7ff2ab354000, 16777216 [pid 8572] <... mkdir resumed>) = 0 [pid 8572] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8571] <... munmap resumed>) = 0 [pid 8571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8571] ioctl(4, LOOP_SET_FD, 3 [pid 8570] <... ioctl resumed>) = 0 [pid 8570] close(3) = 0 [pid 8570] mkdir("./file0", 0777) = 0 [ 232.445674][ T8572] loop4: detected capacity change from 0 to 32768 [ 232.457854][ T8570] loop2: detected capacity change from 0 to 32768 [ 232.470146][ T8572] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (8572) [ 232.476336][ T8571] loop0: detected capacity change from 0 to 32768 [pid 8570] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8571] <... ioctl resumed>) = 0 [pid 8571] close(3) = 0 [pid 8571] mkdir("./file0", 0777 [pid 8574] <... write resumed>) = 16777216 [pid 8574] munmap(0x7ff2ab354000, 16777216 [pid 8571] <... mkdir resumed>) = 0 [pid 8571] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8570] <... mount resumed>) = -1 EEXIST (File exists) [pid 8574] <... munmap resumed>) = 0 [pid 8574] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 232.513319][ T8570] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8570) [ 232.529499][ T8572] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 232.540131][ T8572] BTRFS info (device loop4): setting nodatasum [ 232.550386][ T8574] loop5: detected capacity change from 0 to 32768 [pid 8574] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8570] ioctl(4, LOOP_CLR_FD [pid 8574] close(3) = 0 [pid 8574] mkdir("./file0", 0777) = 0 [pid 8574] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8576] <... write resumed>) = 16777216 [pid 8576] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8576] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8576] ioctl(4, LOOP_SET_FD, 3 [pid 8571] <... mount resumed>) = -1 EEXIST (File exists) [pid 8571] ioctl(4, LOOP_CLR_FD [pid 8576] <... ioctl resumed>) = 0 [pid 8576] close(3) = 0 [ 232.550745][ T8571] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8571) [ 232.565344][ T8572] BTRFS info (device loop4): allowing degraded mounts [ 232.574626][ T8572] BTRFS info (device loop4): use zlib compression, level 3 [ 232.595178][ T8572] BTRFS info (device loop4): using free space tree [ 232.600789][ T8576] loop3: detected capacity change from 0 to 32768 [pid 8576] mkdir("./file0", 0777) = 0 [pid 8576] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8578] <... write resumed>) = 16777216 [pid 8578] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8578] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8578] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8574] <... mount resumed>) = -1 EEXIST (File exists) [pid 8578] close(3 [pid 8574] ioctl(4, LOOP_CLR_FD [pid 8578] <... close resumed>) = 0 [pid 8578] mkdir("./file0", 0777) = 0 [ 232.610085][ T8574] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8574) [ 232.636835][ T8578] loop1: detected capacity change from 0 to 32768 [ 232.650425][ T8576] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8576) [pid 8578] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8576] <... mount resumed>) = -1 EEXIST (File exists) [pid 8576] ioctl(4, LOOP_CLR_FD [pid 8578] <... mount resumed>) = -1 EEXIST (File exists) [ 232.679061][ T8578] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8578) [pid 8578] ioctl(4, LOOP_CLR_FD [pid 8570] <... ioctl resumed>) = 0 [pid 8570] close(4) = 0 [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8570] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8567] <... futex resumed>) = 0 [pid 8570] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] <... openat resumed>) = 3 [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8570] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8570] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8567] <... futex resumed>) = 0 [pid 8570] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8570] <... futex resumed>) = 0 [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8570] openat(AT_FDCWD, ".log", O_RDONLY [pid 8567] <... futex resumed>) = 0 [pid 8570] <... openat resumed>) = 4 [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8570] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8567] <... futex resumed>) = 0 [pid 8570] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8567] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8571] <... ioctl resumed>) = 0 [pid 8570] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8570] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8567] <... futex resumed>) = 0 [pid 8570] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8567] exit_group(0 [pid 8570] <... futex resumed>) = ? [pid 8567] <... exit_group resumed>) = ? [pid 8571] close(4 [ 232.793754][ T8572] BTRFS info (device loop4): enabling ssd optimizations [ 232.806867][ T27] audit: type=1804 audit(1680236916.282:627): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/104/.log" dev="sda1" ino=1162 res=1 errno=0 [ 232.811027][ T8572] BTRFS info (device loop4): auto enabling async discard [pid 8570] +++ exited with 0 +++ [pid 8567] +++ exited with 0 +++ [pid 8571] <... close resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8567, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... restart_syscall resumed>) = 0 [pid 8571] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8569] <... futex resumed>) = 0 [pid 5080] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8571] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8571] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8574] <... ioctl resumed>) = 0 [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 8574] close(4 [pid 8571] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 5080] fstat(3, [pid 8574] <... close resumed>) = 0 [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8569] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 8572] <... mount resumed>) = 0 [pid 8571] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8571] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8573] <... futex resumed>) = 0 [pid 8572] <... openat resumed>) = 3 [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8574] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8572] chdir("./file0" [pid 8571] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 5080] lstat("./104/binderfs", [pid 8574] <... openat resumed>) = 3 [pid 8572] <... chdir resumed>) = 0 [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] ioctl(4, LOOP_CLR_FD [pid 8571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8569] <... futex resumed>) = 0 [pid 5080] unlink("./104/binderfs" [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 8572] <... ioctl resumed>) = 0 [pid 8571] openat(AT_FDCWD, ".log", O_RDONLY [ 232.886801][ T8572] BTRFS info (device loop4): checking UUID tree [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... unlink resumed>) = 0 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] close(4 [pid 8571] <... openat resumed>) = 4 [pid 5080] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8573] <... futex resumed>) = 0 [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8571] <... futex resumed>) = 0 [pid 5080] lstat("./104/file0", [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./104/file0") = 0 [pid 5080] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./104/.log", [pid 8574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8572] <... close resumed>) = 0 [pid 8569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8574] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8572] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8569] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] unlink("./104/.log" [pid 8578] <... ioctl resumed>) = 0 [pid 8574] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8572] <... futex resumed>) = 1 [pid 8571] <... futex resumed>) = 0 [pid 8569] <... futex resumed>) = 1 [pid 8568] <... futex resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 8578] close(4 [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8571] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8569] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8568] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 8578] <... close resumed>) = 0 [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 8572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8571] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8568] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8571] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(3 [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8573] <... futex resumed>) = 0 [pid 8572] <... openat resumed>) = 4 [pid 8571] <... futex resumed>) = 1 [pid 8569] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] openat(AT_FDCWD, ".log", O_RDONLY [ 232.935976][ T27] audit: type=1804 audit(1680236916.412:628): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/103/.log" dev="sda1" ino=1163 res=1 errno=0 [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8572] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8571] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8569] exit_group(0 [pid 5080] rmdir("./104" [pid 8578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8577] <... futex resumed>) = 0 [pid 8574] <... openat resumed>) = 4 [pid 8572] <... futex resumed>) = 1 [pid 8571] <... futex resumed>) = ? [pid 8569] <... exit_group resumed>) = ? [pid 8568] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 8578] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8571] +++ exited with 0 +++ [pid 8569] +++ exited with 0 +++ [pid 8568] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./105", 0777 [pid 8578] <... openat resumed>) = 3 [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 8572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8568] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8568] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8569, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=21 /* 0.21 s */} --- [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8573] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [ 232.977580][ T27] audit: type=1804 audit(1680236916.452:629): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/105/.log" dev="sda1" ino=1164 res=1 errno=0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8573] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... restart_syscall resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5078] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8596 [pid 5078] <... openat resumed>) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8577] <... futex resumed>) = 0 [pid 8574] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5078] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8596 attached ) = -1 EINVAL (Invalid argument) [pid 8596] set_robust_list(0x5555559d56e0, 24 [pid 5078] lstat("./103/binderfs", [pid 8596] <... set_robust_list resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8596] chdir("./105" [pid 8578] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8574] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] unlink("./103/binderfs" [pid 8596] <... chdir resumed>) = 0 [pid 8578] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8574] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... unlink resumed>) = 0 [pid 8596] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] <... futex resumed>) = 1 [pid 8573] <... futex resumed>) = 0 [pid 5078] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] <... prctl resumed>) = 0 [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8574] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8573] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] setpgid(0, 0 [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8574] <... futex resumed>) = ? [pid 8573] <... exit_group resumed>) = ? [pid 5078] lstat("./103/file0", [pid 8596] <... setpgid resumed>) = 0 [pid 8578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8577] <... futex resumed>) = 0 [pid 8576] <... ioctl resumed>) = 0 [pid 8574] +++ exited with 0 +++ [pid 8573] +++ exited with 0 +++ [pid 8568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8578] openat(AT_FDCWD, ".log", O_RDONLY [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8576] close(4 [pid 8568] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8573, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=27 /* 0.27 s */} --- [ 233.026518][ T8572] BTRFS info (device loop4): balance: start -s [ 233.046962][ T8572] BTRFS info (device loop4): relocating block group 1048576 flags system [pid 5078] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] <... openat resumed>) = 3 [pid 8578] <... openat resumed>) = 4 [pid 8576] <... close resumed>) = 0 [pid 8568] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] write(3, "1000", 4 [pid 8568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8596] <... write resumed>) = 4 [pid 8568] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 8596] close(3 [pid 8568] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] fstat(4, [pid 8596] <... close resumed>) = 0 [pid 8568] <... mprotect resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8596] symlink("/dev/binderfs", "./binderfs" [pid 8568] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... openat resumed>) = 3 [pid 5078] getdents64(4, [pid 8596] <... symlink resumed>) = 0 [pid 5084] fstat(3, [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8596] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] <... clone resumed>, parent_tid=[8598], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8598 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 8596] <... futex resumed>) = 0 [pid 8568] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8568] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] close(4 [pid 8596] <... mmap resumed>) = 0x7ff2b3754000 [pid 8568] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 8596] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./103/file0"./strace-static-x86_64: Process 8598 attached [pid 8596] <... mprotect resumed>) = 0 [pid 5084] lstat("./105/binderfs", [pid 5078] <... rmdir resumed>) = 0 [pid 8598] set_robust_list(0x7ff2ac3539e0, 24 [pid 8596] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] umount2("./103/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8598] <... set_robust_list resumed>) = 0 [pid 5084] unlink("./105/binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8598] openat(AT_FDCWD, ".log", O_RDONLY [pid 8596] <... clone resumed>, parent_tid=[8599], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8599 [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5078] lstat("./103/.log", [pid 8598] <... openat resumed>) = 5 [pid 8596] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8576] <... futex resumed>) = 1 [pid 8575] <... futex resumed>) = 0 [pid 5084] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8598] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] <... futex resumed>) = 0 [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8576] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./103/.log"./strace-static-x86_64: Process 8599 attached [pid 8598] <... futex resumed>) = 1 [pid 8596] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8577] <... futex resumed>) = 0 [pid 8576] <... openat resumed>) = 3 [pid 8575] <... futex resumed>) = 0 [pid 8568] <... futex resumed>) = 0 [pid 5084] lstat("./105/file0", [pid 5078] <... unlink resumed>) = 0 [pid 8598] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8568] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, [pid 8598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8568] <... futex resumed>) = 0 [pid 5084] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8598] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8568] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(3 [pid 8599] set_robust_list(0x7ff2b37749e0, 24 [pid 8578] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8577] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 8599] <... set_robust_list resumed>) = 0 [pid 8578] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8576] <... futex resumed>) = 1 [pid 8575] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5078] rmdir("./103" [pid 8599] memfd_create("syzkaller", 0 [pid 8578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8576] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(4, [pid 5078] <... rmdir resumed>) = 0 [pid 8599] <... memfd_create resumed>) = 3 [pid 8578] <... futex resumed>) = 1 [pid 8577] <... futex resumed>) = 0 [pid 8576] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8575] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] mkdir("./104", 0777 [pid 8599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8578] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8577] exit_group(0 [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(4, [pid 5078] <... mkdir resumed>) = 0 [pid 8599] <... mmap resumed>) = 0x7ff2ab354000 [pid 8578] <... futex resumed>) = ? [pid 8577] <... exit_group resumed>) = ? [pid 8576] <... futex resumed>) = 0 [pid 8575] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [ 233.091402][ T27] audit: type=1804 audit(1680236916.562:630): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/105/.log" dev="sda1" ino=1139 res=1 errno=0 [ 233.126958][ T8572] BTRFS info (device loop4): balance: ended with status: 0 [ 233.132398][ T8598] BTRFS info (device loop4): scrub: started on devid 1 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 8578] +++ exited with 0 +++ [pid 8577] +++ exited with 0 +++ [pid 8576] openat(AT_FDCWD, ".log", O_RDONLY [pid 8575] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 8576] <... openat resumed>) = 4 [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] close(4 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] <... close resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8577, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5078] close(3 [pid 8576] <... futex resumed>) = 1 [pid 8575] <... futex resumed>) = 0 [pid 8572] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] rmdir("./105/file0" [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... close resumed>) = 0 [pid 8576] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8575] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8572] <... futex resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8575] <... futex resumed>) = 0 [pid 8572] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8576] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8575] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8600 [pid 5084] lstat("./105/.log", [pid 5079] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8576] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8600 attached [pid 5084] unlink("./105/.log" [pid 5079] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8600] set_robust_list(0x5555559d56e0, 24 [pid 8598] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8576] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 8600] <... set_robust_list resumed>) = 0 [pid 8598] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8576] <... futex resumed>) = 1 [pid 8575] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 5079] fstat(3, [pid 8600] chdir("./104" [pid 8598] <... futex resumed>) = 0 [pid 8576] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8575] exit_group(0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8600] <... chdir resumed>) = 0 [pid 8598] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8576] <... futex resumed>) = ? [pid 8575] <... exit_group resumed>) = ? [pid 8568] exit_group(0 [pid 5084] close(3 [pid 5079] getdents64(3, [pid 8600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8576] +++ exited with 0 +++ [pid 8568] <... exit_group resumed>) = ? [pid 5084] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8600] <... prctl resumed>) = 0 [pid 8598] <... futex resumed>) = ? [pid 8575] +++ exited with 0 +++ [pid 8572] <... futex resumed>) = ? [pid 5084] rmdir("./105" [pid 5079] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] setpgid(0, 0 [pid 8598] +++ exited with 0 +++ [pid 8572] +++ exited with 0 +++ [pid 8568] +++ exited with 0 +++ [pid 5084] <... rmdir resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8575, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] <... setpgid resumed>) = 0 [pid 5084] mkdir("./106", 0777 [pid 5079] lstat("./105/binderfs", [pid 8600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... mkdir resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8568, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=32 /* 0.32 s */} --- [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8600] <... openat resumed>) = 3 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5079] unlink("./105/binderfs" [pid 8600] write(3, "1000", 4 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... restart_syscall resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 8600] <... write resumed>) = 4 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5079] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] close(3 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 233.160569][ T27] audit: type=1804 audit(1680236916.592:631): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/104/file0/.log" dev="loop4" ino=263 res=1 errno=0 [ 233.190530][ T8598] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 8600] <... close resumed>) = 0 [pid 5084] close(3 [pid 5083] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./105/file0", [pid 8600] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8600] <... symlink resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 3 [pid 5079] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 5081] fstat(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] <... futex resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8601 [pid 5083] fstat(3, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 5079] <... openat resumed>) = 4 [pid 8600] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] getdents64(3, [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] fstat(4, [pid 8600] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5081] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8600] <... mprotect resumed>) = 0 [pid 5083] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 8600] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./104/binderfs", [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] lstat("./104/binderfs", [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] getdents64(4, [pid 8600] <... clone resumed>, parent_tid=[8602], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8602 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./104/binderfs" [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./104/binderfs" [pid 5081] <... unlink resumed>) = 0 [pid 5079] close(4 [pid 8600] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5081] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 ./strace-static-x86_64: Process 8602 attached ./strace-static-x86_64: Process 8601 attached [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./105/file0" [pid 8602] set_robust_list(0x7ff2b37749e0, 24 [pid 8601] set_robust_list(0x5555559d56e0, 24 [pid 5081] lstat("./104/file0", [pid 5079] <... rmdir resumed>) = 0 [pid 8602] <... set_robust_list resumed>) = 0 [pid 8601] <... set_robust_list resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8602] memfd_create("syzkaller", 0 [pid 8601] chdir("./106" [pid 5081] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8602] <... memfd_create resumed>) = 3 [pid 8601] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./105/.log", [pid 8602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8601] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8602] <... mmap resumed>) = 0x7ff2ab354000 [pid 8601] <... prctl resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5079] unlink("./105/.log" [pid 5081] fstat(4, [pid 5079] <... unlink resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5081] getdents64(4, [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] close(3 [pid 8601] setpgid(0, 0 [pid 5081] getdents64(4, [pid 5079] <... close resumed>) = 0 [pid 8601] <... setpgid resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] rmdir("./105" [pid 8601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] close(4 [pid 5079] <... rmdir resumed>) = 0 [pid 8601] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5079] mkdir("./106", 0777 [pid 5081] rmdir("./104/file0" [pid 5079] <... mkdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8601] write(3, "1000", 4 [pid 5081] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5081] lstat("./104/.log", [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] close(3 [pid 8601] <... write resumed>) = 4 [pid 5081] unlink("./104/.log" [pid 5079] <... close resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8601] close(3 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8603 [pid 5081] close(3) = 0 [pid 8601] <... close resumed>) = 0 [pid 5081] rmdir("./104" [pid 8601] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./105", 0777 [pid 8601] <... symlink resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8603 attached [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8603] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... openat resumed>) = 3 [pid 8603] <... set_robust_list resumed>) = 0 [ 233.296746][ T27] audit: type=1804 audit(1680236916.662:632): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/104/.log" dev="sda1" ino=1151 res=1 errno=0 [pid 8601] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 8603] chdir("./106" [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8603] <... chdir resumed>) = 0 [pid 5081] close(3 [pid 8603] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8601] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 8603] <... prctl resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8603] setpgid(0, 0 [pid 8601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8603] <... setpgid resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8604 [pid 8603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8601] <... mmap resumed>) = 0x7ff2b3754000 [pid 8603] <... openat resumed>) = 3 [pid 8601] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8603] write(3, "1000", 4 [pid 8601] <... mprotect resumed>) = 0 [pid 8603] <... write resumed>) = 4 [pid 8601] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8603] close(3./strace-static-x86_64: Process 8604 attached ) = 0 [pid 8601] <... clone resumed>, parent_tid=[8605], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8605 [pid 8604] set_robust_list(0x5555559d56e0, 24 [pid 8603] symlink("/dev/binderfs", "./binderfs" [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... set_robust_list resumed>) = 0 [pid 8603] <... symlink resumed>) = 0 [pid 8601] <... futex resumed>) = 0 [pid 8604] chdir("./105" [pid 8603] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8604] <... chdir resumed>) = 0 [pid 8603] <... futex resumed>) = 0 [pid 8604] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8604] <... prctl resumed>) = 0 [pid 8603] <... mmap resumed>) = 0x7ff2b3754000 ./strace-static-x86_64: Process 8605 attached [pid 8604] setpgid(0, 0 [pid 8603] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8605] set_robust_list(0x7ff2b37749e0, 24 [pid 8604] <... setpgid resumed>) = 0 [pid 8603] <... mprotect resumed>) = 0 [pid 8605] <... set_robust_list resumed>) = 0 [pid 8604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8603] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... umount2 resumed>) = 0 [pid 8605] memfd_create("syzkaller", 0 [pid 8604] <... openat resumed>) = 3 [pid 5083] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8605] <... memfd_create resumed>) = 3 [pid 8604] write(3, "1000", 4 [pid 8603] <... clone resumed>, parent_tid=[8606], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8606 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8604] <... write resumed>) = 4 [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./104/file0", [pid 8605] <... mmap resumed>) = 0x7ff2ab354000 [pid 8604] close(3 [pid 8603] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8606 attached [pid 8604] <... close resumed>) = 0 [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8606] set_robust_list(0x7ff2b37749e0, 24 [pid 8604] symlink("/dev/binderfs", "./binderfs" [pid 8606] <... set_robust_list resumed>) = 0 [pid 8604] <... symlink resumed>) = 0 [pid 8606] memfd_create("syzkaller", 0 [pid 8604] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] <... memfd_create resumed>) = 3 [pid 8604] <... futex resumed>) = 0 [pid 5083] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8606] <... mmap resumed>) = 0x7ff2ab354000 [pid 8604] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8604] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... openat resumed>) = 4 [pid 8604] <... mprotect resumed>) = 0 [pid 5083] fstat(4, [pid 8604] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, [pid 8604] <... clone resumed>, parent_tid=[8607], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8607 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 8604] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] close(4) = 0 ./strace-static-x86_64: Process 8607 attached [pid 5083] rmdir("./104/file0" [pid 8607] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 8607] memfd_create("syzkaller", 0 [pid 5083] getdents64(3, [pid 8607] <... memfd_create resumed>) = 3 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] close(3 [pid 8607] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./104") = 0 [pid 5083] mkdir("./105", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8608 ./strace-static-x86_64: Process 8608 attached [pid 8608] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8608] chdir("./105") = 0 [pid 8608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8608] setpgid(0, 0) = 0 [pid 8608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8608] write(3, "1000", 4) = 4 [pid 8608] close(3) = 0 [pid 8608] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8608] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8608] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8608] <... clone resumed>, parent_tid=[8609], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8609 [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8609 attached [pid 8609] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8609] memfd_create("syzkaller", 0) = 3 [pid 8609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8599] <... write resumed>) = 16777216 [pid 8599] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8599] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8599] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8599] close(3) = 0 [pid 8599] mkdir("./file0", 0777) = 0 [ 234.023386][ T8599] loop2: detected capacity change from 0 to 32768 [ 234.055929][ T8599] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor373 (8599) [ 234.101831][ T8599] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [pid 8599] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8602] <... write resumed>) = 16777216 [pid 8602] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8602] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8602] ioctl(4, LOOP_SET_FD, 3) = 0 [ 234.156106][ T8599] BTRFS info (device loop2): setting nodatasum [ 234.167173][ T8599] BTRFS info (device loop2): allowing degraded mounts [ 234.187229][ T8602] loop0: detected capacity change from 0 to 32768 [pid 8602] close(3) = 0 [pid 8602] mkdir("./file0", 0777) = 0 [pid 8602] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8605] <... write resumed>) = 16777216 [pid 8605] munmap(0x7ff2ab354000, 16777216 [pid 8602] <... mount resumed>) = -1 EEXIST (File exists) [pid 8605] <... munmap resumed>) = 0 [pid 8605] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8602] ioctl(4, LOOP_CLR_FD [ 234.204236][ T8599] BTRFS info (device loop2): use zlib compression, level 3 [ 234.225946][ T8599] BTRFS info (device loop2): using free space tree [ 234.226134][ T8602] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8602) [pid 8605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8605] close(3) = 0 [pid 8605] mkdir("./file0", 0777 [pid 8606] <... write resumed>) = 16777216 [pid 8606] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8605] <... mkdir resumed>) = 0 [pid 8605] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8606] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8606] ioctl(4, LOOP_SET_FD, 3 [pid 8607] <... write resumed>) = 16777216 [pid 8607] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8607] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8607] close(3) = 0 [pid 8607] mkdir("./file0", 0777) = 0 [ 234.277379][ T8605] loop5: detected capacity change from 0 to 32768 [ 234.299883][ T8606] loop1: detected capacity change from 0 to 32768 [ 234.308099][ T8605] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8605) [ 234.311326][ T8607] loop3: detected capacity change from 0 to 32768 [pid 8607] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8606] <... ioctl resumed>) = 0 [pid 8606] close(3) = 0 [pid 8606] mkdir("./file0", 0777) = 0 [pid 8606] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8605] <... mount resumed>) = -1 EEXIST (File exists) [pid 8605] ioctl(4, LOOP_CLR_FD [pid 8607] <... mount resumed>) = -1 EEXIST (File exists) [pid 8607] ioctl(4, LOOP_CLR_FD [pid 8606] <... mount resumed>) = -1 EEXIST (File exists) [pid 8606] ioctl(4, LOOP_CLR_FD [pid 8609] <... write resumed>) = 16777216 [ 234.331613][ T8607] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8607) [ 234.344105][ T8606] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8606) [pid 8609] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8609] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8609] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8609] close(3) = 0 [pid 8609] mkdir("./file0", 0777) = 0 [ 234.395650][ T8609] loop4: detected capacity change from 0 to 32768 [ 234.461983][ T8609] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8609) [ 234.485399][ T8599] BTRFS info (device loop2): enabling ssd optimizations [ 234.492361][ T8599] BTRFS info (device loop2): auto enabling async discard [pid 8609] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 8609] ioctl(4, LOOP_CLR_FD [pid 8599] <... mount resumed>) = 0 [pid 8599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8599] chdir("./file0") = 0 [pid 8599] ioctl(4, LOOP_CLR_FD) = 0 [ 234.527492][ T8599] BTRFS info (device loop2): checking UUID tree [pid 8605] <... ioctl resumed>) = 0 [pid 8599] close(4) = 0 [pid 8599] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8599] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8605] close(4 [pid 8596] <... futex resumed>) = 0 [pid 8605] <... close resumed>) = 0 [pid 8596] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8601] <... futex resumed>) = 0 [pid 8605] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] <... openat resumed>) = 3 [pid 8601] <... futex resumed>) = 0 [pid 8599] <... futex resumed>) = 0 [pid 8596] <... futex resumed>) = 1 [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8599] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8605] <... futex resumed>) = 0 [pid 8601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8599] <... openat resumed>) = 4 [pid 8596] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8605] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8599] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8605] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8601] <... futex resumed>) = 0 [pid 8599] <... futex resumed>) = 0 [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8599] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8605] <... futex resumed>) = 0 [pid 8601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8605] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8601] <... futex resumed>) = 0 [pid 8596] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] openat(AT_FDCWD, ".log", O_RDONLY [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8599] <... futex resumed>) = 0 [pid 8596] <... futex resumed>) = 1 [pid 8605] <... openat resumed>) = 4 [pid 8599] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8605] <... futex resumed>) = 1 [pid 8601] <... futex resumed>) = 0 [pid 8605] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8601] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8601] <... futex resumed>) = 0 [pid 8605] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8601] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8605] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8605] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8601] <... futex resumed>) = 0 [pid 8605] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8601] exit_group(0 [pid 8605] <... futex resumed>) = ? [pid 8601] <... exit_group resumed>) = ? [pid 8605] +++ exited with 0 +++ [pid 8601] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8601, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5084] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 234.614081][ T27] audit: type=1804 audit(1680236918.082:633): pid=8605 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/106/.log" dev="sda1" ino=1162 res=1 errno=0 [ 234.620666][ T8599] BTRFS info (device loop2): balance: start -s [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./106/binderfs") = 0 [pid 5084] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./106/file0") = 0 [pid 8606] <... ioctl resumed>) = 0 [pid 8596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8602] <... ioctl resumed>) = 0 [pid 8596] <... futex resumed>) = 0 [pid 5084] lstat("./106/.log", [pid 8596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8606] close(4 [pid 8596] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] unlink("./106/.log" [pid 8596] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8602] close(4 [pid 8596] <... mprotect resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 8606] <... close resumed>) = 0 [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] getdents64(3, [pid 8602] <... close resumed>) = 0 [pid 8606] <... futex resumed>) = 1 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8603] <... futex resumed>) = 0 [pid 5084] close(3 [pid 8596] <... clone resumed>, parent_tid=[8628], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8628 [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 8596] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] <... futex resumed>) = 0 [pid 8596] <... futex resumed>) = 0 [pid 5084] rmdir("./106" [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8596] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8606] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5084] <... rmdir resumed>) = 0 [pid 8606] <... openat resumed>) = 3 [pid 5084] mkdir("./107", 0777 [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8628 attached [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] <... futex resumed>) = 1 [pid 8600] <... futex resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 8606] <... futex resumed>) = 1 [pid 8628] set_robust_list(0x7ff2ac3539e0, 24 [pid 8602] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8603] <... futex resumed>) = 0 [pid 8600] <... futex resumed>) = 0 [pid 8602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8628] <... set_robust_list resumed>) = 0 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 3 [pid 8628] openat(AT_FDCWD, ".log", O_RDONLY [pid 8603] <... futex resumed>) = 0 [pid 8628] <... openat resumed>) = 5 [pid 8606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8602] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 8606] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8628] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8602] <... futex resumed>) = 1 [pid 8600] <... futex resumed>) = 0 [pid 8628] <... futex resumed>) = 1 [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] <... futex resumed>) = 0 [pid 5084] close(3 [pid 8628] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8606] <... futex resumed>) = 0 [pid 8603] <... futex resumed>) = 1 [pid 8602] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8596] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 8606] openat(AT_FDCWD, ".log", O_RDONLY [pid 8600] <... futex resumed>) = 0 [pid 8596] <... futex resumed>) = 0 [pid 8607] <... ioctl resumed>) = 0 [pid 8606] <... openat resumed>) = 4 [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8602] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8607] close(4 [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8596] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] <... futex resumed>) = 0 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8607] <... close resumed>) = 0 [pid 8603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] <... futex resumed>) = 0 [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8629 [pid 8607] <... futex resumed>) = 1 [pid 8606] <... futex resumed>) = 0 [pid 8604] <... futex resumed>) = 0 [pid 8603] <... futex resumed>) = 1 [pid 8602] openat(AT_FDCWD, ".log", O_RDONLY [pid 8600] <... futex resumed>) = 0 [pid 8606] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8607] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8603] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8606] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8602] <... openat resumed>) = 4 [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8606] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] <... futex resumed>) = 0 [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8606] <... futex resumed>) = 1 [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8603] <... futex resumed>) = 0 [pid 8606] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8602] <... futex resumed>) = 1 [pid 8600] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8629 attached [pid 8607] <... openat resumed>) = 3 [pid 8603] exit_group(0 [pid 8602] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8600] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8606] <... futex resumed>) = ? [pid 8603] <... exit_group resumed>) = ? [pid 8602] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8600] <... futex resumed>) = 0 [pid 8607] <... futex resumed>) = 1 [pid 8606] +++ exited with 0 +++ [pid 8604] <... futex resumed>) = 0 [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8600] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8603] +++ exited with 0 +++ [pid 8604] <... futex resumed>) = 0 [pid 8602] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 234.721495][ T8599] BTRFS info (device loop2): relocating block group 1048576 flags system [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8629] set_robust_list(0x5555559d56e0, 24 [pid 8609] <... ioctl resumed>) = 0 [pid 8607] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8602] <... futex resumed>) = 1 [pid 8600] <... futex resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8603, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 8629] <... set_robust_list resumed>) = 0 [pid 8609] close(4 [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8600] exit_group(0 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 8629] chdir("./107" [pid 8607] <... futex resumed>) = 1 [pid 8600] <... exit_group resumed>) = ? [pid 8604] <... futex resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 8602] <... futex resumed>) = ? [pid 8607] openat(AT_FDCWD, ".log", O_RDONLY [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8602] +++ exited with 0 +++ [pid 8600] +++ exited with 0 +++ [pid 8607] <... openat resumed>) = 4 [pid 8604] <... futex resumed>) = 0 [pid 8629] <... chdir resumed>) = 0 [pid 8609] <... close resumed>) = 0 [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8600, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=26 /* 0.26 s */} --- [pid 8629] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] <... futex resumed>) = 0 [pid 8604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 8629] <... prctl resumed>) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8608] <... futex resumed>) = 0 [pid 8607] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8604] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... restart_syscall resumed>) = 0 [pid 8629] setpgid(0, 0 [pid 8609] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8604] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8608] <... futex resumed>) = 0 [pid 8607] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8604] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8629] <... setpgid resumed>) = 0 [pid 8609] <... openat resumed>) = 3 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 3 [pid 8607] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] fstat(3, [pid 5078] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8629] <... openat resumed>) = 3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8608] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8609] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 8607] <... futex resumed>) = 1 [pid 5078] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8604] <... futex resumed>) = 0 [pid 8629] write(3, "1000", 4 [pid 8608] <... futex resumed>) = 0 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8629] <... write resumed>) = 4 [pid 8609] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8607] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8604] exit_group(0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... openat resumed>) = 3 [pid 8629] close(3 [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8607] <... futex resumed>) = ? [pid 8604] <... exit_group resumed>) = ? [pid 8596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(3, [pid 8629] <... close resumed>) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8607] +++ exited with 0 +++ [pid 8604] +++ exited with 0 +++ [pid 8608] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8629] symlink("/dev/binderfs", "./binderfs" [pid 8609] openat(AT_FDCWD, ".log", O_RDONLY [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8604, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5079] lstat("./106/binderfs", [pid 5078] getdents64(3, [pid 8629] <... symlink resumed>) = 0 [pid 8609] <... openat resumed>) = 4 [pid 8608] <... futex resumed>) = 0 [pid 5081] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] unlink("./106/binderfs" [pid 5081] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] fstat(3, [pid 5078] lstat("./104/binderfs", [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8609] <... futex resumed>) = 1 [pid 8608] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5079] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./104/binderfs" [pid 8629] <... futex resumed>) = 0 [pid 8608] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... unlink resumed>) = 0 [pid 8608] <... futex resumed>) = 0 [pid 8609] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8608] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8609] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8629] <... mmap resumed>) = 0x7ff2b3754000 [pid 8609] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./106/file0", [pid 8629] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8609] <... futex resumed>) = 1 [pid 8608] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8608] exit_group(0) = ? [pid 5081] lstat("./105/binderfs", [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8629] <... mprotect resumed>) = 0 [pid 8609] +++ exited with 0 +++ [pid 8608] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8608, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./105/binderfs" [pid 5079] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./104/file0", [pid 8629] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... unlink resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5083] <... openat resumed>) = 3 [pid 5078] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] fstat(3, [pid 5079] fstat(4, ./strace-static-x86_64: Process 8630 attached [pid 8629] <... clone resumed>, parent_tid=[8630], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8630 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8629] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 5078] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8629] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... openat resumed>) = 4 [pid 8629] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] lstat("./105/file0", [pid 5079] getdents64(4, [pid 5078] fstat(4, [pid 8630] set_robust_list(0x7ff2b37749e0, 24 [pid 8599] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5083] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(4 [pid 5078] getdents64(4, [pid 5083] lstat("./105/binderfs", [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] rmdir("./106/file0" [pid 5078] getdents64(4, [pid 5083] unlink("./105/binderfs" [pid 5081] <... openat resumed>) = 4 [ 234.823938][ T8628] BTRFS info (device loop2): scrub: started on devid 1 [ 234.825217][ T8599] BTRFS info (device loop2): balance: ended with status: 0 [pid 8630] <... set_robust_list resumed>) = 0 [pid 8599] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 5081] fstat(4, [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8599] <... futex resumed>) = 0 [pid 8599] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8630] memfd_create("syzkaller", 0 [pid 5083] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4 [pid 8630] <... memfd_create resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 8630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] lstat("./105/file0", [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] lstat("./106/.log", [pid 5078] rmdir("./104/file0" [pid 8630] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] unlink("./106/.log" [pid 5078] <... rmdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(4 [pid 5079] <... unlink resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] rmdir("./105/file0" [pid 5078] umount2("./104/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] getdents64(3, [pid 8628] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=16, data_bytes_scrubbed=12288, tree_bytes_scrubbed=65536, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8628] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 8628] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8596] exit_group(0 [pid 8599] <... futex resumed>) = ? [pid 8596] <... exit_group resumed>) = ? [pid 5083] <... openat resumed>) = 4 [pid 8599] +++ exited with 0 +++ [pid 5081] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] <... futex resumed>) = ? [pid 5083] fstat(4, [pid 5079] close(3 [pid 5078] lstat("./104/.log", [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] getdents64(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./106" [pid 5078] unlink("./104/.log" [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... rmdir resumed>) = 0 [pid 5083] getdents64(4, [pid 5078] <... unlink resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] lstat("./105/.log", [pid 5078] getdents64(3, [pid 5079] mkdir("./107", 0777 [pid 5083] close(4 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8628] +++ exited with 0 +++ [pid 8596] +++ exited with 0 +++ [pid 5083] <... close resumed>) = 0 [pid 5081] unlink("./105/.log" [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] close(3 [pid 5083] rmdir("./105/file0" [pid 5081] <... unlink resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8596, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] rmdir("./104" [pid 5081] getdents64(3, [pid 5083] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... rmdir resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 5081] close(3 [pid 5080] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] rmdir("./105" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... rmdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] mkdir("./105", 0777 [pid 5083] lstat("./105/.log", [pid 5081] mkdir("./106", 0777 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8631 [pid 5078] <... mkdir resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] unlink("./105/.log" [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... unlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5081] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5083] getdents64(3, [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] close(3 [pid 5080] lstat("./105/binderfs", [pid 5078] <... openat resumed>) = 3 [pid 5081] close(3 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] unlink("./105/binderfs" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5080] <... unlink resumed>) = 0 [pid 5083] rmdir("./105" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 234.868411][ T8628] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [pid 5080] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./106", 0777 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8632 [pid 5078] close(3 [pid 5083] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8631 attached [pid 8631] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8631] chdir("./107" [pid 5078] <... close resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8632 attached [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8633 [pid 8631] <... chdir resumed>) = 0 [pid 8632] set_robust_list(0x5555559d56e0, 24 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8631] setpgid(0, 0 [pid 5083] close(3 [pid 8631] <... setpgid resumed>) = 0 [pid 8632] <... set_robust_list resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 8631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8631] <... openat resumed>) = 3 [pid 8631] write(3, "1000", 4) = 4 [pid 8631] close(3) = 0 [pid 8631] symlink("/dev/binderfs", "./binderfs" [pid 8632] chdir("./106" [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8634 [pid 8631] <... symlink resumed>) = 0 [pid 8632] <... chdir resumed>) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8633 attached [pid 8632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8633] set_robust_list(0x5555559d56e0, 24 [pid 8632] setpgid(0, 0 [pid 8631] <... mmap resumed>) = 0x7ff2b3754000 ./strace-static-x86_64: Process 8634 attached [pid 8633] <... set_robust_list resumed>) = 0 [pid 8632] <... setpgid resumed>) = 0 [pid 8631] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8634] set_robust_list(0x5555559d56e0, 24 [pid 8633] chdir("./105" [pid 8632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8631] <... mprotect resumed>) = 0 [pid 8634] <... set_robust_list resumed>) = 0 [pid 8633] <... chdir resumed>) = 0 [pid 8632] <... openat resumed>) = 3 [pid 8631] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8634] chdir("./106" [pid 8633] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8632] write(3, "1000", 4 [pid 8634] <... chdir resumed>) = 0 [pid 8633] <... prctl resumed>) = 0 [pid 8634] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8633] setpgid(0, 0 [pid 8632] <... write resumed>) = 4 [pid 8631] <... clone resumed>, parent_tid=[8635], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8635 [pid 8634] <... prctl resumed>) = 0 [pid 8633] <... setpgid resumed>) = 0 [pid 8632] close(3 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8634] setpgid(0, 0 [pid 8633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8631] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8635 attached [pid 8634] <... setpgid resumed>) = 0 [pid 8633] <... openat resumed>) = 3 [pid 8632] <... close resumed>) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8635] set_robust_list(0x7ff2b37749e0, 24 [pid 8633] write(3, "1000", 4 [pid 8635] <... set_robust_list resumed>) = 0 [pid 8633] <... write resumed>) = 4 [pid 8635] memfd_create("syzkaller", 0 [pid 8633] close(3 [pid 8635] <... memfd_create resumed>) = 3 [pid 8633] <... close resumed>) = 0 [pid 8635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8633] symlink("/dev/binderfs", "./binderfs" [pid 8635] <... mmap resumed>) = 0x7ff2ab354000 [pid 8634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8633] <... symlink resumed>) = 0 [pid 8632] symlink("/dev/binderfs", "./binderfs" [pid 8634] <... openat resumed>) = 3 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8633] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8632] <... symlink resumed>) = 0 [pid 8634] write(3, "1000", 4 [pid 8633] <... mprotect resumed>) = 0 [pid 8634] <... write resumed>) = 4 [pid 8633] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8632] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8634] close(3 [pid 8632] <... futex resumed>) = 0 [pid 8634] <... close resumed>) = 0 [pid 8633] <... clone resumed>, parent_tid=[8636], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8636 [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8634] symlink("/dev/binderfs", "./binderfs" [pid 8632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 8636 attached [pid 8636] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8636] memfd_create("syzkaller", 0 [pid 5080] <... umount2 resumed>) = 0 [pid 8636] <... memfd_create resumed>) = 3 [pid 8636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8634] <... symlink resumed>) = 0 [pid 8632] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8634] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8632] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8634] <... futex resumed>) = 0 [pid 8632] <... mprotect resumed>) = 0 [pid 8634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8632] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8634] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] lstat("./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8634] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5080] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8632] <... clone resumed>, parent_tid=[8637], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8637 [pid 8634] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8634] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8632] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] fstat(4, [pid 8634] <... clone resumed>, parent_tid=[8638], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8638 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 8634] <... futex resumed>) = 0 [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4./strace-static-x86_64: Process 8637 attached ) = 0 [pid 5080] rmdir("./105/file0" [pid 8637] set_robust_list(0x7ff2b37749e0, 24 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, ./strace-static-x86_64: Process 8638 attached [pid 8638] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8638] memfd_create("syzkaller", 0 [pid 8637] <... set_robust_list resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 8637] memfd_create("syzkaller", 0 [pid 5080] <... close resumed>) = 0 [pid 8638] <... memfd_create resumed>) = 3 [pid 8638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8637] <... memfd_create resumed>) = 3 [pid 5080] rmdir("./105" [pid 8637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... rmdir resumed>) = 0 [pid 8637] <... mmap resumed>) = 0x7ff2ab354000 [pid 5080] mkdir("./106", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = 0 [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8639 ./strace-static-x86_64: Process 8639 attached [pid 8639] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8639] chdir("./106") = 0 [pid 8630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8639] setpgid(0, 0) = 0 [pid 8639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8639] write(3, "1000", 4) = 4 [pid 8639] close(3) = 0 [pid 8639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8639] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8639] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8639] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8640], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8640 [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8640 attached [pid 8640] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8640] memfd_create("syzkaller", 0) = 3 [pid 8640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8630] <... write resumed>) = 16777216 [pid 8630] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8630] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8630] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8630] close(3) = 0 [pid 8630] mkdir("./file0", 0777) = 0 [ 235.646417][ T8630] loop5: detected capacity change from 0 to 32768 [ 235.682209][ T8630] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (8630) [ 235.749492][ T8630] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 235.786361][ T8630] BTRFS info (device loop5): setting nodatasum [ 235.792556][ T8630] BTRFS info (device loop5): allowing degraded mounts [pid 8630] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8635] <... write resumed>) = 16777216 [pid 8635] munmap(0x7ff2ab354000, 16777216) = 0 [ 235.835328][ T8630] BTRFS info (device loop5): use zlib compression, level 3 [ 235.842570][ T8630] BTRFS info (device loop5): using free space tree [pid 8635] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8635] close(3) = 0 [pid 8635] mkdir("./file0", 0777) = 0 [pid 8635] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8640] <... write resumed>) = 16777216 [pid 8635] <... mount resumed>) = -1 EEXIST (File exists) [pid 8640] munmap(0x7ff2ab354000, 16777216 [pid 8638] <... write resumed>) = 16777216 [pid 8635] ioctl(4, LOOP_CLR_FD [pid 8640] <... munmap resumed>) = 0 [pid 8638] munmap(0x7ff2ab354000, 16777216 [pid 8640] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8638] <... munmap resumed>) = 0 [pid 8636] <... write resumed>) = 16777216 [pid 8640] ioctl(4, LOOP_SET_FD, 3 [ 235.907977][ T8635] loop1: detected capacity change from 0 to 32768 [ 235.929927][ T8635] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8635) [pid 8638] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8636] munmap(0x7ff2ab354000, 16777216 [pid 8640] <... ioctl resumed>) = 0 [pid 8638] <... openat resumed>) = 4 [pid 8638] ioctl(4, LOOP_SET_FD, 3 [pid 8636] <... munmap resumed>) = 0 [pid 8636] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8640] close(3 [pid 8638] <... ioctl resumed>) = 0 [pid 8640] <... close resumed>) = 0 [pid 8638] close(3 [pid 8636] <... openat resumed>) = 4 [pid 8640] mkdir("./file0", 0777 [pid 8638] <... close resumed>) = 0 [pid 8636] ioctl(4, LOOP_SET_FD, 3 [pid 8640] <... mkdir resumed>) = 0 [pid 8638] mkdir("./file0", 0777 [pid 8637] <... write resumed>) = 16777216 [pid 8640] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 235.966632][ T8640] loop2: detected capacity change from 0 to 32768 [ 235.974304][ T8638] loop4: detected capacity change from 0 to 32768 [ 235.991556][ T8636] loop0: detected capacity change from 0 to 32768 [pid 8638] <... mkdir resumed>) = 0 [pid 8637] munmap(0x7ff2ab354000, 16777216 [pid 8638] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8637] <... munmap resumed>) = 0 [pid 8637] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8637] ioctl(4, LOOP_SET_FD, 3 [pid 8636] <... ioctl resumed>) = 0 [pid 8636] close(3) = 0 [pid 8636] mkdir("./file0", 0777) = 0 [pid 8636] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8637] <... ioctl resumed>) = 0 [pid 8637] close(3) = 0 [pid 8637] mkdir("./file0", 0777 [pid 8640] <... mount resumed>) = -1 EEXIST (File exists) [pid 8637] <... mkdir resumed>) = 0 [pid 8637] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 236.010349][ T8640] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8640) [ 236.028830][ T8637] loop3: detected capacity change from 0 to 32768 [ 236.041681][ T8638] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8638) [pid 8640] ioctl(4, LOOP_CLR_FD [pid 8638] <... mount resumed>) = -1 EEXIST (File exists) [pid 8635] <... ioctl resumed>) = 0 [pid 8638] ioctl(4, LOOP_CLR_FD [pid 8635] close(4) = 0 [pid 8636] <... mount resumed>) = -1 EEXIST (File exists) [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8635] <... futex resumed>) = 1 [pid 8635] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8636] ioctl(4, LOOP_CLR_FD [pid 8635] <... openat resumed>) = 3 [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8635] <... futex resumed>) = 1 [pid 8635] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8635] <... futex resumed>) = 1 [pid 8635] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8631] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8635] <... futex resumed>) = 1 [pid 8635] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8635] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8631] <... futex resumed>) = 0 [pid 8631] exit_group(0) = ? [pid 8635] <... futex resumed>) = ? [pid 8635] +++ exited with 0 +++ [pid 8631] +++ exited with 0 +++ [pid 8637] <... mount resumed>) = -1 EEXIST (File exists) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8631, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 5079] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8637] ioctl(4, LOOP_CLR_FD [pid 5079] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./107/binderfs") = 0 [pid 5079] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./107/file0") = 0 [pid 5079] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./107/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./107/.log") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./107") = 0 [pid 5079] mkdir("./108", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 236.062386][ T8636] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8636) [ 236.074685][ T8637] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8637) [ 236.095828][ T8630] BTRFS info (device loop5): enabling ssd optimizations [ 236.102794][ T8630] BTRFS info (device loop5): auto enabling async discard [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 236.111703][ T8630] BTRFS info (device loop5): checking UUID tree [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8630] <... mount resumed>) = 0 [pid 8630] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8658 [pid 8630] <... openat resumed>) = 3 [pid 8630] chdir("./file0") = 0 [pid 8630] ioctl(4, LOOP_CLR_FD) = 0 [pid 8630] close(4) = 0 [pid 8630] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] <... futex resumed>) = 0 [pid 8630] <... futex resumed>) = 1 [pid 8629] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8630] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8629] <... futex resumed>) = 0 [pid 8629] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8638] <... ioctl resumed>) = 0 [pid 8630] <... openat resumed>) = 4 [pid 8638] close(4 [pid 8630] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8638] <... close resumed>) = 0 [pid 8630] <... futex resumed>) = 1 [pid 8629] <... futex resumed>) = 0 [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8630] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8629] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8658 attached [pid 8638] <... futex resumed>) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8629] <... futex resumed>) = 0 [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8634] <... futex resumed>) = 0 [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8658] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8658] chdir("./108") = 0 [pid 8658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8658] setpgid(0, 0 [pid 8638] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8658] <... setpgid resumed>) = 0 [pid 8658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8658] write(3, "1000", 4) = 4 [pid 8658] close(3) = 0 [pid 8658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8658] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8638] <... openat resumed>) = 3 [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8638] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... mmap resumed>) = 0x7ff2b3754000 [pid 8638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8634] <... futex resumed>) = 0 [pid 8629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8658] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8638] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8629] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... mprotect resumed>) = 0 [pid 8638] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8629] <... futex resumed>) = 0 [pid 8658] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8658] <... clone resumed>, parent_tid=[8659], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8659 [pid 8629] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8658] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] <... mprotect resumed>) = 0 [pid 8658] <... futex resumed>) = 0 [pid 8629] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8658] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8629] <... clone resumed>, parent_tid=[8660], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8660 [pid 8629] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 236.226731][ T8630] BTRFS info (device loop5): balance: start -s [ 236.234473][ T8630] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 8629] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8638] <... futex resumed>) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8638] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8638] openat(AT_FDCWD, ".log", O_RDONLY./strace-static-x86_64: Process 8660 attached ./strace-static-x86_64: Process 8659 attached ) = 4 [pid 8660] set_robust_list(0x7ff2ac3539e0, 24 [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8660] <... set_robust_list resumed>) = 0 [pid 8659] set_robust_list(0x7ff2b37749e0, 24 [pid 8638] <... futex resumed>) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8659] <... set_robust_list resumed>) = 0 [pid 8638] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8634] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8634] <... futex resumed>) = 0 [pid 8638] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8634] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8660] openat(AT_FDCWD, ".log", O_RDONLY [pid 8659] memfd_create("syzkaller", 0 [pid 8638] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8660] <... openat resumed>) = 5 [pid 8659] <... memfd_create resumed>) = 3 [pid 8638] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8660] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8638] <... futex resumed>) = 1 [pid 8634] <... futex resumed>) = 0 [pid 8629] <... futex resumed>) = 0 [pid 8660] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8659] <... mmap resumed>) = 0x7ff2ab354000 [pid 8638] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8634] exit_group(0 [pid 8629] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8638] <... futex resumed>) = ? [pid 8634] <... exit_group resumed>) = ? [pid 8629] <... futex resumed>) = 0 [pid 8660] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8638] +++ exited with 0 +++ [pid 8629] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8634] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8634, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./106/binderfs") = 0 [pid 5083] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./106/file0") = 0 [pid 5083] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./106/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./106/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./106") = 0 [pid 5083] mkdir("./107", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8662 ./strace-static-x86_64: Process 8662 attached [pid 8662] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8662] chdir("./107" [pid 8636] <... ioctl resumed>) = 0 [pid 8662] <... chdir resumed>) = 0 [pid 8636] close(4 [pid 8662] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8636] <... close resumed>) = 0 [pid 8662] <... prctl resumed>) = 0 [pid 8640] <... ioctl resumed>) = 0 [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [ 236.387424][ T8660] BTRFS info (device loop5): scrub: started on devid 1 [ 236.416128][ T8630] BTRFS info (device loop5): balance: ended with status: 0 [pid 8662] setpgid(0, 0 [pid 8636] <... futex resumed>) = 1 [pid 8633] <... futex resumed>) = 0 [pid 8662] <... setpgid resumed>) = 0 [pid 8636] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8640] close(4 [pid 8636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8633] <... futex resumed>) = 0 [pid 8662] <... openat resumed>) = 3 [pid 8640] <... close resumed>) = 0 [pid 8636] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8662] write(3, "1000", 4 [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] <... write resumed>) = 4 [pid 8636] <... openat resumed>) = 3 [pid 8662] close(3 [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] <... close resumed>) = 0 [pid 8662] symlink("/dev/binderfs", "./binderfs" [pid 8640] <... futex resumed>) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8636] <... futex resumed>) = 1 [pid 8633] <... futex resumed>) = 0 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8639] <... futex resumed>) = 0 [pid 8662] <... symlink resumed>) = 0 [pid 8640] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8636] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... openat resumed>) = 3 [pid 8636] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8633] <... futex resumed>) = 0 [pid 8662] <... futex resumed>) = 0 [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8640] <... futex resumed>) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8636] <... futex resumed>) = 0 [pid 8633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... mmap resumed>) = 0x7ff2b3754000 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8636] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8639] <... futex resumed>) = 0 [pid 8636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... mprotect resumed>) = 0 [pid 8640] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8636] openat(AT_FDCWD, ".log", O_RDONLY [pid 8633] <... futex resumed>) = 0 [pid 8662] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8640] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8663 attached ) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8636] <... openat resumed>) = 4 [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8663] set_robust_list(0x7ff2b37749e0, 24 [pid 8662] <... clone resumed>, parent_tid=[8663], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8663 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8663] <... set_robust_list resumed>) = 0 [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8639] <... futex resumed>) = 0 [pid 8663] memfd_create("syzkaller", 0 [pid 8662] <... futex resumed>) = 0 [pid 8660] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8640] openat(AT_FDCWD, ".log", O_RDONLY [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8636] <... futex resumed>) = 0 [pid 8633] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8663] <... memfd_create resumed>) = 3 [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8660] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... openat resumed>) = 4 [pid 8636] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8633] <... futex resumed>) = 0 [pid 8663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8660] <... futex resumed>) = 0 [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8636] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8633] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8660] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8640] <... futex resumed>) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8630] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8639] <... futex resumed>) = 0 [pid 8630] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8629] exit_group(0 [pid 8660] <... futex resumed>) = ? [pid 8640] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8639] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8630] <... futex resumed>) = ? [pid 8629] <... exit_group resumed>) = ? [ 236.449168][ T8660] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [ 236.471286][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 236.471298][ T27] audit: type=1804 audit(1680236919.942:642): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/105/.log" dev="sda1" ino=1152 res=1 errno=0 [pid 8663] <... mmap resumed>) = 0x7ff2ab354000 [pid 8660] +++ exited with 0 +++ [pid 8640] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8636] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8630] +++ exited with 0 +++ [pid 8629] +++ exited with 0 +++ [pid 8640] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8639] <... futex resumed>) = 0 [pid 8640] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8639] exit_group(0 [pid 8640] <... futex resumed>) = ? [pid 8639] <... exit_group resumed>) = ? [pid 8636] <... futex resumed>) = 1 [pid 8633] <... futex resumed>) = 0 [pid 8640] +++ exited with 0 +++ [pid 8639] +++ exited with 0 +++ [pid 8636] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8633] exit_group(0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8629, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=27 /* 0.27 s */} --- [pid 8636] <... futex resumed>) = ? [pid 8633] <... exit_group resumed>) = ? [pid 5084] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8639, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8637] <... ioctl resumed>) = 0 [pid 8636] +++ exited with 0 +++ [pid 8633] +++ exited with 0 +++ [pid 5084] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8633, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=25 /* 0.25 s */} --- [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8637] close(4 [pid 5080] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(3, [pid 5080] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5080] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 5084] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(3, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] lstat("./107/binderfs", [pid 5080] getdents64(3, [pid 5078] getdents64(3, [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] unlink("./107/binderfs" [pid 5080] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./106/binderfs", [pid 5078] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./105/binderfs" [pid 5080] unlink("./106/binderfs" [pid 5078] <... unlink resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5078] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./105/file0", [pid 5080] lstat("./106/file0", [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8637] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 4 [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 4 [pid 5078] fstat(4, [pid 8637] <... futex resumed>) = 1 [pid 8632] <... futex resumed>) = 0 [pid 5080] fstat(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 8637] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8632] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8637] <... openat resumed>) = 3 [pid 5080] getdents64(4, [pid 5078] getdents64(4, [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8637] <... futex resumed>) = 1 [pid 8632] <... futex resumed>) = 0 [pid 5080] close(4 [pid 5078] close(4 [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 8637] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5078] <... close resumed>) = 0 [pid 5080] rmdir("./106/file0" [pid 5078] rmdir("./105/file0" [pid 8637] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 8637] <... futex resumed>) = 1 [pid 8632] <... futex resumed>) = 0 [pid 5080] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./105/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8637] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8632] <... futex resumed>) = 0 [pid 5080] lstat("./106/.log", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8637] openat(AT_FDCWD, ".log", O_RDONLY [ 236.537746][ T27] audit: type=1804 audit(1680236919.992:643): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/106/.log" dev="sda1" ino=1158 res=1 errno=0 [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8637] <... openat resumed>) = 4 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] lstat("./105/.log", [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] unlink("./106/.log" [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8632] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... unlink resumed>) = 0 [pid 8637] <... futex resumed>) = 0 [pid 8637] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] unlink("./105/.log" [pid 8632] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8632] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... unlink resumed>) = 0 [pid 8637] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5080] getdents64(3, [pid 8637] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8637] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, [pid 8637] <... futex resumed>) = 1 [pid 8632] <... futex resumed>) = 0 [pid 5080] close(3 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8632] exit_group(0) = ? [ 236.596854][ T27] audit: type=1804 audit(1680236920.072:644): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/106/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 8637] +++ exited with 0 +++ [pid 8632] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8632, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=32 /* 0.32 s */} --- [pid 5080] <... close resumed>) = 0 [pid 5078] close(3 [pid 5080] rmdir("./106") = 0 [pid 5078] <... close resumed>) = 0 [pid 5080] mkdir("./107", 0777 [pid 5078] rmdir("./105" [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./106", 0777 [pid 5081] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5081] fstat(3, [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] getdents64(3, [pid 5078] close(3 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... close resumed>) = 0 [pid 5081] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./106/binderfs", ./strace-static-x86_64: Process 8665 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8665 [pid 5081] unlink("./106/binderfs" [pid 8665] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8664 [pid 8665] <... set_robust_list resumed>) = 0 [pid 5081] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] chdir("./106") = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] lstat("./106/file0", [pid 8665] <... prctl resumed>) = 0 [pid 8665] setpgid(0, 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8665] <... setpgid resumed>) = 0 [pid 5081] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8665] write(3, "1000", 4 [pid 5081] <... openat resumed>) = 4 [pid 8665] <... write resumed>) = 4 [pid 5081] fstat(4, [pid 8665] close(3) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8665] symlink("/dev/binderfs", "./binderfs" [pid 5081] getdents64(4, [pid 8665] <... symlink resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8664 attached [pid 8665] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 8665] <... futex resumed>) = 0 [pid 8664] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8664] <... set_robust_list resumed>) = 0 [pid 5081] close(4 [pid 8665] <... mmap resumed>) = 0x7ff2b3754000 [pid 8664] chdir("./107" [pid 5081] <... close resumed>) = 0 [pid 8665] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8664] <... chdir resumed>) = 0 [pid 5081] rmdir("./106/file0" [pid 8665] <... mprotect resumed>) = 0 [pid 8664] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8665] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8664] <... prctl resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 8664] setpgid(0, 0 [pid 5081] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8665] <... clone resumed>, parent_tid=[8666], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8666 [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8665] <... futex resumed>) = 0 [pid 8664] <... setpgid resumed>) = 0 [pid 5081] lstat("./106/.log", [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 ./strace-static-x86_64: Process 8666 attached [pid 8664] <... openat resumed>) = 3 [pid 5081] unlink("./106/.log" [pid 8666] set_robust_list(0x7ff2b37749e0, 24 [pid 8664] write(3, "1000", 4 [pid 8666] <... set_robust_list resumed>) = 0 [pid 8664] <... write resumed>) = 4 [pid 5081] <... unlink resumed>) = 0 [pid 8664] close(3) = 0 [pid 5081] getdents64(3, [pid 8666] memfd_create("syzkaller", 0 [pid 8664] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8666] <... memfd_create resumed>) = 3 [pid 8664] <... symlink resumed>) = 0 [pid 5081] close(3 [pid 8666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8664] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 8666] <... mmap resumed>) = 0x7ff2ab354000 [pid 8664] <... futex resumed>) = 0 [pid 8664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] rmdir("./106" [pid 8664] <... mmap resumed>) = 0x7ff2b3754000 [pid 8664] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8664] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8667], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8667 [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8667 attached [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./107", 0777 [pid 8667] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8667] <... set_robust_list resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 8667] memfd_create("syzkaller", 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8667] <... memfd_create resumed>) = 3 [pid 5081] close(3 [pid 8667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8667] <... mmap resumed>) = 0x7ff2ab354000 ./strace-static-x86_64: Process 8668 attached [pid 8663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8668] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8668 [pid 8668] <... set_robust_list resumed>) = 0 [pid 8668] chdir("./107") = 0 [pid 8668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8668] setpgid(0, 0) = 0 [pid 8668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8668] write(3, "1000", 4) = 4 [pid 8668] close(3) = 0 [pid 8668] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8668] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8668] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8668] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8669], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8669 [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8669 attached [pid 8669] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8669] memfd_create("syzkaller", 0) = 3 [pid 8669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./107/file0") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./107") = 0 [pid 5084] mkdir("./108", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8670 ./strace-static-x86_64: Process 8670 attached [pid 8670] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8670] chdir("./108") = 0 [pid 8670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8670] setpgid(0, 0) = 0 [pid 8670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8670] write(3, "1000", 4) = 4 [pid 8670] close(3) = 0 [pid 8670] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8670] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8670] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8670] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8671], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8671 [pid 8670] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8670] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8671 attached [pid 8671] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8671] memfd_create("syzkaller", 0) = 3 [pid 8671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8659] <... write resumed>) = 16777216 [pid 8659] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8659] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8659] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8659] close(3) = 0 [pid 8659] mkdir("./file0", 0777) = 0 [pid 8659] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8663] <... write resumed>) = 16777216 [ 237.206713][ T8659] loop1: detected capacity change from 0 to 32768 [ 237.229076][ T8659] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (8659) [pid 8663] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8663] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 237.268417][ T8659] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 237.305359][ T8659] BTRFS info (device loop1): setting nodatasum [ 237.311831][ T8659] BTRFS info (device loop1): allowing degraded mounts [pid 8663] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8663] close(3) = 0 [pid 8663] mkdir("./file0", 0777) = 0 [pid 8663] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 237.319732][ T8663] loop4: detected capacity change from 0 to 32768 [ 237.331974][ T8659] BTRFS info (device loop1): use zlib compression, level 3 [ 237.349050][ T8663] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8663) [ 237.360554][ T8659] BTRFS info (device loop1): using free space tree [pid 8663] ioctl(4, LOOP_CLR_FD [pid 8671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8659] <... mount resumed>) = 0 [pid 8666] <... write resumed>) = 16777216 [pid 8659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8667] <... write resumed>) = 16777216 [pid 8659] <... openat resumed>) = 3 [pid 8659] chdir("./file0" [pid 8667] munmap(0x7ff2ab354000, 16777216 [pid 8659] <... chdir resumed>) = 0 [ 237.499348][ T8659] BTRFS info (device loop1): enabling ssd optimizations [ 237.507642][ T8659] BTRFS info (device loop1): auto enabling async discard [ 237.515721][ T8659] BTRFS info (device loop1): checking UUID tree [pid 8659] ioctl(4, LOOP_CLR_FD) = 0 [pid 8659] close(4) = 0 [pid 8659] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8659] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8667] <... munmap resumed>) = 0 [pid 8667] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8658] <... futex resumed>) = 0 [pid 8667] <... openat resumed>) = 4 [pid 8658] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8667] ioctl(4, LOOP_SET_FD, 3 [pid 8659] <... futex resumed>) = 0 [pid 8658] <... futex resumed>) = 1 [pid 8659] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 8659] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8659] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8658] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8667] <... ioctl resumed>) = 0 [pid 8658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8667] close(3 [pid 8658] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8667] <... close resumed>) = 0 [pid 8666] munmap(0x7ff2ab354000, 16777216 [pid 8659] <... futex resumed>) = 0 [pid 8658] <... futex resumed>) = 1 [pid 8667] mkdir("./file0", 0777 [pid 8659] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8658] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8667] <... mkdir resumed>) = 0 [pid 8666] <... munmap resumed>) = 0 [pid 8667] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 237.569744][ T8667] loop2: detected capacity change from 0 to 32768 [ 237.603184][ T8659] BTRFS info (device loop1): balance: start -s [pid 8666] ioctl(4, LOOP_SET_FD, 3 [pid 8667] <... mount resumed>) = -1 EEXIST (File exists) [pid 8667] ioctl(4, LOOP_CLR_FD [pid 8663] <... ioctl resumed>) = 0 [pid 8658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8663] close(4 [pid 8658] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] <... ioctl resumed>) = 0 [pid 8666] close(3) = 0 [pid 8658] <... futex resumed>) = 0 [pid 8663] <... close resumed>) = 0 [pid 8658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... mmap resumed>) = 0x7ff2ac333000 [pid 8666] mkdir("./file0", 0777) = 0 [pid 8666] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8662] <... futex resumed>) = 0 [pid 8658] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8663] <... futex resumed>) = 1 [ 237.616663][ T8667] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8667) [ 237.618293][ T8666] loop0: detected capacity change from 0 to 32768 [ 237.644680][ T8659] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 8669] <... write resumed>) = 16777216 [pid 8663] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... mprotect resumed>) = 0 [pid 8663] <... openat resumed>) = 3 [pid 8662] <... futex resumed>) = 0 [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8658] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8663] <... futex resumed>) = 0 [pid 8662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8663] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] <... clone resumed>, parent_tid=[8690], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8690 [pid 8663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... futex resumed>) = 0 [pid 8658] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8690 attached [pid 8663] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8658] <... futex resumed>) = 0 [pid 8690] set_robust_list(0x7ff2ac3539e0, 24 [pid 8669] munmap(0x7ff2ab354000, 16777216 [pid 8663] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8658] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8690] <... set_robust_list resumed>) = 0 [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8690] openat(AT_FDCWD, ".log", O_RDONLY [pid 8669] <... munmap resumed>) = 0 [pid 8663] <... futex resumed>) = 1 [pid 8662] <... futex resumed>) = 0 [ 237.685712][ T8666] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8666) [pid 8663] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8690] <... openat resumed>) = 5 [pid 8669] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... futex resumed>) = 0 [pid 8690] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8669] <... openat resumed>) = 4 [pid 8663] openat(AT_FDCWD, ".log", O_RDONLY [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8690] <... futex resumed>) = 1 [pid 8669] ioctl(4, LOOP_SET_FD, 3 [pid 8666] <... mount resumed>) = -1 EEXIST (File exists) [pid 8663] <... openat resumed>) = 4 [pid 8658] <... futex resumed>) = 0 [pid 8690] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8666] ioctl(4, LOOP_CLR_FD [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8669] <... ioctl resumed>) = 0 [pid 8663] <... futex resumed>) = 1 [pid 8662] <... futex resumed>) = 0 [pid 8658] <... futex resumed>) = 1 [pid 8690] <... futex resumed>) = 0 [ 237.731185][ T27] audit: type=1804 audit(1680236921.202:645): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/108/file0/.log" dev="loop1" ino=263 res=1 errno=0 [ 237.765806][ T8669] loop3: detected capacity change from 0 to 32768 [pid 8690] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8669] close(3 [pid 8663] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8662] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8658] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8669] <... close resumed>) = 0 [pid 8663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8662] <... futex resumed>) = 0 [pid 8669] mkdir("./file0", 0777 [pid 8663] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8662] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8669] <... mkdir resumed>) = 0 [pid 8663] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8669] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8663] <... futex resumed>) = 0 [pid 8662] exit_group(0) = ? [pid 8663] +++ exited with 0 +++ [pid 8662] +++ exited with 0 +++ [ 237.778786][ T8659] BTRFS info (device loop1): balance: ended with status: 0 [ 237.794022][ T8690] BTRFS info (device loop1): scrub: started on devid 1 [ 237.812250][ T8669] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8669) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8662, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5083] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./107/binderfs") = 0 [pid 5083] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] getdents64(4, [pid 8669] <... mount resumed>) = -1 EEXIST (File exists) [pid 8659] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8669] ioctl(4, LOOP_CLR_FD [pid 8659] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(4 [pid 8659] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 8659] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] rmdir("./107/file0") = 0 [pid 5083] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./107/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./107/.log" [pid 8690] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 8690] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 8690] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8690] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8658] exit_group(0 [pid 5083] close(3 [pid 8690] <... futex resumed>) = ? [pid 8659] <... futex resumed>) = ? [pid 8658] <... exit_group resumed>) = ? [pid 5083] <... close resumed>) = 0 [pid 8690] +++ exited with 0 +++ [pid 8659] +++ exited with 0 +++ [pid 5083] rmdir("./107" [pid 8658] +++ exited with 0 +++ [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./108", 0777 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8658, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 5083] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 237.845330][ T27] audit: type=1804 audit(1680236921.232:646): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/107/.log" dev="sda1" ino=1160 res=1 errno=0 [ 237.869005][ T8690] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5079] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8691 [pid 5079] <... openat resumed>) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8691 attached [pid 5079] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8691] set_robust_list(0x5555559d56e0, 24 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8691] <... set_robust_list resumed>) = 0 [pid 5079] lstat("./108/binderfs", [pid 8691] chdir("./108" [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8691] <... chdir resumed>) = 0 [pid 5079] unlink("./108/binderfs" [pid 8691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... unlink resumed>) = 0 [pid 8691] <... prctl resumed>) = 0 [pid 5079] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8691] setpgid(0, 0) = 0 [pid 8691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8691] write(3, "1000", 4) = 4 [pid 8691] close(3) = 0 [pid 8691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8691] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8667] <... ioctl resumed>) = 0 [pid 8691] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8667] close(4 [pid 8691] <... mprotect resumed>) = 0 [pid 8667] <... close resumed>) = 0 [pid 8691] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8692], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8692 [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8664] <... futex resumed>) = 0 [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8664] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8692 attached [pid 8667] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8692] set_robust_list(0x7ff2b37749e0, 24 [pid 8667] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = 0 [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] <... set_robust_list resumed>) = 0 [pid 8667] <... futex resumed>) = 1 [pid 8664] <... futex resumed>) = 0 [pid 5079] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8664] <... futex resumed>) = 0 [pid 8667] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8692] memfd_create("syzkaller", 0 [pid 8667] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8692] <... memfd_create resumed>) = 3 [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./108/file0", [pid 8692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8667] <... futex resumed>) = 1 [pid 8664] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8692] <... mmap resumed>) = 0x7ff2ab354000 [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8664] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8667] openat(AT_FDCWD, ".log", O_RDONLY [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8667] <... openat resumed>) = 4 [pid 5079] <... openat resumed>) = 4 [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8664] <... futex resumed>) = 0 [pid 5079] fstat(4, [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8666] <... ioctl resumed>) = 0 [pid 8664] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8664] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 8667] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8664] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8667] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] getdents64(4, [pid 8667] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8667] <... futex resumed>) = 1 [pid 8664] <... futex resumed>) = 0 [pid 5079] close(4 [pid 8667] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8664] exit_group(0 [pid 5079] <... close resumed>) = 0 [pid 8667] <... futex resumed>) = ? [pid 8664] <... exit_group resumed>) = ? [pid 5079] rmdir("./108/file0" [pid 8667] +++ exited with 0 +++ [pid 8664] +++ exited with 0 +++ [pid 5079] <... rmdir resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8664, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5080] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, [ 238.088100][ T27] audit: type=1804 audit(1680236921.562:647): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/107/.log" dev="sda1" ino=1156 res=1 errno=0 [pid 5080] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5079] close(3 [pid 5080] fstat(3, [pid 5079] <... close resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] rmdir("./108" [pid 5080] getdents64(3, [pid 8666] close(4 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... rmdir resumed>) = 0 [pid 8666] <... close resumed>) = 0 [pid 5080] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8666] <... futex resumed>) = 1 [pid 8665] <... futex resumed>) = 0 [pid 5080] lstat("./107/binderfs", [pid 8666] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8671] <... write resumed>) = 16777216 [pid 8666] <... openat resumed>) = 3 [pid 8665] <... futex resumed>) = 0 [pid 5080] unlink("./107/binderfs" [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... unlink resumed>) = 0 [pid 5079] mkdir("./109", 0777 [pid 8666] <... futex resumed>) = 0 [pid 8665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8666] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... mkdir resumed>) = 0 [pid 8669] <... ioctl resumed>) = 0 [pid 8666] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8665] <... futex resumed>) = 0 [pid 5080] lstat("./107/file0", [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8671] munmap(0x7ff2ab354000, 16777216 [pid 8666] <... futex resumed>) = 0 [pid 8665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 8671] <... munmap resumed>) = 0 [pid 8666] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8669] close(4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 8671] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8669] <... close resumed>) = 0 [pid 8666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8665] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8671] <... openat resumed>) = 4 [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] openat(AT_FDCWD, ".log", O_RDONLY [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 4 [pid 5079] close(3 [pid 8671] ioctl(4, LOOP_SET_FD, 3 [pid 8669] <... futex resumed>) = 1 [pid 8668] <... futex resumed>) = 0 [pid 8666] <... openat resumed>) = 4 [pid 5080] fstat(4, [pid 8669] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... close resumed>) = 0 [pid 8669] <... openat resumed>) = 3 [pid 8668] <... futex resumed>) = 0 [pid 8666] <... futex resumed>) = 1 [pid 8665] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8666] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8665] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8669] <... futex resumed>) = 0 [pid 8668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8665] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 8669] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8665] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8693 [pid 8669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8668] <... futex resumed>) = 0 [pid 8666] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] close(4./strace-static-x86_64: Process 8693 attached [pid 8669] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8666] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 8693] set_robust_list(0x5555559d56e0, 24 [pid 8669] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8666] <... futex resumed>) = 1 [pid 8665] <... futex resumed>) = 0 [pid 5080] rmdir("./107/file0" [pid 8693] <... set_robust_list resumed>) = 0 [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8665] exit_group(0 [pid 5080] <... rmdir resumed>) = 0 [pid 8693] chdir("./109" [pid 8669] <... futex resumed>) = 1 [pid 8668] <... futex resumed>) = 0 [pid 8666] <... futex resumed>) = ? [pid 8665] <... exit_group resumed>) = ? [pid 5080] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8693] <... chdir resumed>) = 0 [pid 8669] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8666] +++ exited with 0 +++ [pid 8665] +++ exited with 0 +++ [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8668] <... futex resumed>) = 0 [pid 5080] lstat("./107/.log", [pid 8693] <... prctl resumed>) = 0 [pid 8669] openat(AT_FDCWD, ".log", O_RDONLY [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8665, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 8693] setpgid(0, 0 [pid 8669] <... openat resumed>) = 4 [ 238.185369][ T27] audit: type=1804 audit(1680236921.652:648): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/106/.log" dev="sda1" ino=1139 res=1 errno=0 [ 238.185840][ T8671] loop5: detected capacity change from 0 to 32768 [pid 5080] unlink("./107/.log" [pid 5078] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5078] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5080] close(3 [pid 5078] fstat(3, [pid 5080] <... close resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] rmdir("./107" [pid 5078] getdents64(3, [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] mkdir("./108", 0777 [pid 5078] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] lstat("./106/binderfs", [pid 5080] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] unlink("./106/binderfs" [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... unlink resumed>) = 0 [pid 5080] close(3 [pid 5078] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8694 [pid 5078] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8693] <... setpgid resumed>) = 0 [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8694 attached [pid 5078] getdents64(4, [pid 8694] set_robust_list(0x5555559d56e0, 24 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8694] <... set_robust_list resumed>) = 0 [pid 5078] close(4 [pid 8694] chdir("./108" [pid 5078] <... close resumed>) = 0 [pid 8694] <... chdir resumed>) = 0 [pid 8693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8669] <... futex resumed>) = 1 [pid 8668] <... futex resumed>) = 0 [pid 5078] rmdir("./106/file0" [pid 8694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8693] <... openat resumed>) = 3 [pid 8669] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8668] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... rmdir resumed>) = 0 [pid 8694] <... prctl resumed>) = 0 [pid 8693] write(3, "1000", 4 [pid 8669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8668] <... futex resumed>) = 0 [pid 5078] umount2("./106/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8694] setpgid(0, 0 [pid 8693] <... write resumed>) = 4 [pid 8669] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8668] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8694] <... setpgid resumed>) = 0 [pid 8693] close(3 [pid 8669] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] lstat("./106/.log", [pid 8694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8693] <... close resumed>) = 0 [pid 8669] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8694] <... openat resumed>) = 3 [pid 8693] symlink("/dev/binderfs", "./binderfs" [pid 8669] <... futex resumed>) = 1 [pid 8668] <... futex resumed>) = 0 [pid 5078] unlink("./106/.log" [pid 8694] write(3, "1000", 4 [pid 8693] <... symlink resumed>) = 0 [pid 8669] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8668] exit_group(0 [pid 5078] <... unlink resumed>) = 0 [pid 8694] <... write resumed>) = 4 [pid 8693] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8671] <... ioctl resumed>) = 0 [pid 8669] <... futex resumed>) = ? [pid 8668] <... exit_group resumed>) = ? [pid 5078] getdents64(3, [pid 8694] close(3 [pid 8693] <... futex resumed>) = 0 [pid 8671] close(3 [pid 8669] +++ exited with 0 +++ [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [ 238.255335][ T27] audit: type=1804 audit(1680236921.722:649): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/107/.log" dev="sda1" ino=1155 res=1 errno=0 [pid 8694] <... close resumed>) = 0 [pid 8693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8671] <... close resumed>) = 0 [pid 8668] +++ exited with 0 +++ [pid 5078] close(3 [pid 8694] symlink("/dev/binderfs", "./binderfs" [pid 8693] <... mmap resumed>) = 0x7ff2b3754000 [pid 8671] mkdir("./file0", 0777 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8668, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=18 /* 0.18 s */} --- [pid 5078] <... close resumed>) = 0 [pid 8694] <... symlink resumed>) = 0 [pid 8693] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8671] <... mkdir resumed>) = 0 [pid 5078] rmdir("./106" [pid 8694] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] <... mprotect resumed>) = 0 [pid 8671] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5078] <... rmdir resumed>) = 0 [pid 8694] <... futex resumed>) = 0 [pid 8693] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] mkdir("./107", 0777 [pid 8694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... mkdir resumed>) = 0 [pid 8694] <... mmap resumed>) = 0x7ff2b3754000 [pid 8693] <... clone resumed>, parent_tid=[8695], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8695 [pid 5081] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8694] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 8694] <... mprotect resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] ioctl(3, LOOP_CLR_FD [pid 8694] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8693] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] fstat(3, [pid 5078] close(3 [pid 8694] <... clone resumed>, parent_tid=[8696], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8696 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 8694] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8694] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8694] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8697 ./strace-static-x86_64: Process 8696 attached [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8696] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] lstat("./107/binderfs", [pid 8696] <... set_robust_list resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8696] memfd_create("syzkaller", 0 [pid 5081] unlink("./107/binderfs" [pid 8696] <... memfd_create resumed>) = 3 [pid 5081] <... unlink resumed>) = 0 [pid 8696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8696] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8697 attached ./strace-static-x86_64: Process 8695 attached [pid 8692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... openat resumed>) = 4 [pid 8697] set_robust_list(0x5555559d56e0, 24 [pid 8695] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] fstat(4, [pid 8697] <... set_robust_list resumed>) = 0 [pid 8695] <... set_robust_list resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 8697] chdir("./107" [pid 5081] rmdir("./107/file0" [pid 8695] memfd_create("syzkaller", 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./107/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8697] <... chdir resumed>) = 0 [pid 8695] <... memfd_create resumed>) = 3 [ 238.323299][ T8671] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (8671) [pid 5081] unlink("./107/.log" [pid 8697] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... unlink resumed>) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./107") = 0 [pid 5081] mkdir("./108", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 8697] <... prctl resumed>) = 0 [pid 8695] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8698 [pid 8697] setpgid(0, 0./strace-static-x86_64: Process 8698 attached ) = 0 [pid 8698] set_robust_list(0x5555559d56e0, 24 [pid 8697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8698] <... set_robust_list resumed>) = 0 [pid 8697] <... openat resumed>) = 3 [pid 8698] chdir("./108" [pid 8697] write(3, "1000", 4 [pid 8698] <... chdir resumed>) = 0 [pid 8697] <... write resumed>) = 4 [pid 8698] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8697] close(3 [pid 8698] <... prctl resumed>) = 0 [pid 8697] <... close resumed>) = 0 [pid 8698] setpgid(0, 0 [pid 8697] symlink("/dev/binderfs", "./binderfs" [pid 8698] <... setpgid resumed>) = 0 [pid 8697] <... symlink resumed>) = 0 [pid 8698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8697] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8698] <... openat resumed>) = 3 [pid 8697] <... futex resumed>) = 0 [pid 8698] write(3, "1000", 4 [pid 8697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8698] <... write resumed>) = 4 [pid 8697] <... mmap resumed>) = 0x7ff2b3754000 [pid 8698] close(3 [pid 8697] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8698] <... close resumed>) = 0 [pid 8697] <... mprotect resumed>) = 0 [pid 8698] symlink("/dev/binderfs", "./binderfs" [pid 8697] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8698] <... symlink resumed>) = 0 [pid 8698] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8697] <... clone resumed>, parent_tid=[8699], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8699 [pid 8698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 238.381803][ T8671] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 238.415492][ T8671] BTRFS info (device loop5): setting nodatasum [ 238.421821][ T8671] BTRFS info (device loop5): allowing degraded mounts [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8699 attached [pid 8698] <... mmap resumed>) = 0x7ff2b3754000 [pid 8697] <... futex resumed>) = 0 [pid 8699] set_robust_list(0x7ff2b37749e0, 24 [pid 8698] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8699] <... set_robust_list resumed>) = 0 [pid 8698] <... mprotect resumed>) = 0 [pid 8698] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8699] memfd_create("syzkaller", 0) = 3 [pid 8699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8698] <... clone resumed>, parent_tid=[8700], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8700 [pid 8699] <... mmap resumed>) = 0x7ff2ab354000 [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8700 attached [pid 8700] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8700] memfd_create("syzkaller", 0) = 3 [pid 8700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 238.479071][ T8671] BTRFS info (device loop5): use zlib compression, level 3 [ 238.518207][ T8671] BTRFS info (device loop5): using free space tree [pid 8696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8692] <... write resumed>) = 16777216 [ 238.725369][ T8671] BTRFS info (device loop5): enabling ssd optimizations [ 238.739116][ T8671] BTRFS info (device loop5): auto enabling async discard [pid 8692] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8692] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8671] <... mount resumed>) = 0 [pid 8692] ioctl(4, LOOP_SET_FD, 3 [pid 8671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8671] chdir("./file0") = 0 [pid 8671] ioctl(4, LOOP_CLR_FD) = 0 [pid 8671] close(4 [pid 8692] <... ioctl resumed>) = 0 [pid 8671] <... close resumed>) = 0 [pid 8671] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] close(3 [pid 8671] <... futex resumed>) = 1 [pid 8670] <... futex resumed>) = 0 [pid 8692] <... close resumed>) = 0 [pid 8671] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8670] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] mkdir("./file0", 0777 [pid 8671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8670] <... futex resumed>) = 0 [pid 8671] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8670] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8692] <... mkdir resumed>) = 0 [pid 8671] <... openat resumed>) = 4 [ 238.778824][ T8671] BTRFS info (device loop5): checking UUID tree [ 238.798197][ T8692] loop4: detected capacity change from 0 to 32768 [pid 8692] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8671] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8670] <... futex resumed>) = 0 [pid 8671] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8670] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8671] <... futex resumed>) = 0 [pid 8670] <... futex resumed>) = 1 [pid 8671] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8670] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8692] <... mount resumed>) = -1 EEXIST (File exists) [ 238.819084][ T8692] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8692) [ 238.842878][ T8671] BTRFS info (device loop5): balance: start -s [pid 8692] ioctl(4, LOOP_CLR_FD [pid 8670] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8670] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8670] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8670] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8719], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8719 [pid 8670] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8670] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8719 attached [pid 8700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 238.874729][ T8671] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 8719] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 8719] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 8719] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8670] <... futex resumed>) = 0 [pid 8719] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8670] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8719] <... futex resumed>) = 0 [pid 8670] <... futex resumed>) = 1 [pid 8719] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 238.923308][ T27] audit: type=1804 audit(1680236922.392:650): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/108/file0/.log" dev="loop5" ino=263 res=1 errno=0 [pid 8670] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8719] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [ 238.988362][ T8719] BTRFS info (device loop5): scrub: started on devid 1 [ 238.996611][ T8671] BTRFS info (device loop5): balance: ended with status: 0 [ 239.013599][ T8719] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 8719] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8671] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8719] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8671] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8670] exit_group(0 [pid 8719] <... futex resumed>) = ? [pid 8671] <... futex resumed>) = ? [pid 8670] <... exit_group resumed>) = ? [pid 8719] +++ exited with 0 +++ [pid 8671] +++ exited with 0 +++ [pid 8670] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8670, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 5084] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./108/binderfs") = 0 [pid 5084] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8696] <... write resumed>) = 16777216 [pid 8692] <... ioctl resumed>) = 0 [pid 8692] close(4) = 0 [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8691] <... futex resumed>) = 0 [pid 8692] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] <... openat resumed>) = 3 [pid 8691] <... futex resumed>) = 0 [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8692] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8692] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8691] <... futex resumed>) = 0 [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8696] munmap(0x7ff2ab354000, 16777216 [pid 8692] <... futex resumed>) = 0 [pid 8691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8692] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8691] <... futex resumed>) = 0 [pid 5084] lstat("./108/file0", [pid 8692] openat(AT_FDCWD, ".log", O_RDONLY [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8692] <... openat resumed>) = 4 [pid 5084] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./108/file0") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./108") = 0 [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] mkdir("./109", 0777 [pid 8696] <... munmap resumed>) = 0 [pid 8692] <... futex resumed>) = 1 [pid 8691] <... futex resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 8692] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8691] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8696] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8691] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 8692] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8691] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] ioctl(3, LOOP_CLR_FD [pid 8692] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... ioctl resumed>) = 0 [pid 8696] <... openat resumed>) = 4 [pid 8692] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 8696] ioctl(4, LOOP_SET_FD, 3 [pid 8692] <... futex resumed>) = 1 [pid 8691] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 8692] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8691] exit_group(0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8720 [pid 8692] <... futex resumed>) = ? [pid 8691] <... exit_group resumed>) = ? [pid 8692] +++ exited with 0 +++ [pid 8691] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8691, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- ./strace-static-x86_64: Process 8720 attached [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 8720] set_robust_list(0x5555559d56e0, 24 [pid 8696] <... ioctl resumed>) = 0 [pid 8695] <... write resumed>) = 16777216 [pid 5083] <... restart_syscall resumed>) = 0 [pid 8720] <... set_robust_list resumed>) = 0 [pid 8720] chdir("./109" [pid 8696] close(3 [pid 8720] <... chdir resumed>) = 0 [pid 8696] <... close resumed>) = 0 [pid 5083] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8720] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8696] mkdir("./file0", 0777 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8720] <... prctl resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8720] setpgid(0, 0 [pid 8696] <... mkdir resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 8720] <... setpgid resumed>) = 0 [pid 5083] fstat(3, [pid 8696] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8720] <... openat resumed>) = 3 [ 239.246743][ T27] audit: type=1804 audit(1680236922.722:651): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/108/.log" dev="sda1" ino=1154 res=1 errno=0 [ 239.277394][ T8696] loop2: detected capacity change from 0 to 32768 [pid 5083] getdents64(3, [pid 8720] write(3, "1000", 4 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8720] <... write resumed>) = 4 [pid 5083] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8720] close(3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8720] <... close resumed>) = 0 [pid 5083] lstat("./108/binderfs", [pid 8720] symlink("/dev/binderfs", "./binderfs" [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8720] <... symlink resumed>) = 0 [pid 5083] unlink("./108/binderfs" [pid 8720] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 8720] <... futex resumed>) = 0 [pid 5083] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8720] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] lstat("./108/file0", [pid 8720] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8720] <... mprotect resumed>) = 0 [pid 5083] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8720] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8720] <... clone resumed>, parent_tid=[8721], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8721 [pid 8695] munmap(0x7ff2ab354000, 16777216 [pid 5083] <... openat resumed>) = 4 [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] <... munmap resumed>) = 0 [pid 5083] fstat(4, [pid 8720] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] getdents64(4, [pid 8695] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8721 attached [pid 8695] <... openat resumed>) = 4 [pid 5083] getdents64(4, [pid 8721] set_robust_list(0x7ff2b37749e0, 24 [pid 8695] ioctl(4, LOOP_SET_FD, 3 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8721] <... set_robust_list resumed>) = 0 [pid 8695] <... ioctl resumed>) = 0 [pid 5083] close(4 [pid 8721] memfd_create("syzkaller", 0 [pid 5083] <... close resumed>) = 0 [pid 8721] <... memfd_create resumed>) = 3 [pid 5083] rmdir("./108/file0" [pid 8721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] <... rmdir resumed>) = 0 [pid 8721] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] umount2("./108/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./108/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./108/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./108") = 0 [ 239.313364][ T8696] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor373 (8696) [ 239.336270][ T8695] loop1: detected capacity change from 0 to 32768 [pid 5083] mkdir("./109", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 8695] close(3 [pid 5083] <... close resumed>) = 0 [pid 8695] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8695] mkdir("./file0", 0777) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8722 [pid 8695] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,"./strace-static-x86_64: Process 8722 attached [ 239.365351][ T8696] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 239.375370][ T8695] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8695) [pid 8722] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8695] <... mount resumed>) = -1 EEXIST (File exists) [pid 8722] chdir("./109") = 0 [pid 8695] ioctl(4, LOOP_CLR_FD [pid 8722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8722] setpgid(0, 0) = 0 [pid 8722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8722] write(3, "1000", 4) = 4 [pid 8722] close(3) = 0 [pid 8722] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8722] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8722] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8722] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8723], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8723 [pid 8722] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8723 attached ) = 0 [pid 8699] <... write resumed>) = 16777216 [pid 8723] set_robust_list(0x7ff2b37749e0, 24 [pid 8722] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8699] munmap(0x7ff2ab354000, 16777216 [pid 8723] <... set_robust_list resumed>) = 0 [pid 8699] <... munmap resumed>) = 0 [pid 8723] memfd_create("syzkaller", 0 [ 239.406588][ T8696] BTRFS info (device loop2): setting nodatasum [ 239.412827][ T8696] BTRFS info (device loop2): allowing degraded mounts [pid 8699] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8723] <... memfd_create resumed>) = 3 [pid 8700] <... write resumed>) = 16777216 [pid 8699] <... openat resumed>) = 4 [pid 8723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8700] munmap(0x7ff2ab354000, 16777216 [pid 8699] ioctl(4, LOOP_SET_FD, 3 [pid 8723] <... mmap resumed>) = 0x7ff2ab354000 [pid 8700] <... munmap resumed>) = 0 [pid 8700] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8700] ioctl(4, LOOP_SET_FD, 3 [pid 8699] <... ioctl resumed>) = 0 [ 239.454113][ T8696] BTRFS info (device loop2): use zlib compression, level 3 [ 239.461753][ T8696] BTRFS info (device loop2): using free space tree [ 239.469125][ T8699] loop0: detected capacity change from 0 to 32768 [pid 8700] <... ioctl resumed>) = 0 [pid 8699] close(3) = 0 [pid 8700] close(3 [pid 8699] mkdir("./file0", 0777 [pid 8700] <... close resumed>) = 0 [pid 8699] <... mkdir resumed>) = 0 [pid 8700] mkdir("./file0", 0777) = 0 [pid 8699] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 239.506568][ T8700] loop3: detected capacity change from 0 to 32768 [ 239.540758][ T8699] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8699) [pid 8700] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8699] <... mount resumed>) = -1 EEXIST (File exists) [pid 8700] <... mount resumed>) = -1 EEXIST (File exists) [pid 8700] ioctl(4, LOOP_CLR_FD [ 239.552015][ T8700] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8700) [pid 8699] ioctl(4, LOOP_CLR_FD [pid 8721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8696] <... mount resumed>) = 0 [pid 8696] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8696] chdir("./file0") = 0 [pid 8696] ioctl(4, LOOP_CLR_FD) = 0 [pid 8696] close(4) = 0 [pid 8696] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8694] <... futex resumed>) = 0 [pid 8696] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8694] <... futex resumed>) = 0 [ 239.695463][ T8696] BTRFS info (device loop2): enabling ssd optimizations [ 239.702448][ T8696] BTRFS info (device loop2): auto enabling async discard [ 239.710732][ T8696] BTRFS info (device loop2): checking UUID tree [pid 8696] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8694] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8696] <... openat resumed>) = 4 [pid 8696] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8694] <... futex resumed>) = 0 [pid 8696] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8695] <... ioctl resumed>) = 0 [pid 8694] <... futex resumed>) = 0 [pid 8696] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8694] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] close(4 [pid 8700] <... ioctl resumed>) = 0 [pid 8695] <... close resumed>) = 0 [pid 8694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8700] close(4 [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8694] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] <... close resumed>) = 0 [pid 8695] <... futex resumed>) = 1 [pid 8694] <... futex resumed>) = 0 [ 239.804417][ T8696] BTRFS info (device loop2): balance: start -s [ 239.825980][ T8696] BTRFS info (device loop2): relocating block group 1048576 flags system [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] <... futex resumed>) = 1 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8694] <... mmap resumed>) = 0x7ff2ac333000 [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8694] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8698] <... futex resumed>) = 0 [pid 8695] <... openat resumed>) = 3 [pid 8694] <... mprotect resumed>) = 0 [pid 8700] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8694] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8700] <... openat resumed>) = 3 [pid 8695] <... futex resumed>) = 1 [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] <... clone resumed>, parent_tid=[8742], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8742 [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8742 attached [pid 8700] <... futex resumed>) = 1 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8694] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] <... futex resumed>) = 0 [pid 8742] set_robust_list(0x7ff2ac3539e0, 24 [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8694] <... futex resumed>) = 0 [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8742] <... set_robust_list resumed>) = 0 [pid 8700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8698] <... futex resumed>) = 0 [pid 8695] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8694] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8742] openat(AT_FDCWD, ".log", O_RDONLY [pid 8700] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8742] <... openat resumed>) = 5 [pid 8700] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8699] <... ioctl resumed>) = 0 [pid 8695] <... futex resumed>) = 1 [pid 8693] <... futex resumed>) = 0 [pid 8742] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8742] <... futex resumed>) = 1 [pid 8700] <... futex resumed>) = 1 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8694] <... futex resumed>) = 0 [pid 8693] <... futex resumed>) = 0 [pid 8742] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] openat(AT_FDCWD, ".log", O_RDONLY [pid 8694] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8699] close(4 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... openat resumed>) = 4 [pid 8694] <... futex resumed>) = 0 [pid 8742] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8700] openat(AT_FDCWD, ".log", O_RDONLY [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8694] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8695] <... futex resumed>) = 1 [pid 8700] <... openat resumed>) = 4 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] <... futex resumed>) = 1 [pid 8699] <... close resumed>) = 0 [pid 8698] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = 0 [pid 8693] <... futex resumed>) = 1 [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8698] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8693] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8699] <... futex resumed>) = 1 [pid 8698] <... futex resumed>) = 0 [pid 8697] <... futex resumed>) = 0 [pid 8695] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8700] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8699] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8700] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8697] <... futex resumed>) = 0 [pid 8695] <... futex resumed>) = 1 [pid 8693] <... futex resumed>) = 0 [pid 8700] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8699] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8695] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8700] <... futex resumed>) = 1 [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8693] exit_group(0 [pid 8699] <... openat resumed>) = 3 [pid 8700] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8698] <... futex resumed>) = 0 [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8693] <... exit_group resumed>) = ? [pid 8699] <... futex resumed>) = 1 [pid 8698] exit_group(0 [pid 8697] <... futex resumed>) = 0 [pid 8700] <... futex resumed>) = ? [pid 8699] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8698] <... exit_group resumed>) = ? [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8695] <... futex resumed>) = ? [pid 8700] +++ exited with 0 +++ [pid 8699] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8698] +++ exited with 0 +++ [pid 8697] <... futex resumed>) = 0 [pid 8695] +++ exited with 0 +++ [pid 8693] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8693, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8698, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5081] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8699] <... futex resumed>) = 0 [pid 8697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8699] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8697] <... futex resumed>) = 0 [pid 5081] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] fstat(3, [pid 5081] lstat("./108/binderfs", [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] getdents64(3, [pid 5081] unlink("./108/binderfs" [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8699] openat(AT_FDCWD, ".log", O_RDONLY [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... unlink resumed>) = 0 [pid 5079] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8699] <... openat resumed>) = 4 [pid 5081] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./109/binderfs", [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./108/file0", [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8699] <... futex resumed>) = 1 [pid 8697] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] unlink("./109/binderfs" [pid 8699] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8697] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 8699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8697] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8699] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8697] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8699] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... openat resumed>) = 4 [pid 5079] lstat("./109/file0", [pid 8699] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8696] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5081] fstat(4, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8699] <... futex resumed>) = 1 [pid 8697] <... futex resumed>) = 0 [pid 8696] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8742] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8699] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8697] exit_group(0 [pid 8696] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8742] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8699] <... futex resumed>) = ? [pid 8697] <... exit_group resumed>) = ? [pid 8696] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8694] exit_group(0 [pid 5081] getdents64(4, [pid 5079] <... openat resumed>) = 4 [pid 8742] <... futex resumed>) = ? [pid 8699] +++ exited with 0 +++ [pid 8697] +++ exited with 0 +++ [pid 8696] <... futex resumed>) = ? [pid 8694] <... exit_group resumed>) = ? [ 239.997236][ T8742] BTRFS info (device loop2): scrub: started on devid 1 [ 240.012669][ T8696] BTRFS info (device loop2): balance: ended with status: 0 [ 240.026136][ T8742] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] fstat(4, [pid 8742] +++ exited with 0 +++ [pid 8696] +++ exited with 0 +++ [pid 8694] +++ exited with 0 +++ [pid 5081] close(4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8697, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5081] rmdir("./108/file0" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8694, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=31 /* 0.31 s */} --- [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... rmdir resumed>) = 0 [pid 5080] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./108/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] close(4 [pid 5078] <... openat resumed>) = 3 [pid 5081] lstat("./108/.log", [pid 5080] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5078] fstat(3, [pid 8721] <... write resumed>) = 16777216 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] fstat(3, [pid 5079] rmdir("./109/file0" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8721] munmap(0x7ff2ab354000, 16777216 [pid 5081] unlink("./108/.log" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 8721] <... munmap resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5079] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8721] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] getdents64(3, [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8721] <... openat resumed>) = 4 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./109/.log", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8721] ioctl(4, LOOP_SET_FD, 3 [pid 5081] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] lstat("./107/binderfs", [pid 5081] <... close resumed>) = 0 [pid 5080] lstat("./108/binderfs", [pid 5079] unlink("./109/.log" [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] rmdir("./108" [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] unlink("./107/binderfs" [pid 5081] <... rmdir resumed>) = 0 [pid 5080] unlink("./108/binderfs" [pid 5079] getdents64(3, [pid 5078] <... unlink resumed>) = 0 [pid 8721] <... ioctl resumed>) = 0 [pid 5081] mkdir("./109", 0777 [pid 5080] <... unlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8721] close(3 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8721] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 5078] lstat("./107/file0", [pid 8721] mkdir("./file0", 0777 [pid 5081] <... openat resumed>) = 3 [pid 5079] rmdir("./109" [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8721] <... mkdir resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5079] <... rmdir resumed>) = 0 [pid 5078] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8721] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] mkdir("./110", 0777 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... openat resumed>) = 4 [pid 8721] <... mount resumed>) = -1 EEXIST (File exists) [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... openat resumed>) = 3 [pid 5078] fstat(4, [pid 8721] ioctl(4, LOOP_CLR_FD [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8743 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] getdents64(4, [ 240.106971][ T8721] loop5: detected capacity change from 0 to 32768 [ 240.140560][ T8721] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8721) [pid 5079] close(3 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8743 attached [pid 5078] close(4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8744 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./107/file0" [pid 8743] set_robust_list(0x5555559d56e0, 24 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] umount2("./107/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8743] <... set_robust_list resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8744 attached [pid 8743] chdir("./109" [pid 5078] lstat("./107/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./107/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 8743] <... chdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 8744] set_robust_list(0x5555559d56e0, 24 [pid 8743] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] rmdir("./107" [pid 8744] <... set_robust_list resumed>) = 0 [pid 8743] <... prctl resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 8744] chdir("./110" [pid 8743] setpgid(0, 0 [pid 5078] mkdir("./108", 0777 [pid 8744] <... chdir resumed>) = 0 [pid 8743] <... setpgid resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 8744] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8744] <... prctl resumed>) = 0 [pid 8743] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 8744] setpgid(0, 0 [pid 8743] write(3, "1000", 4 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 8744] <... setpgid resumed>) = 0 [pid 8743] <... write resumed>) = 4 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8743] close(3 [pid 5078] close(3 [pid 8744] <... openat resumed>) = 3 [pid 8743] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8745 ./strace-static-x86_64: Process 8745 attached [pid 8745] set_robust_list(0x5555559d56e0, 24 [pid 8744] write(3, "1000", 4 [pid 8743] symlink("/dev/binderfs", "./binderfs" [pid 8745] <... set_robust_list resumed>) = 0 [pid 8744] <... write resumed>) = 4 [pid 8743] <... symlink resumed>) = 0 [pid 8723] <... write resumed>) = 16777216 [pid 8745] chdir("./108" [pid 8744] close(3 [pid 8743] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8723] munmap(0x7ff2ab354000, 16777216 [pid 8745] <... chdir resumed>) = 0 [pid 8744] <... close resumed>) = 0 [pid 8743] <... futex resumed>) = 0 [pid 8745] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8744] symlink("/dev/binderfs", "./binderfs" [pid 8743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8723] <... munmap resumed>) = 0 [pid 8745] <... prctl resumed>) = 0 [pid 8744] <... symlink resumed>) = 0 [pid 8745] setpgid(0, 0 [pid 8744] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8743] <... mmap resumed>) = 0x7ff2b3754000 [pid 8723] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8745] <... setpgid resumed>) = 0 [pid 8744] <... futex resumed>) = 0 [pid 8743] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8723] <... openat resumed>) = 4 [pid 8745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8743] <... mprotect resumed>) = 0 [pid 8723] ioctl(4, LOOP_SET_FD, 3 [pid 8745] <... openat resumed>) = 3 [pid 8744] <... mmap resumed>) = 0x7ff2b3754000 [pid 8743] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8745] write(3, "1000", 4) = 4 [pid 8745] close(3) = 0 [pid 8745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8745] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8744] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8745] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8744] <... mprotect resumed>) = 0 [pid 8743] <... clone resumed>, parent_tid=[8746], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8746 ./strace-static-x86_64: Process 8746 attached [pid 8745] <... mprotect resumed>) = 0 [pid 8744] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8723] <... ioctl resumed>) = 0 [pid 8746] set_robust_list(0x7ff2b37749e0, 24 [pid 8745] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8743] <... futex resumed>) = 0 [pid 8723] close(3./strace-static-x86_64: Process 8747 attached [pid 8746] <... set_robust_list resumed>) = 0 [pid 8744] <... clone resumed>, parent_tid=[8747], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8747 [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8723] <... close resumed>) = 0 [pid 8747] set_robust_list(0x7ff2b37749e0, 24 [pid 8746] memfd_create("syzkaller", 0 [pid 8745] <... clone resumed>, parent_tid=[8748], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8748 [pid 8744] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8723] mkdir("./file0", 0777 [pid 8747] <... set_robust_list resumed>) = 0 [pid 8746] <... memfd_create resumed>) = 3 [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8744] <... futex resumed>) = 0 [pid 8723] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8748 attached [pid 8747] memfd_create("syzkaller", 0 [pid 8746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8745] <... futex resumed>) = 0 [pid 8744] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8723] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8748] set_robust_list(0x7ff2b37749e0, 24 [pid 8747] <... memfd_create resumed>) = 3 [pid 8746] <... mmap resumed>) = 0x7ff2ab354000 [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 240.277214][ T8723] loop4: detected capacity change from 0 to 32768 [pid 8748] <... set_robust_list resumed>) = 0 [pid 8748] memfd_create("syzkaller", 0) = 3 [pid 8748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 240.315688][ T8723] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (8723) [pid 8721] <... ioctl resumed>) = 0 [pid 8721] close(4) = 0 [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8720] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8721] <... futex resumed>) = 0 [pid 8720] <... futex resumed>) = 1 [pid 8721] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8721] <... openat resumed>) = 3 [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8721] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8720] <... futex resumed>) = 0 [pid 8721] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8721] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8720] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8720] <... futex resumed>) = 0 [pid 8721] openat(AT_FDCWD, ".log", O_RDONLY [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8721] <... openat resumed>) = 4 [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8720] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8720] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8720] <... futex resumed>) = 0 [pid 8721] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8720] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = 0 [pid 8721] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8721] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8720] <... futex resumed>) = 0 [pid 8721] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [ 240.382300][ T8723] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 240.416297][ T8723] BTRFS info (device loop4): setting nodatasum [pid 8720] exit_group(0 [pid 8721] <... futex resumed>) = ? [pid 8720] <... exit_group resumed>) = ? [pid 8721] +++ exited with 0 +++ [pid 8720] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8720, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5084] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./109/binderfs") = 0 [pid 5084] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, [pid 5080] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] close(4 [pid 5080] lstat("./108/file0", [pid 5084] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] rmdir("./109/file0" [pid 5080] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] lstat("./109/.log", [pid 5080] <... openat resumed>) = 4 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] fstat(4, [pid 5084] unlink("./109/.log" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5080] getdents64(4, [pid 5084] getdents64(3, [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(4, [pid 5084] close(3 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... close resumed>) = 0 [pid 5080] close(4 [pid 5084] rmdir("./109" [pid 5080] <... close resumed>) = 0 [ 240.457926][ T8723] BTRFS info (device loop4): allowing degraded mounts [ 240.464733][ T8723] BTRFS info (device loop4): use zlib compression, level 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5080] rmdir("./108/file0" [pid 5084] mkdir("./110", 0777 [pid 5080] <... rmdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5080] close(3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] rmdir("./108" [pid 5084] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5080] mkdir("./109", 0777 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8749 [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8750 attached , child_tidptr=0x5555559d56d0) = 8750 ./strace-static-x86_64: Process 8749 attached [pid 8750] set_robust_list(0x5555559d56e0, 24 [pid 8749] set_robust_list(0x5555559d56e0, 24 [pid 8750] <... set_robust_list resumed>) = 0 [pid 8749] <... set_robust_list resumed>) = 0 [pid 8750] chdir("./109" [pid 8749] chdir("./110" [pid 8750] <... chdir resumed>) = 0 [pid 8749] <... chdir resumed>) = 0 [pid 8750] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8749] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8750] <... prctl resumed>) = 0 [pid 8749] <... prctl resumed>) = 0 [pid 8750] setpgid(0, 0 [pid 8749] setpgid(0, 0 [pid 8750] <... setpgid resumed>) = 0 [pid 8749] <... setpgid resumed>) = 0 [pid 8750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8750] <... openat resumed>) = 3 [pid 8749] <... openat resumed>) = 3 [pid 8750] write(3, "1000", 4 [pid 8749] write(3, "1000", 4 [pid 8750] <... write resumed>) = 4 [pid 8749] <... write resumed>) = 4 [pid 8750] close(3 [pid 8749] close(3 [ 240.524835][ T8723] BTRFS info (device loop4): using free space tree [pid 8750] <... close resumed>) = 0 [pid 8749] <... close resumed>) = 0 [pid 8750] symlink("/dev/binderfs", "./binderfs" [pid 8749] symlink("/dev/binderfs", "./binderfs" [pid 8750] <... symlink resumed>) = 0 [pid 8749] <... symlink resumed>) = 0 [pid 8750] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] <... futex resumed>) = 0 [pid 8749] <... futex resumed>) = 0 [pid 8750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8750] <... mmap resumed>) = 0x7ff2b3754000 [pid 8749] <... mmap resumed>) = 0x7ff2b3754000 [pid 8750] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8749] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8750] <... mprotect resumed>) = 0 [pid 8749] <... mprotect resumed>) = 0 [pid 8750] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8749] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8750] <... clone resumed>, parent_tid=[8755], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8755 [pid 8749] <... clone resumed>, parent_tid=[8756], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8756 [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] <... futex resumed>) = 0 [pid 8749] <... futex resumed>) = 0 [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8755 attached [pid 8755] set_robust_list(0x7ff2b37749e0, 24./strace-static-x86_64: Process 8756 attached ) = 0 [pid 8756] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8756] memfd_create("syzkaller", 0) = 3 [pid 8755] memfd_create("syzkaller", 0 [pid 8756] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8755] <... memfd_create resumed>) = 3 [pid 8756] <... mmap resumed>) = 0x7ff2ab354000 [pid 8755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8755] <... mmap resumed>) = 0x7ff2ab354000 [pid 8747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8748] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8723] <... mount resumed>) = 0 [pid 8723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8723] chdir("./file0") = 0 [pid 8723] ioctl(4, LOOP_CLR_FD) = 0 [pid 8723] close(4) = 0 [ 240.715472][ T8723] BTRFS info (device loop4): enabling ssd optimizations [ 240.722464][ T8723] BTRFS info (device loop4): auto enabling async discard [ 240.732266][ T8723] BTRFS info (device loop4): checking UUID tree [pid 8723] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8722] <... futex resumed>) = 0 [pid 8723] <... futex resumed>) = 1 [pid 8722] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8723] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8722] <... futex resumed>) = 0 [pid 8722] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8723] <... openat resumed>) = 4 [pid 8723] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8722] <... futex resumed>) = 0 [pid 8722] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8723] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8722] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8722] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8722] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8722] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8771], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8771 [pid 8722] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8771 attached [pid 8771] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 8771] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 8771] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8771] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8722] <... futex resumed>) = 0 [pid 8771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8722] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8771] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 240.812371][ T8723] BTRFS info (device loop4): balance: start -s [ 240.837628][ T8723] BTRFS info (device loop4): relocating block group 1048576 flags system [pid 8722] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8746] <... write resumed>) = 16777216 [pid 8746] munmap(0x7ff2ab354000, 16777216 [pid 8771] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8771] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8723] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8746] <... munmap resumed>) = 0 [pid 8746] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 240.926478][ T8771] BTRFS info (device loop4): scrub: started on devid 1 [ 240.934395][ T8723] BTRFS info (device loop4): balance: ended with status: 0 [ 240.947573][ T8771] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 8746] ioctl(4, LOOP_SET_FD, 3 [pid 8771] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8723] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8722] exit_group(0) = ? [pid 8771] <... futex resumed>) = ? [pid 8771] +++ exited with 0 +++ [pid 8723] +++ exited with 0 +++ [pid 8722] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8722, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8746] <... ioctl resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8746] close(3 [pid 5083] lstat("./109/binderfs", [pid 8746] <... close resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8746] mkdir("./file0", 0777 [pid 5083] unlink("./109/binderfs" [pid 8746] <... mkdir resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 8746] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 240.997084][ T8746] loop3: detected capacity change from 0 to 32768 [pid 5083] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8756] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8746] <... mount resumed>) = -1 EEXIST (File exists) [pid 8746] ioctl(4, LOOP_CLR_FD [ 241.058159][ T8746] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8746) [pid 8755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8747] <... write resumed>) = 16777216 [pid 8747] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8747] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8747] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8747] close(3) = 0 [pid 8747] mkdir("./file0", 0777) = 0 [pid 8747] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8748] <... write resumed>) = 16777216 [pid 8748] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8748] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 241.299708][ T8747] loop1: detected capacity change from 0 to 32768 [ 241.316520][ T8747] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (8747) [pid 8748] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8748] close(3) = 0 [pid 8748] mkdir("./file0", 0777) = 0 [pid 8748] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8746] <... ioctl resumed>) = 0 [pid 8746] close(4) = 0 [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8746] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8746] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8746] openat(AT_FDCWD, ".log", O_RDONLY [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8746] <... openat resumed>) = 4 [ 241.357857][ T8748] loop0: detected capacity change from 0 to 32768 [ 241.371264][ T8748] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8748) [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... mount resumed>) = -1 EEXIST (File exists) [pid 8748] ioctl(4, LOOP_CLR_FD [pid 8746] <... futex resumed>) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8743] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8746] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8743] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8746] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8743] <... futex resumed>) = 0 [pid 8743] exit_group(0) = ? [pid 8746] +++ exited with 0 +++ [pid 8743] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8743, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=20 /* 0.20 s */} --- [pid 5081] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./109/binderfs") = 0 [pid 5081] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = 0 [pid 5081] lstat("./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./109/file0") = 0 [pid 5081] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./109/.log", [pid 5083] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] unlink("./109/.log" [pid 5083] lstat("./109/file0", [pid 5081] <... unlink resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 5083] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5083] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5081] rmdir("./109" [pid 5083] fstat(4, [pid 5081] <... rmdir resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] mkdir("./110", 0777 [pid 5083] getdents64(4, [pid 5081] <... mkdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] getdents64(4, [pid 5081] <... openat resumed>) = 3 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5083] close(4 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] <... close resumed>) = 0 [pid 5081] close(3 [pid 5083] rmdir("./109/file0" [pid 5081] <... close resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8772 [pid 5083] close(3) = 0 [pid 5083] rmdir("./109") = 0 [pid 5083] mkdir("./110", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8773 ./strace-static-x86_64: Process 8772 attached [pid 8772] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8772] chdir("./110") = 0 [pid 8772] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8772] setpgid(0, 0) = 0 [pid 8772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8773 attached ) = 3 [pid 8773] set_robust_list(0x5555559d56e0, 24 [pid 8772] write(3, "1000", 4 [pid 8773] <... set_robust_list resumed>) = 0 [pid 8772] <... write resumed>) = 4 [pid 8773] chdir("./110" [ 241.418428][ T8747] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 241.455375][ T8747] BTRFS info (device loop1): setting nodatasum [pid 8772] close(3 [pid 8773] <... chdir resumed>) = 0 [pid 8772] <... close resumed>) = 0 [pid 8773] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8772] symlink("/dev/binderfs", "./binderfs" [pid 8773] <... prctl resumed>) = 0 [pid 8772] <... symlink resumed>) = 0 [pid 8773] setpgid(0, 0 [pid 8772] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8773] <... setpgid resumed>) = 0 [pid 8772] <... futex resumed>) = 0 [pid 8773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8773] <... openat resumed>) = 3 [pid 8772] <... mmap resumed>) = 0x7ff2b3754000 [pid 8773] write(3, "1000", 4 [pid 8772] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8773] <... write resumed>) = 4 [pid 8772] <... mprotect resumed>) = 0 [pid 8773] close(3 [pid 8772] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8773] <... close resumed>) = 0 [pid 8773] symlink("/dev/binderfs", "./binderfs" [pid 8772] <... clone resumed>, parent_tid=[8774], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8774 [pid 8773] <... symlink resumed>) = 0 [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8773] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8772] <... futex resumed>) = 0 [pid 8773] <... futex resumed>) = 0 [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8773] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8773] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8775], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8775 [pid 8773] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8773] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8775 attached [pid 8775] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8775] memfd_create("syzkaller", 0./strace-static-x86_64: Process 8774 attached ) = 3 [pid 8775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8774] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8774] memfd_create("syzkaller", 0) = 3 [pid 8774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 241.504724][ T8747] BTRFS info (device loop1): allowing degraded mounts [ 241.541339][ T8747] BTRFS info (device loop1): use zlib compression, level 3 [pid 8756] <... write resumed>) = 16777216 [pid 8756] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8756] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 241.576756][ T8747] BTRFS info (device loop1): using free space tree [pid 8756] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8756] close(3) = 0 [pid 8756] mkdir("./file0", 0777) = 0 [pid 8756] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8755] <... write resumed>) = 16777216 [pid 8755] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8755] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8755] ioctl(4, LOOP_SET_FD, 3 [pid 8756] <... mount resumed>) = -1 EEXIST (File exists) [pid 8756] ioctl(4, LOOP_CLR_FD [pid 8755] <... ioctl resumed>) = 0 [pid 8755] close(3) = 0 [pid 8755] mkdir("./file0", 0777) = 0 [ 241.617618][ T8756] loop5: detected capacity change from 0 to 32768 [ 241.632413][ T8756] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8756) [ 241.641948][ T8755] loop2: detected capacity change from 0 to 32768 [pid 8755] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8748] <... ioctl resumed>) = 0 [pid 8748] close(4) = 0 [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8745] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8748] <... futex resumed>) = 0 [pid 8748] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8748] <... openat resumed>) = 3 [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8748] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... futex resumed>) = 0 [pid 8745] <... futex resumed>) = 1 [pid 8748] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8748] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8745] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8745] <... futex resumed>) = 0 [pid 8748] openat(AT_FDCWD, ".log", O_RDONLY [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8748] <... openat resumed>) = 4 [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8745] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8745] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8745] <... futex resumed>) = 0 [pid 8748] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 241.721920][ T8755] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8755) [ 241.744281][ T27] kauditd_printk_skb: 7 callbacks suppressed [pid 8745] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8755] <... mount resumed>) = -1 EEXIST (File exists) [pid 8748] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8755] ioctl(4, LOOP_CLR_FD [pid 8748] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8745] <... futex resumed>) = 0 [pid 8748] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8745] exit_group(0 [pid 8748] <... futex resumed>) = ? [pid 8745] <... exit_group resumed>) = ? [pid 8748] +++ exited with 0 +++ [pid 8745] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8745, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} --- [pid 5078] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 241.744294][ T27] audit: type=1804 audit(1680236925.212:659): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/108/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 5078] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./108/binderfs") = 0 [pid 5078] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./108/file0") = 0 [pid 5078] umount2("./108/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./108/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./108/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./108") = 0 [pid 5078] mkdir("./109", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8792 [ 241.838530][ T8747] BTRFS info (device loop1): enabling ssd optimizations [ 241.865515][ T8747] BTRFS info (device loop1): auto enabling async discard ./strace-static-x86_64: Process 8792 attached [pid 8792] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8792] chdir("./109") = 0 [pid 8792] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8792] setpgid(0, 0) = 0 [pid 8792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8792] write(3, "1000", 4) = 4 [pid 8792] close(3) = 0 [pid 8792] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8792] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8792] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8792] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8794], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8794 [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8794 attached [pid 8794] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8794] memfd_create("syzkaller", 0 [pid 8747] <... mount resumed>) = 0 [pid 8794] <... memfd_create resumed>) = 3 [pid 8747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8747] <... openat resumed>) = 3 [pid 8794] <... mmap resumed>) = 0x7ff2ab354000 [ 241.896601][ T8747] BTRFS info (device loop1): checking UUID tree [pid 8747] chdir("./file0") = 0 [pid 8747] ioctl(4, LOOP_CLR_FD) = 0 [pid 8747] close(4) = 0 [pid 8747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8744] <... futex resumed>) = 0 [pid 8747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8744] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8747] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8744] <... futex resumed>) = 0 [pid 8747] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8744] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8755] <... ioctl resumed>) = 0 [pid 8747] <... openat resumed>) = 4 [pid 8747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8755] close(4 [pid 8747] <... futex resumed>) = 1 [pid 8744] <... futex resumed>) = 0 [pid 8747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8755] <... close resumed>) = 0 [pid 8747] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8744] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8747] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8744] <... futex resumed>) = 0 [pid 8755] <... futex resumed>) = 1 [pid 8750] <... futex resumed>) = 0 [pid 8744] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8755] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8750] <... futex resumed>) = 0 [pid 8756] <... ioctl resumed>) = 0 [pid 8756] close(4) = 0 [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8755] <... openat resumed>) = 3 [pid 8756] <... futex resumed>) = 1 [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] <... futex resumed>) = 0 [pid 8756] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8756] <... openat resumed>) = 3 [pid 8755] <... futex resumed>) = 0 [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8755] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8750] <... futex resumed>) = 0 [pid 8756] <... futex resumed>) = 1 [pid 8755] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8750] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8755] <... futex resumed>) = 0 [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] <... futex resumed>) = 0 [pid 8756] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8755] openat(AT_FDCWD, ".log", O_RDONLY [pid 8750] <... futex resumed>) = 0 [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 242.028457][ T8747] BTRFS info (device loop1): balance: start -s [ 242.037088][ T8747] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 8756] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8755] <... openat resumed>) = 4 [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] <... futex resumed>) = 0 [pid 8756] openat(AT_FDCWD, ".log", O_RDONLY [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8756] <... openat resumed>) = 4 [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8749] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8749] <... futex resumed>) = 0 [pid 8756] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8749] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8756] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8756] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8749] <... futex resumed>) = 0 [pid 8756] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] exit_group(0 [pid 8744] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8756] <... futex resumed>) = ? [pid 8755] <... futex resumed>) = 1 [pid 8750] <... futex resumed>) = 0 [pid 8749] <... exit_group resumed>) = ? [pid 8744] <... futex resumed>) = 0 [pid 8756] +++ exited with 0 +++ [pid 8755] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8750] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8749] +++ exited with 0 +++ [pid 8744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8750] <... futex resumed>) = 0 [pid 8744] <... mmap resumed>) = 0x7ff2ac333000 [pid 8755] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8750] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8744] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8749, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 8755] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8744] <... mprotect resumed>) = 0 [pid 5084] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8755] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8744] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8755] <... futex resumed>) = 1 [pid 8750] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8755] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8750] exit_group(0 [pid 8744] <... clone resumed>, parent_tid=[8796], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8796 [pid 5084] <... openat resumed>) = 3 [pid 8755] <... futex resumed>) = ? [pid 8750] <... exit_group resumed>) = ? [pid 8744] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(3, [pid 8755] +++ exited with 0 +++ [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8750] +++ exited with 0 +++ [pid 8744] <... futex resumed>) = 0 [pid 5084] getdents64(3, ./strace-static-x86_64: Process 8796 attached [pid 8744] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8750, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 8796] set_robust_list(0x7ff2ac3539e0, 24 [pid 5084] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8796] <... set_robust_list resumed>) = 0 [ 242.077605][ T27] audit: type=1804 audit(1680236925.552:660): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/109/.log" dev="sda1" ino=1158 res=1 errno=0 [pid 5084] unlink("./110/binderfs" [pid 8796] openat(AT_FDCWD, ".log", O_RDONLY [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./110/file0", [pid 5080] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5084] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(3, [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] getdents64(3, [pid 5084] <... openat resumed>) = 4 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8796] <... openat resumed>) = 5 [pid 5084] fstat(4, [pid 5080] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8796] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8796] <... futex resumed>) = 1 [pid 8744] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 5080] lstat("./109/binderfs", [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] getdents64(4, [pid 5080] unlink("./109/binderfs" [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5084] close(4 [pid 5080] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8744] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8744] <... futex resumed>) = 0 [pid 5084] rmdir("./110/file0" [pid 5080] lstat("./109/file0", [pid 8744] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./110/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8796] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5084] lstat("./110/.log", [pid 5080] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5084] unlink("./110/.log" [pid 5080] fstat(4, [pid 5084] <... unlink resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, [pid 5080] getdents64(4, [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] close(3 [pid 5080] getdents64(4, [pid 5084] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] rmdir("./110" [pid 5080] close(4 [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5084] mkdir("./111", 0777 [pid 5080] rmdir("./109/file0" [pid 5084] <... mkdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5080] lstat("./109/.log", [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] close(3 [ 242.147562][ T8747] BTRFS info (device loop1): balance: ended with status: 0 [ 242.159007][ T27] audit: type=1804 audit(1680236925.552:661): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/110/.log" dev="sda1" ino=1160 res=1 errno=0 [ 242.182370][ T8796] BTRFS info (device loop1): scrub: started on devid 1 [pid 5080] unlink("./109/.log" [pid 8747] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] <... close resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8797 [pid 5080] close(3 [pid 8747] <... futex resumed>) = 0 [pid 8744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... close resumed>) = 0 [pid 8747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] rmdir("./109") = 0 ./strace-static-x86_64: Process 8797 attached [pid 5080] mkdir("./110", 0777 [pid 8797] set_robust_list(0x5555559d56e0, 24 [pid 8796] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 8797] <... set_robust_list resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8797] chdir("./111" [pid 5080] <... openat resumed>) = 3 [pid 8797] <... chdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 8797] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8796] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8797] <... prctl resumed>) = 0 [pid 8796] <... futex resumed>) = 0 [pid 8774] <... write resumed>) = 16777216 [ 242.217944][ T8796] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 8744] exit_group(0 [pid 5080] close(3 [pid 8797] setpgid(0, 0 [pid 8744] <... exit_group resumed>) = ? [pid 5080] <... close resumed>) = 0 [pid 8797] <... setpgid resumed>) = 0 [pid 8774] munmap(0x7ff2ab354000, 16777216 [pid 8747] <... futex resumed>) = ? [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8796] +++ exited with 0 +++ [pid 8747] +++ exited with 0 +++ [pid 8744] +++ exited with 0 +++ [pid 8797] <... openat resumed>) = 3 [pid 8774] <... munmap resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8798 ./strace-static-x86_64: Process 8798 attached [pid 8797] write(3, "1000", 4 [pid 8774] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8744, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 8797] <... write resumed>) = 4 [pid 8774] <... openat resumed>) = 4 [pid 5079] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8798] set_robust_list(0x5555559d56e0, 24 [pid 8797] close(3 [pid 8774] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8798] <... set_robust_list resumed>) = 0 [pid 8797] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8797] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... openat resumed>) = 3 [pid 8797] <... symlink resumed>) = 0 [pid 5079] fstat(3, [pid 8797] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8797] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 8798] chdir("./110" [pid 8797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 8798] <... chdir resumed>) = 0 [pid 8797] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8798] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8797] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8774] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8798] <... prctl resumed>) = 0 [pid 8797] <... mprotect resumed>) = 0 [pid 8775] <... write resumed>) = 16777216 [pid 8774] close(3 [pid 5079] lstat("./110/binderfs", [pid 8798] setpgid(0, 0 [pid 8797] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8775] munmap(0x7ff2ab354000, 16777216 [pid 8774] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8798] <... setpgid resumed>) = 0 [pid 5079] unlink("./110/binderfs" [pid 8798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8797] <... clone resumed>, parent_tid=[8799], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8799 [pid 8775] <... munmap resumed>) = 0 [pid 8774] mkdir("./file0", 0777 [pid 5079] <... unlink resumed>) = 0 [pid 8798] <... openat resumed>) = 3 [pid 8797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8775] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8774] <... mkdir resumed>) = 0 [pid 5079] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8799 attached [pid 8798] write(3, "1000", 4 [pid 8797] <... futex resumed>) = 0 [pid 8775] <... openat resumed>) = 4 [pid 8774] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8799] set_robust_list(0x7ff2b37749e0, 24 [pid 8798] <... write resumed>) = 4 [ 242.255535][ T27] audit: type=1804 audit(1680236925.632:662): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/110/file0/.log" dev="loop1" ino=263 res=1 errno=0 [ 242.289365][ T8774] loop3: detected capacity change from 0 to 32768 [pid 8797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8775] ioctl(4, LOOP_SET_FD, 3 [pid 8799] <... set_robust_list resumed>) = 0 [pid 8798] close(3 [pid 8775] <... ioctl resumed>) = 0 [pid 8799] memfd_create("syzkaller", 0 [pid 8798] <... close resumed>) = 0 [pid 8775] close(3 [pid 8774] <... mount resumed>) = -1 EEXIST (File exists) [pid 8799] <... memfd_create resumed>) = 3 [pid 8798] symlink("/dev/binderfs", "./binderfs" [pid 8775] <... close resumed>) = 0 [ 242.324959][ T8774] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8774) [ 242.336165][ T8775] loop4: detected capacity change from 0 to 32768 [pid 8774] ioctl(4, LOOP_CLR_FD [pid 8799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8798] <... symlink resumed>) = 0 [pid 8775] mkdir("./file0", 0777 [pid 8799] <... mmap resumed>) = 0x7ff2ab354000 [pid 8798] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8775] <... mkdir resumed>) = 0 [pid 8798] <... futex resumed>) = 0 [pid 8775] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8798] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8798] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8800], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8800 [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8800 attached [pid 8800] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8800] memfd_create("syzkaller", 0) = 3 [pid 8800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 242.444864][ T8775] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (8775) [ 242.498507][ T8775] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 242.538151][ T8775] BTRFS info (device loop4): setting nodatasum [pid 8794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5079] <... umount2 resumed>) = 0 [ 242.579795][ T8775] BTRFS info (device loop4): allowing degraded mounts [ 242.607129][ T8775] BTRFS info (device loop4): use zlib compression, level 3 [ 242.614363][ T8775] BTRFS info (device loop4): using free space tree [pid 5079] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./110/file0") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./110") = 0 [pid 5079] mkdir("./111", 0777 [pid 8774] <... ioctl resumed>) = 0 [pid 8774] close(4 [pid 5079] <... mkdir resumed>) = 0 [pid 8774] <... close resumed>) = 0 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8772] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 3 [pid 8774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8772] <... futex resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 8774] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8774] <... openat resumed>) = 3 [pid 5079] close(3 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... close resumed>) = 0 [pid 8774] <... futex resumed>) = 1 [pid 8772] <... futex resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8772] <... futex resumed>) = 0 [pid 8774] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8774] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8807 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8772] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8807 attached [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] set_robust_list(0x5555559d56e0, 24 [pid 8774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8772] <... futex resumed>) = 0 [pid 8807] <... set_robust_list resumed>) = 0 [pid 8774] openat(AT_FDCWD, ".log", O_RDONLY [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8807] chdir("./111" [pid 8774] <... openat resumed>) = 4 [pid 8807] <... chdir resumed>) = 0 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8774] <... futex resumed>) = 0 [pid 8807] <... prctl resumed>) = 0 [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] setpgid(0, 0) = 0 [pid 8807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8807] write(3, "1000", 4) = 4 [pid 8807] close(3 [pid 8772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... close resumed>) = 0 [pid 8772] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] symlink("/dev/binderfs", "./binderfs" [pid 8774] <... futex resumed>) = 0 [pid 8772] <... futex resumed>) = 1 [pid 8807] <... symlink resumed>) = 0 [pid 8774] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8772] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8807] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8774] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8807] <... futex resumed>) = 0 [pid 8774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8774] <... futex resumed>) = 1 [pid 8772] <... futex resumed>) = 0 [pid 8807] <... mmap resumed>) = 0x7ff2b3754000 [pid 8774] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8772] exit_group(0 [pid 8807] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8774] <... futex resumed>) = ? [pid 8772] <... exit_group resumed>) = ? [pid 8807] <... mprotect resumed>) = 0 [pid 8774] +++ exited with 0 +++ [pid 8807] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8772] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8772, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 8807] <... clone resumed>, parent_tid=[8812], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8812 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... restart_syscall resumed>) = 0 [pid 8807] <... futex resumed>) = 0 [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8812 attached [pid 5081] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8812] set_robust_list(0x7ff2b37749e0, 24 [pid 8799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... openat resumed>) = 3 [pid 8812] <... set_robust_list resumed>) = 0 [pid 5081] fstat(3, [pid 8812] memfd_create("syzkaller", 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8812] <... memfd_create resumed>) = 3 [ 242.727151][ T27] audit: type=1804 audit(1680236926.202:663): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/110/.log" dev="sda1" ino=1154 res=1 errno=0 [pid 5081] getdents64(3, [pid 8812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8812] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./110/binderfs") = 0 [pid 5081] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./110/file0") = 0 [pid 5081] umount2("./110/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./110/.log", [pid 8800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./110/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./110") = 0 [pid 5081] mkdir("./111", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8818 ./strace-static-x86_64: Process 8818 attached [pid 8818] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8818] chdir("./111") = 0 [pid 8818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8818] setpgid(0, 0) = 0 [pid 8818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8818] write(3, "1000", 4) = 4 [pid 8818] close(3) = 0 [pid 8818] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8818] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8818] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8818] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8820], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8820 [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8820 attached [pid 8820] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8820] memfd_create("syzkaller", 0) = 3 [pid 8794] <... write resumed>) = 16777216 [pid 8820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8775] <... mount resumed>) = 0 [pid 8794] munmap(0x7ff2ab354000, 16777216 [pid 8775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8794] <... munmap resumed>) = 0 [pid 8775] <... openat resumed>) = 3 [pid 8775] chdir("./file0") = 0 [pid 8794] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8775] ioctl(4, LOOP_CLR_FD [pid 8794] <... openat resumed>) = 4 [pid 8775] <... ioctl resumed>) = 0 [pid 8794] ioctl(4, LOOP_SET_FD, 3 [ 242.907413][ T8775] BTRFS info (device loop4): enabling ssd optimizations [ 242.917099][ T8775] BTRFS info (device loop4): auto enabling async discard [ 242.945437][ T8775] BTRFS info (device loop4): checking UUID tree [pid 8775] close(4 [pid 8794] <... ioctl resumed>) = 0 [pid 8775] <... close resumed>) = 0 [pid 8794] close(3) = 0 [pid 8775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] mkdir("./file0", 0777 [pid 8775] <... futex resumed>) = 1 [pid 8773] <... futex resumed>) = 0 [pid 8800] <... write resumed>) = 16777216 [pid 8794] <... mkdir resumed>) = 0 [pid 8775] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8773] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8800] munmap(0x7ff2ab354000, 16777216 [pid 8794] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8773] <... futex resumed>) = 0 [pid 8800] <... munmap resumed>) = 0 [pid 8775] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8773] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8800] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8775] <... openat resumed>) = 4 [pid 8800] ioctl(4, LOOP_SET_FD, 3 [pid 8775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8773] <... futex resumed>) = 0 [pid 8775] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8773] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 242.986045][ T8794] loop0: detected capacity change from 0 to 32768 [ 243.008848][ T8794] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8794) [ 243.024283][ T8800] loop2: detected capacity change from 0 to 32768 [pid 8773] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8800] <... ioctl resumed>) = 0 [pid 8800] close(3) = 0 [pid 8800] mkdir("./file0", 0777) = 0 [pid 8794] <... mount resumed>) = -1 EEXIST (File exists) [pid 8800] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8794] ioctl(4, LOOP_CLR_FD [pid 8773] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8773] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8800] <... mount resumed>) = -1 EEXIST (File exists) [pid 8773] <... mmap resumed>) = 0x7ff2ac333000 [pid 8800] ioctl(4, LOOP_CLR_FD [pid 8773] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [ 243.046383][ T8775] BTRFS info (device loop4): balance: start -s [ 243.054084][ T8775] BTRFS info (device loop4): relocating block group 1048576 flags system [ 243.075671][ T8800] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8800) [pid 8773] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8823], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8823 [pid 8773] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8773] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8823 attached [pid 8823] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 8823] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 8823] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8823] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8773] <... futex resumed>) = 0 [pid 8773] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8823] <... futex resumed>) = 0 [pid 8773] <... futex resumed>) = 1 [pid 8823] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 243.149245][ T27] audit: type=1804 audit(1680236926.622:664): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/110/file0/.log" dev="loop4" ino=263 res=1 errno=0 [ 243.167241][ T8775] BTRFS info (device loop4): balance: ended with status: 0 [ 243.182248][ T8823] BTRFS info (device loop4): scrub: started on devid 1 [pid 8773] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8775] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8773] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8775] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [ 243.216428][ T8823] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 8820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8823] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8823] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8823] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8773] exit_group(0 [pid 8823] <... futex resumed>) = ? [pid 8775] <... futex resumed>) = ? [pid 8773] <... exit_group resumed>) = ? [pid 8823] +++ exited with 0 +++ [pid 8775] +++ exited with 0 +++ [pid 8773] +++ exited with 0 +++ [pid 8812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8773, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=26 /* 0.26 s */} --- [pid 5083] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./110/binderfs") = 0 [pid 5083] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5083] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./110/file0") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./110") = 0 [pid 5083] mkdir("./111", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8824 ./strace-static-x86_64: Process 8824 attached [pid 8824] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8824] chdir("./111") = 0 [pid 8824] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8824] setpgid(0, 0) = 0 [pid 8824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8824] write(3, "1000", 4) = 4 [pid 8824] close(3) = 0 [pid 8800] <... ioctl resumed>) = 0 [pid 8794] <... ioctl resumed>) = 0 [pid 8824] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8824] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8824] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8824] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8800] close(4 [pid 8824] <... clone resumed>, parent_tid=[8825], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8825 [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8825 attached [pid 8825] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8825] memfd_create("syzkaller", 0) = 3 [pid 8825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8794] close(4) = 0 [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8792] <... futex resumed>) = 0 [pid 8794] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] <... openat resumed>) = 3 [pid 8792] <... futex resumed>) = 0 [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8794] <... futex resumed>) = 0 [pid 8792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8794] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8800] <... close resumed>) = 0 [pid 8794] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8792] <... futex resumed>) = 0 [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8794] <... futex resumed>) = 0 [pid 8792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8800] <... futex resumed>) = 1 [pid 8798] <... futex resumed>) = 0 [pid 8794] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8792] <... futex resumed>) = 0 [pid 8798] <... futex resumed>) = 0 [pid 8794] openat(AT_FDCWD, ".log", O_RDONLY [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8800] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8794] <... openat resumed>) = 4 [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8792] <... futex resumed>) = 0 [pid 8794] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8792] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8792] <... futex resumed>) = 0 [pid 8794] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8792] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8794] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8794] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8792] <... futex resumed>) = 0 [pid 8794] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8792] exit_group(0 [pid 8794] <... futex resumed>) = ? [pid 8792] <... exit_group resumed>) = ? [pid 8794] +++ exited with 0 +++ [pid 8792] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8792, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 5078] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./109/binderfs") = 0 [pid 5078] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./109/file0", [pid 8800] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./109/file0" [pid 8800] <... futex resumed>) = 1 [pid 8798] <... futex resumed>) = 0 [ 243.473157][ T27] audit: type=1804 audit(1680236926.942:665): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/109/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 5078] <... rmdir resumed>) = 0 [pid 8800] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./109/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8798] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8800] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] lstat("./109/.log", [pid 8800] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./109/.log" [pid 8800] <... futex resumed>) = 1 [pid 8798] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 8800] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, [pid 8800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8798] <... futex resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8800] openat(AT_FDCWD, ".log", O_RDONLY [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] close(3 [pid 8800] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] rmdir("./109" [pid 8800] <... futex resumed>) = 1 [pid 8798] <... futex resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 8800] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8798] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mkdir("./110", 0777 [pid 8800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8798] <... futex resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8800] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8798] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8826 [pid 8800] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8798] <... futex resumed>) = 0 [pid 8800] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8798] exit_group(0./strace-static-x86_64: Process 8826 attached [pid 8800] <... futex resumed>) = ? [pid 8798] <... exit_group resumed>) = ? [pid 8826] set_robust_list(0x5555559d56e0, 24 [pid 8800] +++ exited with 0 +++ [pid 8799] <... write resumed>) = 16777216 [pid 8826] <... set_robust_list resumed>) = 0 [pid 8799] munmap(0x7ff2ab354000, 16777216 [pid 8798] +++ exited with 0 +++ [pid 8826] chdir("./110" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8798, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 8826] <... chdir resumed>) = 0 [pid 8799] <... munmap resumed>) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 8826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8799] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... restart_syscall resumed>) = 0 [pid 8826] <... prctl resumed>) = 0 [pid 8799] <... openat resumed>) = 4 [pid 8826] setpgid(0, 0 [pid 8799] ioctl(4, LOOP_SET_FD, 3 [pid 8826] <... setpgid resumed>) = 0 [ 243.553028][ T27] audit: type=1804 audit(1680236927.022:666): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/110/.log" dev="sda1" ino=1153 res=1 errno=0 [pid 5080] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8826] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8826] write(3, "1000", 4 [pid 5080] <... openat resumed>) = 3 [pid 8826] <... write resumed>) = 4 [pid 5080] fstat(3, [pid 8826] close(3 [pid 8799] <... ioctl resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8826] <... close resumed>) = 0 [pid 8799] close(3 [pid 5080] getdents64(3, [pid 8826] symlink("/dev/binderfs", "./binderfs" [pid 8799] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8826] <... symlink resumed>) = 0 [pid 8799] mkdir("./file0", 0777 [pid 5080] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8799] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8826] <... futex resumed>) = 0 [pid 8799] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5080] lstat("./110/binderfs", [pid 8826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8826] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] unlink("./110/binderfs" [pid 8826] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... unlink resumed>) = 0 [pid 8826] <... mprotect resumed>) = 0 [pid 5080] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./110/file0", [pid 8826] <... clone resumed>, parent_tid=[8827], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8827 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8826] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8826] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8826] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 8827 attached [pid 5080] fstat(4, [pid 8827] set_robust_list(0x7ff2b37749e0, 24 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8827] <... set_robust_list resumed>) = 0 [pid 5080] getdents64(4, [pid 8827] memfd_create("syzkaller", 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8827] <... memfd_create resumed>) = 3 [pid 5080] getdents64(4, [pid 8827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8827] <... mmap resumed>) = 0x7ff2ab354000 [pid 5080] close(4) = 0 [pid 5080] rmdir("./110/file0") = 0 [pid 5080] umount2("./110/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./110/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./110/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./110") = 0 [pid 5080] mkdir("./111", 0777) = 0 [ 243.607878][ T8799] loop5: detected capacity change from 0 to 32768 [ 243.624395][ T8799] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (8799) [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8828 ./strace-static-x86_64: Process 8828 attached [pid 8828] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8828] chdir("./111") = 0 [pid 8828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8828] setpgid(0, 0) = 0 [pid 8828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8828] write(3, "1000", 4) = 4 [pid 8828] close(3) = 0 [pid 8828] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8828] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8828] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8829], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8829 [ 243.697658][ T8799] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 243.735375][ T8799] BTRFS info (device loop5): setting nodatasum [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8829 attached [pid 8829] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8829] memfd_create("syzkaller", 0) = 3 [pid 8829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 243.741571][ T8799] BTRFS info (device loop5): allowing degraded mounts [pid 8820] <... write resumed>) = 16777216 [pid 8820] munmap(0x7ff2ab354000, 16777216 [pid 8812] <... write resumed>) = 16777216 [pid 8820] <... munmap resumed>) = 0 [pid 8820] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 243.815378][ T8799] BTRFS info (device loop5): use zlib compression, level 3 [ 243.822618][ T8799] BTRFS info (device loop5): using free space tree [pid 8820] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8820] close(3) = 0 [pid 8820] mkdir("./file0", 0777) = 0 [pid 8825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8812] munmap(0x7ff2ab354000, 16777216 [pid 8820] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8812] <... munmap resumed>) = 0 [pid 8812] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8812] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8812] close(3) = 0 [pid 8812] mkdir("./file0", 0777) = 0 [ 243.859318][ T8820] loop3: detected capacity change from 0 to 32768 [ 243.881080][ T8812] loop1: detected capacity change from 0 to 32768 [ 243.882400][ T8820] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8820) [pid 8812] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8820] <... mount resumed>) = -1 EEXIST (File exists) [pid 8820] ioctl(4, LOOP_CLR_FD [pid 8812] <... mount resumed>) = -1 EEXIST (File exists) [ 243.939318][ T8812] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8812) [pid 8812] ioctl(4, LOOP_CLR_FD [pid 8829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8825] <... write resumed>) = 16777216 [pid 8799] <... mount resumed>) = 0 [pid 8825] munmap(0x7ff2ab354000, 16777216 [pid 8799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8825] <... munmap resumed>) = 0 [pid 8799] chdir("./file0" [pid 8825] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8799] <... chdir resumed>) = 0 [pid 8825] <... openat resumed>) = 4 [pid 8799] ioctl(4, LOOP_CLR_FD [pid 8825] ioctl(4, LOOP_SET_FD, 3 [pid 8799] <... ioctl resumed>) = 0 [ 244.135705][ T8799] BTRFS info (device loop5): enabling ssd optimizations [ 244.142694][ T8799] BTRFS info (device loop5): auto enabling async discard [ 244.166275][ T8799] BTRFS info (device loop5): checking UUID tree [pid 8825] <... ioctl resumed>) = 0 [pid 8799] close(4 [pid 8825] close(3 [pid 8799] <... close resumed>) = 0 [pid 8825] <... close resumed>) = 0 [pid 8799] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8825] mkdir("./file0", 0777 [pid 8799] <... futex resumed>) = 1 [pid 8797] <... futex resumed>) = 0 [pid 8825] <... mkdir resumed>) = 0 [pid 8820] <... ioctl resumed>) = 0 [pid 8799] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8825] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8820] close(4 [pid 8799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8797] <... futex resumed>) = 0 [pid 8820] <... close resumed>) = 0 [pid 8799] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8799] <... openat resumed>) = 4 [ 244.191104][ T8825] loop4: detected capacity change from 0 to 32768 [pid 8820] <... futex resumed>) = 1 [pid 8818] <... futex resumed>) = 0 [pid 8799] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8799] <... futex resumed>) = 1 [pid 8797] <... futex resumed>) = 0 [pid 8820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8818] <... futex resumed>) = 0 [pid 8799] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8797] <... futex resumed>) = 0 [pid 8820] <... openat resumed>) = 3 [pid 8799] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8825] <... mount resumed>) = -1 EEXIST (File exists) [pid 8820] <... futex resumed>) = 1 [pid 8818] <... futex resumed>) = 0 [pid 8825] ioctl(4, LOOP_CLR_FD [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8812] <... ioctl resumed>) = 0 [pid 8820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8818] <... futex resumed>) = 0 [pid 8820] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8820] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8818] <... futex resumed>) = 0 [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [ 244.242462][ T8825] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8825) [ 244.278245][ T8799] BTRFS info (device loop5): balance: start -s [pid 8812] close(4 [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8820] openat(AT_FDCWD, ".log", O_RDONLY [pid 8818] <... futex resumed>) = 0 [pid 8820] <... openat resumed>) = 4 [pid 8797] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8797] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8820] <... futex resumed>) = 0 [pid 8818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8797] <... futex resumed>) = 0 [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8818] <... futex resumed>) = 0 [pid 8812] <... close resumed>) = 0 [pid 8797] <... mmap resumed>) = 0x7ff2ac333000 [pid 8820] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8818] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8820] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8797] <... mprotect resumed>) = 0 [pid 8820] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [ 244.302018][ T8799] BTRFS info (device loop5): relocating block group 1048576 flags system [ 244.316452][ T27] audit: type=1804 audit(1680236927.792:667): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/111/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 8797] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8820] <... futex resumed>) = 1 [pid 8818] <... futex resumed>) = 0 [pid 8812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... futex resumed>) = 0 [pid 8820] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8818] exit_group(0 [pid 8812] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8797] <... clone resumed>, parent_tid=[8848], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8848 ./strace-static-x86_64: Process 8848 attached [pid 8820] <... futex resumed>) = ? [pid 8818] <... exit_group resumed>) = ? [pid 8820] +++ exited with 0 +++ [pid 8812] <... openat resumed>) = 3 [pid 8797] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8848] set_robust_list(0x7ff2ac3539e0, 24 [pid 8818] +++ exited with 0 +++ [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] <... futex resumed>) = 0 [pid 8848] <... set_robust_list resumed>) = 0 [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8797] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8818, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 8848] openat(AT_FDCWD, ".log", O_RDONLY [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8848] <... openat resumed>) = 5 [pid 8812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... futex resumed>) = 0 [pid 5081] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8848] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8812] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8848] <... futex resumed>) = 1 [pid 8812] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8797] <... futex resumed>) = 0 [pid 5081] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./111/binderfs" [pid 8848] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 8848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8797] <... futex resumed>) = 0 [pid 5081] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8848] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8797] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... futex resumed>) = 0 [pid 5081] lstat("./111/file0", [pid 8812] openat(AT_FDCWD, ".log", O_RDONLY [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8812] <... openat resumed>) = 4 [pid 5081] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 244.396704][ T27] audit: type=1804 audit(1680236927.872:668): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/111/file0/.log" dev="loop5" ino=263 res=1 errno=0 [ 244.427776][ T8799] BTRFS info (device loop5): balance: ended with status: 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8799] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8799] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4 [pid 8812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8807] <... futex resumed>) = 0 [pid 8799] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 8812] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8807] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8799] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] rmdir("./111/file0") = 0 [pid 5081] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./111/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./111/.log") = 0 [pid 8812] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] getdents64(3, [pid 8812] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 8848] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8812] <... futex resumed>) = 1 [pid 8807] <... futex resumed>) = 0 [pid 8797] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... close resumed>) = 0 [pid 8848] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8812] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8807] exit_group(0 [pid 8797] exit_group(0 [pid 5081] rmdir("./111" [pid 8848] <... futex resumed>) = ? [pid 8812] <... futex resumed>) = ? [pid 8807] <... exit_group resumed>) = ? [pid 8799] <... futex resumed>) = ? [pid 8797] <... exit_group resumed>) = ? [pid 5081] <... rmdir resumed>) = 0 [pid 8848] +++ exited with 0 +++ [pid 8812] +++ exited with 0 +++ [pid 5081] mkdir("./112", 0777 [pid 8807] +++ exited with 0 +++ [pid 8799] +++ exited with 0 +++ [pid 8797] +++ exited with 0 +++ [pid 5081] <... mkdir resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8797, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8807, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 5081] <... openat resumed>) = 3 [ 244.443377][ T8848] BTRFS info (device loop5): scrub: started on devid 1 [ 244.458847][ T8848] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5084] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8825] <... ioctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8825] close(4 [pid 5084] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... openat resumed>) = 3 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... openat resumed>) = 3 [pid 5084] fstat(3, [pid 5079] fstat(3, [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8849 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8825] <... close resumed>) = 0 [pid 5084] getdents64(3, [pid 5079] getdents64(3, [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5084] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8849 attached [pid 8825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8824] <... futex resumed>) = 0 [pid 5084] lstat("./111/binderfs", [pid 5079] lstat("./111/binderfs", [pid 8849] set_robust_list(0x5555559d56e0, 24 [pid 8825] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8849] <... set_robust_list resumed>) = 0 [pid 8825] <... openat resumed>) = 3 [pid 5084] unlink("./111/binderfs" [pid 5079] unlink("./111/binderfs" [pid 8849] chdir("./112" [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 8849] <... chdir resumed>) = 0 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5084] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8849] <... prctl resumed>) = 0 [pid 8825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8824] <... futex resumed>) = 0 [pid 5079] lstat("./111/file0", [pid 8849] setpgid(0, 0 [pid 8825] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8849] <... setpgid resumed>) = 0 [pid 8825] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8849] <... openat resumed>) = 3 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8849] write(3, "1000", 4 [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 4 [pid 8849] <... write resumed>) = 4 [pid 8825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8824] <... futex resumed>) = 0 [pid 5079] fstat(4, [pid 8849] close(3 [pid 8825] openat(AT_FDCWD, ".log", O_RDONLY [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8849] <... close resumed>) = 0 [pid 8825] <... openat resumed>) = 4 [pid 5079] getdents64(4, [pid 8849] symlink("/dev/binderfs", "./binderfs" [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8849] <... symlink resumed>) = 0 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 8849] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8849] <... futex resumed>) = 0 [pid 8829] <... write resumed>) = 16777216 [pid 8827] <... write resumed>) = 16777216 [pid 8825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8824] <... futex resumed>) = 0 [pid 5079] close(4 [pid 8849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8829] munmap(0x7ff2ab354000, 16777216 [pid 8827] munmap(0x7ff2ab354000, 16777216 [pid 8825] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8824] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 8849] <... mmap resumed>) = 0x7ff2b3754000 [pid 8829] <... munmap resumed>) = 0 [pid 8827] <... munmap resumed>) = 0 [pid 8825] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] rmdir("./111/file0" [pid 8849] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8829] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8827] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8825] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8849] <... mprotect resumed>) = 0 [pid 8829] <... openat resumed>) = 4 [pid 8827] <... openat resumed>) = 4 [pid 8825] <... futex resumed>) = 1 [pid 8824] <... futex resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 8849] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8829] ioctl(4, LOOP_SET_FD, 3 [pid 8827] ioctl(4, LOOP_SET_FD, 3 [pid 8825] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8824] exit_group(0 [pid 5079] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8827] <... ioctl resumed>) = 0 [pid 8825] <... futex resumed>) = ? [pid 8824] <... exit_group resumed>) = ? [pid 5084] <... umount2 resumed>) = 0 [pid 8849] <... clone resumed>, parent_tid=[8850], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8850 [pid 8825] +++ exited with 0 +++ [pid 8824] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8849] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8829] <... ioctl resumed>) = 0 [pid 8827] close(3 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8824, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=25 /* 0.25 s */} --- [pid 8849] <... futex resumed>) = 0 [pid 8849] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8829] close(3 [pid 8827] <... close resumed>) = 0 [pid 8829] <... close resumed>) = 0 [pid 8827] mkdir("./file0", 0777 [pid 8829] mkdir("./file0", 0777 [pid 8827] <... mkdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./111/.log", [pid 8829] <... mkdir resumed>) = 0 [pid 8827] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5084] lstat("./111/file0", [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8829] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./111/.log" [pid 5084] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8850 attached [pid 8850] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8850] memfd_create("syzkaller", 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] getdents64(3, [pid 8850] <... memfd_create resumed>) = 3 [pid 8850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5084] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... openat resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5083] fstat(3, [pid 5079] close(3 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] fstat(4, [pid 5079] <... close resumed>) = 0 [pid 5083] getdents64(3, [pid 5079] rmdir("./111" [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... rmdir resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, [pid 5083] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(4, [pid 5079] mkdir("./112", 0777 [pid 5083] lstat("./111/binderfs", [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] close(4 [pid 5079] <... mkdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./111/file0" [pid 5083] unlink("./111/binderfs") = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(3, [pid 5083] lstat("./111/file0", [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5084] close(3 [pid 5083] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 244.631118][ T8829] loop2: detected capacity change from 0 to 32768 [ 244.637990][ T8827] loop0: detected capacity change from 0 to 32768 [ 244.652864][ T8827] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor373 (8827) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] rmdir("./111" [pid 5083] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] close(3 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5079] <... close resumed>) = 0 [pid 5084] mkdir("./112", 0777 [pid 5083] fstat(4, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8851 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./111/file0") = 0 [pid 5083] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8851 attached [pid 8829] <... mount resumed>) = -1 EEXIST (File exists) [pid 5083] lstat("./111/.log", [pid 8851] set_robust_list(0x5555559d56e0, 24 [pid 8829] ioctl(4, LOOP_CLR_FD [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8851] <... set_robust_list resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] unlink("./111/.log" [pid 8851] chdir("./112" [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] getdents64(3, [pid 8851] <... chdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8852 [pid 5083] close(3 [pid 8851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] <... close resumed>) = 0 [pid 8851] <... prctl resumed>) = 0 [pid 5083] rmdir("./111"./strace-static-x86_64: Process 8852 attached [pid 8851] setpgid(0, 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./112", 0777 [pid 8852] set_robust_list(0x5555559d56e0, 24 [pid 8851] <... setpgid resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8852] <... set_robust_list resumed>) = 0 [pid 8851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 8852] chdir("./112" [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8852] <... chdir resumed>) = 0 [pid 8851] <... openat resumed>) = 3 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8853 [pid 8852] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8851] write(3, "1000", 4 [pid 8852] <... prctl resumed>) = 0 [pid 8851] <... write resumed>) = 4 [pid 8852] setpgid(0, 0 [pid 8851] close(3 [pid 8852] <... setpgid resumed>) = 0 [pid 8851] <... close resumed>) = 0 [pid 8852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8852] <... openat resumed>) = 3 [pid 8851] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] write(3, "1000", 4./strace-static-x86_64: Process 8853 attached [pid 8851] <... futex resumed>) = 0 [pid 8852] <... write resumed>) = 4 [pid 8853] set_robust_list(0x5555559d56e0, 24 [pid 8852] close(3 [pid 8851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8852] <... close resumed>) = 0 [pid 8853] <... set_robust_list resumed>) = 0 [pid 8852] symlink("/dev/binderfs", "./binderfs" [pid 8851] <... mmap resumed>) = 0x7ff2b3754000 [pid 8852] <... symlink resumed>) = 0 [pid 8853] chdir("./112" [pid 8852] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8851] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8853] <... chdir resumed>) = 0 [pid 8852] <... futex resumed>) = 0 [pid 8851] <... mprotect resumed>) = 0 [pid 8853] prctl(PR_SET_PDEATHSIG, SIGKILL [ 244.685897][ T8829] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8829) [ 244.713404][ T8827] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [pid 8851] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8853] <... prctl resumed>) = 0 [pid 8852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8853] setpgid(0, 0 [pid 8852] <... mmap resumed>) = 0x7ff2b3754000 [pid 8851] <... clone resumed>, parent_tid=[8854], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8854 [pid 8853] <... setpgid resumed>) = 0 [pid 8852] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8852] <... mprotect resumed>) = 0 [pid 8851] <... futex resumed>) = 0 [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8854 attached [pid 8854] set_robust_list(0x7ff2b37749e0, 24 [pid 8853] <... openat resumed>) = 3 [pid 8852] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8853] write(3, "1000", 4) = 4 [pid 8854] <... set_robust_list resumed>) = 0 [pid 8853] close(3 [pid 8852] <... clone resumed>, parent_tid=[8855], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8855 [pid 8854] memfd_create("syzkaller", 0 [pid 8853] <... close resumed>) = 0 [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... memfd_create resumed>) = 3 [pid 8854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8853] symlink("/dev/binderfs", "./binderfs" [pid 8852] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8855 attached [pid 8853] <... symlink resumed>) = 0 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8855] set_robust_list(0x7ff2b37749e0, 24 [pid 8853] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8855] <... set_robust_list resumed>) = 0 [pid 8855] memfd_create("syzkaller", 0 [pid 8853] <... futex resumed>) = 0 [pid 8855] <... memfd_create resumed>) = 3 [pid 8853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 244.775454][ T8827] BTRFS info (device loop0): setting nodatasum [pid 8855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8853] <... mmap resumed>) = 0x7ff2b3754000 [pid 8853] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8853] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8856], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8856 [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8856 attached [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8856] set_robust_list(0x7ff2b37749e0, 24) = 0 [ 244.816368][ T8827] BTRFS info (device loop0): allowing degraded mounts [pid 8856] memfd_create("syzkaller", 0) = 3 [pid 8856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8829] <... ioctl resumed>) = 0 [pid 8829] close(4) = 0 [ 244.866088][ T8827] BTRFS info (device loop0): use zlib compression, level 3 [ 244.889225][ T8827] BTRFS info (device loop0): using free space tree [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8828] <... futex resumed>) = 0 [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8829] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8828] <... futex resumed>) = 0 [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8829] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8828] <... futex resumed>) = 0 [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 8829] <... futex resumed>) = 0 [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8829] openat(AT_FDCWD, ".log", O_RDONLY [pid 8828] <... futex resumed>) = 0 [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8829] <... openat resumed>) = 4 [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8828] <... futex resumed>) = 0 [pid 8829] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8828] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8829] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8828] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8829] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8829] <... futex resumed>) = 0 [pid 8828] exit_group(0) = ? [pid 8829] +++ exited with 0 +++ [pid 8828] +++ exited with 0 +++ [pid 8850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8828, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5080] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./111/binderfs") = 0 [pid 5080] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./111/file0") = 0 [pid 5080] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./111/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./111/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./111") = 0 [pid 5080] mkdir("./112", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8863 ./strace-static-x86_64: Process 8863 attached [pid 8863] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8863] chdir("./112") = 0 [pid 8863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8863] setpgid(0, 0) = 0 [pid 8863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8863] write(3, "1000", 4) = 4 [pid 8863] close(3) = 0 [pid 8863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8863] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8863] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8863] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8870 attached [pid 8870] set_robust_list(0x7ff2b37749e0, 24 [pid 8863] <... clone resumed>, parent_tid=[8870], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8870 [pid 8870] <... set_robust_list resumed>) = 0 [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] memfd_create("syzkaller", 0 [pid 8863] <... futex resumed>) = 0 [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8870] <... memfd_create resumed>) = 3 [pid 8870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 245.132885][ T8827] BTRFS info (device loop0): enabling ssd optimizations [ 245.147831][ T8827] BTRFS info (device loop0): auto enabling async discard [pid 8854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8827] <... mount resumed>) = 0 [pid 8827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8827] chdir("./file0") = 0 [pid 8827] ioctl(4, LOOP_CLR_FD) = 0 [pid 8827] close(4 [pid 8855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8827] <... close resumed>) = 0 [ 245.219646][ T8827] BTRFS info (device loop0): checking UUID tree [pid 8827] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8826] <... futex resumed>) = 0 [pid 8827] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8826] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8826] <... futex resumed>) = 0 [pid 8827] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8826] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8827] <... openat resumed>) = 4 [pid 8827] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8826] <... futex resumed>) = 0 [pid 8827] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8826] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8826] <... futex resumed>) = 0 [pid 8827] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8826] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8854] <... write resumed>) = 16777216 [pid 8854] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8854] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8826] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8854] <... openat resumed>) = 4 [pid 8826] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8826] <... mprotect resumed>) = 0 [pid 8826] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8877 attached [pid 8854] ioctl(4, LOOP_SET_FD, 3 [pid 8826] <... clone resumed>, parent_tid=[8877], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8877 [ 245.305641][ T8827] BTRFS info (device loop0): balance: start -s [ 245.313414][ T8827] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 8826] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... ioctl resumed>) = 0 [pid 8826] <... futex resumed>) = 0 [pid 8826] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8877] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 8877] openat(AT_FDCWD, ".log", O_RDONLY [pid 8854] close(3 [pid 8877] <... openat resumed>) = 5 [pid 8854] <... close resumed>) = 0 [pid 8877] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8854] mkdir("./file0", 0777 [pid 8826] <... futex resumed>) = 0 [pid 8877] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8826] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... mkdir resumed>) = 0 [pid 8877] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8826] <... futex resumed>) = 0 [pid 8826] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8877] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8854] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 245.366646][ T8854] loop1: detected capacity change from 0 to 32768 [ 245.395403][ T8854] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8854) [pid 8854] ioctl(4, LOOP_CLR_FD [pid 8826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8877] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [ 245.463643][ T8877] BTRFS info (device loop0): scrub: started on devid 1 [ 245.464525][ T8827] BTRFS info (device loop0): balance: ended with status: 0 [ 245.482015][ T8877] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [pid 8877] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8877] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8827] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8827] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8827] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8826] exit_group(0) = ? [pid 8827] <... futex resumed>) = ? [pid 8877] <... futex resumed>) = ? [pid 8827] +++ exited with 0 +++ [pid 8877] +++ exited with 0 +++ [pid 8826] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8826, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5078] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./110/binderfs") = 0 [pid 5078] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8850] <... write resumed>) = 16777216 [pid 5078] <... umount2 resumed>) = 0 [pid 5078] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./110/file0") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./110") = 0 [pid 5078] mkdir("./111", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 8850] munmap(0x7ff2ab354000, 16777216 [pid 5078] <... ioctl resumed>) = 0 [pid 8850] <... munmap resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8878 [pid 8850] <... openat resumed>) = 4 [pid 8850] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8878 attached [pid 8878] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8878] chdir("./111") = 0 [pid 8850] <... ioctl resumed>) = 0 [pid 8878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8850] close(3 [pid 8878] <... prctl resumed>) = 0 [pid 8850] <... close resumed>) = 0 [pid 8878] setpgid(0, 0 [pid 8850] mkdir("./file0", 0777 [pid 8878] <... setpgid resumed>) = 0 [pid 8878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8850] <... mkdir resumed>) = 0 [pid 8878] <... openat resumed>) = 3 [pid 8878] write(3, "1000", 4 [pid 8850] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8878] <... write resumed>) = 4 [pid 8878] close(3) = 0 [pid 8878] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8878] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8878] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8878] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8879], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8879 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8855] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 8879 attached [pid 8854] <... ioctl resumed>) = 0 [pid 8879] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8879] memfd_create("syzkaller", 0) = 3 [ 245.746608][ T8850] loop3: detected capacity change from 0 to 32768 [ 245.768933][ T8850] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor373 (8850) [pid 8879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8855] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8855] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8855] ioctl(4, LOOP_SET_FD, 3 [pid 8854] close(4) = 0 [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8851] <... futex resumed>) = 0 [pid 8854] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8854] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8851] <... futex resumed>) = 0 [pid 8854] <... openat resumed>) = 3 [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8854] <... futex resumed>) = 0 [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8851] <... futex resumed>) = 0 [pid 8854] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8854] <... futex resumed>) = 0 [pid 8854] openat(AT_FDCWD, ".log", O_RDONLY [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8854] <... openat resumed>) = 4 [pid 8851] <... futex resumed>) = 0 [ 245.823292][ T8850] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 245.836982][ T8855] loop5: detected capacity change from 0 to 32768 [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8855] <... ioctl resumed>) = 0 [pid 8854] <... futex resumed>) = 0 [pid 8851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8855] close(3) = 0 [pid 8854] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8851] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8855] mkdir("./file0", 0777) = 0 [pid 8854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8851] <... futex resumed>) = 0 [pid 8855] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8854] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8851] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8854] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8854] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8851] <... futex resumed>) = 0 [pid 8854] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8851] exit_group(0 [pid 8854] <... futex resumed>) = ? [pid 8851] <... exit_group resumed>) = ? [pid 8854] +++ exited with 0 +++ [pid 8851] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8851, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=22 /* 0.22 s */} --- [pid 5079] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5079] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./112/binderfs") = 0 [pid 8855] <... mount resumed>) = -1 EEXIST (File exists) [pid 5079] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8856] <... write resumed>) = 16777216 [ 245.885529][ T8850] BTRFS info (device loop3): setting nodatasum [ 245.891733][ T8850] BTRFS info (device loop3): allowing degraded mounts [ 245.902982][ T8855] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8855) [pid 8855] ioctl(4, LOOP_CLR_FD [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./112/file0", [pid 8856] munmap(0x7ff2ab354000, 16777216 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8856] <... munmap resumed>) = 0 [pid 5079] fstat(4, [pid 8856] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8856] <... openat resumed>) = 4 [pid 5079] getdents64(4, [pid 8856] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./112/file0") = 0 [pid 5079] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./112/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./112/.log") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./112") = 0 [pid 5079] mkdir("./113", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8856] <... ioctl resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8880 [pid 8856] close(3) = 0 ./strace-static-x86_64: Process 8880 attached [pid 8856] mkdir("./file0", 0777 [pid 8880] set_robust_list(0x5555559d56e0, 24 [pid 8870] <... write resumed>) = 16777216 [pid 8856] <... mkdir resumed>) = 0 [ 245.941620][ T8850] BTRFS info (device loop3): use zlib compression, level 3 [ 245.955533][ T8856] loop4: detected capacity change from 0 to 32768 [ 245.972130][ T8850] BTRFS info (device loop3): using free space tree [pid 8856] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8880] <... set_robust_list resumed>) = 0 [pid 8870] munmap(0x7ff2ab354000, 16777216 [pid 8880] chdir("./113") = 0 [pid 8870] <... munmap resumed>) = 0 [pid 8880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8870] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8880] <... prctl resumed>) = 0 [pid 8870] <... openat resumed>) = 4 [pid 8880] setpgid(0, 0 [pid 8870] ioctl(4, LOOP_SET_FD, 3 [pid 8880] <... setpgid resumed>) = 0 [pid 8880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8870] <... ioctl resumed>) = 0 [pid 8880] write(3, "1000", 4 [pid 8870] close(3 [pid 8880] <... write resumed>) = 4 [pid 8870] <... close resumed>) = 0 [pid 8880] close(3 [pid 8870] mkdir("./file0", 0777 [pid 8880] <... close resumed>) = 0 [pid 8880] symlink("/dev/binderfs", "./binderfs" [pid 8856] <... mount resumed>) = -1 EEXIST (File exists) [pid 8880] <... symlink resumed>) = 0 [pid 8880] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] <... mkdir resumed>) = 0 [pid 8880] <... futex resumed>) = 0 [pid 8870] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8856] ioctl(4, LOOP_CLR_FD [pid 8880] <... mmap resumed>) = 0x7ff2b3754000 [ 246.015805][ T8856] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8856) [ 246.043936][ T8870] loop2: detected capacity change from 0 to 32768 [pid 8880] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8880] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8886], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8886 [pid 8880] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8880] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8886 attached [pid 8886] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8886] memfd_create("syzkaller", 0) = 3 [pid 8886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8870] <... mount resumed>) = -1 EEXIST (File exists) [pid 8886] <... mmap resumed>) = 0x7ff2ab354000 [ 246.065683][ T8870] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8870) [pid 8870] ioctl(4, LOOP_CLR_FD [pid 8879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8856] <... ioctl resumed>) = 0 [pid 8856] close(4) = 0 [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8853] <... futex resumed>) = 0 [pid 8856] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8856] <... openat resumed>) = 3 [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8853] <... futex resumed>) = 0 [pid 8856] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8856] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8853] <... futex resumed>) = 0 [pid 8856] openat(AT_FDCWD, ".log", O_RDONLY [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8856] <... openat resumed>) = 4 [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8853] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8853] <... futex resumed>) = 0 [pid 8856] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8853] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8856] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8856] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8853] <... futex resumed>) = 0 [pid 8856] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8855] <... ioctl resumed>) = 0 [pid 8853] exit_group(0 [pid 8856] <... futex resumed>) = ? [pid 8853] <... exit_group resumed>) = ? [pid 8856] +++ exited with 0 +++ [pid 8853] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8853, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=34 /* 0.34 s */} --- [pid 5083] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./112/binderfs") = 0 [pid 5083] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 246.261304][ T8850] BTRFS info (device loop3): enabling ssd optimizations [ 246.277465][ T8850] BTRFS info (device loop3): auto enabling async discard [pid 5083] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8855] close(4 [pid 5083] close(4 [pid 8886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8855] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] rmdir("./112/file0" [pid 8855] <... futex resumed>) = 1 [pid 8852] <... futex resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 8855] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8855] <... openat resumed>) = 3 [pid 8852] <... futex resumed>) = 0 [pid 5083] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8855] <... futex resumed>) = 0 [pid 8852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8855] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./112/.log", [pid 8855] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8852] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] unlink("./112/.log" [pid 8855] <... futex resumed>) = 0 [pid 8852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... unlink resumed>) = 0 [pid 8855] openat(AT_FDCWD, ".log", O_RDONLY [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 8855] <... openat resumed>) = 4 [pid 8852] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] close(3 [pid 8855] <... futex resumed>) = 0 [pid 8852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... close resumed>) = 0 [pid 8855] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8852] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] rmdir("./112" [pid 8855] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8852] <... futex resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 8855] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8852] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] mkdir("./113", 0777 [pid 8855] <... futex resumed>) = 0 [pid 8852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... mkdir resumed>) = 0 [pid 8855] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8852] exit_group(0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8855] <... futex resumed>) = ? [pid 8852] <... exit_group resumed>) = ? [pid 5083] <... openat resumed>) = 3 [pid 8855] +++ exited with 0 +++ [pid 8852] +++ exited with 0 +++ [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8852, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 5083] close(3 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5083] <... close resumed>) = 0 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8899 [pid 5084] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8899 attached [pid 8850] <... mount resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] set_robust_list(0x5555559d56e0, 24 [pid 8850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 246.328107][ T8850] BTRFS info (device loop3): checking UUID tree [pid 5084] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8899] <... set_robust_list resumed>) = 0 [pid 8850] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 8899] chdir("./113" [pid 8850] chdir("./file0" [pid 5084] fstat(3, [pid 8850] <... chdir resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8850] ioctl(4, LOOP_CLR_FD [pid 5084] getdents64(3, [pid 8899] <... chdir resumed>) = 0 [pid 8850] <... ioctl resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8850] close(4 [pid 8899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8850] <... close resumed>) = 0 [pid 5084] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] setpgid(0, 0 [pid 8850] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] <... setpgid resumed>) = 0 [pid 8849] <... futex resumed>) = 0 [pid 8850] <... futex resumed>) = 1 [pid 8849] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./112/binderfs", [pid 8899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8850] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8849] <... futex resumed>) = 0 [pid 8849] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./112/binderfs" [pid 8899] <... openat resumed>) = 3 [pid 8850] <... openat resumed>) = 4 [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] write(3, "1000", 4 [pid 8850] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] <... write resumed>) = 4 [pid 8850] <... futex resumed>) = 1 [pid 8849] <... futex resumed>) = 0 [pid 8899] close(3 [pid 8850] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8849] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./112/file0", [pid 8899] <... close resumed>) = 0 [pid 8849] <... futex resumed>) = 0 [pid 8849] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8899] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8899] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... openat resumed>) = 4 [pid 8899] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] fstat(4, [pid 8899] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8899] <... mprotect resumed>) = 0 [pid 5084] getdents64(4, [pid 8899] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, [pid 8899] <... clone resumed>, parent_tid=[8900], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8900 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(4 [pid 8899] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 ./strace-static-x86_64: Process 8900 attached [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] rmdir("./112/file0" [pid 8900] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] <... rmdir resumed>) = 0 [pid 8900] <... set_robust_list resumed>) = 0 [pid 5084] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8900] memfd_create("syzkaller", 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8900] <... memfd_create resumed>) = 3 [pid 5084] lstat("./112/.log", [pid 8900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8900] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] unlink("./112/.log") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./112") = 0 [pid 5084] mkdir("./113", 0777) = 0 [pid 8849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8849] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8849] <... futex resumed>) = 0 [pid 8849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 5084] <... openat resumed>) = 3 [pid 8849] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 8849] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8849] <... clone resumed>, parent_tid=[8902], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8902 [pid 5084] close(3 [pid 8849] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8849] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8902 attached [pid 8902] set_robust_list(0x7ff2ac3539e0, 24) = 0 [ 246.424276][ T8850] BTRFS info (device loop3): balance: start -s [ 246.446173][ T8850] BTRFS info (device loop3): relocating block group 1048576 flags system [pid 8902] openat(AT_FDCWD, ".log", O_RDONLY [pid 5084] <... close resumed>) = 0 [pid 8902] <... openat resumed>) = 5 [pid 8902] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8849] <... futex resumed>) = 0 [pid 8849] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8849] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8902] <... futex resumed>) = 1 [pid 8902] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8903 ./strace-static-x86_64: Process 8903 attached [pid 8903] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8879] <... write resumed>) = 16777216 [pid 8903] chdir("./113") = 0 [pid 8903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8903] setpgid(0, 0) = 0 [pid 8903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8903] write(3, "1000", 4) = 4 [pid 8870] <... ioctl resumed>) = 0 [pid 8870] close(4 [pid 8903] close(3) = 0 [pid 8903] symlink("/dev/binderfs", "./binderfs" [pid 8870] <... close resumed>) = 0 [pid 8903] <... symlink resumed>) = 0 [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8863] <... futex resumed>) = 0 [pid 8849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8903] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] munmap(0x7ff2ab354000, 16777216 [pid 8870] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8903] <... futex resumed>) = 0 [pid 8870] <... openat resumed>) = 3 [pid 8863] <... futex resumed>) = 0 [pid 8903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8903] <... mmap resumed>) = 0x7ff2b3754000 [pid 8870] <... futex resumed>) = 0 [pid 8863] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8903] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8879] <... munmap resumed>) = 0 [pid 8870] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8903] <... mprotect resumed>) = 0 [pid 8879] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8863] <... futex resumed>) = 0 [pid 8903] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8879] <... openat resumed>) = 4 [pid 8870] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8870] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8863] <... futex resumed>) = 0 [pid 8870] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8863] <... futex resumed>) = 0 [pid 8870] openat(AT_FDCWD, ".log", O_RDONLY [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8870] <... openat resumed>) = 4 [ 246.558759][ T8902] BTRFS info (device loop3): scrub: started on devid 1 [ 246.559695][ T8850] BTRFS info (device loop3): balance: ended with status: 0 [ 246.586801][ T8902] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] ioctl(4, LOOP_SET_FD, 3 [pid 8870] <... futex resumed>) = 1 [pid 8863] <... futex resumed>) = 0 [pid 8870] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8863] <... futex resumed>) = 0 [pid 8870] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8870] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8863] <... futex resumed>) = 0 [pid 8870] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8863] exit_group(0 [pid 8870] <... futex resumed>) = ? [pid 8863] <... exit_group resumed>) = ? [pid 8870] +++ exited with 0 +++ [pid 8863] +++ exited with 0 +++ [pid 8903] <... clone resumed>, parent_tid=[8904], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8904 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8863, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=24 /* 0.24 s */} --- [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8903] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, [pid 8879] <... ioctl resumed>) = 0 [pid 8850] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8879] close(3 [pid 8850] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8879] <... close resumed>) = 0 [pid 8850] <... futex resumed>) = 0 [pid 5080] getdents64(3, ./strace-static-x86_64: Process 8904 attached [pid 8904] set_robust_list(0x7ff2b37749e0, 24 [pid 8879] mkdir("./file0", 0777 [pid 8850] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8904] <... set_robust_list resumed>) = 0 [pid 8902] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8879] <... mkdir resumed>) = 0 [pid 8904] memfd_create("syzkaller", 0 [pid 8902] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [ 246.604312][ T8879] loop0: detected capacity change from 0 to 32768 [pid 8879] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5080] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8904] <... memfd_create resumed>) = 3 [pid 8902] <... futex resumed>) = 0 [pid 8849] exit_group(0 [pid 8904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8849] <... exit_group resumed>) = ? [pid 8904] <... mmap resumed>) = 0x7ff2ab354000 [pid 8902] +++ exited with 0 +++ [pid 8850] <... futex resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8850] +++ exited with 0 +++ [pid 8849] +++ exited with 0 +++ [pid 5080] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8849, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=28 /* 0.28 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5080] unlink("./112/binderfs" [pid 5081] <... restart_syscall resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5080] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5080] lstat("./112/file0", [pid 5081] fstat(3, [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] getdents64(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5080] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] fstat(4, [pid 5081] lstat("./112/binderfs", [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] getdents64(4, [pid 5081] unlink("./112/binderfs" [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./112/file0") = 0 [pid 5080] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./112/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./112/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./112") = 0 [pid 5080] mkdir("./113", 0777 [pid 8879] <... mount resumed>) = -1 EEXIST (File exists) [pid 5080] <... mkdir resumed>) = 0 [pid 8879] ioctl(4, LOOP_CLR_FD [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 246.642730][ T8879] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8879) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8905 ./strace-static-x86_64: Process 8905 attached [pid 8905] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8905] chdir("./113") = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 8905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8905] setpgid(0, 0) = 0 [pid 5081] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8905] <... openat resumed>) = 3 [pid 5081] lstat("./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8905] write(3, "1000", 4 [pid 5081] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8905] <... write resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8905] close(3) = 0 [pid 5081] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8905] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... openat resumed>) = 4 [pid 8905] <... symlink resumed>) = 0 [pid 5081] fstat(4, [pid 8905] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8905] <... futex resumed>) = 0 [pid 8905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8905] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] getdents64(4, [pid 8905] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8905] <... mprotect resumed>) = 0 [pid 5081] close(4 [pid 8905] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./112/file0" [pid 8905] <... clone resumed>, parent_tid=[8906], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8906 [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 8905] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./112") = 0 ./strace-static-x86_64: Process 8906 attached [pid 5081] mkdir("./113", 0777 [pid 8906] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8906] <... set_robust_list resumed>) = 0 [pid 8906] memfd_create("syzkaller", 0 [pid 5081] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 8906] <... memfd_create resumed>) = 3 [pid 8906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... ioctl resumed>) = 0 [pid 8906] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8907 ./strace-static-x86_64: Process 8907 attached [pid 8907] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8907] chdir("./113") = 0 [pid 8907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8907] setpgid(0, 0) = 0 [pid 8907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8907] write(3, "1000", 4) = 4 [pid 8907] close(3) = 0 [pid 8907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8907] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8907] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8907] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8908], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8908 [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8907] <... futex resumed>) = 0 [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8908 attached [pid 8908] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8908] memfd_create("syzkaller", 0) = 3 [pid 8908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8886] <... write resumed>) = 16777216 [pid 8886] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8886] close(3) = 0 [pid 8886] mkdir("./file0", 0777) = 0 [ 246.957213][ T8886] loop1: detected capacity change from 0 to 32768 [pid 8886] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8879] <... ioctl resumed>) = 0 [pid 8879] close(4) = 0 [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8878] <... futex resumed>) = 0 [pid 8879] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8879] <... openat resumed>) = 3 [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8878] <... futex resumed>) = 0 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8878] <... futex resumed>) = 0 [pid 8879] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8878] <... futex resumed>) = 0 [pid 8879] <... futex resumed>) = 1 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] openat(AT_FDCWD, ".log", O_RDONLY [pid 8878] <... futex resumed>) = 0 [ 246.997770][ T8886] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (8886) [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8879] <... openat resumed>) = 4 [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8878] <... futex resumed>) = 0 [pid 8878] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8879] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8878] <... futex resumed>) = 0 [pid 8878] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8879] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8879] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8878] <... futex resumed>) = 0 [ 247.059633][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 247.059646][ T27] audit: type=1804 audit(1680236930.532:678): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/111/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 8879] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8878] exit_group(0) = ? [pid 8879] <... futex resumed>) = ? [pid 8879] +++ exited with 0 +++ [pid 8878] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8878, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=28 /* 0.28 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./111/binderfs" [pid 8904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... unlink resumed>) = 0 [pid 5078] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./111/file0") = 0 [pid 5078] umount2("./111/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./111/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./111/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./111") = 0 [ 247.102595][ T8886] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [pid 5078] mkdir("./112", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8909 ./strace-static-x86_64: Process 8909 attached [pid 8909] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8909] chdir("./112") = 0 [pid 8909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8909] setpgid(0, 0) = 0 [pid 8909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8909] write(3, "1000", 4) = 4 [pid 8909] close(3) = 0 [pid 8909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8909] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8909] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8909] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8910], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8910 [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8910 attached [pid 8910] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8910] memfd_create("syzkaller", 0) = 3 [pid 8910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 247.156216][ T8886] BTRFS info (device loop1): setting nodatasum [ 247.162425][ T8886] BTRFS info (device loop1): allowing degraded mounts [ 247.223620][ T8886] BTRFS info (device loop1): use zlib compression, level 3 [ 247.257914][ T8886] BTRFS info (device loop1): using free space tree [pid 8906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8900] <... write resumed>) = 16777216 [pid 8900] munmap(0x7ff2ab354000, 16777216 [pid 8908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8900] <... munmap resumed>) = 0 [pid 8900] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8900] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8900] close(3) = 0 [pid 8900] mkdir("./file0", 0777) = 0 [pid 8900] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8904] <... write resumed>) = 16777216 [pid 8904] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8904] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 247.378959][ T8900] loop4: detected capacity change from 0 to 32768 [ 247.416663][ T8900] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8900) [pid 8904] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8904] close(3) = 0 [pid 8904] mkdir("./file0", 0777) = 0 [ 247.451844][ T8904] loop5: detected capacity change from 0 to 32768 [pid 8904] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8904] <... mount resumed>) = -1 EEXIST (File exists) [pid 8900] <... mount resumed>) = -1 EEXIST (File exists) [pid 8904] ioctl(4, LOOP_CLR_FD [ 247.495482][ T8904] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8904) [ 247.525418][ T8886] BTRFS info (device loop1): enabling ssd optimizations [ 247.546151][ T8886] BTRFS info (device loop1): auto enabling async discard [pid 8900] ioctl(4, LOOP_CLR_FD [pid 8886] <... mount resumed>) = 0 [pid 8886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8886] chdir("./file0") = 0 [pid 8886] ioctl(4, LOOP_CLR_FD [pid 8908] <... write resumed>) = 16777216 [pid 8886] <... ioctl resumed>) = 0 [pid 8908] munmap(0x7ff2ab354000, 16777216 [pid 8886] close(4) = 0 [pid 8886] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8880] <... futex resumed>) = 0 [pid 8886] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8880] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8880] <... futex resumed>) = 0 [ 247.602610][ T8886] BTRFS info (device loop1): checking UUID tree [pid 8886] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8880] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8908] <... munmap resumed>) = 0 [pid 8886] <... openat resumed>) = 4 [pid 8908] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8886] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8908] <... openat resumed>) = 4 [pid 8886] <... futex resumed>) = 1 [pid 8880] <... futex resumed>) = 0 [pid 8908] ioctl(4, LOOP_SET_FD, 3 [pid 8886] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8880] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8880] <... futex resumed>) = 0 [pid 8886] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8880] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8908] <... ioctl resumed>) = 0 [pid 8908] close(3) = 0 [pid 8908] mkdir("./file0", 0777) = 0 [ 247.685567][ T8908] loop3: detected capacity change from 0 to 32768 [ 247.694508][ T8886] BTRFS info (device loop1): balance: start -s [ 247.717945][ T8908] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8908) [pid 8908] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 8908] ioctl(4, LOOP_CLR_FD [pid 8880] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8880] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 8880] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8880] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8929], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8929 [pid 8880] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8880] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8929 attached [pid 8929] set_robust_list(0x7ff2ac3539e0, 24) = 0 [ 247.720423][ T8886] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 8929] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 8904] <... ioctl resumed>) = 0 [pid 8929] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8906] <... write resumed>) = 16777216 [pid 8904] close(4 [pid 8880] <... futex resumed>) = 0 [pid 8929] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8906] munmap(0x7ff2ab354000, 16777216 [pid 8904] <... close resumed>) = 0 [pid 8880] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 8929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8880] <... futex resumed>) = 0 [pid 8929] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8906] <... munmap resumed>) = 0 [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8880] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8904] <... futex resumed>) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8906] <... openat resumed>) = 4 [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8904] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8906] ioctl(4, LOOP_SET_FD, 3 [ 247.781630][ T27] audit: type=1804 audit(1680236931.252:679): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/113/file0/.log" dev="loop1" ino=263 res=1 errno=0 [pid 8904] <... openat resumed>) = 3 [pid 8906] <... ioctl resumed>) = 0 [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] close(3 [pid 8904] <... futex resumed>) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8906] <... close resumed>) = 0 [pid 8904] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] mkdir("./file0", 0777 [pid 8904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8903] <... futex resumed>) = 0 [pid 8904] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... mkdir resumed>) = 0 [pid 8904] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8906] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8904] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8904] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8903] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8903] <... futex resumed>) = 0 [pid 8903] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8880] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 247.836206][ T8906] loop2: detected capacity change from 0 to 32768 [ 247.853417][ T8906] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8906) [pid 8904] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8904] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8903] <... futex resumed>) = 0 [pid 8904] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8903] exit_group(0 [pid 8900] <... ioctl resumed>) = 0 [pid 8906] <... mount resumed>) = -1 EEXIST (File exists) [pid 8904] <... futex resumed>) = ? [pid 8903] <... exit_group resumed>) = ? [pid 8906] ioctl(4, LOOP_CLR_FD [pid 8904] +++ exited with 0 +++ [pid 8903] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8903, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=21 /* 0.21 s */} --- [ 247.869424][ T27] audit: type=1804 audit(1680236931.342:680): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/113/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 5084] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./113/binderfs") = 0 [pid 5084] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./113/file0", [pid 8900] close(4 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8900] <... close resumed>) = 0 [pid 5084] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 4 [pid 8900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8899] <... futex resumed>) = 0 [pid 5084] fstat(4, [pid 8900] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8900] <... openat resumed>) = 3 [pid 5084] getdents64(4, [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8899] <... futex resumed>) = 0 [pid 5084] close(4 [pid 8900] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [ 247.932671][ T8929] BTRFS info (device loop1): scrub: started on devid 1 [ 247.942812][ T8886] BTRFS info (device loop1): balance: ended with status: 0 [pid 8900] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] rmdir("./113/file0" [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8899] <... futex resumed>) = 0 [pid 5084] lstat("./113/.log", [pid 8900] openat(AT_FDCWD, ".log", O_RDONLY [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8900] <... openat resumed>) = 4 [pid 5084] unlink("./113/.log" [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8899] <... futex resumed>) = 0 [pid 5084] close(3 [pid 8900] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8899] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [pid 8900] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] rmdir("./113" [pid 8900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 8900] <... futex resumed>) = 1 [pid 8899] <... futex resumed>) = 0 [pid 5084] mkdir("./114", 0777 [pid 8900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8899] exit_group(0 [pid 5084] <... mkdir resumed>) = 0 [pid 8900] <... futex resumed>) = ? [pid 8899] <... exit_group resumed>) = ? [pid 8886] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8900] +++ exited with 0 +++ [pid 8899] +++ exited with 0 +++ [pid 8886] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 8886] <... futex resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 8886] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8899, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=25 /* 0.25 s */} --- [pid 8908] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8930 [pid 5083] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8908] close(4 [pid 5083] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8908] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(3, ./strace-static-x86_64: Process 8930 attached [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8930] set_robust_list(0x5555559d56e0, 24 [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 8930] <... set_robust_list resumed>) = 0 [pid 8908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8907] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8930] chdir("./114" [pid 8908] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] <... chdir resumed>) = 0 [pid 8908] <... openat resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8930] setpgid(0, 0) = 0 [pid 8930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./113/binderfs", [pid 8930] <... openat resumed>) = 3 [pid 8930] write(3, "1000", 4) = 4 [pid 8930] close(3 [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8930] <... close resumed>) = 0 [ 247.988210][ T8929] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 247.998424][ T27] audit: type=1804 audit(1680236931.472:681): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/113/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 8929] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./113/binderfs" [pid 8930] symlink("/dev/binderfs", "./binderfs" [pid 8929] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8907] <... futex resumed>) = 0 [pid 8880] exit_group(0 [pid 8930] <... symlink resumed>) = 0 [pid 8886] <... futex resumed>) = ? [pid 8880] <... exit_group resumed>) = ? [pid 8930] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8886] +++ exited with 0 +++ [pid 8930] <... futex resumed>) = 0 [pid 8930] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8929] <... futex resumed>) = ? [pid 8908] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... unlink resumed>) = 0 [pid 8930] <... mmap resumed>) = 0x7ff2b3754000 [pid 8929] +++ exited with 0 +++ [pid 8908] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8880] +++ exited with 0 +++ [pid 5083] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8930] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8931], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8931 [pid 8930] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8880, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 8930] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] lstat("./113/file0", [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 8931 attached [pid 8908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8907] <... futex resumed>) = 0 [pid 5083] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8931] set_robust_list(0x7ff2b37749e0, 24 [pid 8908] openat(AT_FDCWD, ".log", O_RDONLY [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8931] <... set_robust_list resumed>) = 0 [pid 8908] <... openat resumed>) = 4 [pid 5083] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8931] memfd_create("syzkaller", 0) = 3 [pid 8931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5083] <... openat resumed>) = 4 [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(4, [pid 5079] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 5079] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8907] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8907] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 3 [pid 5083] getdents64(4, [pid 8908] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] fstat(3, [pid 8908] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] close(4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./113/file0" [pid 5079] getdents64(3, [pid 8908] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... rmdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 8908] <... futex resumed>) = 1 [pid 8907] <... futex resumed>) = 0 [pid 5083] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8908] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8907] exit_group(0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8908] <... futex resumed>) = ? [pid 8907] <... exit_group resumed>) = ? [pid 5083] lstat("./113/.log", [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8908] +++ exited with 0 +++ [pid 8907] +++ exited with 0 +++ [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./113/.log" [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8907, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=22 /* 0.22 s */} --- [pid 5079] lstat("./113/binderfs", [pid 8910] <... write resumed>) = 16777216 [pid 5083] <... unlink resumed>) = 0 [ 248.116834][ T27] audit: type=1804 audit(1680236931.592:682): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/113/.log" dev="sda1" ino=1158 res=1 errno=0 [pid 5083] getdents64(3, [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./113/binderfs" [pid 5083] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... unlink resumed>) = 0 [pid 5083] rmdir("./113" [pid 5081] <... openat resumed>) = 3 [pid 5079] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... rmdir resumed>) = 0 [pid 5081] fstat(3, [pid 5083] mkdir("./114", 0777 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./113/binderfs", [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] unlink("./113/binderfs" [pid 5083] <... openat resumed>) = 3 [pid 5081] <... unlink resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] close(3 [pid 5081] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] <... close resumed>) = 0 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./113/file0") = 0 [pid 5081] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8910] munmap(0x7ff2ab354000, 16777216 [pid 5081] lstat("./113/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./113/.log") = 0 [pid 8910] <... munmap resumed>) = 0 [pid 5081] getdents64(3, [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./113" [pid 8910] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... rmdir resumed>) = 0 [pid 8910] <... openat resumed>) = 4 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8932 [pid 5081] mkdir("./114", 0777 [pid 8910] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 ./strace-static-x86_64: Process 8932 attached [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8932] set_robust_list(0x5555559d56e0, 24) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8933 [pid 8932] chdir("./114") = 0 [pid 8932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8932] setpgid(0, 0) = 0 [pid 8932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8910] <... ioctl resumed>) = 0 [pid 8932] <... openat resumed>) = 3 [pid 8910] close(3 [pid 8932] write(3, "1000", 4 [pid 8910] <... close resumed>) = 0 ./strace-static-x86_64: Process 8933 attached [pid 8932] <... write resumed>) = 4 [pid 8910] mkdir("./file0", 0777 [pid 8933] set_robust_list(0x5555559d56e0, 24 [pid 8932] close(3 [pid 8910] <... mkdir resumed>) = 0 [pid 8933] <... set_robust_list resumed>) = 0 [pid 8932] <... close resumed>) = 0 [pid 8910] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8933] chdir("./114" [pid 8932] symlink("/dev/binderfs", "./binderfs" [pid 8933] <... chdir resumed>) = 0 [pid 8932] <... symlink resumed>) = 0 [pid 8933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8932] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8933] <... prctl resumed>) = 0 [pid 8932] <... futex resumed>) = 0 [pid 8933] setpgid(0, 0 [pid 8932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8933] <... setpgid resumed>) = 0 [pid 8932] <... mmap resumed>) = 0x7ff2b3754000 [pid 8933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8932] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8933] <... openat resumed>) = 3 [pid 8932] <... mprotect resumed>) = 0 [pid 8933] write(3, "1000", 4 [pid 8932] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8933] <... write resumed>) = 4 [pid 8933] close(3 [pid 8932] <... clone resumed>, parent_tid=[8934], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8934 [pid 8933] <... close resumed>) = 0 [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8933] symlink("/dev/binderfs", "./binderfs" [pid 8932] <... futex resumed>) = 0 [pid 8933] <... symlink resumed>) = 0 [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8933] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 ./strace-static-x86_64: Process 8934 attached [pid 8933] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8934] set_robust_list(0x7ff2b37749e0, 24 [pid 8933] <... mprotect resumed>) = 0 [pid 8934] <... set_robust_list resumed>) = 0 [pid 8933] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8934] memfd_create("syzkaller", 0) = 3 [pid 8933] <... clone resumed>, parent_tid=[8935], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8935 [pid 8934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8934] <... mmap resumed>) = 0x7ff2ab354000 [pid 8933] <... futex resumed>) = 0 [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8935 attached [pid 8935] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8935] memfd_create("syzkaller", 0) = 3 [pid 8935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8910] <... mount resumed>) = -1 EEXIST (File exists) [ 248.216928][ T8910] loop0: detected capacity change from 0 to 32768 [ 248.242834][ T8910] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8910) [pid 8910] ioctl(4, LOOP_CLR_FD [pid 8906] <... ioctl resumed>) = 0 [pid 8906] close(4) = 0 [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8905] <... futex resumed>) = 0 [pid 8906] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... openat resumed>) = 3 [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8905] <... futex resumed>) = 0 [pid 8906] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8905] <... futex resumed>) = 0 [pid 8906] openat(AT_FDCWD, ".log", O_RDONLY [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... openat resumed>) = 4 [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8905] <... futex resumed>) = 0 [pid 8906] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8905] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8906] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8906] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8905] <... futex resumed>) = 0 [pid 8906] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8905] exit_group(0 [pid 8906] <... futex resumed>) = ? [pid 8905] <... exit_group resumed>) = ? [pid 8906] +++ exited with 0 +++ [pid 8905] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8905, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5080] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 248.406725][ T27] audit: type=1804 audit(1680236931.882:683): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/113/.log" dev="sda1" ino=1156 res=1 errno=0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./113/binderfs") = 0 [pid 5080] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./113/file0") = 0 [pid 5080] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./113/.log", [pid 8931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./113/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./113") = 0 [pid 5080] mkdir("./114", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8936 ./strace-static-x86_64: Process 8936 attached [pid 8936] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8936] chdir("./114") = 0 [pid 8936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8936] setpgid(0, 0) = 0 [pid 8936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8936] write(3, "1000", 4) = 4 [pid 8936] close(3) = 0 [pid 8936] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8936] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8936] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8936] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8937], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8937 [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8937 attached [pid 8937] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8937] memfd_create("syzkaller", 0) = 3 [pid 8937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8910] <... ioctl resumed>) = 0 [pid 5079] close(4 [pid 8910] close(4 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./113/file0" [pid 8910] <... close resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 8910] <... futex resumed>) = 1 [pid 8909] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 8910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8909] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 8910] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] rmdir("./113" [pid 8910] <... openat resumed>) = 3 [pid 5079] <... rmdir resumed>) = 0 [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] mkdir("./114", 0777 [pid 8910] <... futex resumed>) = 1 [pid 8909] <... futex resumed>) = 0 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... mkdir resumed>) = 0 [pid 8910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8909] <... futex resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8910] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 3 [pid 8910] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8910] <... futex resumed>) = 1 [pid 8909] <... futex resumed>) = 0 [pid 5079] close(3 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8909] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 8910] openat(AT_FDCWD, ".log", O_RDONLY [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8910] <... openat resumed>) = 4 [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8909] <... futex resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8938 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8909] <... futex resumed>) = 0 ./strace-static-x86_64: Process 8938 attached [pid 8910] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8909] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8938] set_robust_list(0x5555559d56e0, 24 [pid 8910] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8938] <... set_robust_list resumed>) = 0 [pid 8910] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8938] chdir("./114" [pid 8910] <... futex resumed>) = 1 [pid 8909] <... futex resumed>) = 0 [pid 8938] <... chdir resumed>) = 0 [pid 8910] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8909] exit_group(0 [pid 8938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8910] <... futex resumed>) = ? [pid 8909] <... exit_group resumed>) = ? [pid 8938] <... prctl resumed>) = 0 [pid 8910] +++ exited with 0 +++ [pid 8938] setpgid(0, 0 [pid 8909] +++ exited with 0 +++ [pid 8938] <... setpgid resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8909, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 8938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 8938] <... openat resumed>) = 3 [pid 5078] <... restart_syscall resumed>) = 0 [pid 8938] write(3, "1000", 4) = 4 [pid 8938] close(3 [pid 5078] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8938] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8938] symlink("/dev/binderfs", "./binderfs" [pid 5078] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8938] <... symlink resumed>) = 0 [ 248.667118][ T27] audit: type=1804 audit(1680236932.142:684): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/112/.log" dev="sda1" ino=1153 res=1 errno=0 [pid 5078] <... openat resumed>) = 3 [pid 8938] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] fstat(3, [pid 8938] <... futex resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] getdents64(3, [pid 8938] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8938] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5078] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8938] <... mprotect resumed>) = 0 [pid 8935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8938] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8938] <... clone resumed>, parent_tid=[8939], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8939 [pid 5078] unlink("./112/binderfs" [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8939 attached [pid 8938] <... futex resumed>) = 0 [pid 5078] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8939] set_robust_list(0x7ff2b37749e0, 24 [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8939] <... set_robust_list resumed>) = 0 [pid 5078] lstat("./112/file0", [pid 8939] memfd_create("syzkaller", 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8939] <... memfd_create resumed>) = 3 [pid 5078] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8939] <... mmap resumed>) = 0x7ff2ab354000 [pid 5078] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./112/file0") = 0 [pid 5078] umount2("./112/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./112/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./112/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./112") = 0 [pid 5078] mkdir("./113", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8940 ./strace-static-x86_64: Process 8940 attached [pid 8940] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8940] chdir("./113") = 0 [pid 8940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8940] setpgid(0, 0) = 0 [pid 8940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8940] write(3, "1000", 4) = 4 [pid 8940] close(3) = 0 [pid 8940] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8940] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8940] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8940] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8941], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8941 [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8941 attached [pid 8941] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8931] <... write resumed>) = 16777216 [pid 8941] memfd_create("syzkaller", 0) = 3 [pid 8931] munmap(0x7ff2ab354000, 16777216 [pid 8941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8931] <... munmap resumed>) = 0 [pid 8941] <... mmap resumed>) = 0x7ff2ab354000 [pid 8931] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8931] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8931] close(3) = 0 [pid 8931] mkdir("./file0", 0777) = 0 [ 248.906577][ T8931] loop5: detected capacity change from 0 to 32768 [ 248.936488][ T8931] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (8931) [ 248.995689][ T8931] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 249.004949][ T8931] BTRFS info (device loop5): setting nodatasum [pid 8931] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 249.050047][ T8931] BTRFS info (device loop5): allowing degraded mounts [ 249.086153][ T8931] BTRFS info (device loop5): use zlib compression, level 3 [ 249.109000][ T8931] BTRFS info (device loop5): using free space tree [pid 8939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8935] <... write resumed>) = 16777216 [pid 8935] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8935] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8935] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8935] close(3) = 0 [pid 8935] mkdir("./file0", 0777) = 0 [pid 8935] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 8935] ioctl(4, LOOP_CLR_FD [pid 8937] <... write resumed>) = 16777216 [pid 8937] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8937] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 249.191647][ T8935] loop3: detected capacity change from 0 to 32768 [ 249.209924][ T8935] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (8935) [pid 8937] ioctl(4, LOOP_SET_FD, 3 [pid 8941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8937] <... ioctl resumed>) = 0 [pid 8937] close(3) = 0 [pid 8937] mkdir("./file0", 0777) = 0 [pid 8934] <... write resumed>) = 16777216 [pid 8937] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8934] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8934] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8934] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8934] close(3) = 0 [pid 8934] mkdir("./file0", 0777) = 0 [ 249.254670][ T8937] loop2: detected capacity change from 0 to 32768 [ 249.278930][ T8937] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8937) [ 249.297930][ T8934] loop4: detected capacity change from 0 to 32768 [pid 8934] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8937] <... mount resumed>) = -1 EEXIST (File exists) [pid 8937] ioctl(4, LOOP_CLR_FD [pid 8934] <... mount resumed>) = -1 EEXIST (File exists) [ 249.324811][ T8934] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8934) [pid 8934] ioctl(4, LOOP_CLR_FD [pid 8935] <... ioctl resumed>) = 0 [pid 8935] close(4) = 0 [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8933] <... futex resumed>) = 0 [pid 8935] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] <... openat resumed>) = 3 [pid 8933] <... futex resumed>) = 0 [ 249.394097][ T8931] BTRFS info (device loop5): enabling ssd optimizations [ 249.403490][ T8931] BTRFS info (device loop5): auto enabling async discard [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8935] <... futex resumed>) = 0 [pid 8933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8935] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8933] <... futex resumed>) = 0 [pid 8935] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8935] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8933] <... futex resumed>) = 0 [pid 8935] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8933] <... futex resumed>) = 0 [pid 8935] openat(AT_FDCWD, ".log", O_RDONLY [ 249.446432][ T8931] BTRFS info (device loop5): checking UUID tree [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8937] <... ioctl resumed>) = 0 [pid 8935] <... openat resumed>) = 4 [pid 8931] <... mount resumed>) = 0 [pid 8937] close(4 [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8937] <... close resumed>) = 0 [pid 8935] <... futex resumed>) = 1 [pid 8931] <... openat resumed>) = 3 [pid 8933] <... futex resumed>) = 0 [pid 8933] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8933] <... futex resumed>) = 0 [pid 8937] <... futex resumed>) = 1 [pid 8936] <... futex resumed>) = 0 [pid 8933] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8937] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] <... openat resumed>) = 3 [pid 8936] <... futex resumed>) = 0 [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8937] <... futex resumed>) = 0 [pid 8936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8937] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8936] <... futex resumed>) = 0 [pid 8935] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8931] chdir("./file0" [pid 8935] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8931] <... chdir resumed>) = 0 [pid 8935] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8931] ioctl(4, LOOP_CLR_FD [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8935] <... futex resumed>) = 1 [pid 8933] <... futex resumed>) = 0 [pid 8931] <... ioctl resumed>) = 0 [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8933] exit_group(0 [pid 8931] close(4 [pid 8937] <... futex resumed>) = 1 [pid 8936] <... futex resumed>) = 0 [pid 8935] <... futex resumed>) = ? [pid 8933] <... exit_group resumed>) = ? [pid 8931] <... close resumed>) = 0 [pid 8937] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8935] +++ exited with 0 +++ [pid 8933] +++ exited with 0 +++ [pid 8931] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8936] <... futex resumed>) = 0 [pid 8931] <... futex resumed>) = 1 [pid 8930] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8933, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=29 /* 0.29 s */} --- [pid 8937] openat(AT_FDCWD, ".log", O_RDONLY [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8931] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8930] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] <... openat resumed>) = 4 [pid 8931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8930] <... futex resumed>) = 0 [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8931] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8930] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8937] <... futex resumed>) = 1 [ 249.477355][ T27] audit: type=1804 audit(1680236932.952:685): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/114/.log" dev="sda1" ino=1159 res=1 errno=0 [pid 8936] <... futex resumed>) = 0 [pid 8937] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8936] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8931] <... openat resumed>) = 4 [pid 8937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8936] <... futex resumed>) = 0 [pid 8931] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8937] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8936] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8931] <... futex resumed>) = 1 [pid 8930] <... futex resumed>) = 0 [pid 8937] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8931] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8930] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8937] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8936] <... futex resumed>) = 0 [pid 8937] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8936] exit_group(0 [pid 8937] <... futex resumed>) = ? [pid 8936] <... exit_group resumed>) = ? [pid 8931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8930] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8937] +++ exited with 0 +++ [pid 8936] +++ exited with 0 +++ [pid 8931] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8930] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8936, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=23 /* 0.23 s */} --- [pid 5081] fstat(3, [pid 5080] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5080] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... openat resumed>) = 3 [pid 5081] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] lstat("./114/binderfs", [pid 5080] getdents64(3, [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] unlink("./114/binderfs" [pid 5080] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./114/binderfs", [pid 5081] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] unlink("./114/binderfs" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... unlink resumed>) = 0 [pid 8930] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8930] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 5080] lstat("./114/file0", [pid 8930] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8930] <... mmap resumed>) = 0x7ff2ac333000 [pid 5081] getdents64(4, [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8930] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] <... mprotect resumed>) = 0 [pid 5081] getdents64(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8930] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] close(4 [pid 5080] <... openat resumed>) = 4 [pid 8930] <... clone resumed>, parent_tid=[8960], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8960 [pid 5081] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 8930] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./114/file0" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8930] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 8930] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8960 attached [pid 5081] lstat("./114/.log", [pid 5080] getdents64(4, [pid 8960] set_robust_list(0x7ff2ac3539e0, 24 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8960] <... set_robust_list resumed>) = 0 [pid 5081] unlink("./114/.log" [pid 5080] close(4 [pid 8960] openat(AT_FDCWD, ".log", O_RDONLY [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 8960] <... openat resumed>) = 5 [pid 5081] getdents64(3, [ 249.562568][ T8931] BTRFS info (device loop5): balance: start -s [ 249.566167][ T27] audit: type=1804 audit(1680236933.002:686): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/114/.log" dev="sda1" ino=1161 res=1 errno=0 [ 249.594871][ T8931] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 5080] rmdir("./114/file0" [pid 8960] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8960] <... futex resumed>) = 1 [pid 8930] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 8960] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8930] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5080] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8930] <... futex resumed>) = 0 [pid 5081] rmdir("./114" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8930] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... rmdir resumed>) = 0 [pid 5080] lstat("./114/.log", [pid 5081] mkdir("./115", 0777 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] unlink("./114/.log" [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... unlink resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] getdents64(3, [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5081] close(3 [pid 5080] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] rmdir("./114" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./115", 0777 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8961 [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 8939] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 8961 attached [pid 8961] set_robust_list(0x5555559d56e0, 24 [pid 5080] <... close resumed>) = 0 [pid 8961] <... set_robust_list resumed>) = 0 [pid 8961] chdir("./115" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8961] <... chdir resumed>) = 0 [pid 8930] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8961] setpgid(0, 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8962 [pid 8961] <... setpgid resumed>) = 0 [pid 8961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8961] write(3, "1000", 4) = 4 [pid 8961] close(3) = 0 [pid 8961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8961] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 249.687210][ T8960] BTRFS info (device loop5): scrub: started on devid 1 [ 249.702701][ T8931] BTRFS info (device loop5): balance: ended with status: 0 [ 249.703070][ T27] audit: type=1804 audit(1680236933.112:687): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/114/file0/.log" dev="loop5" ino=263 res=1 errno=0 [pid 8939] munmap(0x7ff2ab354000, 16777216 [pid 8961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8939] <... munmap resumed>) = 0 [pid 8961] <... mmap resumed>) = 0x7ff2b3754000 [pid 8961] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8961] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 8962 attached [pid 8962] set_robust_list(0x5555559d56e0, 24 [pid 8961] <... clone resumed>, parent_tid=[8963], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8963 [pid 8939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8962] <... set_robust_list resumed>) = 0 [pid 8961] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... openat resumed>) = 4 [pid 8962] chdir("./115" [pid 8961] <... futex resumed>) = 0 [pid 8939] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8963 attached [pid 8962] <... chdir resumed>) = 0 [pid 8961] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8941] <... write resumed>) = 16777216 [pid 8963] set_robust_list(0x7ff2b37749e0, 24 [pid 8962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8941] munmap(0x7ff2ab354000, 16777216 [pid 8963] <... set_robust_list resumed>) = 0 [pid 8963] memfd_create("syzkaller", 0) = 3 [pid 8962] <... prctl resumed>) = 0 [pid 8963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8962] setpgid(0, 0 [pid 8963] <... mmap resumed>) = 0x7ff2ab354000 [pid 8962] <... setpgid resumed>) = 0 [pid 8960] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8934] <... ioctl resumed>) = 0 [pid 8962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8960] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8941] <... munmap resumed>) = 0 [pid 8931] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8962] <... openat resumed>) = 3 [pid 8960] <... futex resumed>) = 0 [pid 8941] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8931] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8962] write(3, "1000", 4 [pid 8960] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8941] <... openat resumed>) = 4 [pid 8931] <... futex resumed>) = 0 [pid 8930] exit_group(0 [pid 8962] <... write resumed>) = 4 [pid 8960] <... futex resumed>) = ? [pid 8941] ioctl(4, LOOP_SET_FD, 3 [pid 8930] <... exit_group resumed>) = ? [ 249.734098][ T8960] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [ 249.752932][ T8939] loop1: detected capacity change from 0 to 32768 [pid 8962] close(3 [pid 8960] +++ exited with 0 +++ [pid 8939] <... ioctl resumed>) = 0 [pid 8939] close(3) = 0 [pid 8939] mkdir("./file0", 0777) = 0 [pid 8939] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8934] close(4 [pid 8931] +++ exited with 0 +++ [pid 8934] <... close resumed>) = 0 [pid 8930] +++ exited with 0 +++ [pid 8962] <... close resumed>) = 0 [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8930, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 8962] symlink("/dev/binderfs", "./binderfs" [pid 8934] <... futex resumed>) = 1 [pid 8932] <... futex resumed>) = 0 [pid 8962] <... symlink resumed>) = 0 [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8962] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8932] <... futex resumed>) = 0 [pid 8941] <... ioctl resumed>) = 0 [pid 8962] <... futex resumed>) = 0 [pid 8941] close(3 [pid 8934] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8941] <... close resumed>) = 0 [pid 8934] <... openat resumed>) = 3 [pid 8962] <... mmap resumed>) = 0x7ff2b3754000 [pid 8941] mkdir("./file0", 0777 [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8962] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8934] <... futex resumed>) = 1 [pid 8932] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8962] <... mprotect resumed>) = 0 [pid 8941] <... mkdir resumed>) = 0 [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8962] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8941] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8932] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 8934] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] fstat(3, [pid 8962] <... clone resumed>, parent_tid=[8964], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8964 [pid 8934] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, ./strace-static-x86_64: Process 8964 attached [pid 8962] <... futex resumed>) = 0 [pid 8934] <... futex resumed>) = 1 [pid 8932] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 8964] set_robust_list(0x7ff2b37749e0, 24 [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8964] <... set_robust_list resumed>) = 0 [pid 8934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8932] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8964] memfd_create("syzkaller", 0 [pid 8934] openat(AT_FDCWD, ".log", O_RDONLY [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] lstat("./114/binderfs", [pid 8964] <... memfd_create resumed>) = 3 [pid 8934] <... openat resumed>) = 4 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./114/binderfs" [pid 8964] <... mmap resumed>) = 0x7ff2ab354000 [pid 8934] <... futex resumed>) = 1 [pid 8932] <... futex resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [ 249.790577][ T8941] loop0: detected capacity change from 0 to 32768 [ 249.799332][ T8939] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8939) [pid 5084] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8932] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... mount resumed>) = -1 EEXIST (File exists) [pid 8939] ioctl(4, LOOP_CLR_FD [pid 8934] <... futex resumed>) = 0 [pid 8932] <... futex resumed>) = 1 [pid 8932] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8934] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8934] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8932] <... futex resumed>) = 0 [pid 8934] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8932] exit_group(0) = ? [pid 8934] <... futex resumed>) = ? [pid 8934] +++ exited with 0 +++ [pid 8932] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8932, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5083] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8941] <... mount resumed>) = -1 EEXIST (File exists) [pid 5083] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8941] ioctl(4, LOOP_CLR_FD [pid 5083] <... openat resumed>) = 3 [ 249.852999][ T8941] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8941) [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./114/binderfs") = 0 [pid 5083] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./114/file0") = 0 [pid 5083] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./114/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./114/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./114") = 0 [pid 5083] mkdir("./115", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8965 ./strace-static-x86_64: Process 8965 attached [pid 8965] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8965] chdir("./115") = 0 [pid 8965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8965] setpgid(0, 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8965] <... setpgid resumed>) = 0 [pid 5084] lstat("./114/file0", [pid 8965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8965] <... openat resumed>) = 3 [pid 5084] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8965] write(3, "1000", 4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8965] <... write resumed>) = 4 [pid 5084] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8965] close(3 [pid 5084] <... openat resumed>) = 4 [pid 8965] <... close resumed>) = 0 [pid 5084] fstat(4, [pid 8965] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8965] <... symlink resumed>) = 0 [pid 5084] getdents64(4, [pid 8965] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8965] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 8965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8965] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] close(4 [pid 8965] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... close resumed>) = 0 [pid 8965] <... mprotect resumed>) = 0 [pid 5084] rmdir("./114/file0" [pid 8965] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... rmdir resumed>) = 0 [pid 5084] getdents64(3, [pid 8965] <... clone resumed>, parent_tid=[8966], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8966 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 8965] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] rmdir("./114"./strace-static-x86_64: Process 8966 attached [pid 8966] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] <... rmdir resumed>) = 0 [pid 8966] <... set_robust_list resumed>) = 0 [pid 5084] mkdir("./115", 0777 [pid 8966] memfd_create("syzkaller", 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 8966] <... memfd_create resumed>) = 3 [pid 8966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... openat resumed>) = 3 [pid 8966] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] ioctl(3, LOOP_CLR_FD) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8967 ./strace-static-x86_64: Process 8967 attached [pid 8967] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8967] chdir("./115") = 0 [pid 8967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8967] setpgid(0, 0) = 0 [pid 8967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8967] write(3, "1000", 4) = 4 [pid 8967] close(3) = 0 [pid 8967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8967] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8967] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8967] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8968], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8968 [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8968 attached [pid 8968] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8968] memfd_create("syzkaller", 0) = 3 [pid 8968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8939] <... ioctl resumed>) = 0 [pid 8939] close(4) = 0 [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8941] <... ioctl resumed>) = 0 [pid 8939] <... futex resumed>) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8938] <... futex resumed>) = 0 [pid 8941] close(4 [pid 8939] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8939] <... openat resumed>) = 3 [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8938] <... futex resumed>) = 0 [pid 8963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8939] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8939] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8938] <... futex resumed>) = 0 [pid 8939] openat(AT_FDCWD, ".log", O_RDONLY [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8939] <... openat resumed>) = 4 [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8938] <... futex resumed>) = 0 [pid 8939] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8938] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8939] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8939] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8938] <... futex resumed>) = 0 [pid 8939] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8938] exit_group(0 [pid 8939] <... futex resumed>) = ? [pid 8938] <... exit_group resumed>) = ? [pid 8939] +++ exited with 0 +++ [pid 8938] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8938, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5079] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./114/binderfs") = 0 [pid 5079] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8941] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8941] <... futex resumed>) = 1 [pid 8940] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 8941] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8941] <... openat resumed>) = 3 [pid 8940] <... futex resumed>) = 0 [pid 5079] close(4 [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 8941] <... futex resumed>) = 0 [pid 8940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] rmdir("./114/file0" [pid 8941] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... rmdir resumed>) = 0 [pid 8941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8940] <... futex resumed>) = 0 [pid 5079] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8941] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./114/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8941] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] unlink("./114/.log" [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... unlink resumed>) = 0 [pid 8941] <... futex resumed>) = 1 [pid 8940] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 8941] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8940] <... futex resumed>) = 0 [pid 5079] close(3 [pid 8941] openat(AT_FDCWD, ".log", O_RDONLY [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./114" [pid 8941] <... openat resumed>) = 4 [pid 5079] <... rmdir resumed>) = 0 [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] mkdir("./115", 0777 [pid 8941] <... futex resumed>) = 1 [pid 8940] <... futex resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 8941] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8940] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8940] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 8941] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8940] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] ioctl(3, LOOP_CLR_FD [pid 8941] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8941] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 8941] <... futex resumed>) = 1 [pid 8940] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 8941] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8940] exit_group(0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8941] <... futex resumed>) = ? [pid 8940] <... exit_group resumed>) = ? [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8969 [pid 8941] +++ exited with 0 +++ [pid 8940] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8940, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- ./strace-static-x86_64: Process 8969 attached [pid 8969] set_robust_list(0x5555559d56e0, 24) = 0 [pid 5078] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8969] chdir("./115") = 0 [pid 8969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8969] setpgid(0, 0) = 0 [pid 8969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8969] write(3, "1000", 4 [pid 5078] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8969] <... write resumed>) = 4 [pid 8969] close(3) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 8969] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8969] <... symlink resumed>) = 0 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, [pid 8969] <... futex resumed>) = 0 [pid 8969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8969] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8969] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8969] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] lstat("./113/binderfs", [pid 8969] <... clone resumed>, parent_tid=[8970], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8970 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./113/binderfs" [pid 8969] <... futex resumed>) = 0 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... unlink resumed>) = 0 [pid 5078] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8970 attached [pid 8970] set_robust_list(0x7ff2b37749e0, 24 [pid 5078] <... openat resumed>) = 4 [pid 8970] <... set_robust_list resumed>) = 0 [pid 5078] fstat(4, [pid 8970] memfd_create("syzkaller", 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8970] <... memfd_create resumed>) = 3 [pid 5078] getdents64(4, [pid 8970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./113/file0") = 0 [pid 5078] umount2("./113/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./113/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./113/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] close(3) = 0 [pid 5078] rmdir("./113") = 0 [pid 5078] mkdir("./114", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 8971 ./strace-static-x86_64: Process 8971 attached [pid 8971] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8971] chdir("./114") = 0 [pid 8971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8971] setpgid(0, 0) = 0 [pid 8971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8971] write(3, "1000", 4) = 4 [pid 8971] close(3) = 0 [pid 8971] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 8971] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8971] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8972], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8972 [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8972 attached [pid 8972] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8972] memfd_create("syzkaller", 0) = 3 [pid 8972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8972] <... mmap resumed>) = 0x7ff2ab354000 [pid 8963] <... write resumed>) = 16777216 [pid 8963] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8963] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8963] ioctl(4, LOOP_SET_FD, 3 [pid 8970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8964] <... write resumed>) = 16777216 [pid 8963] <... ioctl resumed>) = 0 [pid 8964] munmap(0x7ff2ab354000, 16777216 [pid 8963] close(3 [pid 8964] <... munmap resumed>) = 0 [pid 8963] <... close resumed>) = 0 [pid 8963] mkdir("./file0", 0777 [pid 8964] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8963] <... mkdir resumed>) = 0 [pid 8964] <... openat resumed>) = 4 [pid 8963] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 250.762060][ T8963] loop3: detected capacity change from 0 to 32768 [pid 8964] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8964] close(3) = 0 [pid 8964] mkdir("./file0", 0777) = 0 [ 250.811814][ T8963] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor373 (8963) [ 250.824767][ T8964] loop2: detected capacity change from 0 to 32768 [pid 8964] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8964] <... mount resumed>) = -1 EEXIST (File exists) [pid 8964] ioctl(4, LOOP_CLR_FD [pid 8968] <... write resumed>) = 16777216 [pid 8966] <... write resumed>) = 16777216 [ 250.860922][ T8964] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8964) [ 250.883948][ T8963] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [pid 8968] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8966] munmap(0x7ff2ab354000, 16777216 [pid 8968] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8968] ioctl(4, LOOP_SET_FD, 3 [pid 8966] <... munmap resumed>) = 0 [pid 8966] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8968] <... ioctl resumed>) = 0 [pid 8968] close(3) = 0 [pid 8968] mkdir("./file0", 0777 [pid 8966] <... openat resumed>) = 4 [pid 8968] <... mkdir resumed>) = 0 [pid 8968] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 250.932065][ T8963] BTRFS info (device loop3): setting nodatasum [ 250.940652][ T8968] loop5: detected capacity change from 0 to 32768 [ 250.947812][ T8963] BTRFS info (device loop3): allowing degraded mounts [ 250.965164][ T8968] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8968) [pid 8966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8966] close(3) = 0 [pid 8966] mkdir("./file0", 0777) = 0 [pid 8966] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8968] <... mount resumed>) = -1 EEXIST (File exists) [ 250.977266][ T8966] loop4: detected capacity change from 0 to 32768 [ 250.995832][ T8963] BTRFS info (device loop3): use zlib compression, level 3 [ 251.015420][ T8963] BTRFS info (device loop3): using free space tree [pid 8968] ioctl(4, LOOP_CLR_FD [pid 8966] <... mount resumed>) = -1 EEXIST (File exists) [ 251.023229][ T8966] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (8966) [pid 8966] ioctl(4, LOOP_CLR_FD [pid 8964] <... ioctl resumed>) = 0 [pid 8964] close(4) = 0 [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8962] <... futex resumed>) = 0 [pid 8964] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8962] <... futex resumed>) = 0 [pid 8964] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] <... openat resumed>) = 3 [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8962] <... futex resumed>) = 0 [pid 8964] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8964] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8962] <... futex resumed>) = 0 [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] <... futex resumed>) = 0 [pid 8962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8964] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8962] <... futex resumed>) = 0 [pid 8964] openat(AT_FDCWD, ".log", O_RDONLY [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] <... openat resumed>) = 4 [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8962] <... futex resumed>) = 0 [pid 8964] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8962] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8962] <... futex resumed>) = 0 [pid 8964] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8962] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8964] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8964] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8962] <... futex resumed>) = 0 [pid 8964] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8962] exit_group(0) = ? [pid 8964] <... futex resumed>) = ? [pid 8964] +++ exited with 0 +++ [pid 8962] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8962, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5080] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 251.172101][ T8963] BTRFS info (device loop3): enabling ssd optimizations [ 251.179620][ T8963] BTRFS info (device loop3): auto enabling async discard [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./115/binderfs") = 0 [pid 5080] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 8963] <... mount resumed>) = 0 [pid 8963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 8963] chdir("./file0" [pid 8972] <... write resumed>) = 16777216 [pid 8970] <... write resumed>) = 16777216 [pid 8963] <... chdir resumed>) = 0 [pid 5080] getdents64(4, [pid 8963] ioctl(4, LOOP_CLR_FD) = 0 [pid 8963] close(4 [pid 8972] munmap(0x7ff2ab354000, 16777216 [pid 8963] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 8972] <... munmap resumed>) = 0 [pid 8963] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(4 [pid 8963] <... futex resumed>) = 1 [pid 8961] <... futex resumed>) = 0 [pid 8963] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8961] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8972] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8963] <... openat resumed>) = 4 [pid 8961] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 8963] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8961] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8972] <... openat resumed>) = 4 [pid 8963] <... futex resumed>) = 0 [pid 8961] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 251.218891][ T8963] BTRFS info (device loop3): checking UUID tree [pid 5080] rmdir("./115/file0" [pid 8972] ioctl(4, LOOP_SET_FD, 3 [pid 8963] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8961] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 8961] <... futex resumed>) = 0 [pid 8972] <... ioctl resumed>) = 0 [pid 8961] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8970] munmap(0x7ff2ab354000, 16777216 [pid 8972] close(3 [pid 8970] <... munmap resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8972] <... close resumed>) = 0 [pid 5080] lstat("./115/.log", [pid 8972] mkdir("./file0", 0777 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8970] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8970] ioctl(4, LOOP_SET_FD, 3 [pid 8972] <... mkdir resumed>) = 0 [pid 8966] <... ioctl resumed>) = 0 [pid 5080] unlink("./115/.log" [pid 8972] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8970] <... ioctl resumed>) = 0 [pid 8968] <... ioctl resumed>) = 0 [pid 8966] close(4 [pid 5080] <... unlink resumed>) = 0 [pid 8970] close(3 [pid 8968] close(4 [pid 8966] <... close resumed>) = 0 [pid 8968] <... close resumed>) = 0 [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] <... futex resumed>) = 1 [pid 8965] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8968] <... futex resumed>) = 1 [pid 8967] <... futex resumed>) = 0 [pid 8966] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5080] close(3 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8967] <... futex resumed>) = 0 [pid 8966] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 8968] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] rmdir("./115" [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8968] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 8966] <... futex resumed>) = 1 [pid 8965] <... futex resumed>) = 0 [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8968] <... futex resumed>) = 1 [pid 5080] mkdir("./116", 0777 [pid 8967] <... futex resumed>) = 0 [pid 8966] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8965] <... futex resumed>) = 0 [pid 8961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8970] <... close resumed>) = 0 [ 251.283986][ T8972] loop0: detected capacity change from 0 to 32768 [ 251.308182][ T8963] BTRFS info (device loop3): balance: start -s [ 251.316105][ T8970] loop1: detected capacity change from 0 to 32768 [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8961] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8970] mkdir("./file0", 0777 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8961] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 8972] <... mount resumed>) = -1 EEXIST (File exists) [pid 8970] <... mkdir resumed>) = 0 [pid 8968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8967] <... futex resumed>) = 0 [pid 8966] <... futex resumed>) = 1 [pid 8965] <... futex resumed>) = 0 [pid 8961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8970] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8968] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8966] openat(AT_FDCWD, ".log", O_RDONLY [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8961] <... mmap resumed>) = 0x7ff2ac333000 [pid 8965] <... futex resumed>) = 0 [pid 8961] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 8966] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 3 [pid 8972] ioctl(4, LOOP_CLR_FD [pid 8968] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8961] <... mprotect resumed>) = 0 [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8961] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] ioctl(3, LOOP_CLR_FD [pid 8965] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8968] <... futex resumed>) = 1 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] <... futex resumed>) = 0 [pid 8966] <... futex resumed>) = 0 [pid 8965] <... futex resumed>) = 0 [pid 8961] <... clone resumed>, parent_tid=[8991], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 8991 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 8965] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8961] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 8991 attached [pid 8968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8966] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8961] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(3 [pid 8991] set_robust_list(0x7ff2ac3539e0, 24 [pid 8968] openat(AT_FDCWD, ".log", O_RDONLY [pid 8967] <... futex resumed>) = 0 [pid 8966] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8991] <... set_robust_list resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 8991] openat(AT_FDCWD, ".log", O_RDONLY [pid 8968] <... openat resumed>) = 4 [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8966] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8966] <... futex resumed>) = 1 [pid 8965] <... futex resumed>) = 0 [pid 8965] exit_group(0) = ? [pid 8991] <... openat resumed>) = 5 [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8992 [pid 8966] +++ exited with 0 +++ [pid 8965] +++ exited with 0 +++ [pid 8968] <... futex resumed>) = 1 [pid 8967] <... futex resumed>) = 0 [pid 8991] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8961] <... futex resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8965, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 8991] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8967] <... futex resumed>) = 0 [pid 8961] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 8992 attached [pid 8968] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8967] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8961] <... futex resumed>) = 0 [pid 5083] <... restart_syscall resumed>) = 0 [pid 8961] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8992] set_robust_list(0x5555559d56e0, 24 [pid 8968] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8992] <... set_robust_list resumed>) = 0 [pid 8970] <... mount resumed>) = -1 EEXIST (File exists) [pid 8968] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 8970] ioctl(4, LOOP_CLR_FD [pid 8968] <... futex resumed>) = 1 [pid 8967] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8992] chdir("./116" [pid 5083] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 251.350118][ T8972] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8972) [ 251.350416][ T8963] BTRFS info (device loop3): relocating block group 1048576 flags system [ 251.374054][ T8970] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (8970) [pid 5083] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./115/binderfs") = 0 [pid 5083] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./115/file0") = 0 [pid 5083] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./115/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 8992] <... chdir resumed>) = 0 [pid 8968] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8967] exit_group(0 [pid 5083] unlink("./115/.log" [pid 8992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8968] <... futex resumed>) = ? [pid 8967] <... exit_group resumed>) = ? [pid 5083] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [pid 8992] <... prctl resumed>) = 0 [pid 8968] +++ exited with 0 +++ [pid 8967] +++ exited with 0 +++ [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./115") = 0 [pid 5083] mkdir("./116", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 8992] setpgid(0, 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8967, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=26 /* 0.26 s */} --- [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8992] <... setpgid resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8993 [pid 8992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8992] <... openat resumed>) = 3 [pid 8992] write(3, "1000", 4./strace-static-x86_64: Process 8993 attached ) = 4 [pid 5084] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8993] set_robust_list(0x5555559d56e0, 24 [pid 8992] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8993] <... set_robust_list resumed>) = 0 [pid 8992] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8993] chdir("./116" [pid 8992] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... openat resumed>) = 3 [pid 8993] <... chdir resumed>) = 0 [pid 8992] <... symlink resumed>) = 0 [pid 8993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8993] setpgid(0, 0) = 0 [pid 8993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8993] write(3, "1000", 4) = 4 [pid 8993] close(3) = 0 [pid 8993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] fstat(3, [pid 8992] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8993] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8992] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8993] <... futex resumed>) = 0 [pid 8993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] getdents64(3, [pid 8993] <... mmap resumed>) = 0x7ff2b3754000 [pid 8993] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 8992] <... mmap resumed>) = 0x7ff2b3754000 [pid 8993] <... mprotect resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8993] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8992] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8993] <... clone resumed>, parent_tid=[8994], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8994 [pid 8992] <... mprotect resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8993] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8992] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] lstat("./115/binderfs", [pid 8993] <... futex resumed>) = 0 [pid 8993] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 8994 attached [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8994] set_robust_list(0x7ff2b37749e0, 24 [pid 8992] <... clone resumed>, parent_tid=[8995], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8995 [pid 5084] unlink("./115/binderfs" [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8994] <... set_robust_list resumed>) = 0 [pid 8994] memfd_create("syzkaller", 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8994] <... memfd_create resumed>) = 3 [pid 5084] <... openat resumed>) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./115/file0") = 0 [pid 5084] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./115/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] unlink("./115/.log") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./115" [pid 8994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... rmdir resumed>) = 0 [pid 8994] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] mkdir("./116", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 251.524535][ T8991] BTRFS info (device loop3): scrub: started on devid 1 [ 251.525697][ T8963] BTRFS info (device loop3): balance: ended with status: 0 [pid 5084] close(3) = 0 ./strace-static-x86_64: Process 8995 attached [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8995] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 8995] memfd_create("syzkaller", 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8996 [pid 8995] <... memfd_create resumed>) = 3 [pid 8995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 8996 attached ) = 0x7ff2ab354000 [pid 8996] set_robust_list(0x5555559d56e0, 24) = 0 [pid 8996] chdir("./116") = 0 [pid 8996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8996] setpgid(0, 0) = 0 [pid 8996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8996] write(3, "1000", 4) = 4 [pid 8996] close(3) = 0 [pid 8996] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8963] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8963] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8963] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 251.568399][ T8991] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [pid 8996] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 8991] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 8996] <... mmap resumed>) = 0x7ff2b3754000 [pid 8996] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8991] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8996] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8991] <... futex resumed>) = 0 [pid 8961] exit_group(0 [pid 8963] <... futex resumed>) = ? [pid 8961] <... exit_group resumed>) = ? [pid 8963] +++ exited with 0 +++ [pid 8996] <... clone resumed>, parent_tid=[8997], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8997 [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8991] +++ exited with 0 +++ [pid 8961] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8961, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=34 /* 0.34 s */} --- [pid 5081] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5081] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8997 attached [pid 5081] lstat("./115/binderfs", [pid 8997] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8997] <... set_robust_list resumed>) = 0 [pid 5081] unlink("./115/binderfs" [pid 8997] memfd_create("syzkaller", 0 [pid 5081] <... unlink resumed>) = 0 [pid 8997] <... memfd_create resumed>) = 3 [pid 5081] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8972] <... ioctl resumed>) = 0 [pid 8972] close(4) = 0 [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8971] <... futex resumed>) = 0 [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8972] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8971] <... futex resumed>) = 0 [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8972] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8971] <... futex resumed>) = 0 [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8972] openat(AT_FDCWD, ".log", O_RDONLY [pid 8971] <... futex resumed>) = 0 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8972] <... openat resumed>) = 4 [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8971] <... futex resumed>) = 0 [pid 8972] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8971] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8972] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8971] <... futex resumed>) = 0 [pid 8972] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8971] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 8971] exit_group(0) = ? [pid 8972] <... futex resumed>) = ? [pid 8972] +++ exited with 0 +++ [pid 8971] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8971, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5078] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./114/binderfs") = 0 [pid 5078] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./114/file0") = 0 [pid 5078] umount2("./114/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8970] <... ioctl resumed>) = 0 [pid 5078] lstat("./114/.log", [pid 8970] close(4 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./114/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 8970] <... close resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./114") = 0 [pid 5078] mkdir("./115", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 8970] <... futex resumed>) = 1 [pid 8969] <... futex resumed>) = 0 [pid 5078] close(3 [pid 8970] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... close resumed>) = 0 [pid 8970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8969] <... futex resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8970] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 8998 [pid 8970] <... openat resumed>) = 3 [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8969] <... futex resumed>) = 0 [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8998 attached [pid 8998] set_robust_list(0x5555559d56e0, 24 [pid 8970] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8998] <... set_robust_list resumed>) = 0 [pid 8970] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8998] chdir("./115" [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] <... chdir resumed>) = 0 [pid 8970] <... futex resumed>) = 1 [pid 8969] <... futex resumed>) = 0 [pid 8998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8970] openat(AT_FDCWD, ".log", O_RDONLY [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] <... prctl resumed>) = 0 [pid 8969] <... futex resumed>) = 0 [pid 8998] setpgid(0, 0 [pid 8970] <... openat resumed>) = 4 [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8998] <... setpgid resumed>) = 0 [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8970] <... futex resumed>) = 0 [pid 8969] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] <... openat resumed>) = 3 [pid 8970] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8969] <... futex resumed>) = 0 [pid 8998] write(3, "1000", 4 [pid 8970] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8969] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8998] <... write resumed>) = 4 [pid 8970] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] close(3) = 0 [pid 8970] <... futex resumed>) = 1 [pid 8969] <... futex resumed>) = 0 [pid 8998] symlink("/dev/binderfs", "./binderfs" [pid 8970] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8969] exit_group(0 [pid 8998] <... symlink resumed>) = 0 [pid 8970] <... futex resumed>) = ? [pid 8969] <... exit_group resumed>) = ? [pid 8998] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8970] +++ exited with 0 +++ [pid 8969] +++ exited with 0 +++ [pid 8998] <... futex resumed>) = 0 [pid 8998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8969, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=25 /* 0.25 s */} --- [pid 8998] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8998] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8998] <... mprotect resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8998] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... openat resumed>) = 3 [pid 5079] fstat(3, [pid 8998] <... clone resumed>, parent_tid=[8999], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 8999 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 8998] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./115/binderfs") = 0 [pid 5079] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8999 attached [pid 5079] lstat("./115/file0", [pid 8999] set_robust_list(0x7ff2b37749e0, 24 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8999] <... set_robust_list resumed>) = 0 [pid 5079] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8999] memfd_create("syzkaller", 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8999] <... memfd_create resumed>) = 3 [pid 5079] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... openat resumed>) = 4 [pid 8999] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./115/file0") = 0 [pid 5079] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./115/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./115/.log") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./115") = 0 [pid 5079] mkdir("./116", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9000 ./strace-static-x86_64: Process 9000 attached [pid 9000] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9000] chdir("./116") = 0 [pid 9000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9000] setpgid(0, 0) = 0 [pid 9000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9000] write(3, "1000", 4) = 4 [pid 9000] close(3) = 0 [pid 9000] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9000] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9000] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9000] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9000] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9001], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9001 [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9001 attached [pid 9001] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9001] memfd_create("syzkaller", 0) = 3 [pid 9001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./115/file0") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 8995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] rmdir("./115") = 0 [pid 5081] mkdir("./116", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9002 ./strace-static-x86_64: Process 9002 attached [pid 9002] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9002] chdir("./116") = 0 [pid 9002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9002] setpgid(0, 0) = 0 [pid 9002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9002] write(3, "1000", 4) = 4 [pid 9002] close(3) = 0 [pid 9002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9002] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9002] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9003], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9003 [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9003 attached [pid 9003] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9003] memfd_create("syzkaller", 0) = 3 [pid 9003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 8997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8994] <... write resumed>) = 16777216 [pid 8994] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8994] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8994] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8994] close(3) = 0 [pid 8994] mkdir("./file0", 0777) = 0 [ 252.379046][ T8994] loop4: detected capacity change from 0 to 32768 [ 252.417311][ T8994] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (8994) [pid 8994] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 252.473630][ T8994] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 252.504734][ T8994] BTRFS info (device loop4): setting nodatasum [pid 9003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 8995] <... write resumed>) = 16777216 [pid 8995] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 252.535312][ T8994] BTRFS info (device loop4): allowing degraded mounts [ 252.542204][ T8994] BTRFS info (device loop4): use zlib compression, level 3 [ 252.553068][ T8994] BTRFS info (device loop4): using free space tree [pid 8995] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8995] close(3) = 0 [pid 8995] mkdir("./file0", 0777) = 0 [pid 8995] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8997] <... write resumed>) = 16777216 [pid 8997] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8997] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 8997] ioctl(4, LOOP_SET_FD, 3 [pid 8995] <... mount resumed>) = -1 EEXIST (File exists) [ 252.581438][ T8995] loop2: detected capacity change from 0 to 32768 [ 252.599377][ T8995] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (8995) [pid 8995] ioctl(4, LOOP_CLR_FD [pid 8997] <... ioctl resumed>) = 0 [pid 8997] close(3) = 0 [pid 8997] mkdir("./file0", 0777) = 0 [ 252.626225][ T8997] loop5: detected capacity change from 0 to 32768 [pid 8997] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9001] <... write resumed>) = 16777216 [pid 9001] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9001] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9001] ioctl(4, LOOP_SET_FD, 3 [pid 8997] <... mount resumed>) = -1 EEXIST (File exists) [pid 8997] ioctl(4, LOOP_CLR_FD [pid 9001] <... ioctl resumed>) = 0 [pid 9001] close(3) = 0 [pid 9001] mkdir("./file0", 0777) = 0 [ 252.656049][ T8997] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (8997) [ 252.690001][ T9001] loop1: detected capacity change from 0 to 32768 [pid 9001] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8999] <... write resumed>) = 16777216 [pid 8999] munmap(0x7ff2ab354000, 16777216) = 0 [pid 8999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8999] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8999] close(3) = 0 [pid 8999] mkdir("./file0", 0777) = 0 [pid 8999] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9001] <... mount resumed>) = -1 EEXIST (File exists) [pid 9001] ioctl(4, LOOP_CLR_FD [pid 8999] <... mount resumed>) = -1 EEXIST (File exists) [ 252.724947][ T9001] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9001) [ 252.736812][ T8999] loop0: detected capacity change from 0 to 32768 [ 252.750972][ T8999] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (8999) [pid 8999] ioctl(4, LOOP_CLR_FD [pid 8995] <... ioctl resumed>) = 0 [pid 8995] close(4) = 0 [ 252.797185][ T8994] BTRFS info (device loop4): enabling ssd optimizations [ 252.810713][ T8994] BTRFS info (device loop4): auto enabling async discard [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8992] <... futex resumed>) = 0 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8992] <... futex resumed>) = 0 [pid 8995] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8995] <... openat resumed>) = 3 [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8992] <... futex resumed>) = 0 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8992] <... futex resumed>) = 0 [pid 8997] <... ioctl resumed>) = 0 [pid 8995] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] close(4 [pid 8995] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8997] <... close resumed>) = 0 [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = 1 [pid 8992] <... futex resumed>) = 0 [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8992] <... futex resumed>) = 0 [pid 8997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8996] <... futex resumed>) = 0 [pid 8995] openat(AT_FDCWD, ".log", O_RDONLY [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] <... openat resumed>) = 3 [pid 8995] <... openat resumed>) = 4 [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8995] <... futex resumed>) = 1 [pid 8994] <... mount resumed>) = 0 [pid 8992] <... futex resumed>) = 0 [pid 8999] <... ioctl resumed>) = 0 [pid 8997] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8994] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8992] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8999] close(4 [pid 8997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8996] <... futex resumed>) = 0 [pid 8995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8994] <... openat resumed>) = 3 [pid 8992] <... futex resumed>) = 0 [pid 8999] <... close resumed>) = 0 [pid 8997] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8995] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8994] chdir("./file0" [pid 8992] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8995] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8994] <... chdir resumed>) = 0 [pid 8994] ioctl(4, LOOP_CLR_FD [pid 8999] <... futex resumed>) = 1 [pid 8995] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8999] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = 1 [pid 8994] <... ioctl resumed>) = 0 [pid 8992] <... futex resumed>) = 0 [pid 8998] <... futex resumed>) = 0 [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8995] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8994] close(4 [ 252.899016][ T8994] BTRFS info (device loop4): checking UUID tree [ 252.921035][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 252.921047][ T27] audit: type=1804 audit(1680236936.392:697): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/116/.log" dev="sda1" ino=1161 res=1 errno=0 [pid 8992] exit_group(0 [pid 8999] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8997] openat(AT_FDCWD, ".log", O_RDONLY [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8995] <... futex resumed>) = ? [pid 8994] <... close resumed>) = 0 [pid 8992] <... exit_group resumed>) = ? [pid 8999] <... openat resumed>) = 3 [pid 8996] <... futex resumed>) = 0 [pid 8997] <... openat resumed>) = 4 [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8995] +++ exited with 0 +++ [pid 8992] +++ exited with 0 +++ [pid 8994] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8992, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 8999] <... futex resumed>) = 1 [pid 8998] <... futex resumed>) = 0 [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8994] <... futex resumed>) = 1 [pid 8993] <... futex resumed>) = 0 [pid 8999] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8994] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8993] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 8999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8998] <... futex resumed>) = 0 [pid 8997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8996] <... futex resumed>) = 0 [pid 8994] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8993] <... futex resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 8999] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8996] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8994] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 8993] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8999] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8994] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 3 [pid 5080] fstat(3, [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8994] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 8999] <... futex resumed>) = 1 [pid 8998] <... futex resumed>) = 0 [pid 8997] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8994] <... futex resumed>) = 1 [pid 8993] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 8999] openat(AT_FDCWD, ".log", O_RDONLY [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... futex resumed>) = 1 [pid 8996] <... futex resumed>) = 0 [pid 8994] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8993] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 8998] <... futex resumed>) = 0 [pid 5080] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8999] <... openat resumed>) = 4 [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8997] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8996] exit_group(0 [pid 8994] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8993] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8997] <... futex resumed>) = ? [pid 8996] <... exit_group resumed>) = ? [pid 8994] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8993] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] lstat("./116/binderfs", [pid 8999] <... futex resumed>) = 1 [pid 8998] <... futex resumed>) = 0 [ 252.979538][ T27] audit: type=1804 audit(1680236936.452:698): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/116/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 8997] +++ exited with 0 +++ [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 8999] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8998] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 8996] +++ exited with 0 +++ [pid 5080] unlink("./116/binderfs") = 0 [pid 5080] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./116/file0") = 0 [pid 5080] umount2("./116/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./116/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./116/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 8999] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 8998] <... futex resumed>) = 0 [pid 5080] rmdir("./116" [pid 8999] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8998] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8996, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./117", 0777 [pid 8999] <... futex resumed>) = 0 [pid 8998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8999] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8998] exit_group(0 [pid 5080] <... openat resumed>) = 3 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8999] <... futex resumed>) = ? [pid 8998] <... exit_group resumed>) = ? [pid 8999] +++ exited with 0 +++ [pid 8998] +++ exited with 0 +++ [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9021 [pid 5084] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8998, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=24 /* 0.24 s */} --- [pid 5084] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9021 attached [pid 5084] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9021] set_robust_list(0x5555559d56e0, 24 [pid 5084] fstat(3, [pid 5078] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9021] <... set_robust_list resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9021] chdir("./117" [pid 5084] getdents64(3, [pid 5078] fstat(3, [pid 9021] <... chdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 9021] <... prctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9021] setpgid(0, 0 [pid 8993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] lstat("./116/binderfs", [pid 5078] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9021] <... setpgid resumed>) = 0 [pid 8993] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8993] <... futex resumed>) = 0 [pid 5084] unlink("./116/binderfs" [pid 5078] lstat("./115/binderfs", [pid 9021] <... openat resumed>) = 3 [pid 8993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... unlink resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9021] write(3, "1000", 4 [pid 5078] unlink("./115/binderfs" [pid 9021] <... write resumed>) = 4 [pid 8993] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [ 253.032680][ T8994] BTRFS info (device loop4): balance: start -s [ 253.045584][ T8994] BTRFS info (device loop4): relocating block group 1048576 flags system [pid 9021] close(3 [pid 8993] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9021] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9021] symlink("/dev/binderfs", "./binderfs" [pid 8993] <... mprotect resumed>) = 0 [pid 5084] lstat("./116/file0", [pid 5078] lstat("./115/file0", [pid 9021] <... symlink resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9021] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9021] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9021] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9021] <... mmap resumed>) = 0x7ff2b3754000 [pid 8993] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... openat resumed>) = 4 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9021] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5078] fstat(4, ./strace-static-x86_64: Process 9022 attached [pid 9021] <... mprotect resumed>) = 0 [pid 8993] <... clone resumed>, parent_tid=[9022], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9022 [pid 5084] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9022] set_robust_list(0x7ff2ac3539e0, 24 [pid 9021] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8993] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9021] <... clone resumed>, parent_tid=[9024], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9024 [pid 5078] getdents64(4, [pid 9022] <... set_robust_list resumed>) = 0 [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9001] <... ioctl resumed>) = 0 [pid 8993] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9021] <... futex resumed>) = 0 [pid 5078] close(4 [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./115/file0" [pid 9022] openat(AT_FDCWD, ".log", O_RDONLY [pid 8993] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9024 attached [pid 5084] <... openat resumed>) = 4 [pid 5078] umount2("./115/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9024] set_robust_list(0x7ff2b37749e0, 24 [pid 9022] <... openat resumed>) = 5 [pid 8994] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] fstat(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9024] <... set_robust_list resumed>) = 0 [pid 5078] lstat("./115/.log", [pid 9024] memfd_create("syzkaller", 0 [pid 9022] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 8994] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9024] <... memfd_create resumed>) = 3 [pid 5078] unlink("./115/.log" [pid 9024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9022] <... futex resumed>) = 1 [pid 8994] <... futex resumed>) = 0 [pid 8993] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 5078] <... unlink resumed>) = 0 [pid 9024] <... mmap resumed>) = 0x7ff2ab354000 [ 253.085256][ T27] audit: type=1804 audit(1680236936.492:699): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/115/.log" dev="sda1" ino=1163 res=1 errno=0 [ 253.097150][ T8994] BTRFS info (device loop4): balance: ended with status: 0 [pid 9022] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9001] close(4 [pid 8994] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8993] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(3, [pid 9003] <... write resumed>) = 16777216 [pid 9001] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 9001] <... futex resumed>) = 1 [pid 9000] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9001] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] rmdir("./115" [pid 9001] <... openat resumed>) = 3 [pid 9000] <... futex resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] mkdir("./116", 0777 [pid 9001] <... futex resumed>) = 0 [pid 9000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... mkdir resumed>) = 0 [pid 9001] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9001] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9000] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9001] <... futex resumed>) = 0 [pid 9000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9001] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 9001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9000] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9001] openat(AT_FDCWD, ".log", O_RDONLY [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9001] <... openat resumed>) = 4 [pid 8994] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8993] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9025 [pid 9001] <... futex resumed>) = 1 [pid 9000] <... futex resumed>) = 0 [pid 9001] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9000] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9000] <... futex resumed>) = 0 [pid 9001] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9000] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9001] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9001] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9000] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9025 attached [pid 9001] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9000] exit_group(0 [pid 9025] set_robust_list(0x5555559d56e0, 24 [pid 9001] <... futex resumed>) = ? [pid 9000] <... exit_group resumed>) = ? [pid 9025] <... set_robust_list resumed>) = 0 [pid 9001] +++ exited with 0 +++ [pid 9000] +++ exited with 0 +++ [pid 9025] chdir("./116" [pid 9003] munmap(0x7ff2ab354000, 16777216 [pid 8994] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 8993] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9000, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 9025] <... chdir resumed>) = 0 [ 253.160982][ T27] audit: type=1804 audit(1680236936.622:700): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/116/file0/.log" dev="loop4" ino=263 res=1 errno=0 [pid 9025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9025] setpgid(0, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9025] <... setpgid resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9003] <... munmap resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 9025] <... openat resumed>) = 3 [pid 5079] fstat(3, [pid 9025] write(3, "1000", 4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9025] <... write resumed>) = 4 [pid 5079] getdents64(3, [pid 9025] close(3 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9025] <... close resumed>) = 0 [pid 5079] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9025] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9025] <... symlink resumed>) = 0 [pid 5079] lstat("./116/binderfs", [pid 9025] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9025] <... futex resumed>) = 0 [pid 5079] unlink("./116/binderfs" [pid 9025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... unlink resumed>) = 0 [pid 9025] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9025] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9025] <... mprotect resumed>) = 0 [pid 5079] lstat("./116/file0", [pid 9025] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9025] <... clone resumed>, parent_tid=[9026], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9026 [pid 5084] close(4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9025] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9003] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5084] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9025] <... futex resumed>) = 0 [pid 5084] rmdir("./116/file0" [pid 5079] <... openat resumed>) = 4 [pid 9025] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9003] <... openat resumed>) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9026 attached [pid 9003] ioctl(4, LOOP_SET_FD, 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 9026] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] umount2("./116/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9026] <... set_robust_list resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 9026] memfd_create("syzkaller", 0 [pid 5084] lstat("./116/.log", [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9026] <... memfd_create resumed>) = 3 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] close(4 [pid 9026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] unlink("./116/.log" [pid 5079] <... close resumed>) = 0 [pid 9026] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] <... unlink resumed>) = 0 [pid 5079] rmdir("./116/file0" [pid 9003] <... ioctl resumed>) = 0 [pid 5084] getdents64(3, [pid 5079] <... rmdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] umount2("./116/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./116/.log", [pid 9003] close(3 [pid 5084] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9003] <... close resumed>) = 0 [pid 5084] rmdir("./116" [pid 5079] unlink("./116/.log") = 0 [pid 5079] getdents64(3, [pid 9003] mkdir("./file0", 0777 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5084] <... rmdir resumed>) = 0 [ 253.211650][ T8994] BTRFS info (device loop4): scrub: started on devid 1 [ 253.222474][ T9003] loop3: detected capacity change from 0 to 32768 [ 253.239098][ T8994] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 5079] rmdir("./116" [pid 9003] <... mkdir resumed>) = 0 [pid 8994] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5084] mkdir("./117", 0777 [pid 5079] <... rmdir resumed>) = 0 [pid 5079] mkdir("./117", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9027 ./strace-static-x86_64: Process 9027 attached [pid 9027] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9027] chdir("./117") = 0 [pid 9027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9027] setpgid(0, 0) = 0 [pid 9027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9027] write(3, "1000", 4) = 4 [pid 9027] close(3) = 0 [pid 9027] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9027] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9003] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 8994] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mkdir resumed>) = 0 [pid 9027] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9027] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9027] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 8993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9027] <... clone resumed>, parent_tid=[9028], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9028 [pid 8994] <... futex resumed>) = 0 [pid 8993] exit_group(0 [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9022] <... futex resumed>) = ? [pid 8993] <... exit_group resumed>) = ? [pid 9027] <... futex resumed>) = 0 [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9028 attached [pid 9028] set_robust_list(0x7ff2b37749e0, 24 [pid 9022] +++ exited with 0 +++ [pid 9028] <... set_robust_list resumed>) = 0 [pid 8994] +++ exited with 0 +++ [pid 9028] memfd_create("syzkaller", 0 [pid 8993] +++ exited with 0 +++ [pid 9028] <... memfd_create resumed>) = 3 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8993, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 9028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5084] <... openat resumed>) = 3 [pid 9003] <... mount resumed>) = -1 EEXIST (File exists) [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9003] ioctl(4, LOOP_CLR_FD [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] close(3 [pid 5083] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5084] <... close resumed>) = 0 [pid 5083] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./116/binderfs") = 0 [pid 5083] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9029 [ 253.259050][ T27] audit: type=1804 audit(1680236936.662:701): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/116/.log" dev="sda1" ino=1152 res=1 errno=0 [ 253.287036][ T9003] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9003) ./strace-static-x86_64: Process 9029 attached [pid 9029] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9029] chdir("./117") = 0 [pid 9029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9029] setpgid(0, 0) = 0 [pid 9029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9029] write(3, "1000", 4) = 4 [pid 9029] close(3) = 0 [pid 9029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9029] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9029] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9029] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9030], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9030 [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9030 attached [pid 9030] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9030] memfd_create("syzkaller", 0) = 3 [pid 9030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5083] <... umount2 resumed>) = 0 [pid 5083] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./116/file0") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./116") = 0 [pid 5083] mkdir("./117", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9031 ./strace-static-x86_64: Process 9031 attached [pid 9031] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9031] chdir("./117") = 0 [pid 9031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9031] setpgid(0, 0) = 0 [pid 9031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9031] write(3, "1000", 4) = 4 [pid 9031] close(3) = 0 [pid 9031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9031] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9031] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9031] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9032], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9032 [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9032 attached [pid 9032] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9032] memfd_create("syzkaller", 0) = 3 [pid 9032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9003] <... ioctl resumed>) = 0 [pid 9003] close(4) = 0 [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9002] <... futex resumed>) = 0 [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9003] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9002] <... futex resumed>) = 0 [pid 9003] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9003] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9002] <... futex resumed>) = 0 [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9003] <... futex resumed>) = 0 [pid 9002] <... futex resumed>) = 0 [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9003] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9002] <... futex resumed>) = 0 [pid 9003] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 9002] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9003] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9002] <... futex resumed>) = 0 [ 253.687215][ T27] audit: type=1804 audit(1680236937.162:702): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/116/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 9003] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9002] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9003] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9003] <... futex resumed>) = 0 [pid 9002] exit_group(0 [pid 9003] ???() = ? [pid 9002] <... exit_group resumed>) = ? [pid 9003] +++ exited with 0 +++ [pid 9002] +++ exited with 0 +++ [pid 9028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9002, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5081] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./116/binderfs") = 0 [pid 5081] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./116/file0") = 0 [pid 5081] umount2("./116/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./116/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./116/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./116") = 0 [pid 5081] mkdir("./117", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9033 ./strace-static-x86_64: Process 9033 attached [pid 9033] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9033] chdir("./117") = 0 [pid 9033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9033] setpgid(0, 0) = 0 [pid 9033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9033] write(3, "1000", 4) = 4 [pid 9033] close(3) = 0 [pid 9033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9033] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9033] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9033] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9033] <... clone resumed>, parent_tid=[9034], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9034 [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 9034 attached [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9034] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9034] memfd_create("syzkaller", 0) = 3 [pid 9034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9026] <... write resumed>) = 16777216 [pid 9024] <... write resumed>) = 16777216 [pid 9024] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9024] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9024] ioctl(4, LOOP_SET_FD, 3 [pid 9026] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9024] <... ioctl resumed>) = 0 [pid 9026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9026] close(3) = 0 [pid 9026] mkdir("./file0", 0777 [pid 9024] close(3) = 0 [pid 9024] mkdir("./file0", 0777 [pid 9026] <... mkdir resumed>) = 0 [pid 9026] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9024] <... mkdir resumed>) = 0 [ 254.187165][ T9024] loop2: detected capacity change from 0 to 32768 [ 254.195941][ T9026] loop0: detected capacity change from 0 to 32768 [pid 9034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9024] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9028] <... write resumed>) = 16777216 [pid 9028] munmap(0x7ff2ab354000, 16777216 [pid 9024] <... mount resumed>) = -1 EEXIST (File exists) [ 254.225487][ T9026] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor373 (9026) [ 254.257033][ T9024] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9024) [ 254.275798][ T9026] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9024] ioctl(4, LOOP_CLR_FD [pid 9028] <... munmap resumed>) = 0 [pid 9028] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9028] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9028] close(3) = 0 [pid 9028] mkdir("./file0", 0777) = 0 [pid 9028] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9030] <... write resumed>) = 16777216 [pid 9030] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9030] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 254.296560][ T9026] BTRFS info (device loop0): setting nodatasum [ 254.304932][ T9028] loop1: detected capacity change from 0 to 32768 [ 254.322061][ T9028] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9028) [ 254.322227][ T9026] BTRFS info (device loop0): allowing degraded mounts [pid 9030] ioctl(4, LOOP_SET_FD, 3 [pid 9028] <... mount resumed>) = -1 EEXIST (File exists) [pid 9028] ioctl(4, LOOP_CLR_FD [pid 9030] <... ioctl resumed>) = 0 [pid 9030] close(3) = 0 [pid 9030] mkdir("./file0", 0777) = 0 [pid 9032] <... write resumed>) = 16777216 [ 254.359554][ T9030] loop5: detected capacity change from 0 to 32768 [ 254.396739][ T9030] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9030) [pid 9030] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9030] ioctl(4, LOOP_CLR_FD [pid 9032] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9032] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9032] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9032] close(3) = 0 [pid 9032] mkdir("./file0", 0777) = 0 [ 254.407948][ T9026] BTRFS info (device loop0): use zlib compression, level 3 [ 254.429209][ T9026] BTRFS info (device loop0): using free space tree [ 254.441977][ T9032] loop4: detected capacity change from 0 to 32768 [pid 9032] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 254.481615][ T9032] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9032) [pid 9032] ioctl(4, LOOP_CLR_FD [pid 9028] <... ioctl resumed>) = 0 [pid 9024] <... ioctl resumed>) = 0 [pid 9028] close(4 [pid 9030] <... ioctl resumed>) = 0 [pid 9028] <... close resumed>) = 0 [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9028] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9028] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9027] <... futex resumed>) = 0 [pid 9028] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9028] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] close(4 [pid 9028] <... futex resumed>) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9024] close(4 [pid 9030] <... close resumed>) = 0 [pid 9028] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9027] <... futex resumed>) = 0 [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 9028] openat(AT_FDCWD, ".log", O_RDONLY [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... openat resumed>) = 4 [pid 9030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9029] <... futex resumed>) = 0 [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9028] <... futex resumed>) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9030] <... openat resumed>) = 3 [pid 9028] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9027] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9027] <... futex resumed>) = 0 [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 9028] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9027] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9029] <... futex resumed>) = 0 [pid 9028] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9028] <... futex resumed>) = 1 [pid 9027] <... futex resumed>) = 0 [pid 9030] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9028] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9027] exit_group(0 [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9028] <... futex resumed>) = ? [pid 9027] <... exit_group resumed>) = ? [pid 9024] <... close resumed>) = 0 [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 9028] +++ exited with 0 +++ [pid 9027] +++ exited with 0 +++ [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9029] <... futex resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9027, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 9030] openat(AT_FDCWD, ".log", O_RDONLY [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9030] <... openat resumed>) = 4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] fstat(3, [pid 9030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9029] <... futex resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9030] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9029] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] getdents64(3, [pid 9030] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9030] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9030] <... futex resumed>) = 1 [pid 9029] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9030] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9029] exit_group(0 [pid 5079] lstat("./117/binderfs", [pid 9030] <... futex resumed>) = ? [pid 9029] <... exit_group resumed>) = ? [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9030] +++ exited with 0 +++ [pid 9029] +++ exited with 0 +++ [pid 5079] unlink("./117/binderfs") = 0 [pid 5079] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./117/file0") = 0 [pid 5079] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./117/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./117/.log") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./117" [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... rmdir resumed>) = 0 [pid 9024] <... futex resumed>) = 1 [pid 9021] <... futex resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9029, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 5079] mkdir("./118", 0777 [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9021] <... futex resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 9024] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9024] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 3 [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9024] <... futex resumed>) = 1 [pid 9021] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(3, [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9021] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] close(3 [pid 9024] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(3, [pid 5079] <... close resumed>) = 0 [pid 9024] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9024] <... futex resumed>) = 1 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 254.634782][ T27] audit: type=1804 audit(1680236938.102:703): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/117/.log" dev="sda1" ino=1161 res=1 errno=0 [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] lstat("./117/binderfs", [pid 9021] <... futex resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./117/binderfs" [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9048 ./strace-static-x86_64: Process 9048 attached [pid 9024] <... futex resumed>) = 0 [pid 9021] <... futex resumed>) = 1 [pid 5084] <... unlink resumed>) = 0 [pid 9048] set_robust_list(0x5555559d56e0, 24 [pid 9024] openat(AT_FDCWD, ".log", O_RDONLY [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9048] <... set_robust_list resumed>) = 0 [pid 9024] <... openat resumed>) = 4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9048] chdir("./118" [pid 9032] <... ioctl resumed>) = 0 [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./117/file0", [pid 9024] <... futex resumed>) = 1 [pid 9021] <... futex resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9021] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9048] <... chdir resumed>) = 0 [pid 9024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9021] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9032] close(4 [pid 9024] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9021] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9024] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... openat resumed>) = 4 [pid 9024] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(4, [pid 9024] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9024] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./117/file0") = 0 [pid 5084] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9048] <... prctl resumed>) = 0 [pid 9032] <... close resumed>) = 0 [pid 9021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9048] setpgid(0, 0 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9021] exit_group(0 [pid 5084] lstat("./117/.log", [pid 9048] <... setpgid resumed>) = 0 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [pid 9024] <... futex resumed>) = ? [pid 9021] <... exit_group resumed>) = ? [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... openat resumed>) = 3 [pid 9032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9031] <... futex resumed>) = 0 [pid 9048] write(3, "1000", 4 [pid 9032] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9048] <... write resumed>) = 4 [pid 9032] <... openat resumed>) = 3 [pid 9048] close(3 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... close resumed>) = 0 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [pid 9048] symlink("/dev/binderfs", "./binderfs" [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... symlink resumed>) = 0 [pid 9032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9031] <... futex resumed>) = 0 [pid 9048] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9032] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9024] +++ exited with 0 +++ [pid 9021] +++ exited with 0 +++ [pid 5084] unlink("./117/.log" [pid 9048] <... futex resumed>) = 0 [pid 9032] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9021, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 9048] <... mmap resumed>) = 0x7ff2b3754000 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [pid 5080] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9048] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9048] <... mprotect resumed>) = 0 [pid 9032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9031] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9048] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9032] openat(AT_FDCWD, ".log", O_RDONLY [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 9034] <... write resumed>) = 16777216 [pid 9032] <... openat resumed>) = 4 [pid 5080] fstat(3, ./strace-static-x86_64: Process 9053 attached [pid 9048] <... clone resumed>, parent_tid=[9053], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9053 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9053] set_robust_list(0x7ff2b37749e0, 24 [pid 9048] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [ 254.717142][ T9026] BTRFS info (device loop0): enabling ssd optimizations [ 254.724128][ T9026] BTRFS info (device loop0): auto enabling async discard [ 254.733805][ T9026] BTRFS info (device loop0): checking UUID tree [ 254.742288][ T27] audit: type=1804 audit(1680236938.102:704): pid=9030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/117/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5084] getdents64(3, [pid 5080] getdents64(3, [pid 9053] <... set_robust_list resumed>) = 0 [pid 9048] <... futex resumed>) = 0 [pid 9034] munmap(0x7ff2ab354000, 16777216 [pid 9026] <... mount resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9053] memfd_create("syzkaller", 0 [pid 9026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] close(3 [pid 9053] <... memfd_create resumed>) = 3 [pid 9026] <... openat resumed>) = 3 [pid 5084] <... close resumed>) = 0 [pid 9053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9026] chdir("./file0" [pid 5084] rmdir("./117" [pid 9053] <... mmap resumed>) = 0x7ff2ab354000 [pid 9026] <... chdir resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 9048] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9026] ioctl(4, LOOP_CLR_FD [pid 5084] mkdir("./118", 0777 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9034] <... munmap resumed>) = 0 [pid 9032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9031] <... futex resumed>) = 0 [pid 9026] <... ioctl resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5080] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9034] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9032] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9031] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9026] close(4 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9034] <... openat resumed>) = 4 [pid 9032] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9026] <... close resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 9026] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9034] ioctl(4, LOOP_SET_FD, 3 [pid 9032] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9026] <... futex resumed>) = 1 [pid 9025] <... futex resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] lstat("./117/binderfs", [pid 9026] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9054 [ 254.772316][ T27] audit: type=1804 audit(1680236938.172:705): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/117/.log" dev="sda1" ino=1150 res=1 errno=0 [ 254.803978][ T9034] loop3: detected capacity change from 0 to 32768 [pid 9032] <... futex resumed>) = 1 [pid 9031] <... futex resumed>) = 0 [pid 9025] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9032] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9031] exit_group(0 [pid 9025] <... futex resumed>) = 1 [pid 5080] unlink("./117/binderfs" [pid 9032] <... futex resumed>) = ? [pid 9031] <... exit_group resumed>) = ? [pid 9025] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9026] <... futex resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 9026] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9032] +++ exited with 0 +++ [pid 9031] +++ exited with 0 +++ [pid 5080] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./117/file0", [pid 9026] <... openat resumed>) = 4 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9031, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9026] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9026] <... futex resumed>) = 1 [pid 9025] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9034] <... ioctl resumed>) = 0 [pid 9026] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9025] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 9054 attached [pid 9034] close(3 [pid 9025] <... futex resumed>) = 0 [pid 9034] <... close resumed>) = 0 [pid 9025] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9054] set_robust_list(0x5555559d56e0, 24 [pid 5080] <... openat resumed>) = 4 [pid 9034] mkdir("./file0", 0777 [pid 5080] fstat(4, [pid 9054] <... set_robust_list resumed>) = 0 [pid 5083] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9054] chdir("./118" [pid 9034] <... mkdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(4, [pid 9054] <... chdir resumed>) = 0 [pid 9034] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5083] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 254.808747][ T27] audit: type=1804 audit(1680236938.222:706): pid=9032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/117/.log" dev="sda1" ino=1156 res=1 errno=0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9054] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] unlink("./117/binderfs" [pid 5080] getdents64(4, [pid 5083] <... unlink resumed>) = 0 [pid 9054] <... prctl resumed>) = 0 [pid 5083] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9054] setpgid(0, 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(4 [pid 9054] <... setpgid resumed>) = 0 [pid 5083] lstat("./117/file0", [pid 5080] <... close resumed>) = 0 [pid 9054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] rmdir("./117/file0" [pid 9054] <... openat resumed>) = 3 [pid 5083] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9054] write(3, "1000", 4 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 9054] <... write resumed>) = 4 [pid 5083] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9054] close(3 [pid 5083] getdents64(4, [pid 5080] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9054] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9054] symlink("/dev/binderfs", "./binderfs" [pid 9025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] getdents64(4, [pid 5080] lstat("./117/.log", [pid 9054] <... symlink resumed>) = 0 [pid 9025] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9054] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9025] <... futex resumed>) = 0 [pid 5083] close(4 [pid 5080] unlink("./117/.log" [pid 9054] <... futex resumed>) = 0 [pid 9025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... close resumed>) = 0 [pid 9054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9034] <... mount resumed>) = -1 EEXIST (File exists) [pid 9025] <... mmap resumed>) = 0x7ff2ac333000 [pid 5083] rmdir("./117/file0" [pid 5080] <... unlink resumed>) = 0 [pid 9054] <... mmap resumed>) = 0x7ff2b3754000 [pid 9034] ioctl(4, LOOP_CLR_FD [pid 9025] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 9054] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9025] <... mprotect resumed>) = 0 [pid 5083] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9054] <... mprotect resumed>) = 0 [pid 9025] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(3 [pid 9054] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] lstat("./117/.log", [pid 5080] <... close resumed>) = 0 [pid 9025] <... clone resumed>, parent_tid=[9056], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9056 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] rmdir("./117" [pid 9054] <... clone resumed>, parent_tid=[9057], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9057 [pid 9025] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./117/.log" [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9025] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9057 attached [pid 9054] <... futex resumed>) = 0 [pid 9025] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] getdents64(3, [pid 5080] mkdir("./118", 0777 [pid 9057] set_robust_list(0x7ff2b37749e0, 24 [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 9057] <... set_robust_list resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 9056 attached [pid 5083] rmdir("./117" [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9057] memfd_create("syzkaller", 0 [pid 9056] set_robust_list(0x7ff2ac3539e0, 24 [pid 5083] <... rmdir resumed>) = 0 [pid 9057] <... memfd_create resumed>) = 3 [pid 9056] <... set_robust_list resumed>) = 0 [pid 5083] mkdir("./118", 0777 [pid 5080] <... openat resumed>) = 3 [pid 9057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9056] openat(AT_FDCWD, ".log", O_RDONLY [pid 5083] <... mkdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9057] <... mmap resumed>) = 0x7ff2ab354000 [pid 9056] <... openat resumed>) = 5 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9056] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 5080] close(3 [pid 9056] <... futex resumed>) = 1 [pid 9025] <... futex resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 9056] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9058 ./strace-static-x86_64: Process 9058 attached [pid 9025] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9056] <... futex resumed>) = 0 [pid 9025] <... futex resumed>) = 1 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9056] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 254.866297][ T9034] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9034) [ 254.871892][ T9026] BTRFS info (device loop0): balance: start -s [ 254.903766][ T9026] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 9025] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9059 [pid 9058] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9058] chdir("./118") = 0 [pid 9058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9058] setpgid(0, 0) = 0 [pid 9058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9058] write(3, "1000", 4./strace-static-x86_64: Process 9059 attached ) = 4 [pid 9058] close(3) = 0 [pid 9059] set_robust_list(0x5555559d56e0, 24 [pid 9058] symlink("/dev/binderfs", "./binderfs" [pid 9059] <... set_robust_list resumed>) = 0 [pid 9058] <... symlink resumed>) = 0 [pid 9058] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9058] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9059] chdir("./118" [pid 9058] <... mprotect resumed>) = 0 [pid 9058] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9059] <... chdir resumed>) = 0 [pid 9058] <... clone resumed>, parent_tid=[9060], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9060 [pid 9059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9059] <... prctl resumed>) = 0 [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9059] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 9060 attached [pid 9059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9059] write(3, "1000", 4 [pid 9060] set_robust_list(0x7ff2b37749e0, 24 [pid 9059] <... write resumed>) = 4 [pid 9060] <... set_robust_list resumed>) = 0 [pid 9059] close(3 [pid 9060] memfd_create("syzkaller", 0) = 3 [pid 9059] <... close resumed>) = 0 [pid 9060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9059] symlink("/dev/binderfs", "./binderfs" [pid 9060] <... mmap resumed>) = 0x7ff2ab354000 [pid 9059] <... symlink resumed>) = 0 [pid 9059] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9059] <... futex resumed>) = 0 [pid 9059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9059] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9059] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9061], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9061 [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9061 attached [pid 9061] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9061] memfd_create("syzkaller", 0) = 3 [pid 9061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 254.994143][ T9056] BTRFS info (device loop0): scrub: started on devid 1 [ 255.008868][ T9026] BTRFS info (device loop0): balance: ended with status: 0 [ 255.021191][ T9056] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [pid 9056] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9056] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9056] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9026] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9026] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9026] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9025] exit_group(0 [pid 9056] <... futex resumed>) = ? [pid 9026] <... futex resumed>) = ? [pid 9025] <... exit_group resumed>) = ? [pid 9056] +++ exited with 0 +++ [pid 9026] +++ exited with 0 +++ [pid 9025] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9025, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=29 /* 0.29 s */} --- [pid 5078] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./116/binderfs") = 0 [pid 5078] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5078] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./116/file0") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./116" [pid 9053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./117", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = 0 [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9062 ./strace-static-x86_64: Process 9062 attached [pid 9062] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9062] chdir("./117") = 0 [pid 9062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9062] setpgid(0, 0) = 0 [pid 9062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9062] write(3, "1000", 4) = 4 [pid 9062] close(3) = 0 [pid 9062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9062] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9062] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9062] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9063], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9063 [pid 9034] <... ioctl resumed>) = 0 [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9034] close(4./strace-static-x86_64: Process 9063 attached [pid 9063] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9063] memfd_create("syzkaller", 0) = 3 [pid 9034] <... close resumed>) = 0 [pid 9063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9063] <... mmap resumed>) = 0x7ff2ab354000 [pid 9034] <... futex resumed>) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9033] <... futex resumed>) = 0 [pid 9034] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9034] <... openat resumed>) = 3 [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9033] <... futex resumed>) = 0 [pid 9034] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9034] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9033] <... futex resumed>) = 0 [pid 9034] openat(AT_FDCWD, ".log", O_RDONLY [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9034] <... openat resumed>) = 4 [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9033] <... futex resumed>) = 0 [pid 9034] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9033] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9034] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9034] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9033] <... futex resumed>) = 0 [pid 9034] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9033] exit_group(0 [pid 9034] <... futex resumed>) = ? [pid 9033] <... exit_group resumed>) = ? [pid 9034] +++ exited with 0 +++ [pid 9033] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9033, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./117/binderfs") = 0 [pid 5081] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4 [pid 9057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./117/file0") = 0 [pid 5081] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./117/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./117/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./117") = 0 [pid 5081] mkdir("./118", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9064 ./strace-static-x86_64: Process 9064 attached [pid 9064] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9064] chdir("./118") = 0 [pid 9064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9064] setpgid(0, 0) = 0 [pid 9064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9064] write(3, "1000", 4) = 4 [pid 9064] close(3) = 0 [pid 9064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9064] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9064] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9064] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9065], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9065 [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9065 attached [pid 9065] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9065] memfd_create("syzkaller", 0 [pid 9060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9065] <... memfd_create resumed>) = 3 [pid 9065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [ 255.516756][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.523065][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [pid 9061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9053] <... write resumed>) = 16777216 [pid 9053] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9053] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9053] close(3) = 0 [pid 9053] mkdir("./file0", 0777) = 0 [ 255.816627][ T9053] loop1: detected capacity change from 0 to 32768 [ 255.841471][ T9053] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (9053) [pid 9053] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9057] <... write resumed>) = 16777216 [pid 9057] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9057] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9057] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9057] close(3) = 0 [pid 9057] mkdir("./file0", 0777) = 0 [ 255.987509][ T9057] loop5: detected capacity change from 0 to 32768 [ 255.994567][ T9053] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 256.018698][ T9053] BTRFS info (device loop1): setting nodatasum [pid 9057] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9060] <... write resumed>) = 16777216 [ 256.035337][ T9053] BTRFS info (device loop1): allowing degraded mounts [ 256.042128][ T9053] BTRFS info (device loop1): use zlib compression, level 3 [ 256.056068][ T9057] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9057) [pid 9057] ioctl(4, LOOP_CLR_FD [pid 9061] <... write resumed>) = 16777216 [pid 9060] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9060] ioctl(4, LOOP_SET_FD, 3 [pid 9061] munmap(0x7ff2ab354000, 16777216 [pid 9060] <... ioctl resumed>) = 0 [pid 9061] <... munmap resumed>) = 0 [pid 9061] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9060] close(3 [pid 9061] ioctl(4, LOOP_SET_FD, 3 [ 256.115419][ T9053] BTRFS info (device loop1): using free space tree [ 256.128717][ T9060] loop4: detected capacity change from 0 to 32768 [pid 9060] <... close resumed>) = 0 [pid 9061] <... ioctl resumed>) = 0 [pid 9060] mkdir("./file0", 0777) = 0 [pid 9060] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9061] close(3) = 0 [pid 9061] mkdir("./file0", 0777) = 0 [ 256.158108][ T9061] loop2: detected capacity change from 0 to 32768 [ 256.169374][ T9060] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9060) [pid 9061] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9060] <... mount resumed>) = -1 EEXIST (File exists) [pid 9060] ioctl(4, LOOP_CLR_FD [pid 9061] <... mount resumed>) = -1 EEXIST (File exists) [pid 9061] ioctl(4, LOOP_CLR_FD [pid 9063] <... write resumed>) = 16777216 [pid 9063] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 256.238086][ T9061] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9061) [ 256.285003][ T9063] loop0: detected capacity change from 0 to 32768 [pid 9063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9063] close(3) = 0 [pid 9063] mkdir("./file0", 0777) = 0 [pid 9063] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9061] <... ioctl resumed>) = 0 [pid 9061] close(4 [pid 9063] <... mount resumed>) = -1 EEXIST (File exists) [pid 9061] <... close resumed>) = 0 [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9063] ioctl(4, LOOP_CLR_FD [pid 9061] <... futex resumed>) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9059] <... futex resumed>) = 0 [pid 9061] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9061] <... openat resumed>) = 3 [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9059] <... futex resumed>) = 0 [pid 9061] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9061] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9059] <... futex resumed>) = 0 [pid 9061] openat(AT_FDCWD, ".log", O_RDONLY [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9061] <... openat resumed>) = 4 [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9059] <... futex resumed>) = 0 [pid 9061] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9059] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9061] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [ 256.397111][ T9063] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9063) [pid 9061] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9059] <... futex resumed>) = 0 [pid 9057] <... ioctl resumed>) = 0 [pid 9061] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9059] exit_group(0) = ? [pid 9061] <... futex resumed>) = ? [pid 9057] close(4 [pid 9061] +++ exited with 0 +++ [pid 9059] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9059, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5080] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9065] <... write resumed>) = 16777216 [pid 9057] <... close resumed>) = 0 [pid 9065] munmap(0x7ff2ab354000, 16777216 [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] <... munmap resumed>) = 0 [pid 9057] <... futex resumed>) = 1 [pid 9054] <... futex resumed>) = 0 [pid 9065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] <... openat resumed>) = 4 [pid 9057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9054] <... futex resumed>) = 0 [pid 9065] ioctl(4, LOOP_SET_FD, 3 [pid 9057] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9057] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9054] <... futex resumed>) = 0 [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9054] <... futex resumed>) = 0 [pid 9057] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9057] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] fstat(3, [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9057] <... futex resumed>) = 1 [pid 9054] <... futex resumed>) = 0 [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9054] <... futex resumed>) = 0 [pid 9057] openat(AT_FDCWD, ".log", O_RDONLY [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9057] <... openat resumed>) = 4 [pid 5080] getdents64(3, [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9054] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9054] <... futex resumed>) = 0 [pid 9065] <... ioctl resumed>) = 0 [pid 9057] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9054] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9065] close(3 [pid 9057] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] lstat("./118/binderfs", [pid 9065] <... close resumed>) = 0 [pid 9057] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] mkdir("./file0", 0777 [pid 9057] <... futex resumed>) = 1 [pid 9054] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9065] <... mkdir resumed>) = 0 [pid 9057] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9054] exit_group(0 [pid 5080] unlink("./118/binderfs" [pid 9065] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9057] <... futex resumed>) = ? [ 256.453714][ T9053] BTRFS info (device loop1): enabling ssd optimizations [ 256.461059][ T9053] BTRFS info (device loop1): auto enabling async discard [ 256.483901][ T9065] loop3: detected capacity change from 0 to 32768 [ 256.491844][ T9053] BTRFS info (device loop1): checking UUID tree [pid 9054] <... exit_group resumed>) = ? [pid 5080] <... unlink resumed>) = 0 [pid 9057] +++ exited with 0 +++ [pid 9054] +++ exited with 0 +++ [pid 5080] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9054, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=19 /* 0.19 s */} --- [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./118/file0", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] fstat(3, [pid 5080] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5084] getdents64(3, [pid 5080] fstat(4, [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] lstat("./118/binderfs", [pid 5080] getdents64(4, [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] unlink("./118/binderfs" [pid 5080] close(4 [pid 5084] <... unlink resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5084] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./118/file0" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 5084] lstat("./118/file0", [pid 5080] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./118/.log", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] unlink("./118/.log" [pid 5084] <... openat resumed>) = 4 [pid 5080] <... unlink resumed>) = 0 [pid 5084] fstat(4, [pid 5080] getdents64(3, [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] getdents64(4, [pid 5080] close(3 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... close resumed>) = 0 [pid 5084] getdents64(4, [pid 5080] rmdir("./118" [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5084] close(4 [pid 5080] mkdir("./119", 0777 [pid 5084] <... close resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5084] rmdir("./118/file0" [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5084] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9065] <... mount resumed>) = -1 EEXIST (File exists) [pid 9053] <... mount resumed>) = 0 [pid 5084] lstat("./118/.log", [ 256.526499][ T9065] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9065) [pid 5080] close(3 [pid 9053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 9053] <... openat resumed>) = 3 [pid 5084] unlink("./118/.log" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9053] chdir("./file0" [pid 5084] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 9083 attached [pid 9053] <... chdir resumed>) = 0 [pid 5084] getdents64(3, [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9083 [pid 9053] ioctl(4, LOOP_CLR_FD [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9053] <... ioctl resumed>) = 0 [pid 5084] close(3 [pid 9053] close(4 [pid 5084] <... close resumed>) = 0 [pid 9053] <... close resumed>) = 0 [pid 5084] rmdir("./118" [pid 9053] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 9053] <... futex resumed>) = 1 [pid 9048] <... futex resumed>) = 0 [pid 5084] mkdir("./119", 0777 [pid 9083] set_robust_list(0x5555559d56e0, 24 [pid 9053] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9048] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mkdir resumed>) = 0 [pid 9065] ioctl(4, LOOP_CLR_FD [pid 9053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9048] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9083] <... set_robust_list resumed>) = 0 [pid 9053] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9048] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 3 [pid 9083] chdir("./119" [pid 9053] <... openat resumed>) = 4 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9053] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9053] <... futex resumed>) = 1 [pid 9048] <... futex resumed>) = 0 [pid 5084] close(3 [pid 9053] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9048] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 9053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9048] <... futex resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9083] <... chdir resumed>) = 0 [pid 9053] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9048] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9084 [pid 9083] <... prctl resumed>) = 0 [pid 9083] setpgid(0, 0./strace-static-x86_64: Process 9084 attached ) = 0 [pid 9084] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9084] chdir("./119" [pid 9083] <... openat resumed>) = 3 [pid 9084] <... chdir resumed>) = 0 [pid 9083] write(3, "1000", 4 [pid 9084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9083] <... write resumed>) = 4 [pid 9084] <... prctl resumed>) = 0 [pid 9084] setpgid(0, 0) = 0 [pid 9084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9083] close(3 [pid 9084] write(3, "1000", 4) = 4 [pid 9083] <... close resumed>) = 0 [pid 9084] close(3 [pid 9083] symlink("/dev/binderfs", "./binderfs" [pid 9084] <... close resumed>) = 0 [pid 9084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9084] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] <... symlink resumed>) = 0 [pid 9084] <... futex resumed>) = 0 [pid 9083] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9083] <... futex resumed>) = 0 [pid 9084] <... mmap resumed>) = 0x7ff2b3754000 [pid 9083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9084] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9083] <... mmap resumed>) = 0x7ff2b3754000 [pid 9084] <... mprotect resumed>) = 0 [pid 9084] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9083] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9084] <... clone resumed>, parent_tid=[9086], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9086 [pid 9083] <... mprotect resumed>) = 0 [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9084] <... futex resumed>) = 0 [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9086 attached [pid 9083] <... clone resumed>, parent_tid=[9087], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9087 [pid 9086] set_robust_list(0x7ff2b37749e0, 24 [pid 9083] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 256.637520][ T9053] BTRFS info (device loop1): balance: start -s [pid 9083] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9086] <... set_robust_list resumed>) = 0 [pid 9048] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9086] memfd_create("syzkaller", 0 [pid 9048] <... futex resumed>) = 0 [pid 9086] <... memfd_create resumed>) = 3 [pid 9048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9048] <... mmap resumed>) = 0x7ff2ac333000 [pid 9086] <... mmap resumed>) = 0x7ff2ab354000 [pid 9048] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9048] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9060] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 9087 attached [pid 9060] close(4 [pid 9048] <... clone resumed>, parent_tid=[9088], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9088 [pid 9060] <... close resumed>) = 0 [pid 9048] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... futex resumed>) = 0 [pid 9060] <... futex resumed>) = 1 [pid 9048] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 9088 attached [pid 9088] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 9088] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 9088] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9048] <... futex resumed>) = 0 [pid 9088] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9048] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9048] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9087] set_robust_list(0x7ff2b37749e0, 24 [pid 9058] <... futex resumed>) = 0 [pid 9087] <... set_robust_list resumed>) = 0 [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9060] <... futex resumed>) = 0 [pid 9058] <... futex resumed>) = 1 [pid 9087] memfd_create("syzkaller", 0 [pid 9060] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9087] <... memfd_create resumed>) = 3 [pid 9060] <... openat resumed>) = 3 [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] <... mmap resumed>) = 0x7ff2ab354000 [pid 9060] <... futex resumed>) = 0 [pid 9058] <... futex resumed>) = 1 [pid 9060] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 256.705647][ T9053] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9048] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9060] <... futex resumed>) = 0 [pid 9058] <... futex resumed>) = 1 [pid 9060] openat(AT_FDCWD, ".log", O_RDONLY [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9060] <... openat resumed>) = 4 [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9058] <... futex resumed>) = 0 [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9058] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9058] <... futex resumed>) = 0 [pid 9060] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9058] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9060] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9060] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9058] <... futex resumed>) = 0 [pid 9060] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9058] exit_group(0 [pid 9060] <... futex resumed>) = ? [pid 9058] <... exit_group resumed>) = ? [pid 9060] +++ exited with 0 +++ [pid 9058] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9058, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=23 /* 0.23 s */} --- [pid 9063] <... ioctl resumed>) = 0 [pid 9063] close(4 [pid 5083] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9063] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9063] <... futex resumed>) = 1 [pid 5083] <... openat resumed>) = 3 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] fstat(3, [pid 9062] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 9063] <... futex resumed>) = 0 [pid 9062] <... futex resumed>) = 1 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9063] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9063] <... openat resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./118/binderfs", [pid 9063] <... futex resumed>) = 1 [pid 9062] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 256.788433][ T9088] BTRFS info (device loop1): scrub: started on devid 1 [ 256.789294][ T9053] BTRFS info (device loop1): balance: ended with status: 0 [ 256.826493][ T9088] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./118/binderfs" [pid 9063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9062] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 9088] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9063] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9088] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9063] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9088] <... futex resumed>) = 0 [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./118/file0", [pid 9088] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9063] <... futex resumed>) = 1 [pid 9062] <... futex resumed>) = 0 [pid 9053] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9053] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9062] <... futex resumed>) = 0 [pid 9053] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9063] openat(AT_FDCWD, ".log", O_RDONLY [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9053] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9048] exit_group(0 [pid 5083] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9088] <... futex resumed>) = ? [pid 9063] <... openat resumed>) = 4 [pid 9053] <... futex resumed>) = ? [pid 9048] <... exit_group resumed>) = ? [pid 5083] <... openat resumed>) = 4 [pid 9088] +++ exited with 0 +++ [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(4, [pid 9063] <... futex resumed>) = 1 [pid 9062] <... futex resumed>) = 0 [pid 9053] +++ exited with 0 +++ [pid 9048] +++ exited with 0 +++ [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9062] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9048, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 9063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9062] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9063] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9062] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] getdents64(4, [pid 9063] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9063] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(4 [pid 9063] <... futex resumed>) = 1 [pid 9062] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 9063] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9062] exit_group(0 [pid 5083] rmdir("./118/file0" [pid 5079] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9063] <... futex resumed>) = ? [pid 9062] <... exit_group resumed>) = ? [pid 5083] <... rmdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9063] +++ exited with 0 +++ [pid 9062] +++ exited with 0 +++ [pid 5083] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 3 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9062, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5083] lstat("./118/.log", [pid 5079] fstat(3, [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] unlink("./118/.log" [pid 5079] getdents64(3, [pid 5078] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... unlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] getdents64(3, [pid 5079] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5083] close(3 [pid 5079] lstat("./118/binderfs", [pid 5078] fstat(3, [pid 5083] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] rmdir("./118" [pid 5079] unlink("./118/binderfs" [pid 5078] getdents64(3, [pid 5083] <... rmdir resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] mkdir("./119", 0777 [pid 5079] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] lstat("./117/binderfs", [pid 5083] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5078] unlink("./117/binderfs" [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... unlink resumed>) = 0 [pid 5083] close(3 [pid 5078] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9089 [pid 5078] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./117/file0") = 0 [pid 5078] umount2("./117/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = 0 [pid 5078] lstat("./117/.log", ./strace-static-x86_64: Process 9089 attached {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9089] set_robust_list(0x5555559d56e0, 24 [pid 5078] unlink("./117/.log" [pid 5079] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 9089] <... set_robust_list resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 9089] chdir("./119" [pid 5079] lstat("./118/file0", [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] close(3 [pid 5079] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./117" [pid 9089] <... chdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... rmdir resumed>) = 0 [pid 9089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9065] <... ioctl resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] mkdir("./118", 0777 [pid 5079] fstat(4, [pid 5078] <... mkdir resumed>) = 0 [pid 9089] <... prctl resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9089] setpgid(0, 0 [pid 5079] getdents64(4, [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5079] close(4 [pid 5078] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] rmdir("./118/file0") = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9090 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./118") = 0 ./strace-static-x86_64: Process 9090 attached [pid 9089] <... setpgid resumed>) = 0 [pid 5079] mkdir("./119", 0777 [pid 9090] set_robust_list(0x5555559d56e0, 24 [pid 9089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... mkdir resumed>) = 0 [pid 9090] <... set_robust_list resumed>) = 0 [pid 9089] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9090] chdir("./118" [pid 9089] write(3, "1000", 4 [pid 5079] <... openat resumed>) = 3 [pid 9090] <... chdir resumed>) = 0 [pid 9089] <... write resumed>) = 4 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9089] close(3 [pid 5079] <... ioctl resumed>) = 0 [pid 9090] <... prctl resumed>) = 0 [pid 9089] <... close resumed>) = 0 [pid 5079] close(3 [pid 9090] setpgid(0, 0 [pid 9089] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... close resumed>) = 0 [pid 9090] <... setpgid resumed>) = 0 [pid 9089] <... symlink resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9089] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9090] <... openat resumed>) = 3 [pid 9089] <... futex resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9091 [pid 9090] write(3, "1000", 4 [pid 9089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9090] <... write resumed>) = 4 [pid 9089] <... mmap resumed>) = 0x7ff2b3754000 [pid 9090] close(3 [pid 9089] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9065] close(4./strace-static-x86_64: Process 9091 attached [pid 9090] <... close resumed>) = 0 [pid 9089] <... mprotect resumed>) = 0 [pid 9091] set_robust_list(0x5555559d56e0, 24 [pid 9090] symlink("/dev/binderfs", "./binderfs" [pid 9091] <... set_robust_list resumed>) = 0 [pid 9090] <... symlink resumed>) = 0 [pid 9089] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9065] <... close resumed>) = 0 [pid 9091] chdir("./119" [pid 9090] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] <... chdir resumed>) = 0 [pid 9090] <... futex resumed>) = 0 [pid 9089] <... clone resumed>, parent_tid=[9092], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9092 [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] <... futex resumed>) = 1 [pid 9064] <... futex resumed>) = 0 [pid 9091] <... prctl resumed>) = 0 [pid 9090] <... mmap resumed>) = 0x7ff2b3754000 [pid 9089] <... futex resumed>) = 0 [pid 9065] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9092 attached [pid 9091] setpgid(0, 0 [pid 9090] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9065] <... openat resumed>) = 3 [pid 9064] <... futex resumed>) = 0 [pid 9091] <... setpgid resumed>) = 0 [pid 9090] <... mprotect resumed>) = 0 [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9090] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9065] <... futex resumed>) = 0 [pid 9064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9092] set_robust_list(0x7ff2b37749e0, 24 [pid 9091] <... openat resumed>) = 3 [pid 9065] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9092] <... set_robust_list resumed>) = 0 [pid 9091] write(3, "1000", 4 [pid 9090] <... clone resumed>, parent_tid=[9093], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9093 [pid 9065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9064] <... futex resumed>) = 0 [pid 9092] memfd_create("syzkaller", 0 [pid 9091] <... write resumed>) = 4 [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9092] <... memfd_create resumed>) = 3 [pid 9091] close(3 [pid 9090] <... futex resumed>) = 0 [pid 9092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9091] <... close resumed>) = 0 [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9065] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) ./strace-static-x86_64: Process 9093 attached [pid 9091] symlink("/dev/binderfs", "./binderfs" [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9093] set_robust_list(0x7ff2b37749e0, 24 [pid 9092] <... mmap resumed>) = 0x7ff2ab354000 [pid 9091] <... symlink resumed>) = 0 [pid 9065] <... futex resumed>) = 1 [pid 9064] <... futex resumed>) = 0 [pid 9093] <... set_robust_list resumed>) = 0 [pid 9091] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9093] memfd_create("syzkaller", 0 [pid 9091] <... futex resumed>) = 0 [pid 9093] <... memfd_create resumed>) = 3 [pid 9091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9091] <... mmap resumed>) = 0x7ff2b3754000 [pid 9093] <... mmap resumed>) = 0x7ff2ab354000 [pid 9091] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9065] openat(AT_FDCWD, ".log", O_RDONLY [pid 9064] <... futex resumed>) = 0 [pid 9091] <... clone resumed>, parent_tid=[9094], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9094 [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9065] <... openat resumed>) = 4 [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9064] <... futex resumed>) = 0 [pid 9065] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9064] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9064] <... futex resumed>) = 0 [pid 9065] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9064] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9065] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9065] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9064] <... futex resumed>) = 0 [pid 9065] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9064] exit_group(0 [pid 9065] <... futex resumed>) = ? [pid 9064] <... exit_group resumed>) = ? [pid 9065] +++ exited with 0 +++ [pid 9064] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9064, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=22 /* 0.22 s */} --- ./strace-static-x86_64: Process 9094 attached [pid 9087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9094] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9094] <... set_robust_list resumed>) = 0 [pid 5081] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9094] memfd_create("syzkaller", 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9094] <... memfd_create resumed>) = 3 [pid 5081] unlink("./118/binderfs") = 0 [pid 5081] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9094] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] lstat("./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./118/file0") = 0 [pid 5081] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./118/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./118/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./118") = 0 [pid 5081] mkdir("./119", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9095 ./strace-static-x86_64: Process 9095 attached [pid 9095] set_robust_list(0x5555559d56e0, 24 [pid 9086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9095] <... set_robust_list resumed>) = 0 [pid 9095] chdir("./119") = 0 [pid 9095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9095] setpgid(0, 0) = 0 [pid 9095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9095] write(3, "1000", 4) = 4 [pid 9095] close(3) = 0 [pid 9095] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9095] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9095] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9096], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9096 [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9096 attached [pid 9096] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9096] memfd_create("syzkaller", 0) = 3 [pid 9096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9087] <... write resumed>) = 16777216 [pid 9096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9087] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9087] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9087] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9087] close(3) = 0 [pid 9087] mkdir("./file0", 0777) = 0 [ 257.661275][ T9087] loop2: detected capacity change from 0 to 32768 [ 257.698141][ T9087] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor373 (9087) [pid 9087] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9086] <... write resumed>) = 16777216 [pid 9086] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9086] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 257.775738][ T9087] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 257.784992][ T9087] BTRFS info (device loop2): setting nodatasum [ 257.796318][ T9086] loop5: detected capacity change from 0 to 32768 [ 257.815340][ T9087] BTRFS info (device loop2): allowing degraded mounts [pid 9086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9086] close(3) = 0 [pid 9086] mkdir("./file0", 0777) = 0 [pid 9086] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 257.822124][ T9087] BTRFS info (device loop2): use zlib compression, level 3 [ 257.845556][ T9086] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9086) [ 257.865567][ T9087] BTRFS info (device loop2): using free space tree [pid 9086] ioctl(4, LOOP_CLR_FD [pid 9092] <... write resumed>) = 16777216 [pid 9092] munmap(0x7ff2ab354000, 16777216 [pid 9093] <... write resumed>) = 16777216 [pid 9093] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9093] ioctl(4, LOOP_SET_FD, 3 [pid 9092] <... munmap resumed>) = 0 [pid 9092] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9092] ioctl(4, LOOP_SET_FD, 3 [pid 9093] <... ioctl resumed>) = 0 [pid 9094] <... write resumed>) = 16777216 [pid 9093] close(3 [pid 9094] munmap(0x7ff2ab354000, 16777216 [pid 9093] <... close resumed>) = 0 [pid 9094] <... munmap resumed>) = 0 [pid 9093] mkdir("./file0", 0777) = 0 [pid 9093] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9094] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9094] ioctl(4, LOOP_SET_FD, 3 [pid 9093] <... mount resumed>) = -1 EEXIST (File exists) [pid 9093] ioctl(4, LOOP_CLR_FD [pid 9092] <... ioctl resumed>) = 0 [pid 9092] close(3) = 0 [ 257.995258][ T9093] loop0: detected capacity change from 0 to 32768 [ 257.997191][ T9092] loop4: detected capacity change from 0 to 32768 [ 258.023726][ T9093] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9093) [ 258.039083][ T9094] loop1: detected capacity change from 0 to 32768 [pid 9092] mkdir("./file0", 0777) = 0 [pid 9094] <... ioctl resumed>) = 0 [pid 9094] close(3 [pid 9092] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9094] <... close resumed>) = 0 [pid 9094] mkdir("./file0", 0777) = 0 [pid 9094] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9092] <... mount resumed>) = -1 EEXIST (File exists) [pid 9092] ioctl(4, LOOP_CLR_FD [pid 9094] <... mount resumed>) = -1 EEXIST (File exists) [pid 9094] ioctl(4, LOOP_CLR_FD [pid 9086] <... ioctl resumed>) = 0 [ 258.065154][ T9092] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9092) [ 258.078672][ T9094] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9094) [ 258.090846][ T9087] BTRFS info (device loop2): enabling ssd optimizations [ 258.098679][ T9087] BTRFS info (device loop2): auto enabling async discard [pid 9086] close(4) = 0 [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9084] <... futex resumed>) = 0 [pid 9086] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9086] <... openat resumed>) = 3 [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9087] <... mount resumed>) = 0 [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9084] <... futex resumed>) = 0 [pid 9087] <... openat resumed>) = 3 [pid 9086] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9087] chdir("./file0" [ 258.144555][ T9087] BTRFS info (device loop2): checking UUID tree [pid 9086] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9087] <... chdir resumed>) = 0 [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] ioctl(4, LOOP_CLR_FD [pid 9086] <... futex resumed>) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9087] <... ioctl resumed>) = 0 [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] close(4 [pid 9086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9084] <... futex resumed>) = 0 [pid 9093] <... ioctl resumed>) = 0 [pid 9087] <... close resumed>) = 0 [pid 9086] openat(AT_FDCWD, ".log", O_RDONLY [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9093] close(4 [pid 9087] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9096] <... write resumed>) = 16777216 [pid 9096] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9096] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9096] ioctl(4, LOOP_SET_FD, 3 [pid 9093] <... close resumed>) = 0 [pid 9087] <... futex resumed>) = 1 [pid 9086] <... openat resumed>) = 4 [pid 9083] <... futex resumed>) = 0 [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9093] <... futex resumed>) = 1 [pid 9090] <... futex resumed>) = 0 [pid 9087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9086] <... futex resumed>) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9083] <... futex resumed>) = 0 [pid 9093] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9090] <... futex resumed>) = 0 [pid 9093] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9087] <... openat resumed>) = 4 [pid 9086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9084] <... futex resumed>) = 0 [pid 9093] <... openat resumed>) = 3 [pid 9087] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9086] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9084] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] <... futex resumed>) = 1 [pid 9086] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9083] <... futex resumed>) = 0 [pid 9093] <... futex resumed>) = 1 [pid 9090] <... futex resumed>) = 0 [pid 9087] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9086] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9093] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9086] <... futex resumed>) = 1 [pid 9084] <... futex resumed>) = 0 [pid 9083] <... futex resumed>) = 0 [pid 9093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9090] <... futex resumed>) = 0 [pid 9087] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9086] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9084] exit_group(0 [pid 9083] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9093] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9086] <... futex resumed>) = ? [pid 9084] <... exit_group resumed>) = ? [pid 9093] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9086] +++ exited with 0 +++ [pid 9084] +++ exited with 0 +++ [ 258.231273][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 258.231286][ T27] audit: type=1804 audit(1680236941.702:715): pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/119/.log" dev="sda1" ino=1161 res=1 errno=0 [ 258.249294][ T9096] loop3: detected capacity change from 0 to 32768 [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9084, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 9093] <... futex resumed>) = 1 [pid 9090] <... futex resumed>) = 0 [pid 9093] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9090] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 9093] openat(AT_FDCWD, ".log", O_RDONLY [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9093] <... openat resumed>) = 4 [pid 5084] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./119/binderfs") = 0 [pid 5084] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./119/file0") = 0 [pid 5084] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./119/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] unlink("./119/.log" [pid 9083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... unlink resumed>) = 0 [pid 9083] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 9083] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] close(3 [pid 9083] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] <... close resumed>) = 0 [pid 9083] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] rmdir("./119" [pid 9083] <... mprotect resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 9083] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] mkdir("./120", 0777./strace-static-x86_64: Process 9115 attached [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mkdir resumed>) = 0 [pid 9093] <... futex resumed>) = 1 [pid 9090] <... futex resumed>) = 0 [pid 9083] <... clone resumed>, parent_tid=[9115], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9115 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9115] set_robust_list(0x7ff2ac3539e0, 24 [pid 9093] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9090] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9083] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 9115] <... set_robust_list resumed>) = 0 [pid 9093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9090] <... futex resumed>) = 0 [pid 9083] <... futex resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9115] openat(AT_FDCWD, ".log", O_RDONLY [pid 9093] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9090] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9083] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9115] <... openat resumed>) = 5 [pid 9093] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [ 258.311742][ T9087] BTRFS info (device loop2): balance: start -s [ 258.327166][ T9087] BTRFS info (device loop2): relocating block group 1048576 flags system [ 258.337276][ T27] audit: type=1804 audit(1680236941.812:716): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/118/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5084] close(3 [pid 9115] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9093] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9092] <... ioctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9116 [pid 9096] <... ioctl resumed>) = 0 [pid 9096] close(3) = 0 [pid 9096] mkdir("./file0", 0777) = 0 [pid 9096] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,"./strace-static-x86_64: Process 9116 attached [pid 9115] <... futex resumed>) = 1 [pid 9093] <... futex resumed>) = 1 [pid 9092] close(4 [pid 9090] <... futex resumed>) = 0 [pid 9083] <... futex resumed>) = 0 [pid 9083] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9115] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9090] exit_group(0 [pid 9083] <... futex resumed>) = 0 [pid 9116] set_robust_list(0x5555559d56e0, 24 [pid 9092] <... close resumed>) = 0 [pid 9090] <... exit_group resumed>) = ? [pid 9083] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] <... set_robust_list resumed>) = 0 [pid 9093] +++ exited with 0 +++ [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9090] +++ exited with 0 +++ [pid 9116] chdir("./120" [pid 9092] <... futex resumed>) = 1 [pid 9089] <... futex resumed>) = 0 [pid 9116] <... chdir resumed>) = 0 [pid 9092] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9090, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 9116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9089] <... futex resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 9116] <... prctl resumed>) = 0 [pid 9092] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... restart_syscall resumed>) = 0 [pid 9116] setpgid(0, 0 [pid 9092] <... openat resumed>) = 3 [pid 9116] <... setpgid resumed>) = 0 [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9092] <... futex resumed>) = 1 [pid 9089] <... futex resumed>) = 0 [pid 9116] <... openat resumed>) = 3 [pid 9092] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [ 258.380381][ T27] audit: type=1804 audit(1680236941.842:717): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/119/file0/.log" dev="loop2" ino=263 res=1 errno=0 [ 258.397775][ T9096] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9096) [ 258.408921][ T9087] BTRFS info (device loop2): balance: ended with status: 0 [ 258.417436][ T9115] BTRFS info (device loop2): scrub: started on devid 1 [pid 9116] write(3, "1000", 4 [pid 9092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9089] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9116] <... write resumed>) = 4 [pid 9092] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] close(3 [pid 9092] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9116] <... close resumed>) = 0 [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] symlink("/dev/binderfs", "./binderfs" [pid 9092] <... futex resumed>) = 1 [pid 9089] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9116] <... symlink resumed>) = 0 [pid 9092] openat(AT_FDCWD, ".log", O_RDONLY [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9092] <... openat resumed>) = 4 [pid 9087] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5078] fstat(3, [pid 9096] <... mount resumed>) = -1 EEXIST (File exists) [pid 9096] ioctl(4, LOOP_CLR_FD [pid 9089] <... futex resumed>) = 0 [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, [pid 9116] <... futex resumed>) = 0 [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9092] <... futex resumed>) = 1 [pid 9089] <... futex resumed>) = 0 [pid 9087] <... futex resumed>) = 0 [pid 5078] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9116] <... mmap resumed>) = 0x7ff2b3754000 [pid 9092] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9089] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9116] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9092] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9089] <... futex resumed>) = 0 [pid 5078] lstat("./118/binderfs", [pid 9092] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9089] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] <... mprotect resumed>) = 0 [pid 9089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9116] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9092] <... futex resumed>) = 0 [pid 9089] exit_group(0 [pid 5078] unlink("./118/binderfs" [pid 9089] <... exit_group resumed>) = ? [pid 9083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... unlink resumed>) = 0 [pid 9092] +++ exited with 0 +++ [pid 9089] +++ exited with 0 +++ [pid 9116] <... clone resumed>, parent_tid=[9117], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9117 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9089, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=24 /* 0.24 s */} --- [pid 5078] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9116] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9116] <... futex resumed>) = 0 [pid 9094] <... ioctl resumed>) = 0 [pid 5083] lstat("./119/binderfs", [pid 5078] lstat("./118/file0", [pid 9116] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./119/binderfs" [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9115] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9094] close(4 [pid 5083] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 9117 attached [pid 9115] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9094] <... close resumed>) = 0 [pid 5083] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9117] set_robust_list(0x7ff2b37749e0, 24 [pid 9115] <... futex resumed>) = 0 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9117] <... set_robust_list resumed>) = 0 [pid 9115] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9094] <... futex resumed>) = 1 [pid 9091] <... futex resumed>) = 0 [ 258.471174][ T27] audit: type=1804 audit(1680236941.942:718): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/119/.log" dev="sda1" ino=1157 res=1 errno=0 [ 258.501913][ T9115] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [pid 9083] exit_group(0 [pid 5083] lstat("./119/file0", [pid 5078] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9117] memfd_create("syzkaller", 0 [pid 9115] <... futex resumed>) = ? [pid 9094] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9087] <... futex resumed>) = ? [pid 9083] <... exit_group resumed>) = ? [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 4 [pid 9117] <... memfd_create resumed>) = 3 [pid 9115] +++ exited with 0 +++ [pid 9094] <... openat resumed>) = 3 [pid 9091] <... futex resumed>) = 0 [pid 9087] +++ exited with 0 +++ [pid 9083] +++ exited with 0 +++ [pid 5083] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(4, [pid 9117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9117] <... mmap resumed>) = 0x7ff2ab354000 [pid 9094] <... futex resumed>) = 0 [pid 9091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9094] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 4 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9083, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=26 /* 0.26 s */} --- [pid 5078] getdents64(4, [pid 9094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] fstat(4, [pid 9094] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9094] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9091] <... futex resumed>) = 0 [pid 5083] getdents64(4, [pid 5080] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9094] <... futex resumed>) = 0 [pid 5083] getdents64(4, [pid 9094] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(4 [pid 5080] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9094] <... futex resumed>) = 0 [pid 9091] <... futex resumed>) = 1 [pid 5083] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5078] close(4 [pid 9094] openat(AT_FDCWD, ".log", O_RDONLY [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] rmdir("./119/file0" [pid 5080] fstat(3, [pid 9094] <... openat resumed>) = 4 [pid 5083] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9094] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9094] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] lstat("./119/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./119/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./119") = 0 [pid 5083] mkdir("./120", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 9091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... close resumed>) = 0 [pid 9091] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./118/file0" [pid 9094] <... futex resumed>) = 0 [pid 9091] <... futex resumed>) = 1 [pid 9094] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9118 [pid 9094] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9091] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(3, [pid 5078] <... rmdir resumed>) = 0 [pid 9094] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9094] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 9118 attached [pid 9118] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9118] chdir("./120") = 0 [pid 9118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9118] setpgid(0, 0) = 0 [pid 9118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./118/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9118] <... openat resumed>) = 3 [pid 9091] exit_group(0 [pid 5080] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9118] write(3, "1000", 4 [pid 9094] <... futex resumed>) = ? [pid 9091] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./118/.log", [pid 9118] <... write resumed>) = 4 [pid 9094] +++ exited with 0 +++ [pid 9118] close(3) = 0 [pid 9118] symlink("/dev/binderfs", "./binderfs" [pid 9091] +++ exited with 0 +++ [pid 5080] lstat("./119/binderfs", [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9091, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=33 /* 0.33 s */} --- [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./118/.log" [pid 5080] unlink("./119/binderfs" [pid 9118] <... symlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9118] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... unlink resumed>) = 0 [pid 5079] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 9118] <... futex resumed>) = 0 [pid 5080] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9118] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] close(3 [pid 9118] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9118] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9119], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9119 [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./118" [pid 5079] getdents64(3, [pid 5078] <... rmdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] mkdir("./119", 0777./strace-static-x86_64: Process 9119 attached [pid 9119] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 5079] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] lstat("./119/binderfs", [pid 5078] <... openat resumed>) = 3 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./119/binderfs" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9119] memfd_create("syzkaller", 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9119] <... memfd_create resumed>) = 3 [pid 5079] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [ 258.591741][ T27] audit: type=1804 audit(1680236942.062:719): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/119/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 9119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5079] lstat("./119/file0", [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9120 attached [pid 9120] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9120] chdir("./119") = 0 [pid 5079] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9120 [pid 5079] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9120] setpgid(0, 0 [pid 5079] fstat(4, [pid 9120] <... setpgid resumed>) = 0 [pid 9120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9120] write(3, "1000", 4) = 4 [pid 9120] close(3) = 0 [pid 9120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9120] <... mmap resumed>) = 0x7ff2b3754000 [pid 9120] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5079] getdents64(4, [pid 9120] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9121], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9121 [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./119/file0") = 0 [pid 5079] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9121 attached [pid 5079] lstat("./119/.log", [pid 9121] set_robust_list(0x7ff2b37749e0, 24 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9121] <... set_robust_list resumed>) = 0 [pid 5079] unlink("./119/.log" [pid 9121] memfd_create("syzkaller", 0 [pid 5079] <... unlink resumed>) = 0 [pid 9121] <... memfd_create resumed>) = 3 [pid 5079] getdents64(3, [pid 9121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9121] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] close(3) = 0 [pid 5079] rmdir("./119") = 0 [pid 5079] mkdir("./120", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 9096] <... ioctl resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9096] close(4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9122 [pid 9096] <... close resumed>) = 0 [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9095] <... futex resumed>) = 0 [pid 9096] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9096] <... openat resumed>) = 3 [pid 9095] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9122 attached [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9122] set_robust_list(0x5555559d56e0, 24 [pid 9096] <... futex resumed>) = 0 [pid 9095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9122] <... set_robust_list resumed>) = 0 [pid 9096] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9122] chdir("./120" [pid 9096] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9095] <... futex resumed>) = 0 [pid 9122] <... chdir resumed>) = 0 [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9096] <... futex resumed>) = 0 [pid 9095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9122] setpgid(0, 0 [pid 9096] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9122] <... setpgid resumed>) = 0 [pid 9096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9095] <... futex resumed>) = 0 [pid 9122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9096] openat(AT_FDCWD, ".log", O_RDONLY [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9122] <... openat resumed>) = 3 [pid 9122] write(3, "1000", 4 [pid 9096] <... openat resumed>) = 4 [pid 9122] <... write resumed>) = 4 [pid 9122] close(3) = 0 [pid 9122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9122] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9122] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9123], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9123 [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9095] <... futex resumed>) = 0 [pid 9096] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9095] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9096] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9095] <... futex resumed>) = 0 [pid 9096] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9095] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9096] <... futex resumed>) = 0 [pid 9095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 9123 attached [pid 9096] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9095] exit_group(0 [pid 9123] set_robust_list(0x7ff2b37749e0, 24 [pid 9096] <... futex resumed>) = ? [pid 9095] <... exit_group resumed>) = ? [pid 9096] +++ exited with 0 +++ [pid 9123] <... set_robust_list resumed>) = 0 [pid 9095] +++ exited with 0 +++ [pid 9123] memfd_create("syzkaller", 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9095, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 9123] <... memfd_create resumed>) = 3 [pid 9123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5081] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./119/binderfs") = 0 [pid 5081] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [ 258.786438][ T27] audit: type=1804 audit(1680236942.262:720): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/119/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 5081] rmdir("./119/file0") = 0 [pid 5081] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./119/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./119/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./119") = 0 [pid 5081] mkdir("./120", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9124 ./strace-static-x86_64: Process 9124 attached [pid 9124] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9124] chdir("./120") = 0 [pid 9124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9124] setpgid(0, 0) = 0 [pid 9124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9124] write(3, "1000", 4) = 4 [pid 9124] close(3) = 0 [pid 9124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9124] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9124] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9124] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9125], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9125 ./strace-static-x86_64: Process 9125 attached [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9125] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9124] <... futex resumed>) = 0 [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9125] memfd_create("syzkaller", 0) = 3 [pid 9125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./119/file0") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./119") = 0 [pid 5080] mkdir("./120", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9126 ./strace-static-x86_64: Process 9126 attached [pid 9126] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9126] chdir("./120") = 0 [pid 9126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9126] setpgid(0, 0 [pid 9119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9126] <... setpgid resumed>) = 0 [pid 9126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9126] write(3, "1000", 4) = 4 [pid 9126] close(3) = 0 [pid 9126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9126] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9126] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9126] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9127], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9127 [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9127 attached [pid 9127] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9127] memfd_create("syzkaller", 0 [pid 9121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9127] <... memfd_create resumed>) = 3 [pid 9127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9117] <... write resumed>) = 16777216 [pid 9117] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9117] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9117] ioctl(4, LOOP_SET_FD, 3 [pid 9127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9117] <... ioctl resumed>) = 0 [pid 9117] close(3) = 0 [pid 9117] mkdir("./file0", 0777) = 0 [ 259.490289][ T9117] loop5: detected capacity change from 0 to 32768 [ 259.539376][ T9117] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (9117) [pid 9117] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9119] <... write resumed>) = 16777216 [pid 9119] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9119] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9119] ioctl(4, LOOP_SET_FD, 3 [pid 9121] <... write resumed>) = 16777216 [pid 9119] <... ioctl resumed>) = 0 [pid 9121] munmap(0x7ff2ab354000, 16777216 [pid 9119] close(3) = 0 [ 259.579780][ T9117] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 259.599461][ T9119] loop4: detected capacity change from 0 to 32768 [ 259.608476][ T9117] BTRFS info (device loop5): setting nodatasum [pid 9119] mkdir("./file0", 0777 [pid 9121] <... munmap resumed>) = 0 [pid 9119] <... mkdir resumed>) = 0 [pid 9121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9121] ioctl(4, LOOP_SET_FD, 3 [pid 9119] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9119] ioctl(4, LOOP_CLR_FD [pid 9121] <... ioctl resumed>) = 0 [pid 9121] close(3) = 0 [pid 9123] <... write resumed>) = 16777216 [pid 9121] mkdir("./file0", 0777) = 0 [ 259.625335][ T9117] BTRFS info (device loop5): allowing degraded mounts [ 259.627840][ T9121] loop0: detected capacity change from 0 to 32768 [ 259.635559][ T9117] BTRFS info (device loop5): use zlib compression, level 3 [ 259.647003][ T9119] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9119) [ 259.666742][ T9117] BTRFS info (device loop5): using free space tree [pid 9121] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9125] <... write resumed>) = 16777216 [pid 9125] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9123] munmap(0x7ff2ab354000, 16777216 [pid 9121] <... mount resumed>) = -1 EEXIST (File exists) [pid 9125] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9123] <... munmap resumed>) = 0 [pid 9121] ioctl(4, LOOP_CLR_FD [pid 9125] <... openat resumed>) = 4 [pid 9123] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9125] ioctl(4, LOOP_SET_FD, 3 [pid 9123] <... openat resumed>) = 4 [pid 9125] <... ioctl resumed>) = 0 [pid 9123] ioctl(4, LOOP_SET_FD, 3 [pid 9125] close(3) = 0 [pid 9123] <... ioctl resumed>) = 0 [pid 9125] mkdir("./file0", 0777 [pid 9123] close(3 [pid 9125] <... mkdir resumed>) = 0 [pid 9123] <... close resumed>) = 0 [pid 9125] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9123] mkdir("./file0", 0777) = 0 [ 259.693717][ T9121] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9121) [ 259.716139][ T9125] loop3: detected capacity change from 0 to 32768 [ 259.724268][ T9123] loop1: detected capacity change from 0 to 32768 [pid 9123] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9125] <... mount resumed>) = -1 EEXIST (File exists) [pid 9125] ioctl(4, LOOP_CLR_FD [pid 9123] <... mount resumed>) = -1 EEXIST (File exists) [ 259.749874][ T9125] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9125) [ 259.785455][ T9123] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9123) [pid 9123] ioctl(4, LOOP_CLR_FD [pid 9121] <... ioctl resumed>) = 0 [pid 9121] close(4) = 0 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9120] <... futex resumed>) = 0 [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9121] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9120] <... futex resumed>) = 0 [pid 9121] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9121] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9120] <... futex resumed>) = 0 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9121] <... futex resumed>) = 0 [pid 9120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9121] openat(AT_FDCWD, ".log", O_RDONLY [pid 9123] <... ioctl resumed>) = 0 [pid 9121] <... openat resumed>) = 4 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9123] close(4) = 0 [pid 9121] <... futex resumed>) = 0 [pid 9120] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9121] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9120] <... futex resumed>) = 0 [ 259.920644][ T27] audit: type=1804 audit(1680236943.392:721): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/119/.log" dev="sda1" ino=1160 res=1 errno=0 [ 259.955518][ T9117] BTRFS info (device loop5): enabling ssd optimizations [ 259.962488][ T9117] BTRFS info (device loop5): auto enabling async discard [pid 9123] <... futex resumed>) = 1 [pid 9122] <... futex resumed>) = 0 [pid 9121] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9120] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9123] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9121] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9123] <... openat resumed>) = 3 [pid 9121] <... futex resumed>) = 1 [pid 9120] <... futex resumed>) = 0 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9121] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9120] exit_group(0 [pid 9119] <... ioctl resumed>) = 0 [pid 9123] <... futex resumed>) = 1 [pid 9122] <... futex resumed>) = 0 [pid 9121] <... futex resumed>) = ? [pid 9120] <... exit_group resumed>) = ? [pid 9123] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] close(4 [pid 9123] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9121] +++ exited with 0 +++ [pid 9120] +++ exited with 0 +++ [pid 9117] <... mount resumed>) = 0 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9123] <... futex resumed>) = 1 [pid 9122] <... futex resumed>) = 0 [pid 9117] <... openat resumed>) = 3 [pid 9123] openat(AT_FDCWD, ".log", O_RDONLY [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... close resumed>) = 0 [ 259.985571][ T9117] BTRFS info (device loop5): checking UUID tree [pid 9117] chdir("./file0" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9120, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 9122] <... futex resumed>) = 0 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9123] <... openat resumed>) = 4 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] <... futex resumed>) = 1 [pid 9118] <... futex resumed>) = 0 [pid 9117] <... chdir resumed>) = 0 [pid 5078] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9119] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... openat resumed>) = 3 [pid 9118] <... futex resumed>) = 0 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] <... futex resumed>) = 0 [pid 9118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9119] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9118] <... futex resumed>) = 0 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] <... futex resumed>) = 0 [pid 9118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9119] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9118] <... futex resumed>) = 0 [pid 9119] openat(AT_FDCWD, ".log", O_RDONLY [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] <... openat resumed>) = 4 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9118] <... futex resumed>) = 0 [pid 9119] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9118] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9118] <... futex resumed>) = 0 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9118] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9117] ioctl(4, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9123] <... futex resumed>) = 1 [pid 9122] <... futex resumed>) = 0 [pid 9119] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9117] <... ioctl resumed>) = 0 [pid 9123] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9122] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9119] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9117] close(4 [pid 5078] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9123] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9122] <... futex resumed>) = 0 [pid 9119] <... futex resumed>) = 1 [pid 9118] <... futex resumed>) = 0 [pid 9117] <... close resumed>) = 0 [pid 9123] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9122] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9119] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9118] exit_group(0 [pid 9117] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 3 [pid 9123] <... futex resumed>) = 0 [pid 9122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9119] <... futex resumed>) = ? [pid 9118] <... exit_group resumed>) = ? [pid 9117] <... futex resumed>) = 1 [pid 9116] <... futex resumed>) = 0 [pid 9123] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9122] exit_group(0 [pid 9119] +++ exited with 0 +++ [pid 9118] +++ exited with 0 +++ [pid 9117] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9116] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] fstat(3, [pid 9123] <... futex resumed>) = ? [pid 9122] <... exit_group resumed>) = ? [pid 9117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9116] <... futex resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9118, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=30 /* 0.30 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... restart_syscall resumed>) = 0 [pid 9123] +++ exited with 0 +++ [pid 9122] +++ exited with 0 +++ [pid 9117] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9116] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] getdents64(3, [pid 5083] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9122, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5083] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... restart_syscall resumed>) = 0 [pid 9117] <... openat resumed>) = 4 [pid 5083] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9117] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(3, [pid 5078] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9117] <... futex resumed>) = 1 [pid 9116] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9117] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9116] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./119/binderfs", [pid 9117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9116] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [ 260.019670][ T27] audit: type=1804 audit(1680236943.492:722): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/120/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5079] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9117] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9116] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] fstat(3, [pid 5083] lstat("./120/binderfs", [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] getdents64(3, [pid 5083] unlink("./120/binderfs" [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] <... unlink resumed>) = 0 [pid 5079] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./120/binderfs", [pid 5083] lstat("./120/file0", [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] unlink("./120/binderfs" [pid 5083] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... openat resumed>) = 4 [pid 5079] lstat("./120/file0", [pid 5083] fstat(4, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] getdents64(4, [pid 5079] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] fstat(4, [pid 5083] close(4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 5083] rmdir("./120/file0" [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9127] <... write resumed>) = 16777216 [pid 5083] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 9127] munmap(0x7ff2ab354000, 16777216 [pid 5083] umount2("./120/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(4 [pid 5083] lstat("./120/.log", [pid 5079] <... close resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] rmdir("./120/file0" [pid 5083] unlink("./120/.log" [pid 5079] <... rmdir resumed>) = 0 [pid 9127] <... munmap resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5079] umount2("./120/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9127] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] lstat("./120/.log", [pid 9127] ioctl(4, LOOP_SET_FD, 3 [pid 5083] close(3 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9125] <... ioctl resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5079] unlink("./120/.log" [pid 5078] unlink("./119/binderfs" [pid 5083] rmdir("./120" [pid 5079] <... unlink resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5079] getdents64(3, [pid 5083] mkdir("./121", 0777 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9127] <... ioctl resumed>) = 0 [pid 9125] close(4 [pid 5083] <... mkdir resumed>) = 0 [pid 5079] close(3 [pid 5078] <... unlink resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5079] rmdir("./120" [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5079] <... rmdir resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] mkdir("./121", 0777 [pid 5083] close(3 [pid 5079] <... mkdir resumed>) = 0 [pid 9127] close(3 [pid 9125] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9127] <... close resumed>) = 0 [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... openat resumed>) = 3 [pid 9127] mkdir("./file0", 0777 [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9146 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 9127] <... mkdir resumed>) = 0 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 260.076203][ T27] audit: type=1804 audit(1680236943.492:723): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/120/.log" dev="sda1" ino=1163 res=1 errno=0 [ 260.101112][ T9127] loop2: detected capacity change from 0 to 32768 [ 260.109039][ T9117] BTRFS info (device loop5): balance: start -s [ 260.117030][ T9117] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 5078] lstat("./119/file0", [pid 9127] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9124] <... futex resumed>) = 0 [pid 9125] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9147 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9125] <... openat resumed>) = 3 [pid 5078] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9146 attached ./strace-static-x86_64: Process 9147 attached [pid 9146] set_robust_list(0x5555559d56e0, 24 [pid 9147] set_robust_list(0x5555559d56e0, 24 [pid 9146] <... set_robust_list resumed>) = 0 [pid 9147] <... set_robust_list resumed>) = 0 [pid 9146] chdir("./121" [pid 9147] chdir("./121" [pid 9146] <... chdir resumed>) = 0 [pid 9147] <... chdir resumed>) = 0 [pid 9146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9146] <... prctl resumed>) = 0 [pid 9147] <... prctl resumed>) = 0 [pid 9146] setpgid(0, 0 [pid 9147] setpgid(0, 0 [pid 9146] <... setpgid resumed>) = 0 [pid 9147] <... setpgid resumed>) = 0 [pid 9146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9146] <... openat resumed>) = 3 [pid 9147] <... openat resumed>) = 3 [pid 9146] write(3, "1000", 4 [pid 9147] write(3, "1000", 4 [pid 9146] <... write resumed>) = 4 [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9147] <... write resumed>) = 4 [pid 9146] close(3 [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 9116] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9147] close(3 [pid 9146] <... close resumed>) = 0 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] <... futex resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9147] <... close resumed>) = 0 [pid 9146] symlink("/dev/binderfs", "./binderfs" [pid 9147] symlink("/dev/binderfs", "./binderfs" [pid 9146] <... symlink resumed>) = 0 [pid 9147] <... symlink resumed>) = 0 [pid 9146] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9124] <... futex resumed>) = 0 [pid 9116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... openat resumed>) = 4 [pid 9147] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9146] <... futex resumed>) = 0 [pid 9125] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] <... mmap resumed>) = 0x7ff2ac333000 [pid 5078] fstat(4, [pid 9147] <... futex resumed>) = 0 [pid 9146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9125] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9116] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9146] <... mmap resumed>) = 0x7ff2b3754000 [pid 9127] <... mount resumed>) = -1 EEXIST (File exists) [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] <... mprotect resumed>) = 0 [pid 9147] <... mmap resumed>) = 0x7ff2b3754000 [pid 9146] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9127] ioctl(4, LOOP_CLR_FD [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 9116] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] getdents64(4, [pid 9147] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9146] <... mprotect resumed>) = 0 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9147] <... mprotect resumed>) = 0 [pid 9146] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9124] <... futex resumed>) = 0 [pid 9116] <... clone resumed>, parent_tid=[9148], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9148 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [ 260.152833][ T9127] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9127) [ 260.168699][ T9117] BTRFS info (device loop5): balance: ended with status: 0 [pid 9147] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9125] openat(AT_FDCWD, ".log", O_RDONLY [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9116] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(4, ./strace-static-x86_64: Process 9148 attached [pid 9146] <... clone resumed>, parent_tid=[9149], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9149 [pid 9125] <... openat resumed>) = 4 [pid 9116] <... futex resumed>) = 0 [pid 9148] set_robust_list(0x7ff2ac3539e0, 24 [pid 9147] <... clone resumed>, parent_tid=[9150], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9150 [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9148] <... set_robust_list resumed>) = 0 [pid 9147] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9146] <... futex resumed>) = 0 [pid 9148] openat(AT_FDCWD, ".log", O_RDONLY [pid 9147] <... futex resumed>) = 0 [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9149 attached [pid 9148] <... openat resumed>) = 5 [pid 9147] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9149] set_robust_list(0x7ff2b37749e0, 24 [pid 9148] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9149] <... set_robust_list resumed>) = 0 [pid 9148] <... futex resumed>) = 0 [pid 9149] memfd_create("syzkaller", 0 [pid 9148] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9149] <... memfd_create resumed>) = 3 [pid 9149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9116] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 5078] close(4 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9116] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... close resumed>) = 0 [pid 9148] <... futex resumed>) = 0 [pid 9125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9124] <... futex resumed>) = 0 [pid 9116] <... futex resumed>) = 1 [pid 5078] rmdir("./119/file0"./strace-static-x86_64: Process 9150 attached [pid 9148] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9125] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9124] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 260.194133][ T27] audit: type=1804 audit(1680236943.662:724): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/120/.log" dev="sda1" ino=1154 res=1 errno=0 [pid 9116] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9150] set_robust_list(0x7ff2b37749e0, 24 [pid 9125] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9117] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9150] <... set_robust_list resumed>) = 0 [pid 9125] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9117] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./119/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9150] memfd_create("syzkaller", 0 [pid 9125] <... futex resumed>) = 1 [pid 9124] <... futex resumed>) = 0 [pid 9117] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9150] <... memfd_create resumed>) = 3 [pid 9125] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9124] exit_group(0 [pid 9117] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] lstat("./119/.log", [pid 9150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9125] <... futex resumed>) = ? [pid 9124] <... exit_group resumed>) = ? [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9150] <... mmap resumed>) = 0x7ff2ab354000 [pid 9125] +++ exited with 0 +++ [pid 9124] +++ exited with 0 +++ [pid 5078] unlink("./119/.log" [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9124, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=27 /* 0.27 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... unlink resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5078] getdents64(3, [pid 9116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] rmdir("./119" [pid 5081] <... openat resumed>) = 3 [pid 5081] fstat(3, [pid 5078] <... rmdir resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] mkdir("./120", 0777 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... mkdir resumed>) = 0 [pid 5081] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./120/binderfs", [pid 5078] <... openat resumed>) = 3 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5081] unlink("./120/binderfs" [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... unlink resumed>) = 0 [pid 5078] close(3 [pid 5081] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 260.235659][ T9148] BTRFS info (device loop5): scrub: started on devid 1 [ 260.262389][ T9148] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9151 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9151 attached [pid 5081] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9151] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... openat resumed>) = 4 [pid 9151] <... set_robust_list resumed>) = 0 [pid 5081] fstat(4, [pid 9151] chdir("./120" [pid 9148] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9151] <... chdir resumed>) = 0 [pid 9148] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 9151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9148] <... futex resumed>) = 0 [pid 9116] exit_group(0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9151] <... prctl resumed>) = 0 [pid 9117] <... futex resumed>) = ? [pid 9116] <... exit_group resumed>) = ? [pid 5081] getdents64(4, [pid 9151] setpgid(0, 0 [pid 9148] +++ exited with 0 +++ [pid 9117] +++ exited with 0 +++ [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9151] <... setpgid resumed>) = 0 [pid 9116] +++ exited with 0 +++ [pid 5081] close(4 [pid 9151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9116, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=28 /* 0.28 s */} --- [pid 5081] <... close resumed>) = 0 [pid 9151] <... openat resumed>) = 3 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5081] rmdir("./120/file0" [pid 9151] write(3, "1000", 4 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 9151] <... write resumed>) = 4 [pid 5081] umount2("./120/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9151] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9151] <... close resumed>) = 0 [pid 5084] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./120/.log", [pid 9151] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9151] <... symlink resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] unlink("./120/.log" [pid 9151] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5081] <... unlink resumed>) = 0 [pid 9151] <... futex resumed>) = 0 [pid 5084] fstat(3, [pid 5081] getdents64(3, [pid 9151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9151] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] getdents64(3, [pid 5081] close(3 [pid 9151] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5081] <... close resumed>) = 0 [pid 9151] <... mprotect resumed>) = 0 [pid 5084] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] rmdir("./120" [pid 9151] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... rmdir resumed>) = 0 [pid 5084] lstat("./120/binderfs", [pid 5081] mkdir("./121", 0777 [pid 9151] <... clone resumed>, parent_tid=[9152], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9152 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 9151] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./120/binderfs" [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9151] <... futex resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5081] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9152 attached [pid 9151] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 9152] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 5081] close(3 [pid 9152] memfd_create("syzkaller", 0 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9153 [pid 9152] <... memfd_create resumed>) = 3 [pid 9152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 ./strace-static-x86_64: Process 9153 attached [pid 9153] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9153] chdir("./121") = 0 [pid 9153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9153] setpgid(0, 0) = 0 [pid 9153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9153] write(3, "1000", 4) = 4 [pid 9153] close(3) = 0 [pid 9153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9153] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9153] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9153] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9154], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9154 [pid 9153] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9153] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9154 attached [pid 9154] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9154] memfd_create("syzkaller", 0) = 3 [pid 9154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9127] <... ioctl resumed>) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./120/file0") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./120") = 0 [pid 5084] mkdir("./121", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = 0 [pid 5084] close(3) = 0 [pid 9127] close(4 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9127] <... close resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9155 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9155 attached ) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9155] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9155] chdir("./121") = 0 [pid 9155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9155] setpgid(0, 0) = 0 [pid 9155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] write(3, "1000", 4 [pid 9127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9126] <... futex resumed>) = 0 [pid 9155] <... write resumed>) = 4 [pid 9127] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9155] close(3 [pid 9127] <... openat resumed>) = 3 [pid 9155] <... close resumed>) = 0 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] symlink("/dev/binderfs", "./binderfs" [pid 9127] <... futex resumed>) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9155] <... symlink resumed>) = 0 [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9126] <... futex resumed>) = 0 [pid 9155] <... futex resumed>) = 0 [pid 9127] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9127] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9155] <... mmap resumed>) = 0x7ff2b3754000 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9127] <... futex resumed>) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9155] <... mprotect resumed>) = 0 [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9155] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9126] <... futex resumed>) = 0 [pid 9127] openat(AT_FDCWD, ".log", O_RDONLY [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9155] <... clone resumed>, parent_tid=[9156], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9156 [pid 9127] <... openat resumed>) = 4 ./strace-static-x86_64: Process 9156 attached [pid 9155] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9156] set_robust_list(0x7ff2b37749e0, 24 [pid 9155] <... futex resumed>) = 0 [pid 9127] <... futex resumed>) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9156] <... set_robust_list resumed>) = 0 [pid 9155] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9156] memfd_create("syzkaller", 0 [pid 9127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9126] <... futex resumed>) = 0 [pid 9156] <... memfd_create resumed>) = 3 [pid 9127] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9126] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9127] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9156] <... mmap resumed>) = 0x7ff2ab354000 [pid 9127] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9126] <... futex resumed>) = 0 [pid 9127] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9126] exit_group(0 [pid 9127] <... futex resumed>) = ? [pid 9126] <... exit_group resumed>) = ? [pid 9127] +++ exited with 0 +++ [pid 9126] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9126, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=30 /* 0.30 s */} --- [pid 5080] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./120/binderfs") = 0 [pid 5080] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 9149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] rmdir("./120/file0") = 0 [pid 5080] umount2("./120/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./120/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./120/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./120") = 0 [pid 5080] mkdir("./121", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9157 ./strace-static-x86_64: Process 9157 attached [pid 9157] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9157] chdir("./121") = 0 [pid 9157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9157] setpgid(0, 0) = 0 [pid 9157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9157] write(3, "1000", 4) = 4 [pid 9157] close(3) = 0 [pid 9157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9157] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9157] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9157] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9158], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9158 [pid 9157] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9157] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9158 attached [pid 9158] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9158] memfd_create("syzkaller", 0) = 3 [pid 9158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9150] <... write resumed>) = 16777216 [pid 9150] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9150] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9150] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9150] close(3) = 0 [pid 9150] mkdir("./file0", 0777) = 0 [pid 9150] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9149] <... write resumed>) = 16777216 [pid 9149] munmap(0x7ff2ab354000, 16777216 [pid 9158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9149] <... munmap resumed>) = 0 [pid 9149] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 261.147441][ T9150] loop1: detected capacity change from 0 to 32768 [ 261.179354][ T9150] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (9150) [pid 9149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9149] close(3) = 0 [pid 9149] mkdir("./file0", 0777) = 0 [ 261.199715][ T9149] loop4: detected capacity change from 0 to 32768 [ 261.230432][ T9150] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9149] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 261.245021][ T9149] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9149) [ 261.275334][ T9150] BTRFS info (device loop1): setting nodatasum [ 261.281521][ T9150] BTRFS info (device loop1): allowing degraded mounts [pid 9149] ioctl(4, LOOP_CLR_FD [pid 9152] <... write resumed>) = 16777216 [pid 9152] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 261.305333][ T9150] BTRFS info (device loop1): use zlib compression, level 3 [ 261.312557][ T9150] BTRFS info (device loop1): using free space tree [pid 9152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9152] close(3) = 0 [pid 9152] mkdir("./file0", 0777) = 0 [pid 9152] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9154] <... write resumed>) = 16777216 [pid 9154] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9154] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 261.356582][ T9152] loop0: detected capacity change from 0 to 32768 [ 261.373788][ T9152] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9152) [pid 9154] ioctl(4, LOOP_SET_FD, 3 [pid 9152] <... mount resumed>) = -1 EEXIST (File exists) [pid 9152] ioctl(4, LOOP_CLR_FD [pid 9154] <... ioctl resumed>) = 0 [pid 9154] close(3) = 0 [pid 9154] mkdir("./file0", 0777) = 0 [pid 9154] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9156] <... write resumed>) = 16777216 [pid 9156] munmap(0x7ff2ab354000, 16777216 [pid 9154] <... mount resumed>) = -1 EEXIST (File exists) [pid 9156] <... munmap resumed>) = 0 [pid 9154] ioctl(4, LOOP_CLR_FD [pid 9156] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 261.418242][ T9154] loop3: detected capacity change from 0 to 32768 [ 261.441019][ T9154] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9154) [pid 9156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9156] close(3 [pid 9149] <... ioctl resumed>) = 0 [pid 9156] <... close resumed>) = 0 [pid 9149] close(4 [pid 9156] mkdir("./file0", 0777 [pid 9149] <... close resumed>) = 0 [pid 9156] <... mkdir resumed>) = 0 [pid 9156] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 261.483983][ T9156] loop5: detected capacity change from 0 to 32768 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] <... futex resumed>) = 0 [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9149] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9156] <... mount resumed>) = -1 EEXIST (File exists) [pid 9149] <... openat resumed>) = 3 [pid 9156] ioctl(4, LOOP_CLR_FD [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9146] <... futex resumed>) = 0 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9146] <... futex resumed>) = 0 [pid 9149] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9149] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9146] <... futex resumed>) = 0 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [ 261.524973][ T9156] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9156) [pid 9149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9146] <... futex resumed>) = 0 [pid 9149] openat(AT_FDCWD, ".log", O_RDONLY [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9149] <... openat resumed>) = 4 [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9146] <... futex resumed>) = 0 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9146] <... futex resumed>) = 0 [pid 9149] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9146] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9149] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9149] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9146] <... futex resumed>) = 0 [pid 9149] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9146] exit_group(0 [pid 9149] <... futex resumed>) = ? [pid 9146] <... exit_group resumed>) = ? [pid 9149] +++ exited with 0 +++ [pid 9146] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9146, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=26 /* 0.26 s */} --- [pid 5083] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./121/binderfs") = 0 [pid 5083] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9158] <... write resumed>) = 16777216 [pid 5083] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, [pid 9158] munmap(0x7ff2ab354000, 16777216 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, [pid 9158] <... munmap resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 9158] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] rmdir("./121/file0" [pid 9158] <... openat resumed>) = 4 [pid 5083] <... rmdir resumed>) = 0 [ 261.598070][ T9150] BTRFS info (device loop1): enabling ssd optimizations [ 261.605048][ T9150] BTRFS info (device loop1): auto enabling async discard [pid 9158] ioctl(4, LOOP_SET_FD, 3 [pid 5083] umount2("./121/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9158] <... ioctl resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./121/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./121/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 9152] <... ioctl resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./121") = 0 [pid 5083] mkdir("./122", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 9158] close(3 [pid 9154] <... ioctl resumed>) = 0 [pid 9152] close(4 [pid 5083] <... close resumed>) = 0 [pid 9158] <... close resumed>) = 0 [pid 9154] close(4 [pid 9152] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9158] mkdir("./file0", 0777 [pid 9154] <... close resumed>) = 0 [pid 9152] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9158] <... mkdir resumed>) = 0 [pid 9154] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9152] <... futex resumed>) = 1 [pid 9151] <... futex resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9176 ./strace-static-x86_64: Process 9176 attached [pid 9158] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9154] <... futex resumed>) = 1 [pid 9153] <... futex resumed>) = 0 [ 261.646347][ T9158] loop2: detected capacity change from 0 to 32768 [ 261.674901][ T9150] BTRFS info (device loop1): checking UUID tree [pid 9152] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9151] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9176] set_robust_list(0x5555559d56e0, 24 [pid 9158] <... mount resumed>) = -1 EEXIST (File exists) [pid 9154] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9153] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9152] <... openat resumed>) = 3 [pid 9151] <... futex resumed>) = 0 [pid 9176] <... set_robust_list resumed>) = 0 [pid 9158] ioctl(4, LOOP_CLR_FD [pid 9154] <... openat resumed>) = 3 [pid 9153] <... futex resumed>) = 0 [pid 9152] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9151] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9176] chdir("./122" [pid 9154] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9153] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9152] <... futex resumed>) = 0 [pid 9151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9176] <... chdir resumed>) = 0 [pid 9154] <... futex resumed>) = 0 [pid 9153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9152] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9151] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9176] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9154] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9153] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9151] <... futex resumed>) = 0 [pid 9153] <... futex resumed>) = 0 [pid 9152] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9153] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9152] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9176] <... prctl resumed>) = 0 [pid 9154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9152] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9151] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9176] setpgid(0, 0 [pid 9154] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9152] <... futex resumed>) = 0 [pid 9151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9150] <... mount resumed>) = 0 [pid 9176] <... setpgid resumed>) = 0 [pid 9154] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9152] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9151] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9154] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9151] <... futex resumed>) = 0 [pid 9150] <... openat resumed>) = 3 [pid 9176] <... openat resumed>) = 3 [pid 9154] <... futex resumed>) = 1 [pid 9153] <... futex resumed>) = 0 [pid 9152] openat(AT_FDCWD, ".log", O_RDONLY [pid 9151] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9150] chdir("./file0" [pid 9176] write(3, "1000", 4 [pid 9154] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9153] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9152] <... openat resumed>) = 4 [pid 9150] <... chdir resumed>) = 0 [pid 9176] <... write resumed>) = 4 [pid 9154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9153] <... futex resumed>) = 0 [pid 9152] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9150] ioctl(4, LOOP_CLR_FD [pid 9176] close(3 [pid 9154] openat(AT_FDCWD, ".log", O_RDONLY [pid 9153] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9152] <... futex resumed>) = 1 [pid 9151] <... futex resumed>) = 0 [pid 9150] <... ioctl resumed>) = 0 [pid 9176] <... close resumed>) = 0 [pid 9154] <... openat resumed>) = 4 [pid 9152] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9151] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9150] close(4 [pid 9176] symlink("/dev/binderfs", "./binderfs" [pid 9156] <... ioctl resumed>) = 0 [pid 9154] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9151] <... futex resumed>) = 0 [pid 9150] <... close resumed>) = 0 [pid 9176] <... symlink resumed>) = 0 [pid 9156] close(4 [pid 9154] <... futex resumed>) = 1 [pid 9153] <... futex resumed>) = 0 [pid 9152] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9151] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9150] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9176] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9156] <... close resumed>) = 0 [pid 9154] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9153] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9152] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9150] <... futex resumed>) = 1 [pid 9147] <... futex resumed>) = 0 [pid 9176] <... futex resumed>) = 0 [pid 9156] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9153] <... futex resumed>) = 0 [pid 9152] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9150] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9147] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9156] <... futex resumed>) = 1 [pid 9155] <... futex resumed>) = 0 [pid 9154] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9176] <... mmap resumed>) = 0x7ff2b3754000 [pid 9156] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9155] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9154] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9153] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9152] <... futex resumed>) = 1 [pid 9151] <... futex resumed>) = 0 [pid 9150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9147] <... futex resumed>) = 0 [pid 9176] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9155] <... futex resumed>) = 0 [pid 9154] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9152] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9151] exit_group(0 [pid 9150] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9147] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9176] <... mprotect resumed>) = 0 [pid 9156] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9155] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9154] <... futex resumed>) = 0 [pid 9153] exit_group(0 [pid 9152] <... futex resumed>) = ? [pid 9151] <... exit_group resumed>) = ? [pid 9176] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9156] <... openat resumed>) = 3 [pid 9154] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9156] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9150] <... openat resumed>) = 4 [pid 9176] <... clone resumed>, parent_tid=[9177], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9177 [pid 9156] <... futex resumed>) = 0 [pid 9176] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9156] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9154] <... futex resumed>) = ? [pid 9153] <... exit_group resumed>) = ? [pid 9176] <... futex resumed>) = 0 [pid 9154] +++ exited with 0 +++ [ 261.710258][ T9158] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9158) [pid 9176] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9177 attached [pid 9155] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9153] +++ exited with 0 +++ [pid 9152] +++ exited with 0 +++ [pid 9151] +++ exited with 0 +++ [pid 9150] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9177] set_robust_list(0x7ff2b37749e0, 24 [pid 9156] <... futex resumed>) = 0 [pid 9155] <... futex resumed>) = 1 [pid 9150] <... futex resumed>) = 1 [pid 9147] <... futex resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9151, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 9177] <... set_robust_list resumed>) = 0 [pid 9156] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9155] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9150] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9147] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9153, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=26 /* 0.26 s */} --- [pid 9177] memfd_create("syzkaller", 0 [pid 9156] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9147] <... futex resumed>) = 0 [pid 9177] <... memfd_create resumed>) = 3 [pid 9156] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9150] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9147] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 9177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9156] <... futex resumed>) = 1 [pid 9155] <... futex resumed>) = 0 [pid 9156] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... restart_syscall resumed>) = 0 [pid 5078] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9177] <... mmap resumed>) = 0x7ff2ab354000 [pid 9155] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9155] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9156] <... futex resumed>) = 0 [pid 9156] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9156] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9156] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9155] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9156] <... futex resumed>) = 0 [pid 9155] <... futex resumed>) = 1 [pid 5081] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 9156] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9155] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] fstat(3, [pid 5081] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5081] fstat(3, [pid 5078] getdents64(3, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] getdents64(3, [pid 5078] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9156] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9156] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9155] <... futex resumed>) = 0 [pid 5081] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./120/binderfs", [pid 9156] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9155] exit_group(0 [pid 9156] <... futex resumed>) = ? [pid 9155] <... exit_group resumed>) = ? [pid 9156] +++ exited with 0 +++ [pid 9155] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9155, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./120/binderfs" [pid 5084] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./121/binderfs", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... unlink resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5081] unlink("./121/binderfs" [pid 5084] fstat(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... unlink resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] lstat("./120/file0", [pid 5084] getdents64(3, [pid 5081] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./121/file0", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./121/binderfs", [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] unlink("./121/binderfs" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 4 [pid 5084] <... unlink resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] fstat(4, [pid 5084] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... openat resumed>) = 4 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./121/file0", [pid 5081] fstat(4, [pid 5078] getdents64(4, [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 5084] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5084] fstat(4, [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] close(4 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5084] getdents64(4, [pid 5081] getdents64(4, [pid 5078] rmdir("./120/file0" [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5084] getdents64(4, [pid 5081] close(4 [pid 5078] umount2("./120/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] <... close resumed>) = 0 [pid 5084] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] rmdir("./121/file0" [pid 5084] <... close resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5084] rmdir("./121/file0" [pid 5081] umount2("./121/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./120/.log", [pid 5084] <... rmdir resumed>) = 0 [pid 5084] umount2("./121/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./121/.log", [pid 5078] unlink("./120/.log" [pid 5084] lstat("./121/.log", [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./121/.log" [pid 5078] getdents64(3, [pid 5084] unlink("./121/.log" [pid 5081] <... unlink resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 9147] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] getdents64(3, [pid 5081] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9147] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 9147] <... futex resumed>) = 0 [pid 5084] close(3 [pid 5081] close(3 [pid 9147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 9147] <... mmap resumed>) = 0x7ff2ac333000 [pid 5081] <... close resumed>) = 0 [pid 5078] rmdir("./120" [pid 5084] rmdir("./121" [pid 9147] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] rmdir("./121" [pid 5078] <... rmdir resumed>) = 0 [pid 9147] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] mkdir("./122", 0777 [pid 5081] <... rmdir resumed>) = 0 [pid 5078] mkdir("./121", 0777./strace-static-x86_64: Process 9178 attached [pid 9178] set_robust_list(0x7ff2ac3539e0, 24 [pid 5084] <... mkdir resumed>) = 0 [pid 5081] mkdir("./122", 0777 [pid 9178] <... set_robust_list resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 9178] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... mkdir resumed>) = 0 [pid 9147] <... clone resumed>, parent_tid=[9178], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9178 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9147] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 9147] <... futex resumed>) = 1 [pid 5078] <... openat resumed>) = 3 [pid 9147] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] close(3 [pid 5084] close(3 [pid 5081] close(3 [pid 5084] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... close resumed>) = 0 [pid 9178] <... futex resumed>) = 0 [pid 9178] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9178] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9178] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9147] <... futex resumed>) = 0 [pid 9147] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9147] <... futex resumed>) = 1 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9179 [pid 9178] <... futex resumed>) = 0 [pid 9178] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9147] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9180 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9181 [ 261.809839][ T9150] BTRFS info (device loop1): balance: start -s [ 261.848775][ T9150] BTRFS info (device loop1): relocating block group 1048576 flags system ./strace-static-x86_64: Process 9180 attached [pid 9180] set_robust_list(0x5555559d56e0, 24./strace-static-x86_64: Process 9181 attached ./strace-static-x86_64: Process 9179 attached ) = 0 [pid 9181] set_robust_list(0x5555559d56e0, 24 [pid 9179] set_robust_list(0x5555559d56e0, 24 [pid 9181] <... set_robust_list resumed>) = 0 [pid 9179] <... set_robust_list resumed>) = 0 [pid 9181] chdir("./122" [pid 9179] chdir("./122" [pid 9181] <... chdir resumed>) = 0 [pid 9180] chdir("./121" [pid 9179] <... chdir resumed>) = 0 [pid 9181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9180] <... chdir resumed>) = 0 [pid 9179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9181] <... prctl resumed>) = 0 [pid 9179] <... prctl resumed>) = 0 [pid 9181] setpgid(0, 0) = 0 [pid 9179] setpgid(0, 0 [pid 9181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9179] <... setpgid resumed>) = 0 [pid 9181] <... openat resumed>) = 3 [pid 9180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9181] write(3, "1000", 4 [pid 9179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9181] <... write resumed>) = 4 [pid 9180] <... prctl resumed>) = 0 [pid 9181] close(3 [pid 9180] setpgid(0, 0 [pid 9179] <... openat resumed>) = 3 [pid 9181] <... close resumed>) = 0 [pid 9180] <... setpgid resumed>) = 0 [pid 9181] symlink("/dev/binderfs", "./binderfs" [pid 9180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9179] write(3, "1000", 4 [pid 9181] <... symlink resumed>) = 0 [pid 9180] <... openat resumed>) = 3 [pid 9179] <... write resumed>) = 4 [pid 9181] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9180] write(3, "1000", 4 [pid 9181] <... futex resumed>) = 0 [pid 9180] <... write resumed>) = 4 [pid 9179] close(3 [pid 9181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9180] close(3 [pid 9181] <... mmap resumed>) = 0x7ff2b3754000 [pid 9180] <... close resumed>) = 0 [pid 9179] <... close resumed>) = 0 [pid 9181] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9180] symlink("/dev/binderfs", "./binderfs" [pid 9181] <... mprotect resumed>) = 0 [pid 9180] <... symlink resumed>) = 0 [pid 9179] symlink("/dev/binderfs", "./binderfs" [pid 9181] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9180] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9179] <... symlink resumed>) = 0 [pid 9180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9179] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9181] <... clone resumed>, parent_tid=[9183], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9183 [pid 9180] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9179] <... futex resumed>) = 0 [pid 9181] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9180] <... mprotect resumed>) = 0 [pid 9147] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 9183 attached [pid 9181] <... futex resumed>) = 0 [pid 9180] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9183] set_robust_list(0x7ff2b37749e0, 24 [pid 9181] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9179] <... mmap resumed>) = 0x7ff2b3754000 [pid 9183] <... set_robust_list resumed>) = 0 [pid 9180] <... clone resumed>, parent_tid=[9184], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9184 [pid 9179] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9180] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9180] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9184 attached [pid 9184] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9184] memfd_create("syzkaller", 0) = 3 [pid 9184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9183] memfd_create("syzkaller", 0 [pid 9179] <... mprotect resumed>) = 0 [pid 9158] <... ioctl resumed>) = 0 [pid 9183] <... memfd_create resumed>) = 3 [pid 9179] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 ./strace-static-x86_64: Process 9185 attached [pid 9185] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9185] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9179] <... clone resumed>, parent_tid=[9185], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9185 [pid 9179] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9179] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 261.950097][ T9178] BTRFS info (device loop1): scrub: started on devid 1 [ 261.951509][ T9150] BTRFS info (device loop1): balance: ended with status: 0 [pid 9185] memfd_create("syzkaller", 0) = 3 [pid 9150] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9150] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9185] <... mmap resumed>) = 0x7ff2ab354000 [pid 9150] <... futex resumed>) = 0 [pid 9150] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9158] close(4) = 0 [pid 9158] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9158] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9157] <... futex resumed>) = 0 [pid 9157] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9158] <... futex resumed>) = 0 [pid 9157] <... futex resumed>) = 1 [pid 9158] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9157] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9158] <... openat resumed>) = 3 [ 261.992789][ T9178] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 9158] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9178] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=16, data_bytes_scrubbed=12288, tree_bytes_scrubbed=65536, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9158] <... futex resumed>) = 1 [pid 9157] <... futex resumed>) = 0 [pid 9178] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9158] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9157] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9178] <... futex resumed>) = 0 [pid 9158] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9157] <... futex resumed>) = 0 [pid 9178] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9158] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9157] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9147] exit_group(0 [pid 9178] <... futex resumed>) = ? [pid 9158] <... futex resumed>) = 0 [pid 9157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9150] <... futex resumed>) = ? [pid 9147] <... exit_group resumed>) = ? [pid 9178] +++ exited with 0 +++ [pid 9158] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9157] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9150] +++ exited with 0 +++ [pid 9158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9158] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9157] <... futex resumed>) = 0 [pid 9147] +++ exited with 0 +++ [pid 9158] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9157] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9158] <... futex resumed>) = 0 [pid 9157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9147, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 9158] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9157] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 9158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9157] <... futex resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 9158] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9157] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9158] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9158] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9158] <... futex resumed>) = 1 [pid 9157] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9158] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9157] exit_group(0 [pid 5079] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9158] <... futex resumed>) = ? [pid 9157] <... exit_group resumed>) = ? [pid 5079] <... openat resumed>) = 3 [pid 9158] +++ exited with 0 +++ [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 9157] +++ exited with 0 +++ [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9157, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./121/binderfs", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] unlink("./121/binderfs" [pid 5080] <... openat resumed>) = 3 [pid 5079] <... unlink resumed>) = 0 [pid 5080] fstat(3, [pid 5079] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./121/binderfs") = 0 [pid 5080] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./121/file0") = 0 [pid 5080] umount2("./121/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./121/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./121/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./121") = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5080] mkdir("./122", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5079] lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./121/file0" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... rmdir resumed>) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9186 [pid 5079] close(3) = 0 [pid 5079] rmdir("./121") = 0 [pid 5079] mkdir("./122", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 9186 attached ) = 3 [pid 9186] set_robust_list(0x5555559d56e0, 24 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9186] <... set_robust_list resumed>) = 0 [pid 5079] <... ioctl resumed>) = 0 [pid 9186] chdir("./122" [pid 5079] close(3 [pid 9186] <... chdir resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 9186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9186] <... prctl resumed>) = 0 [pid 9186] setpgid(0, 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9187 [pid 9186] <... setpgid resumed>) = 0 [pid 9186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9186] write(3, "1000", 4) = 4 [pid 9186] close(3./strace-static-x86_64: Process 9187 attached ) = 0 [pid 9187] set_robust_list(0x5555559d56e0, 24 [pid 9186] symlink("/dev/binderfs", "./binderfs" [pid 9187] <... set_robust_list resumed>) = 0 [pid 9186] <... symlink resumed>) = 0 [pid 9187] chdir("./122" [pid 9186] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9187] <... chdir resumed>) = 0 [pid 9186] <... futex resumed>) = 0 [pid 9187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9187] <... prctl resumed>) = 0 [pid 9186] <... mmap resumed>) = 0x7ff2b3754000 [pid 9187] setpgid(0, 0 [pid 9186] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9187] <... setpgid resumed>) = 0 [pid 9187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9186] <... mprotect resumed>) = 0 [pid 9187] <... openat resumed>) = 3 [pid 9186] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9187] write(3, "1000", 4) = 4 [pid 9186] <... clone resumed>, parent_tid=[9188], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9188 [pid 9187] close(3 [pid 9186] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9187] <... close resumed>) = 0 [pid 9186] <... futex resumed>) = 0 [pid 9187] symlink("/dev/binderfs", "./binderfs" [pid 9186] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9187] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 9188 attached [pid 9187] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9188] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9188] memfd_create("syzkaller", 0 [pid 9187] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9188] <... memfd_create resumed>) = 3 [pid 9187] <... mprotect resumed>) = 0 [pid 9188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9187] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9188] <... mmap resumed>) = 0x7ff2ab354000 [pid 9187] <... clone resumed>, parent_tid=[9189], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9189 [pid 9187] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9187] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9189 attached [pid 9189] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9189] memfd_create("syzkaller", 0) = 3 [pid 9189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9183] <... write resumed>) = 16777216 [pid 9177] <... write resumed>) = 16777216 [pid 9183] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9183] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9183] ioctl(4, LOOP_SET_FD, 3 [pid 9177] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9183] <... ioctl resumed>) = 0 [pid 9183] close(3) = 0 [pid 9183] mkdir("./file0", 0777 [pid 9177] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9183] <... mkdir resumed>) = 0 [pid 9177] <... openat resumed>) = 4 [pid 9183] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9177] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9177] close(3) = 0 [pid 9177] mkdir("./file0", 0777) = 0 [ 262.864929][ T9183] loop3: detected capacity change from 0 to 32768 [ 262.900823][ T9177] loop4: detected capacity change from 0 to 32768 [pid 9177] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9184] <... write resumed>) = 16777216 [pid 9184] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 262.908091][ T9183] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor373 (9183) [ 262.936177][ T9177] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9177) [ 262.952616][ T9183] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9184] ioctl(4, LOOP_SET_FD, 3 [pid 9177] <... mount resumed>) = -1 EEXIST (File exists) [pid 9177] ioctl(4, LOOP_CLR_FD [pid 9184] <... ioctl resumed>) = 0 [pid 9184] close(3) = 0 [pid 9184] mkdir("./file0", 0777) = 0 [pid 9184] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 262.967040][ T9184] loop0: detected capacity change from 0 to 32768 [ 262.976732][ T9183] BTRFS info (device loop3): setting nodatasum [ 262.989693][ T9184] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9184) [ 263.003718][ T9183] BTRFS info (device loop3): allowing degraded mounts [pid 9184] ioctl(4, LOOP_CLR_FD [pid 9185] <... write resumed>) = 16777216 [pid 9185] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9185] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9185] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9185] close(3) = 0 [ 263.019796][ T9183] BTRFS info (device loop3): use zlib compression, level 3 [ 263.035334][ T9183] BTRFS info (device loop3): using free space tree [ 263.050887][ T9185] loop5: detected capacity change from 0 to 32768 [pid 9185] mkdir("./file0", 0777) = 0 [pid 9185] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9188] <... write resumed>) = 16777216 [pid 9188] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9188] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9188] close(3) = 0 [pid 9188] mkdir("./file0", 0777) = 0 [ 263.104337][ T9185] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9185) [ 263.126177][ T9188] loop2: detected capacity change from 0 to 32768 [pid 9188] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9185] <... mount resumed>) = -1 EEXIST (File exists) [pid 9185] ioctl(4, LOOP_CLR_FD [pid 9188] <... mount resumed>) = -1 EEXIST (File exists) [pid 9184] <... ioctl resumed>) = 0 [pid 9188] ioctl(4, LOOP_CLR_FD [pid 9184] close(4 [pid 9189] <... write resumed>) = 16777216 [pid 9184] <... close resumed>) = 0 [pid 9189] munmap(0x7ff2ab354000, 16777216 [pid 9184] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9189] <... munmap resumed>) = 0 [pid 9184] <... futex resumed>) = 1 [pid 9180] <... futex resumed>) = 0 [pid 9189] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9184] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9180] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9189] <... openat resumed>) = 4 [pid 9184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9180] <... futex resumed>) = 0 [pid 9189] ioctl(4, LOOP_SET_FD, 3 [pid 9184] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [ 263.157706][ T9188] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9188) [pid 9180] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9184] <... openat resumed>) = 3 [pid 9184] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9180] <... futex resumed>) = 0 [pid 9184] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9180] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9180] <... futex resumed>) = 0 [pid 9184] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9180] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9184] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9184] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9180] <... futex resumed>) = 0 [pid 9184] openat(AT_FDCWD, ".log", O_RDONLY [ 263.203234][ T9189] loop1: detected capacity change from 0 to 32768 [ 263.236535][ T27] kauditd_printk_skb: 8 callbacks suppressed [pid 9180] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9184] <... openat resumed>) = 4 [pid 9180] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9184] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9184] <... futex resumed>) = 0 [pid 9180] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9184] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9180] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9184] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9184] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9180] <... futex resumed>) = 0 [pid 9184] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9180] exit_group(0 [pid 9184] <... futex resumed>) = ? [pid 9180] <... exit_group resumed>) = ? [pid 9184] +++ exited with 0 +++ [pid 9180] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9180, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9189] <... ioctl resumed>) = 0 [pid 5078] getdents64(3, [pid 9189] close(3 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./121/binderfs" [pid 9189] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5078] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9189] mkdir("./file0", 0777 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9189] <... mkdir resumed>) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [ 263.236547][ T27] audit: type=1804 audit(1680236946.712:733): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/121/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 5078] rmdir("./121/file0" [pid 9189] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5078] <... rmdir resumed>) = 0 [pid 5078] umount2("./121/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./121/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./121/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./121") = 0 [pid 5078] mkdir("./122", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9206 [pid 9188] <... ioctl resumed>) = 0 [pid 9188] close(4) = 0 [pid 9188] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9186] <... futex resumed>) = 0 [pid 9188] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9186] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9186] <... futex resumed>) = 0 [pid 9188] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9186] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9206 attached [pid 9189] <... mount resumed>) = -1 EEXIST (File exists) [pid 9188] <... openat resumed>) = 3 [pid 9177] <... ioctl resumed>) = 0 [ 263.298025][ T9189] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9189) [ 263.317169][ T9183] BTRFS info (device loop3): enabling ssd optimizations [ 263.334584][ T9183] BTRFS info (device loop3): auto enabling async discard [pid 9206] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9189] ioctl(4, LOOP_CLR_FD [pid 9188] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9177] close(4 [pid 9206] chdir("./122" [pid 9188] <... futex resumed>) = 1 [pid 9186] <... futex resumed>) = 0 [pid 9177] <... close resumed>) = 0 [pid 9188] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9186] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9177] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9186] <... futex resumed>) = 0 [pid 9206] <... chdir resumed>) = 0 [pid 9177] <... futex resumed>) = 1 [pid 9176] <... futex resumed>) = 0 [pid 9206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9188] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9186] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9177] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9176] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9206] <... prctl resumed>) = 0 [pid 9188] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9176] <... futex resumed>) = 0 [pid 9206] setpgid(0, 0 [pid 9188] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9177] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9176] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9206] <... setpgid resumed>) = 0 [pid 9188] <... futex resumed>) = 1 [pid 9186] <... futex resumed>) = 0 [pid 9177] <... openat resumed>) = 3 [pid 9206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9188] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9186] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9177] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9206] <... openat resumed>) = 3 [pid 9188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9186] <... futex resumed>) = 0 [pid 9177] <... futex resumed>) = 1 [pid 9176] <... futex resumed>) = 0 [pid 9206] write(3, "1000", 4 [pid 9188] openat(AT_FDCWD, ".log", O_RDONLY [pid 9186] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9177] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9176] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9206] <... write resumed>) = 4 [pid 9188] <... openat resumed>) = 4 [pid 9177] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9176] <... futex resumed>) = 0 [pid 9206] close(3 [pid 9176] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9206] <... close resumed>) = 0 [pid 9206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9206] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9206] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9206] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9208], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9208 [pid 9206] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9206] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9208 attached [pid 9208] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9208] memfd_create("syzkaller", 0) = 3 [pid 9208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9183] <... mount resumed>) = 0 [pid 9188] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9177] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9188] <... futex resumed>) = 1 [pid 9186] <... futex resumed>) = 0 [pid 9183] <... openat resumed>) = 3 [pid 9177] <... futex resumed>) = 1 [pid 9176] <... futex resumed>) = 0 [pid 9208] <... mmap resumed>) = 0x7ff2ab354000 [pid 9188] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9186] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9183] chdir("./file0" [pid 9177] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9176] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9186] <... futex resumed>) = 0 [pid 9183] <... chdir resumed>) = 0 [pid 9177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9176] <... futex resumed>) = 0 [pid 9188] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9186] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9183] ioctl(4, LOOP_CLR_FD [pid 9177] openat(AT_FDCWD, ".log", O_RDONLY [pid 9176] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9188] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9183] <... ioctl resumed>) = 0 [ 263.357188][ T9183] BTRFS info (device loop3): checking UUID tree [ 263.384313][ T27] audit: type=1804 audit(1680236946.852:734): pid=9188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/122/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 9177] <... openat resumed>) = 4 [pid 9183] close(4) = 0 [pid 9188] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9183] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9177] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9183] <... futex resumed>) = 1 [pid 9181] <... futex resumed>) = 0 [pid 9177] <... futex resumed>) = 1 [pid 9183] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9181] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9177] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9181] <... futex resumed>) = 0 [pid 9183] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9181] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9188] <... futex resumed>) = 1 [pid 9186] <... futex resumed>) = 0 [pid 9183] <... openat resumed>) = 4 [pid 9176] <... futex resumed>) = 0 [pid 9188] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9186] exit_group(0 [pid 9183] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9176] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9188] <... futex resumed>) = ? [pid 9186] <... exit_group resumed>) = ? [pid 9183] <... futex resumed>) = 1 [pid 9181] <... futex resumed>) = 0 [pid 9177] <... futex resumed>) = 0 [pid 9176] <... futex resumed>) = 1 [pid 9188] +++ exited with 0 +++ [pid 9176] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9186] +++ exited with 0 +++ [pid 9183] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9181] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9177] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9181] <... futex resumed>) = 0 [pid 9177] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9186, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=31 /* 0.31 s */} --- [pid 9183] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9181] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9177] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5080] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, [pid 9177] <... futex resumed>) = 1 [pid 9176] <... futex resumed>) = 0 [ 263.431389][ T27] audit: type=1804 audit(1680236946.902:735): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/122/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9177] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9176] exit_group(0 [pid 5080] getdents64(3, [pid 9177] <... futex resumed>) = ? [pid 9176] <... exit_group resumed>) = ? [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9177] +++ exited with 0 +++ [pid 9176] +++ exited with 0 +++ [pid 5080] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9176, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=30 /* 0.30 s */} --- [pid 5080] lstat("./122/binderfs", [pid 5083] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] unlink("./122/binderfs" [pid 5083] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... unlink resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5080] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] fstat(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] lstat("./122/file0", [pid 5083] getdents64(3, [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] lstat("./122/binderfs", [pid 5080] <... openat resumed>) = 4 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] fstat(4, [pid 5083] unlink("./122/binderfs" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5080] getdents64(4, [pid 5083] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(4, [pid 9181] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./122/file0", [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9181] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] close(4 [pid 9181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 9181] <... mmap resumed>) = 0x7ff2ac333000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] rmdir("./122/file0" [pid 9181] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5083] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... rmdir resumed>) = 0 [pid 9181] <... mprotect resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5080] umount2("./122/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9181] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] lstat("./122/.log", [pid 9181] <... clone resumed>, parent_tid=[9209], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9209 [pid 5083] getdents64(4, [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9181] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] unlink("./122/.log" [pid 9181] <... futex resumed>) = 0 [pid 5083] getdents64(4, [pid 5080] <... unlink resumed>) = 0 [pid 9181] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(3, [pid 5083] close(4 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] <... close resumed>) = 0 [pid 5080] close(3 [pid 5083] rmdir("./122/file0" [pid 5080] <... close resumed>) = 0 ./strace-static-x86_64: Process 9209 attached [pid 9185] <... ioctl resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] rmdir("./122" [pid 9209] set_robust_list(0x7ff2ac3539e0, 24 [pid 5083] umount2("./122/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 9209] <... set_robust_list resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] mkdir("./123", 0777 [pid 9209] openat(AT_FDCWD, ".log", O_RDONLY [ 263.486076][ T9183] BTRFS info (device loop3): balance: start -s [ 263.514585][ T9183] BTRFS info (device loop3): relocating block group 1048576 flags system [pid 5083] lstat("./122/.log", [pid 5080] <... mkdir resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5083] unlink("./122/.log" [pid 5080] <... openat resumed>) = 3 [pid 5083] <... unlink resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5083] getdents64(3, [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 5083] close(3 [pid 5080] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] rmdir("./122") = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9210 [pid 5083] mkdir("./123", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 9185] close(4 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 9185] <... close resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9185] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 9209] <... openat resumed>) = 5 [pid 9185] <... futex resumed>) = 1 [pid 9179] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 ./strace-static-x86_64: Process 9210 attached [pid 9209] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9185] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9179] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9210] set_robust_list(0x5555559d56e0, 24 [pid 9209] <... futex resumed>) = 1 [pid 9185] <... openat resumed>) = 3 [pid 9181] <... futex resumed>) = 0 [pid 9179] <... futex resumed>) = 0 [pid 9209] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9181] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9179] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9211 [pid 9209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9181] <... futex resumed>) = 0 [pid 9209] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9181] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9211 attached [pid 9210] <... set_robust_list resumed>) = 0 [pid 9185] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9211] set_robust_list(0x5555559d56e0, 24 [pid 9210] chdir("./123" [pid 9185] <... futex resumed>) = 1 [pid 9179] <... futex resumed>) = 0 [pid 9211] <... set_robust_list resumed>) = 0 [pid 9210] <... chdir resumed>) = 0 [ 263.564563][ T27] audit: type=1804 audit(1680236947.032:736): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/122/file0/.log" dev="loop3" ino=263 res=1 errno=0 [pid 9185] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9179] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9211] chdir("./123" [pid 9210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9211] <... chdir resumed>) = 0 [pid 9210] <... prctl resumed>) = 0 [pid 9185] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9211] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9210] setpgid(0, 0 [pid 9185] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9211] <... prctl resumed>) = 0 [pid 9210] <... setpgid resumed>) = 0 [pid 9185] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9211] setpgid(0, 0 [pid 9210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9185] <... futex resumed>) = 0 [pid 9211] <... setpgid resumed>) = 0 [pid 9210] <... openat resumed>) = 3 [pid 9185] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9210] write(3, "1000", 4 [pid 9211] <... openat resumed>) = 3 [pid 9210] <... write resumed>) = 4 [pid 9185] <... futex resumed>) = 0 [pid 9179] <... futex resumed>) = 1 [pid 9211] write(3, "1000", 4 [pid 9210] close(3 [pid 9185] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9211] <... write resumed>) = 4 [pid 9210] <... close resumed>) = 0 [pid 9179] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9211] close(3 [pid 9210] symlink("/dev/binderfs", "./binderfs" [pid 9179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9211] <... close resumed>) = 0 [pid 9210] <... symlink resumed>) = 0 [pid 9179] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9211] symlink("/dev/binderfs", "./binderfs" [pid 9210] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9185] <... futex resumed>) = 0 [pid 9179] <... futex resumed>) = 1 [pid 9211] <... symlink resumed>) = 0 [pid 9210] <... futex resumed>) = 0 [pid 9185] openat(AT_FDCWD, ".log", O_RDONLY [pid 9181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9211] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9185] <... openat resumed>) = 4 [pid 9179] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9211] <... futex resumed>) = 0 [pid 9210] <... mmap resumed>) = 0x7ff2b3754000 [pid 9185] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9210] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9185] <... futex resumed>) = 0 [pid 9179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9211] <... mmap resumed>) = 0x7ff2b3754000 [ 263.608152][ T9209] BTRFS info (device loop3): scrub: started on devid 1 [ 263.617281][ T9183] BTRFS info (device loop3): balance: ended with status: 0 [ 263.629179][ T9209] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [pid 9210] <... mprotect resumed>) = 0 [pid 9209] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9189] <... ioctl resumed>) = 0 [pid 9185] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9179] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9211] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9210] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9211] <... mprotect resumed>) = 0 [pid 9185] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9211] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9210] <... clone resumed>, parent_tid=[9213], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9213 [pid 9185] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9210] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9185] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9211] <... clone resumed>, parent_tid=[9214], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9214 [pid 9210] <... futex resumed>) = 0 [pid 9185] <... futex resumed>) = 0 [pid 9211] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9210] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9185] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9211] <... futex resumed>) = 0 [pid 9211] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9213 attached [pid 9213] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9213] memfd_create("syzkaller", 0) = 3 [pid 9213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9185] <... futex resumed>) = 0 [pid 9179] <... futex resumed>) = 1 [pid 9185] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9209] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9179] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9214 attached [pid 9209] <... futex resumed>) = 0 [pid 9189] close(4 [pid 9183] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9214] set_robust_list(0x7ff2b37749e0, 24 [pid 9209] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9189] <... close resumed>) = 0 [pid 9183] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9181] exit_group(0 [pid 9179] exit_group(0 [pid 9214] <... set_robust_list resumed>) = 0 [pid 9209] <... futex resumed>) = ? [pid 9189] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9185] <... futex resumed>) = ? [pid 9183] <... futex resumed>) = ? [pid 9181] <... exit_group resumed>) = ? [pid 9179] <... exit_group resumed>) = ? [pid 9214] memfd_create("syzkaller", 0 [pid 9209] +++ exited with 0 +++ [pid 9189] <... futex resumed>) = 1 [pid 9187] <... futex resumed>) = 0 [pid 9185] +++ exited with 0 +++ [pid 9183] +++ exited with 0 +++ [pid 9187] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9181] +++ exited with 0 +++ [pid 9214] <... memfd_create resumed>) = 3 [pid 9189] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9187] <... futex resumed>) = 0 [pid 9179] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9181, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 9214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9189] <... openat resumed>) = 3 [ 263.665264][ T27] audit: type=1804 audit(1680236947.122:737): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/122/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 9187] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9179, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 9214] <... mmap resumed>) = 0x7ff2ab354000 [pid 9189] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9187] <... futex resumed>) = 0 [pid 9189] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9187] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9187] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9189] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9187] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9189] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9189] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 9189] <... futex resumed>) = 1 [pid 9187] <... futex resumed>) = 0 [pid 9189] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9187] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 9189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9187] <... futex resumed>) = 0 [pid 5084] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9189] openat(AT_FDCWD, ".log", O_RDONLY [pid 9187] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 9189] <... openat resumed>) = 4 [pid 9189] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9189] <... futex resumed>) = 1 [pid 9187] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 9189] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9187] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(3, [pid 5081] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9187] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9189] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9187] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(3, [pid 5081] lstat("./122/binderfs", [pid 9189] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9189] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] unlink("./122/binderfs" [pid 9189] <... futex resumed>) = 1 [pid 9187] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9189] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9187] exit_group(0 [pid 5084] lstat("./122/binderfs", [pid 5081] <... unlink resumed>) = 0 [pid 9189] <... futex resumed>) = ? [pid 9187] <... exit_group resumed>) = ? [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9189] +++ exited with 0 +++ [pid 9187] +++ exited with 0 +++ [pid 5084] unlink("./122/binderfs" [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9187, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 263.740640][ T27] audit: type=1804 audit(1680236947.212:738): pid=9189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/122/.log" dev="sda1" ino=1159 res=1 errno=0 [pid 5079] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./122/file0", [pid 5079] lstat("./122/binderfs", [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./122/binderfs" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... unlink resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] <... openat resumed>) = 4 [pid 5079] lstat("./122/file0", [pid 5084] fstat(4, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, [pid 5079] getdents64(4, [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./122/file0") = 0 [pid 5084] getdents64(4, [pid 5079] umount2("./122/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./122/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./122/.log") = 0 [pid 5084] close(4 [pid 5079] getdents64(3, [pid 5084] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] rmdir("./122/file0" [pid 5079] close(3) = 0 [pid 5079] rmdir("./122") = 0 [pid 5079] mkdir("./123", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... rmdir resumed>) = 0 [pid 5084] umount2("./122/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9215 ./strace-static-x86_64: Process 9215 attached [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9215] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9215] chdir("./123" [pid 5084] lstat("./122/.log", [pid 9215] <... chdir resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9215] setpgid(0, 0) = 0 [pid 9215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5084] unlink("./122/.log" [pid 9215] write(3, "1000", 4 [pid 5084] <... unlink resumed>) = 0 [pid 9215] <... write resumed>) = 4 [pid 5084] getdents64(3, [pid 9215] close(3 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9215] <... close resumed>) = 0 [pid 5084] close(3 [pid 9215] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 9215] <... symlink resumed>) = 0 [pid 9208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] rmdir("./122" [pid 5081] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9215] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] mkdir("./123", 0777 [pid 5081] lstat("./122/file0", [pid 9215] <... mmap resumed>) = 0x7ff2b3754000 [pid 9215] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... mkdir resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9215] <... mprotect resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9215] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9215] <... clone resumed>, parent_tid=[9216], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9216 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9215] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 5081] <... openat resumed>) = 4 [pid 9215] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] fstat(4, [pid 9215] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9216 attached [pid 5081] getdents64(4, [pid 9216] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9217 [pid 9216] <... set_robust_list resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9216] memfd_create("syzkaller", 0 [pid 5081] getdents64(4, ./strace-static-x86_64: Process 9217 attached [pid 9216] <... memfd_create resumed>) = 3 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9217] set_robust_list(0x5555559d56e0, 24 [pid 9216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] close(4 [pid 9217] <... set_robust_list resumed>) = 0 [pid 9216] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] <... close resumed>) = 0 [pid 9217] chdir("./123" [pid 5081] rmdir("./122/file0" [pid 9217] <... chdir resumed>) = 0 [pid 9217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... rmdir resumed>) = 0 [pid 9217] <... prctl resumed>) = 0 [pid 5081] getdents64(3, [pid 9217] setpgid(0, 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9217] <... setpgid resumed>) = 0 [pid 5081] close(3 [pid 9217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... close resumed>) = 0 [pid 9217] <... openat resumed>) = 3 [pid 5081] rmdir("./122" [pid 9217] write(3, "1000", 4 [pid 5081] <... rmdir resumed>) = 0 [pid 9217] <... write resumed>) = 4 [pid 5081] mkdir("./123", 0777 [pid 9217] close(3 [pid 5081] <... mkdir resumed>) = 0 [pid 9217] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9217] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... openat resumed>) = 3 [pid 9217] <... symlink resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 9217] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = 0 [pid 9217] <... futex resumed>) = 0 [pid 9217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] close(3 [pid 9217] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] <... close resumed>) = 0 [pid 9217] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9217] <... mprotect resumed>) = 0 [pid 9217] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9218 [pid 9217] <... clone resumed>, parent_tid=[9219], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9219 [pid 9217] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9217] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9218 attached [pid 9218] set_robust_list(0x5555559d56e0, 24) = 0 ./strace-static-x86_64: Process 9219 attached [pid 9218] chdir("./123" [pid 9219] set_robust_list(0x7ff2b37749e0, 24 [pid 9218] <... chdir resumed>) = 0 [pid 9219] <... set_robust_list resumed>) = 0 [pid 9218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9219] memfd_create("syzkaller", 0 [pid 9218] <... prctl resumed>) = 0 [pid 9219] <... memfd_create resumed>) = 3 [pid 9218] setpgid(0, 0 [pid 9219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9218] <... setpgid resumed>) = 0 [pid 9219] <... mmap resumed>) = 0x7ff2ab354000 [pid 9218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9218] write(3, "1000", 4) = 4 [pid 9218] close(3) = 0 [pid 9218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9218] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9218] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9218] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9220], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9220 [pid 9218] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9218] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9220 attached [pid 9220] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9220] memfd_create("syzkaller", 0) = 3 [pid 9220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9208] <... write resumed>) = 16777216 [pid 9208] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9208] close(3) = 0 [pid 9208] mkdir("./file0", 0777) = 0 [ 264.480169][ T9208] loop0: detected capacity change from 0 to 32768 [ 264.500922][ T9208] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor373 (9208) [ 264.559060][ T9208] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 264.594241][ T9208] BTRFS info (device loop0): setting nodatasum [pid 9208] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9214] <... write resumed>) = 16777216 [pid 9214] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9214] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9214] ioctl(4, LOOP_SET_FD, 3 [pid 9213] <... write resumed>) = 16777216 [pid 9213] munmap(0x7ff2ab354000, 16777216 [pid 9214] <... ioctl resumed>) = 0 [ 264.621136][ T9208] BTRFS info (device loop0): allowing degraded mounts [ 264.643236][ T9214] loop4: detected capacity change from 0 to 32768 [ 264.645356][ T9208] BTRFS info (device loop0): use zlib compression, level 3 [pid 9214] close(3 [pid 9213] <... munmap resumed>) = 0 [pid 9214] <... close resumed>) = 0 [pid 9214] mkdir("./file0", 0777) = 0 [pid 9214] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9213] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9213] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9213] close(3) = 0 [pid 9213] mkdir("./file0", 0777) = 0 [pid 9213] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9214] <... mount resumed>) = -1 EEXIST (File exists) [ 264.675325][ T9208] BTRFS info (device loop0): using free space tree [ 264.680430][ T9214] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9214) [ 264.695161][ T9213] loop2: detected capacity change from 0 to 32768 [pid 9214] ioctl(4, LOOP_CLR_FD [pid 9213] <... mount resumed>) = -1 EEXIST (File exists) [ 264.735062][ T9213] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9213) [pid 9213] ioctl(4, LOOP_CLR_FD [pid 9220] <... write resumed>) = 16777216 [pid 9220] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9220] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9220] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9220] close(3) = 0 [pid 9220] mkdir("./file0", 0777) = 0 [ 264.823098][ T9220] loop3: detected capacity change from 0 to 32768 [ 264.836457][ T9208] BTRFS info (device loop0): enabling ssd optimizations [ 264.843417][ T9208] BTRFS info (device loop0): auto enabling async discard [pid 9220] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9219] <... write resumed>) = 16777216 [pid 9219] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9219] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9219] ioctl(4, LOOP_SET_FD, 3 [pid 9214] <... ioctl resumed>) = 0 [pid 9213] <... ioctl resumed>) = 0 [pid 9213] close(4 [pid 9220] <... mount resumed>) = -1 EEXIST (File exists) [pid 9219] <... ioctl resumed>) = 0 [pid 9214] close(4) = 0 [pid 9214] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9220] ioctl(4, LOOP_CLR_FD [pid 9219] close(3 [pid 9214] <... futex resumed>) = 1 [pid 9211] <... futex resumed>) = 0 [pid 9211] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9211] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9219] <... close resumed>) = 0 [pid 9214] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9213] <... close resumed>) = 0 [pid 9213] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9210] <... futex resumed>) = 0 [pid 9210] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9210] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9213] <... futex resumed>) = 1 [pid 9213] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9219] mkdir("./file0", 0777 [pid 9214] <... openat resumed>) = 3 [pid 9214] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9219] <... mkdir resumed>) = 0 [pid 9216] <... write resumed>) = 16777216 [pid 9213] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9210] <... futex resumed>) = 0 [pid 9210] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9210] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9213] <... futex resumed>) = 1 [pid 9213] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9213] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9210] <... futex resumed>) = 0 [pid 9213] openat(AT_FDCWD, ".log", O_RDONLY [ 264.876493][ T9220] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9220) [ 264.904343][ T9219] loop5: detected capacity change from 0 to 32768 [ 264.913845][ T9208] BTRFS info (device loop0): checking UUID tree [pid 9210] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9219] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9216] munmap(0x7ff2ab354000, 16777216 [pid 9214] <... futex resumed>) = 1 [pid 9210] <... futex resumed>) = 0 [pid 9208] <... mount resumed>) = 0 [pid 9213] <... openat resumed>) = 4 [pid 9211] <... futex resumed>) = 0 [pid 9210] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9213] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9211] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9213] <... futex resumed>) = 0 [pid 9211] <... futex resumed>) = 0 [pid 9210] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9213] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9211] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9210] <... futex resumed>) = 0 [pid 9213] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9210] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9213] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9213] <... futex resumed>) = 0 [pid 9210] exit_group(0) = ? [pid 9213] +++ exited with 0 +++ [pid 9210] +++ exited with 0 +++ [pid 9216] <... munmap resumed>) = 0 [pid 9214] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9216] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9214] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9208] <... openat resumed>) = 3 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9210, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=25 /* 0.25 s */} --- [pid 9216] <... openat resumed>) = 4 [pid 9214] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9208] chdir("./file0" [ 264.941560][ T27] audit: type=1804 audit(1680236948.412:739): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/123/.log" dev="sda1" ino=1159 res=1 errno=0 [ 264.951781][ T9219] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9219) [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 9216] ioctl(4, LOOP_SET_FD, 3 [pid 9214] <... futex resumed>) = 1 [pid 9211] <... futex resumed>) = 0 [pid 9214] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9211] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9208] <... chdir resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 9216] <... ioctl resumed>) = 0 [pid 9214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9211] <... futex resumed>) = 0 [pid 9208] ioctl(4, LOOP_CLR_FD [pid 9216] close(3 [pid 9214] openat(AT_FDCWD, ".log", O_RDONLY [pid 9211] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9208] <... ioctl resumed>) = 0 [pid 9219] <... mount resumed>) = -1 EEXIST (File exists) [pid 9216] <... close resumed>) = 0 [pid 9214] <... openat resumed>) = 4 [pid 9208] close(4 [pid 9219] ioctl(4, LOOP_CLR_FD [pid 9216] mkdir("./file0", 0777 [pid 9214] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9208] <... close resumed>) = 0 [pid 5080] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9216] <... mkdir resumed>) = 0 [pid 9214] <... futex resumed>) = 1 [pid 9211] <... futex resumed>) = 0 [pid 9208] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9216] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9214] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [ 264.993707][ T9216] loop1: detected capacity change from 0 to 32768 [ 265.005549][ T27] audit: type=1804 audit(1680236948.482:740): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/123/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 9211] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9208] <... futex resumed>) = 1 [pid 9206] <... futex resumed>) = 0 [pid 9220] <... ioctl resumed>) = 0 [pid 9214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9211] <... futex resumed>) = 0 [pid 9208] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9206] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9220] close(4 [pid 9214] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9211] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9206] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 9220] <... close resumed>) = 0 [pid 9214] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9208] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9206] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] fstat(3, [pid 9220] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9214] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9208] <... openat resumed>) = 4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9220] <... futex resumed>) = 1 [pid 9218] <... futex resumed>) = 0 [pid 9214] <... futex resumed>) = 1 [pid 9211] <... futex resumed>) = 0 [pid 9208] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 9220] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9218] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9214] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9211] exit_group(0 [pid 9208] <... futex resumed>) = 1 [pid 9206] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9218] <... futex resumed>) = 0 [pid 9214] <... futex resumed>) = ? [pid 9211] <... exit_group resumed>) = ? [pid 9208] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9220] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9218] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9214] +++ exited with 0 +++ [pid 9211] +++ exited with 0 +++ [pid 9206] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9211, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=27 /* 0.27 s */} --- [pid 9220] <... openat resumed>) = 3 [pid 9208] <... futex resumed>) = 0 [pid 9206] <... futex resumed>) = 1 [pid 5080] lstat("./123/binderfs", [pid 9220] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [ 265.038839][ T9216] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9216) [pid 9208] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9206] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9220] <... futex resumed>) = 1 [pid 9218] <... futex resumed>) = 0 [pid 9216] <... mount resumed>) = -1 EEXIST (File exists) [pid 5083] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] unlink("./123/binderfs" [pid 9220] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9218] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9216] ioctl(4, LOOP_CLR_FD [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... unlink resumed>) = 0 [pid 9220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9218] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9220] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9218] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9220] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] lstat("./123/file0", [pid 9220] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(3, [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9220] <... futex resumed>) = 1 [pid 9218] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9220] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9218] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9218] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9220] openat(AT_FDCWD, ".log", O_RDONLY [pid 9218] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 4 [pid 9220] <... openat resumed>) = 4 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] fstat(4, [ 265.097604][ T9208] BTRFS info (device loop0): balance: start -s [ 265.119439][ T27] audit: type=1804 audit(1680236948.592:741): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/123/.log" dev="sda1" ino=1164 res=1 errno=0 [pid 9220] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./123/binderfs", [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9220] <... futex resumed>) = 1 [pid 9218] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 9220] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9218] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9218] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 9220] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9218] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9220] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] close(4 [pid 9220] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 9220] <... futex resumed>) = 1 [pid 9218] <... futex resumed>) = 0 [pid 5080] rmdir("./123/file0" [pid 9220] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9218] exit_group(0 [pid 5080] <... rmdir resumed>) = 0 [pid 9220] <... futex resumed>) = ? [pid 9218] <... exit_group resumed>) = ? [pid 5080] umount2("./123/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9220] +++ exited with 0 +++ [pid 9218] +++ exited with 0 +++ [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./123/.log", [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9218, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5080] unlink("./123/.log" [pid 5081] <... restart_syscall resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3 [pid 9206] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./123/binderfs" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] rmdir("./123" [pid 9206] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 5081] fstat(3, [pid 5080] mkdir("./124", 0777 [pid 9206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 9206] <... mmap resumed>) = 0x7ff2ac333000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9206] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5083] lstat("./123/file0", [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... openat resumed>) = 3 [pid 9206] <... mprotect resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9206] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./123/binderfs", [pid 5080] close(3 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 5081] unlink("./123/binderfs" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9240 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./123/file0" [pid 9206] <... clone resumed>, parent_tid=[9239], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9239 [pid 5083] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... rmdir resumed>) = 0 [pid 9206] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 4 [pid 5081] umount2("./123/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9206] <... futex resumed>) = 0 [pid 5083] fstat(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9206] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] lstat("./123/.log", ./strace-static-x86_64: Process 9240 attached [pid 5083] getdents64(4, [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9240] set_robust_list(0x5555559d56e0, 24 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] unlink("./123/.log"./strace-static-x86_64: Process 9239 attached [pid 9240] <... set_robust_list resumed>) = 0 [pid 5083] getdents64(4, [pid 5081] <... unlink resumed>) = 0 [pid 9240] chdir("./124" [pid 9239] set_robust_list(0x7ff2ac3539e0, 24 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] getdents64(3, [pid 9240] <... chdir resumed>) = 0 [pid 9239] <... set_robust_list resumed>) = 0 [pid 5083] close(4 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9239] openat(AT_FDCWD, ".log", O_RDONLY [pid 5083] <... close resumed>) = 0 [ 265.155394][ T9208] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5081] close(3 [pid 9240] <... prctl resumed>) = 0 [pid 9239] <... openat resumed>) = 5 [pid 5083] rmdir("./123/file0" [pid 5081] <... close resumed>) = 0 [pid 9240] setpgid(0, 0 [pid 9239] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./123" [pid 9240] <... setpgid resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 9240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9239] <... futex resumed>) = 1 [pid 9206] <... futex resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] mkdir("./124", 0777 [pid 9240] <... openat resumed>) = 3 [pid 9239] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9206] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./123/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... mkdir resumed>) = 0 [pid 9240] write(3, "1000", 4 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9240] <... write resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 9240] close(3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 9240] <... close resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9240] symlink("/dev/binderfs", "./binderfs" [pid 9239] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9206] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 9240] <... symlink resumed>) = 0 [pid 9239] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9206] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] lstat("./123/.log", [pid 5081] <... close resumed>) = 0 [pid 9240] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [ 265.215638][ T27] audit: type=1804 audit(1680236948.682:742): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/122/file0/.log" dev="loop0" ino=263 res=1 errno=0 [ 265.244840][ T9208] BTRFS info (device loop0): balance: ended with status: 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9240] <... futex resumed>) = 0 [pid 9240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9241 [pid 9240] <... mmap resumed>) = 0x7ff2b3754000 [pid 9240] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9240] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9242], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9242 [pid 9240] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 ./strace-static-x86_64: Process 9241 attached [pid 9240] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] unlink("./123/.log"./strace-static-x86_64: Process 9242 attached [pid 9241] set_robust_list(0x5555559d56e0, 24 [pid 5083] <... unlink resumed>) = 0 [pid 9242] set_robust_list(0x7ff2b37749e0, 24 [pid 9241] <... set_robust_list resumed>) = 0 [pid 5083] getdents64(3, [pid 9242] <... set_robust_list resumed>) = 0 [pid 9241] chdir("./124" [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9242] memfd_create("syzkaller", 0 [pid 9241] <... chdir resumed>) = 0 [pid 5083] close(3 [pid 9242] <... memfd_create resumed>) = 3 [pid 9241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] <... close resumed>) = 0 [pid 9242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9241] <... prctl resumed>) = 0 [pid 5083] rmdir("./123" [pid 9242] <... mmap resumed>) = 0x7ff2ab354000 [pid 9241] setpgid(0, 0 [pid 5083] <... rmdir resumed>) = 0 [pid 9241] <... setpgid resumed>) = 0 [pid 5083] mkdir("./124", 0777 [pid 9241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9241] write(3, "1000", 4) = 4 [pid 9241] close(3) = 0 [pid 9241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9241] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... mkdir resumed>) = 0 [pid 9241] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9208] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5083] <... openat resumed>) = 3 [pid 9241] <... mmap resumed>) = 0x7ff2b3754000 [pid 9206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] ioctl(3, LOOP_CLR_FD [pid 9241] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9208] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9241] <... mprotect resumed>) = 0 [pid 9241] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9208] <... futex resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9208] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] close(3 [pid 9241] <... clone resumed>, parent_tid=[9243], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9243 [pid 9241] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] <... close resumed>) = 0 [pid 9241] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9243 attached [pid 9243] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9243] memfd_create("syzkaller", 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9243] <... memfd_create resumed>) = 3 [ 265.266134][ T9239] BTRFS info (device loop0): scrub: started on devid 1 [ 265.297158][ T9239] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [pid 9243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9244 ./strace-static-x86_64: Process 9244 attached [pid 9239] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9244] set_robust_list(0x5555559d56e0, 24 [pid 9239] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9244] <... set_robust_list resumed>) = 0 [pid 9239] <... futex resumed>) = 0 [pid 9244] chdir("./124" [pid 9239] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9244] <... chdir resumed>) = 0 [pid 9244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9206] exit_group(0 [pid 9244] <... prctl resumed>) = 0 [pid 9239] <... futex resumed>) = ? [pid 9208] <... futex resumed>) = ? [pid 9206] <... exit_group resumed>) = ? [pid 9208] +++ exited with 0 +++ [pid 9239] +++ exited with 0 +++ [pid 9244] setpgid(0, 0 [pid 9206] +++ exited with 0 +++ [pid 9244] <... setpgid resumed>) = 0 [pid 9244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9206, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=25 /* 0.25 s */} --- [pid 9244] <... openat resumed>) = 3 [pid 5078] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9244] write(3, "1000", 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9244] <... write resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9244] close(3 [pid 5078] <... openat resumed>) = 3 [pid 9244] <... close resumed>) = 0 [pid 5078] fstat(3, [pid 9244] symlink("/dev/binderfs", "./binderfs" [pid 9219] <... ioctl resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9244] <... symlink resumed>) = 0 [pid 5078] getdents64(3, [pid 9244] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9244] <... futex resumed>) = 0 [pid 5078] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9244] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] lstat("./122/binderfs", [pid 9244] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9244] <... mprotect resumed>) = 0 [pid 5078] unlink("./122/binderfs" [pid 9244] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... unlink resumed>) = 0 [pid 5078] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9245 attached [pid 9244] <... clone resumed>, parent_tid=[9245], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9245 [pid 9245] set_robust_list(0x7ff2b37749e0, 24 [pid 9244] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... set_robust_list resumed>) = 0 [pid 9244] <... futex resumed>) = 0 [pid 9245] memfd_create("syzkaller", 0 [pid 9244] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9216] <... ioctl resumed>) = 0 [pid 9245] <... memfd_create resumed>) = 3 [pid 9216] close(4 [pid 9245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9216] <... close resumed>) = 0 [pid 9245] <... mmap resumed>) = 0x7ff2ab354000 [pid 9216] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9215] <... futex resumed>) = 0 [pid 9216] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9215] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9215] <... futex resumed>) = 0 [pid 9216] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9215] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9216] <... openat resumed>) = 3 [pid 9216] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9215] <... futex resumed>) = 0 [pid 9216] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9215] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9215] <... futex resumed>) = 0 [pid 9216] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9215] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9216] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9216] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9215] <... futex resumed>) = 0 [pid 9219] close(4 [pid 9216] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9215] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9219] <... close resumed>) = 0 [pid 9216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9215] <... futex resumed>) = 0 [pid 9219] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9216] openat(AT_FDCWD, ".log", O_RDONLY [pid 9215] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9219] <... futex resumed>) = 1 [pid 9217] <... futex resumed>) = 0 [pid 9216] <... openat resumed>) = 4 [pid 9219] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9217] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9216] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9219] <... openat resumed>) = 3 [pid 9217] <... futex resumed>) = 0 [pid 9216] <... futex resumed>) = 1 [pid 9215] <... futex resumed>) = 0 [pid 9219] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9217] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9216] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9215] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9219] <... futex resumed>) = 0 [pid 9217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9215] <... futex resumed>) = 0 [pid 9219] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9217] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9216] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9215] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9217] <... futex resumed>) = 0 [pid 9216] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9219] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9217] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9216] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9219] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9216] <... futex resumed>) = 1 [pid 9215] <... futex resumed>) = 0 [pid 9219] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9216] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9215] exit_group(0 [pid 9219] <... futex resumed>) = 1 [pid 9217] <... futex resumed>) = 0 [pid 9219] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9217] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9217] <... futex resumed>) = 0 [pid 9219] openat(AT_FDCWD, ".log", O_RDONLY [pid 9217] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9216] <... futex resumed>) = ? [pid 9215] <... exit_group resumed>) = ? [pid 9219] <... openat resumed>) = 4 [pid 9216] +++ exited with 0 +++ [pid 9219] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9215] +++ exited with 0 +++ [pid 9219] <... futex resumed>) = 1 [pid 9217] <... futex resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9215, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 9219] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9217] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 9219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9217] <... futex resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 9219] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9217] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9219] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9219] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9219] <... futex resumed>) = 1 [pid 9217] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9219] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9217] exit_group(0 [pid 5079] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9219] <... futex resumed>) = ? [pid 9217] <... exit_group resumed>) = ? [pid 5079] <... openat resumed>) = 3 [pid 9219] +++ exited with 0 +++ [pid 9217] +++ exited with 0 +++ [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9217, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=31 /* 0.31 s */} --- [pid 5079] getdents64(3, [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5079] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./123/binderfs", [pid 5084] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] unlink("./123/binderfs" [pid 5084] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... unlink resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5079] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] fstat(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] lstat("./123/file0", [pid 5084] getdents64(3, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] lstat("./123/binderfs", [pid 5079] <... openat resumed>) = 4 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] fstat(4, [pid 5084] unlink("./123/binderfs" [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5079] getdents64(4, [pid 5084] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 5084] lstat("./123/file0", [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] close(4 [pid 5084] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./123/file0" [pid 5084] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... rmdir resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5079] umount2("./123/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] fstat(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] lstat("./123/.log", [pid 5084] getdents64(4, [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] unlink("./123/.log" [pid 5084] getdents64(4, [pid 5079] <... unlink resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] getdents64(3, [pid 5084] close(4 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... close resumed>) = 0 [pid 5079] close(3 [pid 5084] rmdir("./123/file0" [pid 5079] <... close resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5079] rmdir("./123" [pid 5084] umount2("./123/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... rmdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] mkdir("./124", 0777 [pid 5084] lstat("./123/.log", [pid 5079] <... mkdir resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] unlink("./123/.log" [pid 5079] <... openat resumed>) = 3 [pid 5084] <... unlink resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5084] getdents64(3, [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 5084] close(3 [pid 5079] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] rmdir("./123") = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9246 [pid 5084] mkdir("./124", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9247 ./strace-static-x86_64: Process 9246 attached [pid 9246] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9246] chdir("./124") = 0 [pid 9246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9246] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 9247 attached [pid 9246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9247] set_robust_list(0x5555559d56e0, 24 [pid 9246] <... openat resumed>) = 3 [pid 9247] <... set_robust_list resumed>) = 0 [pid 9246] write(3, "1000", 4) = 4 [pid 9247] chdir("./124" [pid 9246] close(3 [pid 9247] <... chdir resumed>) = 0 [pid 9246] <... close resumed>) = 0 [pid 9247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9246] symlink("/dev/binderfs", "./binderfs" [pid 9247] <... prctl resumed>) = 0 [pid 9246] <... symlink resumed>) = 0 [pid 9247] setpgid(0, 0 [pid 9246] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9247] <... setpgid resumed>) = 0 [pid 9246] <... futex resumed>) = 0 [pid 9247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9247] <... openat resumed>) = 3 [pid 9246] <... mmap resumed>) = 0x7ff2b3754000 [pid 9247] write(3, "1000", 4 [pid 9246] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9247] <... write resumed>) = 4 [pid 9246] <... mprotect resumed>) = 0 [pid 9247] close(3 [pid 9246] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9247] <... close resumed>) = 0 [pid 9247] symlink("/dev/binderfs", "./binderfs" [pid 9246] <... clone resumed>, parent_tid=[9248], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9248 [pid 9246] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9246] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9248 attached [pid 9248] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9247] <... symlink resumed>) = 0 [pid 9248] memfd_create("syzkaller", 0 [pid 9247] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9248] <... memfd_create resumed>) = 3 [pid 9247] <... futex resumed>) = 0 [pid 9248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9248] <... mmap resumed>) = 0x7ff2ab354000 [pid 9247] <... mmap resumed>) = 0x7ff2b3754000 [pid 9247] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9247] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9249], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9249 [pid 9247] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9247] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9249 attached [pid 9249] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9249] memfd_create("syzkaller", 0) = 3 [pid 9249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] <... umount2 resumed>) = 0 [pid 5078] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./122/file0") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./122") = 0 [pid 5078] mkdir("./123", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9250 ./strace-static-x86_64: Process 9250 attached [pid 9250] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9250] chdir("./123") = 0 [pid 9250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9250] setpgid(0, 0) = 0 [pid 9250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9250] write(3, "1000", 4) = 4 [pid 9250] close(3) = 0 [pid 9250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9250] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9250] <... mmap resumed>) = 0x7ff2b3754000 [pid 9250] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9250] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9251], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9251 [pid 9250] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9250] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9251 attached [pid 9251] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9251] memfd_create("syzkaller", 0) = 3 [pid 9251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9243] <... write resumed>) = 16777216 [pid 9243] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9243] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9243] close(3) = 0 [pid 9243] mkdir("./file0", 0777) = 0 [pid 9243] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9242] <... write resumed>) = 16777216 [pid 9242] munmap(0x7ff2ab354000, 16777216 [pid 9251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9242] <... munmap resumed>) = 0 [pid 9242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 266.218377][ T9243] loop3: detected capacity change from 0 to 32768 [ 266.255589][ T9243] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor373 (9243) [pid 9242] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9242] close(3) = 0 [pid 9242] mkdir("./file0", 0777) = 0 [pid 9242] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9245] <... write resumed>) = 16777216 [pid 9245] munmap(0x7ff2ab354000, 16777216 [pid 9242] <... mount resumed>) = -1 EEXIST (File exists) [pid 9242] ioctl(4, LOOP_CLR_FD [pid 9245] <... munmap resumed>) = 0 [pid 9245] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 266.269630][ T9242] loop2: detected capacity change from 0 to 32768 [ 266.295513][ T9242] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9242) [ 266.306739][ T9243] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9245] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9245] close(3) = 0 [pid 9245] mkdir("./file0", 0777) = 0 [ 266.337599][ T9243] BTRFS info (device loop3): setting nodatasum [ 266.344289][ T9245] loop4: detected capacity change from 0 to 32768 [ 266.351726][ T9243] BTRFS info (device loop3): allowing degraded mounts [ 266.373140][ T9245] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9245) [pid 9245] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 266.396421][ T9243] BTRFS info (device loop3): use zlib compression, level 3 [ 266.425686][ T9243] BTRFS info (device loop3): using free space tree [pid 9245] ioctl(4, LOOP_CLR_FD [pid 9249] <... write resumed>) = 16777216 [pid 9249] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9249] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9249] ioctl(4, LOOP_SET_FD, 3 [pid 9248] <... write resumed>) = 16777216 [pid 9249] <... ioctl resumed>) = 0 [pid 9249] close(3) = 0 [pid 9249] mkdir("./file0", 0777) = 0 [pid 9249] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9248] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9249] <... mount resumed>) = -1 EEXIST (File exists) [pid 9249] ioctl(4, LOOP_CLR_FD [pid 9248] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 266.521208][ T9249] loop5: detected capacity change from 0 to 32768 [ 266.534670][ T9249] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9249) [pid 9248] ioctl(4, LOOP_SET_FD, 3 [pid 9251] <... write resumed>) = 16777216 [pid 9248] <... ioctl resumed>) = 0 [pid 9242] <... ioctl resumed>) = 0 [pid 9251] munmap(0x7ff2ab354000, 16777216 [pid 9248] close(3 [pid 9242] close(4 [pid 9251] <... munmap resumed>) = 0 [pid 9242] <... close resumed>) = 0 [pid 9251] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9248] <... close resumed>) = 0 [pid 9242] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9251] <... openat resumed>) = 4 [pid 9248] mkdir("./file0", 0777 [pid 9242] <... futex resumed>) = 1 [pid 9240] <... futex resumed>) = 0 [pid 9251] ioctl(4, LOOP_SET_FD, 3 [ 266.570340][ T9248] loop1: detected capacity change from 0 to 32768 [ 266.600407][ T9243] BTRFS info (device loop3): enabling ssd optimizations [ 266.608045][ T9243] BTRFS info (device loop3): auto enabling async discard [pid 9248] <... mkdir resumed>) = 0 [pid 9242] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9240] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9240] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9248] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9242] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9251] <... ioctl resumed>) = 0 [pid 9242] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9243] <... mount resumed>) = 0 [pid 9242] <... futex resumed>) = 1 [pid 9240] <... futex resumed>) = 0 [pid 9243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9242] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9240] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9243] <... openat resumed>) = 3 [pid 9242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9240] <... futex resumed>) = 0 [pid 9251] close(3 [pid 9243] chdir("./file0" [pid 9242] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9240] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9251] <... close resumed>) = 0 [pid 9243] <... chdir resumed>) = 0 [pid 9242] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9251] mkdir("./file0", 0777 [pid 9243] ioctl(4, LOOP_CLR_FD [pid 9242] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9251] <... mkdir resumed>) = 0 [pid 9243] <... ioctl resumed>) = 0 [pid 9242] <... futex resumed>) = 1 [pid 9240] <... futex resumed>) = 0 [pid 9251] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9249] <... ioctl resumed>) = 0 [pid 9248] <... mount resumed>) = -1 EEXIST (File exists) [pid 9243] close(4 [ 266.629206][ T9243] BTRFS info (device loop3): checking UUID tree [ 266.635600][ T9251] loop0: detected capacity change from 0 to 32768 [ 266.647312][ T9248] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9248) [pid 9242] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9240] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9249] close(4 [pid 9248] ioctl(4, LOOP_CLR_FD [pid 9245] <... ioctl resumed>) = 0 [pid 9243] <... close resumed>) = 0 [pid 9242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9249] <... close resumed>) = 0 [pid 9245] close(4 [pid 9243] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9249] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... close resumed>) = 0 [pid 9243] <... futex resumed>) = 1 [pid 9249] <... futex resumed>) = 1 [pid 9247] <... futex resumed>) = 0 [pid 9245] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9243] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9249] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9247] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... futex resumed>) = 1 [pid 9244] <... futex resumed>) = 0 [pid 9249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9247] <... futex resumed>) = 0 [pid 9245] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9244] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9249] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9247] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9244] <... futex resumed>) = 0 [pid 9249] <... openat resumed>) = 3 [pid 9245] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9244] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9249] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... openat resumed>) = 3 [pid 9249] <... futex resumed>) = 1 [pid 9247] <... futex resumed>) = 0 [pid 9245] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9249] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9247] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... futex resumed>) = 1 [pid 9244] <... futex resumed>) = 0 [pid 9249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9247] <... futex resumed>) = 0 [pid 9245] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9244] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9249] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9247] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9244] <... futex resumed>) = 0 [pid 9249] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9245] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9244] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9249] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9249] <... futex resumed>) = 1 [pid 9247] <... futex resumed>) = 0 [pid 9245] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9249] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9247] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... futex resumed>) = 1 [pid 9244] <... futex resumed>) = 0 [pid 9249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9247] <... futex resumed>) = 0 [pid 9245] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9244] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9249] openat(AT_FDCWD, ".log", O_RDONLY [pid 9247] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9244] <... futex resumed>) = 0 [pid 9249] <... openat resumed>) = 4 [pid 9245] openat(AT_FDCWD, ".log", O_RDONLY [pid 9244] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9240] <... futex resumed>) = 0 [pid 9242] openat(AT_FDCWD, ".log", O_RDONLY [pid 9241] <... futex resumed>) = 0 [pid 9249] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... openat resumed>) = 4 [pid 9240] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9249] <... futex resumed>) = 1 [pid 9247] <... futex resumed>) = 0 [pid 9245] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9242] <... openat resumed>) = 4 [pid 9241] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9249] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9247] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... futex resumed>) = 1 [pid 9244] <... futex resumed>) = 0 [pid 9243] <... futex resumed>) = 0 [pid 9242] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9241] <... futex resumed>) = 1 [pid 9249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9247] <... futex resumed>) = 0 [pid 9245] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9244] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9243] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9242] <... futex resumed>) = 1 [pid 9249] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9247] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9244] <... futex resumed>) = 0 [pid 9243] <... openat resumed>) = 4 [pid 9242] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9241] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9240] <... futex resumed>) = 0 [pid 9249] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9245] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9244] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9243] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9240] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9249] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9245] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9243] <... futex resumed>) = 0 [pid 9241] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9242] <... futex resumed>) = 0 [pid 9240] <... futex resumed>) = 1 [pid 9249] <... futex resumed>) = 1 [pid 9247] <... futex resumed>) = 0 [pid 9245] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9243] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9242] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9241] <... futex resumed>) = 0 [pid 9240] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9249] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9247] exit_group(0 [pid 9245] <... futex resumed>) = 1 [pid 9244] <... futex resumed>) = 0 [pid 9249] <... futex resumed>) = ? [pid 9247] <... exit_group resumed>) = ? [pid 9245] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9244] exit_group(0 [pid 9251] <... mount resumed>) = -1 EEXIST (File exists) [pid 9249] +++ exited with 0 +++ [pid 9247] +++ exited with 0 +++ [pid 9245] <... futex resumed>) = ? [pid 9244] <... exit_group resumed>) = ? [pid 9242] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9241] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9251] ioctl(4, LOOP_CLR_FD [pid 9245] +++ exited with 0 +++ [pid 9244] +++ exited with 0 +++ [pid 9242] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9247, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9244, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=30 /* 0.30 s */} --- [pid 9242] <... futex resumed>) = 1 [pid 9240] <... futex resumed>) = 0 [pid 9240] exit_group(0) = ? [pid 9242] +++ exited with 0 +++ [pid 9240] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9240, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5083] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 266.696649][ T9251] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9251) [ 266.724958][ T9243] BTRFS info (device loop3): balance: start -s [pid 5080] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... openat resumed>) = 3 [pid 5083] fstat(3, [pid 5080] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] fstat(3, [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, [pid 5080] <... openat resumed>) = 3 [pid 5084] getdents64(3, [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] fstat(3, [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] lstat("./124/binderfs", [pid 5083] lstat("./124/binderfs", [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./124/binderfs" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] unlink("./124/binderfs" [pid 5084] <... unlink resumed>) = 0 [pid 5080] lstat("./124/binderfs", [pid 5083] <... unlink resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] unlink("./124/binderfs" [pid 5084] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... unlink resumed>) = 0 [pid 5080] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./124/file0", [pid 5084] lstat("./124/file0", [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./124/file0") = 0 [pid 5080] umount2("./124/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] lstat("./124/.log", [pid 5084] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... openat resumed>) = 4 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./124/.log" [pid 5084] <... openat resumed>) = 4 [pid 5083] fstat(4, [pid 5080] <... unlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5084] fstat(4, [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, [pid 5080] close(3) = 0 [pid 5080] rmdir("./124") = 0 [pid 9241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] getdents64(4, [pid 5080] mkdir("./125", 0777 [pid 9241] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9270 ./strace-static-x86_64: Process 9270 attached [pid 9241] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 5083] getdents64(4, [pid 9270] set_robust_list(0x5555559d56e0, 24 [pid 9241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9270] <... set_robust_list resumed>) = 0 [pid 9270] chdir("./125") = 0 [pid 9270] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9270] setpgid(0, 0 [pid 9241] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] close(4 [pid 5083] close(4 [pid 9241] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 9270] <... setpgid resumed>) = 0 [ 266.747367][ T9243] BTRFS info (device loop3): relocating block group 1048576 flags system [ 266.783585][ T9243] BTRFS info (device loop3): balance: ended with status: 0 [pid 9270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9243] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9241] <... mprotect resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 9270] write(3, "1000", 4) = 4 [pid 9270] close(3) = 0 [pid 9270] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9270] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9243] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9241] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] rmdir("./124/file0" [pid 5083] rmdir("./124/file0" [pid 9270] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9270] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9271], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9271 [pid 9243] <... futex resumed>) = 0 [pid 9270] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9243] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9241] <... clone resumed>, parent_tid=[9272], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9272 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 9270] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9241] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./124/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] umount2("./124/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9241] <... futex resumed>) = 0 [pid 9241] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./124/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] lstat("./124/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./124/.log") = 0 [pid 5084] unlink("./124/.log" [pid 5083] getdents64(3, [pid 5084] <... unlink resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] getdents64(3, [pid 5083] close(3 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] <... close resumed>) = 0 [pid 5084] close(3 [pid 5083] rmdir("./124" [pid 5084] <... close resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5084] rmdir("./124") = 0 [pid 5083] mkdir("./125", 0777 [pid 5084] mkdir("./125", 0777 [pid 5083] <... mkdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5084] <... openat resumed>) = 3 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] close(3./strace-static-x86_64: Process 9272 attached [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] <... close resumed>) = 0 ./strace-static-x86_64: Process 9271 attached [pid 9271] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9272] set_robust_list(0x7ff2ac3539e0, 24 [pid 9271] memfd_create("syzkaller", 0 [pid 5084] close(3 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9271] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 9273 attached [pid 9272] <... set_robust_list resumed>) = 0 [pid 9271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... close resumed>) = 0 [pid 9271] <... mmap resumed>) = 0x7ff2ab354000 [pid 9273] set_robust_list(0x5555559d56e0, 24 [pid 9272] openat(AT_FDCWD, ".log", O_RDONLY [pid 9251] <... ioctl resumed>) = 0 [pid 9241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9273 [pid 9273] <... set_robust_list resumed>) = 0 [pid 9272] <... openat resumed>) = 5 [pid 9241] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9243] <... futex resumed>) = 0 [pid 9273] chdir("./125" [pid 9243] ioctl(-1, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9272] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9241] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9243] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 9243] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9273] <... chdir resumed>) = 0 [pid 9272] <... futex resumed>) = 0 [pid 9243] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9272] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9241] exit_group(0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9274 [pid 9241] <... exit_group resumed>) = ? [pid 9243] <... futex resumed>) = ? [pid 9273] <... prctl resumed>) = 0 [pid 9243] +++ exited with 0 +++ [pid 9273] setpgid(0, 0 [pid 9272] <... futex resumed>) = ? [pid 9273] <... setpgid resumed>) = 0 [pid 9272] +++ exited with 0 +++ [pid 9241] +++ exited with 0 +++ [pid 9273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9241, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=33 /* 0.33 s */} --- [pid 5081] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9273] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9273] write(3, "1000", 4 [pid 5081] <... openat resumed>) = 3 [pid 5081] fstat(3, [pid 9273] <... write resumed>) = 4 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9273] close(3 [pid 5081] getdents64(3, [pid 9273] <... close resumed>) = 0 [pid 9273] symlink("/dev/binderfs", "./binderfs" [pid 9251] close(4 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9273] <... symlink resumed>) = 0 [pid 5081] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9273] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9273] <... futex resumed>) = 0 [pid 5081] lstat("./124/binderfs", [pid 9273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9273] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] unlink("./124/binderfs" [pid 9273] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9251] <... close resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 9274 attached [pid 9273] <... mprotect resumed>) = 0 [pid 9251] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9274] set_robust_list(0x5555559d56e0, 24 [pid 9273] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9251] <... futex resumed>) = 1 [pid 9250] <... futex resumed>) = 0 [pid 9251] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9250] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9274] <... set_robust_list resumed>) = 0 [pid 9250] <... futex resumed>) = 0 [pid 9250] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9275 attached [pid 9274] chdir("./125" [pid 9273] <... clone resumed>, parent_tid=[9275], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9275 [pid 9251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9275] set_robust_list(0x7ff2b37749e0, 24 [pid 9274] <... chdir resumed>) = 0 [pid 9273] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9275] <... set_robust_list resumed>) = 0 [pid 9274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9273] <... futex resumed>) = 0 [pid 9251] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9273] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9251] <... openat resumed>) = 3 [pid 9275] memfd_create("syzkaller", 0 [pid 9274] <... prctl resumed>) = 0 [pid 9275] <... memfd_create resumed>) = 3 [pid 9274] setpgid(0, 0 [pid 9275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9251] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9274] <... setpgid resumed>) = 0 [pid 9274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9275] <... mmap resumed>) = 0x7ff2ab354000 [pid 9274] <... openat resumed>) = 3 [pid 9251] <... futex resumed>) = 1 [pid 9250] <... futex resumed>) = 0 [pid 9250] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9250] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9274] write(3, "1000", 4 [pid 9251] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9274] <... write resumed>) = 4 [pid 9251] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9274] close(3 [pid 9251] <... futex resumed>) = 1 [pid 9250] <... futex resumed>) = 0 [pid 9274] <... close resumed>) = 0 [pid 9251] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9250] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9250] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9274] symlink("/dev/binderfs", "./binderfs" [pid 9251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9274] <... symlink resumed>) = 0 [pid 9251] openat(AT_FDCWD, ".log", O_RDONLY [pid 9274] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9251] <... openat resumed>) = 4 [pid 9274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9251] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9250] <... futex resumed>) = 0 [pid 9274] <... mmap resumed>) = 0x7ff2b3754000 [pid 9251] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9250] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9250] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9274] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9251] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9274] <... mprotect resumed>) = 0 [pid 9251] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9274] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9251] <... futex resumed>) = 1 [pid 9250] <... futex resumed>) = 0 [pid 9251] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9250] exit_group(0 [pid 9274] <... clone resumed>, parent_tid=[9276], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9276 [pid 9251] <... futex resumed>) = ? [pid 9250] <... exit_group resumed>) = ? [pid 9274] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9251] +++ exited with 0 +++ [pid 9250] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9250, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 9274] <... futex resumed>) = 0 [pid 9274] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9276 attached [pid 5078] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./123/binderfs") = 0 [pid 5078] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./123/file0", [pid 9276] set_robust_list(0x7ff2b37749e0, 24 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9276] <... set_robust_list resumed>) = 0 [pid 5078] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9276] memfd_create("syzkaller", 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9276] <... memfd_create resumed>) = 3 [pid 5078] <... openat resumed>) = 4 [pid 9276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] fstat(4, [pid 9276] <... mmap resumed>) = 0x7ff2ab354000 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./123/file0") = 0 [pid 5078] umount2("./123/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./123/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./123/.log") = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./123") = 0 [pid 5078] mkdir("./124", 0777) = 0 [pid 9248] <... ioctl resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9248] close(4 [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9248] <... close resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9248] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9246] <... futex resumed>) = 0 [pid 5078] close(3 [pid 9248] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9246] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9248] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9246] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9248] <... openat resumed>) = 3 [pid 9246] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9248] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9248] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9277 [pid 9246] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9246] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9248] <... futex resumed>) = 0 [pid 9248] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9248] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9248] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9246] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9248] <... futex resumed>) = 0 [pid 9246] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9248] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9248] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9248] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9246] <... futex resumed>) = 0 [pid 9246] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9248] <... futex resumed>) = 0 [pid 9246] <... futex resumed>) = 1 [pid 9248] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9246] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9248] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9248] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9246] <... futex resumed>) = 0 [pid 9248] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9246] exit_group(0 [pid 9248] <... futex resumed>) = ? [pid 9246] <... exit_group resumed>) = ? [pid 9248] +++ exited with 0 +++ ./strace-static-x86_64: Process 9277 attached [pid 9246] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = 0 [pid 9277] set_robust_list(0x5555559d56e0, 24 [pid 5081] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9277] <... set_robust_list resumed>) = 0 [pid 5081] lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 9277] chdir("./124" [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9246, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=24 /* 0.24 s */} --- [pid 9277] <... chdir resumed>) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./124/file0" [pid 9277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... rmdir resumed>) = 0 [pid 5079] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9277] <... prctl resumed>) = 0 [pid 5081] getdents64(3, [pid 9277] setpgid(0, 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3) = 0 [pid 5081] rmdir("./124") = 0 [pid 9277] <... setpgid resumed>) = 0 [pid 5081] mkdir("./125", 0777 [pid 5079] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = 0 [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... openat resumed>) = 3 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9278 [pid 9277] <... openat resumed>) = 3 [pid 5079] fstat(3, ./strace-static-x86_64: Process 9278 attached [pid 9278] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9278] chdir("./125") = 0 [pid 9278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9278] setpgid(0, 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9277] write(3, "1000", 4 [pid 5079] getdents64(3, [pid 9278] <... setpgid resumed>) = 0 [pid 9277] <... write resumed>) = 4 [pid 9278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9277] close(3 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9277] <... close resumed>) = 0 [pid 5079] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9278] <... openat resumed>) = 3 [pid 9277] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9278] write(3, "1000", 4) = 4 [pid 9277] <... symlink resumed>) = 0 [pid 5079] lstat("./124/binderfs", [pid 9277] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9278] close(3 [pid 9277] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9278] <... close resumed>) = 0 [pid 9277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5079] unlink("./124/binderfs" [pid 9278] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9277] <... mmap resumed>) = 0x7ff2b3754000 [pid 9278] <... futex resumed>) = 0 [pid 9278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9278] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9277] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... unlink resumed>) = 0 [pid 9278] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9279], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9279 [pid 9278] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9277] <... mprotect resumed>) = 0 [pid 5079] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9278] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9277] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9280 attached [pid 5079] lstat("./124/file0", ./strace-static-x86_64: Process 9279 attached [pid 9280] set_robust_list(0x7ff2b37749e0, 24 [pid 9277] <... clone resumed>, parent_tid=[9280], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9280 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9277] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9280] <... set_robust_list resumed>) = 0 [pid 9280] memfd_create("syzkaller", 0 [pid 9279] set_robust_list(0x7ff2b37749e0, 24 [pid 9277] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9279] <... set_robust_list resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9280] <... memfd_create resumed>) = 3 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] close(4 [pid 9279] memfd_create("syzkaller", 0 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./124/file0" [pid 9280] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] <... rmdir resumed>) = 0 [pid 9279] <... memfd_create resumed>) = 3 [pid 5079] umount2("./124/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./124/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] unlink("./124/.log" [pid 9279] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] <... unlink resumed>) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./124") = 0 [pid 5079] mkdir("./125", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9281 ./strace-static-x86_64: Process 9281 attached [pid 9281] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9281] chdir("./125") = 0 [pid 9281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9281] setpgid(0, 0) = 0 [pid 9281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9281] write(3, "1000", 4) = 4 [pid 9281] close(3) = 0 [pid 9281] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9281] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9281] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9281] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9282], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9282 [pid 9281] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9281] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 9282 attached [pid 9282] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9282] memfd_create("syzkaller", 0) = 3 [pid 9282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9276] <... write resumed>) = 16777216 [pid 9276] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9276] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9276] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9276] close(3) = 0 [pid 9276] mkdir("./file0", 0777) = 0 [pid 9276] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9271] <... write resumed>) = 16777216 [pid 9271] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9271] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 267.840305][ T9276] loop5: detected capacity change from 0 to 32768 [ 267.858822][ T9276] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (9276) [pid 9271] ioctl(4, LOOP_SET_FD, 3 [pid 9275] <... write resumed>) = 16777216 [pid 9271] <... ioctl resumed>) = 0 [pid 9271] close(3) = 0 [pid 9271] mkdir("./file0", 0777) = 0 [pid 9275] munmap(0x7ff2ab354000, 16777216 [pid 9271] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9275] <... munmap resumed>) = 0 [ 267.910127][ T9271] loop2: detected capacity change from 0 to 32768 [ 267.931178][ T9276] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9275] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9275] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9275] close(3) = 0 [pid 9275] mkdir("./file0", 0777) = 0 [pid 9275] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9271] <... mount resumed>) = -1 EEXIST (File exists) [pid 9271] ioctl(4, LOOP_CLR_FD [pid 9275] <... mount resumed>) = -1 EEXIST (File exists) [ 267.952531][ T9271] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9271) [ 267.965079][ T9275] loop4: detected capacity change from 0 to 32768 [ 267.971827][ T9276] BTRFS info (device loop5): setting nodatasum [ 267.978592][ T9275] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9275) [ 267.985318][ T9276] BTRFS info (device loop5): allowing degraded mounts [pid 9275] ioctl(4, LOOP_CLR_FD [pid 9280] <... write resumed>) = 16777216 [ 268.016083][ T9276] BTRFS info (device loop5): use zlib compression, level 3 [ 268.042517][ T9276] BTRFS info (device loop5): using free space tree [pid 9280] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9280] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9280] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9280] close(3) = 0 [pid 9280] mkdir("./file0", 0777) = 0 [pid 9280] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9282] <... write resumed>) = 16777216 [pid 9282] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9282] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 268.110416][ T9280] loop0: detected capacity change from 0 to 32768 [ 268.145894][ T9280] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9280) [pid 9282] ioctl(4, LOOP_SET_FD, 3 [pid 9271] <... ioctl resumed>) = 0 [pid 9271] close(4 [pid 9282] <... ioctl resumed>) = 0 [pid 9280] <... mount resumed>) = -1 EEXIST (File exists) [pid 9279] <... write resumed>) = 16777216 [pid 9271] <... close resumed>) = 0 [pid 9282] close(3 [pid 9280] ioctl(4, LOOP_CLR_FD [pid 9279] munmap(0x7ff2ab354000, 16777216 [pid 9271] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9282] <... close resumed>) = 0 [pid 9271] <... futex resumed>) = 1 [pid 9270] <... futex resumed>) = 0 [pid 9282] mkdir("./file0", 0777 [pid 9270] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9270] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9279] <... munmap resumed>) = 0 [pid 9271] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9282] <... mkdir resumed>) = 0 [pid 9271] <... openat resumed>) = 3 [pid 9271] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9282] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9271] <... futex resumed>) = 1 [pid 9270] <... futex resumed>) = 0 [pid 9270] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9271] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9270] <... futex resumed>) = 0 [pid 9270] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9271] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9271] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9282] <... mount resumed>) = -1 EEXIST (File exists) [pid 9279] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9271] <... futex resumed>) = 1 [pid 9270] <... futex resumed>) = 0 [pid 9282] ioctl(4, LOOP_CLR_FD [pid 9279] <... openat resumed>) = 4 [pid 9271] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9270] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9279] ioctl(4, LOOP_SET_FD, 3 [pid 9271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9270] <... futex resumed>) = 0 [ 268.164535][ T9282] loop1: detected capacity change from 0 to 32768 [ 268.199596][ T9282] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9282) [pid 9279] <... ioctl resumed>) = 0 [pid 9271] openat(AT_FDCWD, ".log", O_RDONLY [pid 9270] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9279] close(3 [pid 9271] <... openat resumed>) = 4 [pid 9279] <... close resumed>) = 0 [pid 9271] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9279] mkdir("./file0", 0777 [pid 9271] <... futex resumed>) = 1 [pid 9270] <... futex resumed>) = 0 [pid 9279] <... mkdir resumed>) = 0 [pid 9271] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9270] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9279] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9271] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9270] <... futex resumed>) = 0 [pid 9271] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9270] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9271] <... futex resumed>) = 0 [pid 9270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9271] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9270] exit_group(0 [pid 9271] <... futex resumed>) = ? [pid 9270] <... exit_group resumed>) = ? [pid 9271] +++ exited with 0 +++ [pid 9270] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9270, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=27 /* 0.27 s */} --- [ 268.215910][ T9279] loop3: detected capacity change from 0 to 32768 [ 268.220025][ T9276] BTRFS info (device loop5): enabling ssd optimizations [ 268.230396][ T9276] BTRFS info (device loop5): auto enabling async discard [ 268.247511][ T9279] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9279) [pid 5080] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./125/binderfs") = 0 [pid 9275] <... ioctl resumed>) = 0 [pid 5080] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9275] close(4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9275] <... close resumed>) = 0 [pid 5080] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 9275] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4 [pid 9275] <... futex resumed>) = 1 [pid 9273] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./125/file0" [pid 9275] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9273] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 9275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9273] <... futex resumed>) = 0 [pid 5080] umount2("./125/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./125/.log", [pid 9275] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9273] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9279] <... mount resumed>) = -1 EEXIST (File exists) [pid 5080] unlink("./125/.log" [pid 9279] ioctl(4, LOOP_CLR_FD [pid 5080] <... unlink resumed>) = 0 [pid 9275] <... openat resumed>) = 3 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./125") = 0 [pid 5080] mkdir("./126", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 9276] <... mount resumed>) = 0 [pid 9275] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9300 [pid 9276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9275] <... futex resumed>) = 1 [pid 9273] <... futex resumed>) = 0 [pid 9273] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9276] <... openat resumed>) = 3 [pid 9275] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9273] <... futex resumed>) = 0 [ 268.277213][ T9276] BTRFS info (device loop5): checking UUID tree [pid 9276] chdir("./file0" [pid 9275] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9273] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9276] <... chdir resumed>) = 0 [pid 9275] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 9300 attached [pid 9276] ioctl(4, LOOP_CLR_FD [pid 9300] set_robust_list(0x5555559d56e0, 24 [pid 9275] <... futex resumed>) = 0 [pid 9273] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9300] <... set_robust_list resumed>) = 0 [pid 9276] <... ioctl resumed>) = 0 [pid 9275] openat(AT_FDCWD, ".log", O_RDONLY [pid 9273] <... futex resumed>) = 0 [pid 9300] chdir("./126" [pid 9276] close(4 [pid 9275] <... openat resumed>) = 4 [pid 9300] <... chdir resumed>) = 0 [pid 9300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9300] setpgid(0, 0) = 0 [pid 9300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9300] write(3, "1000", 4) = 4 [pid 9300] close(3) = 0 [pid 9300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9300] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9300] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9300] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9301], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9301 [pid 9300] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9300] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9301 attached [pid 9301] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9301] memfd_create("syzkaller", 0) = 3 [pid 9301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9276] <... close resumed>) = 0 [pid 9275] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9273] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9276] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9275] <... futex resumed>) = 0 [pid 9273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9276] <... futex resumed>) = 1 [pid 9275] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9274] <... futex resumed>) = 0 [pid 9276] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9274] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9273] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9275] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9274] <... futex resumed>) = 0 [pid 9273] <... futex resumed>) = 0 [pid 9276] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9275] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9274] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9273] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9276] <... openat resumed>) = 4 [pid 9275] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9273] <... futex resumed>) = 0 [ 268.342259][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 268.342272][ T27] audit: type=1804 audit(1680236951.812:752): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/125/.log" dev="sda1" ino=1151 res=1 errno=0 [pid 9276] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9280] <... ioctl resumed>) = 0 [pid 9275] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9273] exit_group(0 [pid 9276] <... futex resumed>) = 1 [pid 9280] close(4 [pid 9275] <... futex resumed>) = ? [pid 9274] <... futex resumed>) = 0 [pid 9273] <... exit_group resumed>) = ? [pid 9276] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9275] +++ exited with 0 +++ [pid 9274] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9274] <... futex resumed>) = 0 [pid 9273] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9273, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=31 /* 0.31 s */} --- [pid 9280] <... close resumed>) = 0 [pid 9276] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9274] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9280] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9277] <... futex resumed>) = 0 [pid 9280] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9277] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9277] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9277] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] getdents64(3, [pid 9280] <... openat resumed>) = 3 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9280] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./125/binderfs") = 0 [pid 9280] <... futex resumed>) = 1 [pid 9277] <... futex resumed>) = 0 [pid 5083] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9280] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9277] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./125/file0", [pid 9280] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9277] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9280] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9277] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9274] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9280] <... futex resumed>) = 0 [pid 9277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9274] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9280] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9277] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9274] <... futex resumed>) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, [pid 9280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9277] <... futex resumed>) = 0 [pid 9274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./125/file0" [pid 9280] openat(AT_FDCWD, ".log", O_RDONLY [pid 9277] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... rmdir resumed>) = 0 [pid 9274] <... mmap resumed>) = 0x7ff2ac333000 [ 268.440930][ T9276] BTRFS info (device loop5): balance: start -s [ 268.456498][ T9276] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 5083] umount2("./125/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./125/.log", [pid 9280] <... openat resumed>) = 4 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./125/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./125") = 0 [pid 5083] mkdir("./126", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 9280] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9274] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9280] <... futex resumed>) = 1 [pid 9277] <... futex resumed>) = 0 [pid 9274] <... mprotect resumed>) = 0 [pid 9280] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9277] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9274] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9303 [pid 9280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9277] <... futex resumed>) = 0 [pid 9280] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}./strace-static-x86_64: Process 9303 attached [pid 9277] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9274] <... clone resumed>, parent_tid=[9304], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9304 [pid 9280] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9303] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9303] chdir("./126" [pid 9280] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9274] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9303] <... chdir resumed>) = 0 [pid 9274] <... futex resumed>) = 0 [pid 9280] <... futex resumed>) = 1 [pid 9277] <... futex resumed>) = 0 [pid 9303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9274] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9280] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9303] setpgid(0, 0 [pid 9277] exit_group(0 [pid 9303] <... setpgid resumed>) = 0 [pid 9280] <... futex resumed>) = ? [pid 9277] <... exit_group resumed>) = ? [pid 9303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9280] +++ exited with 0 +++ [pid 9303] <... openat resumed>) = 3 [pid 9277] +++ exited with 0 +++ [pid 9303] write(3, "1000", 4) = 4 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9277, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 9303] close(3 [pid 5078] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9303] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 268.499114][ T27] audit: type=1804 audit(1680236951.972:753): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/124/.log" dev="sda1" ino=1161 res=1 errno=0 [pid 9303] symlink("/dev/binderfs", "./binderfs" [pid 5078] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9303] <... symlink resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9303] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] fstat(3, [pid 9303] <... futex resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] getdents64(3, [pid 9303] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9303] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5078] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9304 attached [pid 9303] <... mprotect resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9303] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] lstat("./124/binderfs", [pid 9304] set_robust_list(0x7ff2ac3539e0, 24 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9303] <... clone resumed>, parent_tid=[9305], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9305 [pid 5078] unlink("./124/binderfs" [pid 9303] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... unlink resumed>) = 0 [pid 9303] <... futex resumed>) = 0 [pid 5078] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9304] <... set_robust_list resumed>) = 0 [pid 9303] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9304] openat(AT_FDCWD, ".log", O_RDONLY [pid 5078] lstat("./124/file0", ./strace-static-x86_64: Process 9305 attached [pid 9304] <... openat resumed>) = 5 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9305] set_robust_list(0x7ff2b37749e0, 24 [pid 9304] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9305] <... set_robust_list resumed>) = 0 [pid 9304] <... futex resumed>) = 1 [pid 9274] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9305] memfd_create("syzkaller", 0 [pid 9304] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9274] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9305] <... memfd_create resumed>) = 3 [pid 9304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9274] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 9305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9304] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9274] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] fstat(4, [pid 9305] <... mmap resumed>) = 0x7ff2ab354000 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9282] <... ioctl resumed>) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./124/file0" [ 268.559917][ T9276] BTRFS info (device loop5): balance: ended with status: 0 [ 268.582589][ T27] audit: type=1804 audit(1680236952.052:754): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/125/file0/.log" dev="loop5" ino=263 res=1 errno=0 [pid 9282] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 9282] <... close resumed>) = 0 [pid 5078] umount2("./124/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9282] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9282] <... futex resumed>) = 1 [pid 5078] lstat("./124/.log", [pid 9282] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] unlink("./124/.log") = 0 [pid 9281] <... futex resumed>) = 0 [pid 9276] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./124" [pid 9281] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9274] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... rmdir resumed>) = 0 [pid 9276] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mkdir("./125", 0777 [pid 9282] <... futex resumed>) = 0 [pid 9281] <... futex resumed>) = 1 [pid 9276] <... futex resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 9282] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9281] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9276] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 9282] <... openat resumed>) = 3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9282] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9306 [pid 9282] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9281] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9306 attached [pid 9304] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9281] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9306] set_robust_list(0x5555559d56e0, 24 [pid 9304] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9282] <... futex resumed>) = 0 [pid 9281] <... futex resumed>) = 1 [pid 9282] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [ 268.618862][ T9304] BTRFS info (device loop5): scrub: started on devid 1 [ 268.628642][ T9304] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 9282] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9306] <... set_robust_list resumed>) = 0 [pid 9304] <... futex resumed>) = 0 [pid 9282] <... futex resumed>) = 0 [pid 9281] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9282] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9306] chdir("./125" [pid 9304] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9274] exit_group(0 [pid 9306] <... chdir resumed>) = 0 [pid 9304] <... futex resumed>) = ? [pid 9281] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9276] <... futex resumed>) = ? [pid 9274] <... exit_group resumed>) = ? [pid 9306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9304] +++ exited with 0 +++ [pid 9282] <... futex resumed>) = 0 [pid 9281] <... futex resumed>) = 1 [pid 9276] +++ exited with 0 +++ [pid 9282] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9274] +++ exited with 0 +++ [pid 9282] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9274, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=39 /* 0.39 s */} --- [pid 9282] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./125/binderfs") = 0 [pid 5084] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9306] <... prctl resumed>) = 0 [pid 9281] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9306] setpgid(0, 0 [pid 9281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9306] <... setpgid resumed>) = 0 [pid 9281] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9282] <... futex resumed>) = 0 [pid 9281] <... futex resumed>) = 1 [pid 9306] <... openat resumed>) = 3 [pid 9282] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9281] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9282] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9282] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9282] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9306] write(3, "1000", 4 [pid 9281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9306] <... write resumed>) = 4 [pid 9281] exit_group(0 [pid 9306] close(3 [pid 9282] <... futex resumed>) = ? [pid 9281] <... exit_group resumed>) = ? [pid 9282] +++ exited with 0 +++ [pid 9306] <... close resumed>) = 0 [pid 9281] +++ exited with 0 +++ [pid 9306] symlink("/dev/binderfs", "./binderfs" [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9281, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 9306] <... symlink resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 9306] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9306] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] <... openat resumed>) = 3 [pid 9306] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5079] fstat(3, [pid 9306] <... mprotect resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9306] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9306] <... clone resumed>, parent_tid=[9307], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9307 [pid 5079] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 268.690993][ T27] audit: type=1804 audit(1680236952.162:755): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/125/.log" dev="sda1" ino=1153 res=1 errno=0 [pid 9306] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9307 attached [pid 9306] <... futex resumed>) = 0 [pid 5079] lstat("./125/binderfs", [pid 9279] <... ioctl resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9306] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] unlink("./125/binderfs" [pid 9307] set_robust_list(0x7ff2b37749e0, 24 [pid 5079] <... unlink resumed>) = 0 [pid 5079] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9307] <... set_robust_list resumed>) = 0 [pid 9279] close(4 [pid 5079] lstat("./125/file0", [pid 9307] memfd_create("syzkaller", 0 [pid 9279] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9279] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9279] <... futex resumed>) = 1 [pid 9278] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9307] <... memfd_create resumed>) = 3 [pid 9279] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9278] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9279] <... openat resumed>) = 3 [pid 9278] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 9307] <... mmap resumed>) = 0x7ff2ab354000 [pid 9279] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9278] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] fstat(4, [pid 9279] <... futex resumed>) = 0 [pid 9278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9279] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9278] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(4, [pid 9279] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9278] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9279] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9278] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] getdents64(4, [pid 9279] <... futex resumed>) = 0 [pid 9278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9279] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9278] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(4 [pid 9279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9278] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 9279] openat(AT_FDCWD, ".log", O_RDONLY [pid 9278] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] rmdir("./125/file0" [pid 9279] <... openat resumed>) = 4 [pid 5079] <... rmdir resumed>) = 0 [pid 9279] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./125/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9279] <... futex resumed>) = 1 [pid 9278] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9279] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9278] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./125/.log", [pid 9279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9278] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9279] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9278] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] unlink("./125/.log" [pid 9279] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... unlink resumed>) = 0 [pid 9279] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 9279] <... futex resumed>) = 1 [pid 9278] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9279] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9278] exit_group(0 [pid 5079] close(3 [pid 9279] <... futex resumed>) = ? [pid 9278] <... exit_group resumed>) = ? [pid 5084] <... umount2 resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 9279] +++ exited with 0 +++ [pid 9278] +++ exited with 0 +++ [pid 5084] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] rmdir("./125" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... rmdir resumed>) = 0 [pid 5084] lstat("./125/file0", [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9278, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=27 /* 0.27 s */} --- [pid 5079] mkdir("./126", 0777 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5079] <... mkdir resumed>) = 0 [pid 5084] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... restart_syscall resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 3 [pid 5084] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5084] <... openat resumed>) = 4 [pid 5081] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] fstat(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(3 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... close resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] fstat(3, [pid 5084] getdents64(4, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9308 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(3, [pid 5084] getdents64(4, [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] close(4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./125/binderfs") = 0 [pid 5081] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9308 attached [pid 5084] rmdir("./125/file0" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9308] set_robust_list(0x5555559d56e0, 24 [pid 5084] <... rmdir resumed>) = 0 [ 268.841244][ T27] audit: type=1804 audit(1680236952.272:756): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/125/.log" dev="sda1" ino=1149 res=1 errno=0 [pid 5081] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9308] <... set_robust_list resumed>) = 0 [pid 5084] getdents64(3, [pid 5081] <... openat resumed>) = 4 [pid 9308] chdir("./126" [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] fstat(4, [pid 9308] <... chdir resumed>) = 0 [pid 5084] close(3 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... close resumed>) = 0 [pid 5081] getdents64(4, [pid 9308] <... prctl resumed>) = 0 [pid 5084] rmdir("./125" [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9308] setpgid(0, 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] getdents64(4, [pid 9308] <... setpgid resumed>) = 0 [pid 5084] mkdir("./126", 0777 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] close(4 [pid 9308] <... openat resumed>) = 3 [pid 5084] <... mkdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 9308] write(3, "1000", 4 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] rmdir("./125/file0" [pid 9308] <... write resumed>) = 4 [pid 5084] <... openat resumed>) = 3 [pid 5081] <... rmdir resumed>) = 0 [pid 9308] close(3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] umount2("./125/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9308] <... close resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9308] symlink("/dev/binderfs", "./binderfs" [pid 5084] close(3 [pid 5081] lstat("./125/.log", [pid 9308] <... symlink resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./125/.log") = 0 [pid 5081] getdents64(3, [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9308] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 9308] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 9308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9309 [pid 5081] rmdir("./125" [pid 9308] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] <... rmdir resumed>) = 0 [pid 9308] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] mkdir("./126", 0777 [pid 9308] <... mprotect resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 9308] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 9308] <... clone resumed>, parent_tid=[9310], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9310 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 9308] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 9309 attached [pid 9308] <... futex resumed>) = 0 [pid 5081] close(3./strace-static-x86_64: Process 9310 attached [pid 9309] set_robust_list(0x5555559d56e0, 24 [pid 9308] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 9310] set_robust_list(0x7ff2b37749e0, 24 [pid 9309] <... set_robust_list resumed>) = 0 [pid 9301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9310] <... set_robust_list resumed>) = 0 [pid 9309] chdir("./126" [pid 9310] memfd_create("syzkaller", 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9311 [pid 9310] <... memfd_create resumed>) = 3 [pid 9309] <... chdir resumed>) = 0 [pid 9310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9309] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 9311 attached [pid 9310] <... mmap resumed>) = 0x7ff2ab354000 [pid 9309] <... prctl resumed>) = 0 [pid 9309] setpgid(0, 0) = 0 [pid 9311] set_robust_list(0x5555559d56e0, 24 [pid 9309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9311] <... set_robust_list resumed>) = 0 [pid 9309] write(3, "1000", 4 [pid 9311] chdir("./126" [pid 9309] <... write resumed>) = 4 [pid 9311] <... chdir resumed>) = 0 [pid 9309] close(3 [pid 9311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9309] <... close resumed>) = 0 [pid 9311] setpgid(0, 0 [pid 9309] symlink("/dev/binderfs", "./binderfs" [pid 9311] <... setpgid resumed>) = 0 [pid 9309] <... symlink resumed>) = 0 [pid 9311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9309] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9311] <... openat resumed>) = 3 [pid 9309] <... futex resumed>) = 0 [pid 9311] write(3, "1000", 4 [pid 9309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9311] <... write resumed>) = 4 [pid 9309] <... mmap resumed>) = 0x7ff2b3754000 [pid 9311] close(3 [pid 9309] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9311] <... close resumed>) = 0 [pid 9309] <... mprotect resumed>) = 0 [pid 9311] symlink("/dev/binderfs", "./binderfs" [pid 9309] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9311] <... symlink resumed>) = 0 [pid 9311] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9309] <... clone resumed>, parent_tid=[9312], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9312 [pid 9311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9309] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9311] <... mmap resumed>) = 0x7ff2b3754000 [pid 9309] <... futex resumed>) = 0 [pid 9311] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9309] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9311] <... mprotect resumed>) = 0 [pid 9311] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 9312 attached , parent_tid=[9313], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9313 [pid 9312] set_robust_list(0x7ff2b37749e0, 24 [pid 9311] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9312] <... set_robust_list resumed>) = 0 [pid 9311] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9313 attached [pid 9312] memfd_create("syzkaller", 0 [pid 9311] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9313] set_robust_list(0x7ff2b37749e0, 24 [pid 9312] <... memfd_create resumed>) = 3 [pid 9313] <... set_robust_list resumed>) = 0 [pid 9312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9313] memfd_create("syzkaller", 0 [pid 9312] <... mmap resumed>) = 0x7ff2ab354000 [pid 9313] <... memfd_create resumed>) = 3 [pid 9313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9301] <... write resumed>) = 16777216 [pid 9301] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9301] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9301] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9301] close(3) = 0 [pid 9301] mkdir("./file0", 0777) = 0 [pid 9301] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9307] <... write resumed>) = 16777216 [ 269.502176][ T9301] loop2: detected capacity change from 0 to 32768 [ 269.536761][ T9301] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor373 (9301) [pid 9307] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9307] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9307] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9307] close(3) = 0 [pid 9307] mkdir("./file0", 0777) = 0 [ 269.580525][ T9301] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 269.592149][ T9307] loop0: detected capacity change from 0 to 32768 [ 269.607427][ T9307] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9307) [ 269.620006][ T9301] BTRFS info (device loop2): setting nodatasum [pid 9307] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9305] <... write resumed>) = 16777216 [pid 9307] <... mount resumed>) = -1 EEXIST (File exists) [pid 9305] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9307] ioctl(4, LOOP_CLR_FD [pid 9305] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9305] close(3) = 0 [pid 9305] mkdir("./file0", 0777) = 0 [pid 9305] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 269.629133][ T9301] BTRFS info (device loop2): allowing degraded mounts [ 269.636519][ T9301] BTRFS info (device loop2): use zlib compression, level 3 [ 269.645599][ T9301] BTRFS info (device loop2): using free space tree [ 269.655213][ T9305] loop4: detected capacity change from 0 to 32768 [ 269.669873][ T9305] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9305) [pid 9305] ioctl(4, LOOP_CLR_FD [pid 9310] <... write resumed>) = 16777216 [pid 9310] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9310] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9310] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9310] close(3) = 0 [pid 9310] mkdir("./file0", 0777) = 0 [pid 9310] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9312] <... write resumed>) = 16777216 [pid 9312] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9312] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9312] ioctl(4, LOOP_SET_FD, 3 [pid 9310] <... mount resumed>) = -1 EEXIST (File exists) [ 269.827520][ T9310] loop1: detected capacity change from 0 to 32768 [ 269.842271][ T9310] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9310) [ 269.853750][ T9312] loop5: detected capacity change from 0 to 32768 [pid 9310] ioctl(4, LOOP_CLR_FD [pid 9312] <... ioctl resumed>) = 0 [pid 9312] close(3) = 0 [pid 9312] mkdir("./file0", 0777) = 0 [pid 9312] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9307] <... ioctl resumed>) = 0 [pid 9305] <... ioctl resumed>) = 0 [pid 9307] close(4 [pid 9305] close(4 [pid 9312] <... mount resumed>) = -1 EEXIST (File exists) [pid 9312] ioctl(4, LOOP_CLR_FD [pid 9313] <... write resumed>) = 16777216 [pid 9313] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9307] <... close resumed>) = 0 [pid 9305] <... close resumed>) = 0 [pid 9307] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9305] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9307] <... futex resumed>) = 1 [pid 9305] <... futex resumed>) = 1 [pid 9303] <... futex resumed>) = 0 [pid 9307] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9305] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9303] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9305] <... openat resumed>) = 3 [pid 9303] <... futex resumed>) = 0 [pid 9305] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9303] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9305] <... futex resumed>) = 0 [pid 9303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9305] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9303] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9305] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9303] <... futex resumed>) = 0 [pid 9306] <... futex resumed>) = 0 [pid 9305] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9303] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9306] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9305] <... futex resumed>) = 0 [pid 9303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9307] <... futex resumed>) = 0 [pid 9306] <... futex resumed>) = 1 [pid 9305] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9303] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9307] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9303] <... futex resumed>) = 0 [pid 9307] <... openat resumed>) = 3 [ 269.884429][ T9301] BTRFS info (device loop2): enabling ssd optimizations [ 269.891751][ T9301] BTRFS info (device loop2): auto enabling async discard [ 269.898974][ T9312] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9312) [ 269.911444][ T9301] BTRFS info (device loop2): checking UUID tree [pid 9305] openat(AT_FDCWD, ".log", O_RDONLY [pid 9303] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9307] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9306] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9305] <... openat resumed>) = 4 [pid 9301] <... mount resumed>) = 0 [pid 9307] <... futex resumed>) = 0 [pid 9306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9305] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9301] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9307] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9306] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9305] <... futex resumed>) = 1 [pid 9303] <... futex resumed>) = 0 [pid 9301] <... openat resumed>) = 3 [pid 9313] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9306] <... futex resumed>) = 0 [pid 9305] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9303] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9301] chdir("./file0" [pid 9307] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9303] <... futex resumed>) = 0 [pid 9301] <... chdir resumed>) = 0 [pid 9307] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9305] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9303] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9301] ioctl(4, LOOP_CLR_FD [pid 9307] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9305] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9301] <... ioctl resumed>) = 0 [pid 9307] <... futex resumed>) = 0 [pid 9305] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9301] close(4 [pid 9307] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9305] <... futex resumed>) = 1 [pid 9303] <... futex resumed>) = 0 [pid 9301] <... close resumed>) = 0 [pid 9305] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9303] exit_group(0 [pid 9301] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9305] <... futex resumed>) = ? [pid 9303] <... exit_group resumed>) = ? [pid 9301] <... futex resumed>) = 1 [pid 9300] <... futex resumed>) = 0 [pid 9313] <... openat resumed>) = 4 [pid 9306] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9305] +++ exited with 0 +++ [pid 9303] +++ exited with 0 +++ [pid 9301] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9300] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9300] <... futex resumed>) = 0 [pid 9301] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9300] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9303, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 9306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9301] <... openat resumed>) = 4 [pid 5083] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9313] ioctl(4, LOOP_SET_FD, 3 [pid 9306] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9301] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9307] <... futex resumed>) = 0 [pid 9306] <... futex resumed>) = 1 [pid 9301] <... futex resumed>) = 1 [pid 9300] <... futex resumed>) = 0 [ 269.932351][ T27] audit: type=1804 audit(1680236953.402:757): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/126/.log" dev="sda1" ino=1161 res=1 errno=0 [pid 5083] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9307] openat(AT_FDCWD, ".log", O_RDONLY [pid 9306] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9301] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9300] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 9307] <... openat resumed>) = 4 [pid 9301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9300] <... futex resumed>) = 0 [pid 5083] fstat(3, [pid 9307] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9301] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9300] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9307] <... futex resumed>) = 0 [pid 9306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] getdents64(3, [pid 9307] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9306] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9306] <... futex resumed>) = 0 [pid 5083] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9307] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9306] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9307] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] lstat("./126/binderfs", [pid 9307] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9307] <... futex resumed>) = 1 [pid 9306] <... futex resumed>) = 0 [pid 5083] unlink("./126/binderfs" [pid 9307] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9306] exit_group(0 [pid 5083] <... unlink resumed>) = 0 [pid 9307] <... futex resumed>) = ? [pid 9306] <... exit_group resumed>) = ? [pid 5083] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9307] +++ exited with 0 +++ [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9306] +++ exited with 0 +++ [pid 5083] lstat("./126/file0", [pid 9313] <... ioctl resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9313] close(3 [pid 5083] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9306, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} --- [pid 9313] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9313] mkdir("./file0", 0777 [ 269.985239][ T27] audit: type=1804 audit(1680236953.452:758): pid=9307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/125/.log" dev="sda1" ino=1162 res=1 errno=0 [ 269.995476][ T9313] loop3: detected capacity change from 0 to 32768 [ 270.020151][ T9301] BTRFS info (device loop2): balance: start -s [pid 5083] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9313] <... mkdir resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9313] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 5083] fstat(4, [pid 5078] <... openat resumed>) = 3 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] fstat(3, [pid 5083] getdents64(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(3, [pid 5083] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9300] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9300] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5078] lstat("./125/binderfs", [pid 9300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] rmdir("./126/file0" [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9300] <... mmap resumed>) = 0x7ff2ac333000 [pid 5083] <... rmdir resumed>) = 0 [pid 5078] unlink("./125/binderfs" [pid 9300] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5083] umount2("./126/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 9300] <... mprotect resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9300] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] lstat("./126/.log", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9331 attached [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] lstat("./125/file0", [pid 9331] set_robust_list(0x7ff2ac3539e0, 24 [pid 9300] <... clone resumed>, parent_tid=[9331], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9331 [pid 5083] unlink("./126/.log" [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9331] <... set_robust_list resumed>) = 0 [pid 9300] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 5078] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9331] openat(AT_FDCWD, ".log", O_RDONLY [pid 9300] <... futex resumed>) = 0 [pid 5083] getdents64(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9300] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9331] <... openat resumed>) = 5 [pid 9313] <... mount resumed>) = -1 EEXIST (File exists) [pid 5083] close(3 [pid 5078] <... openat resumed>) = 4 [pid 9331] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9313] ioctl(4, LOOP_CLR_FD [pid 5083] <... close resumed>) = 0 [pid 5078] fstat(4, [pid 9331] <... futex resumed>) = 1 [pid 9300] <... futex resumed>) = 0 [pid 5083] rmdir("./126" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9331] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9300] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... rmdir resumed>) = 0 [pid 5078] getdents64(4, [pid 9331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9300] <... futex resumed>) = 0 [pid 5083] mkdir("./127", 0777 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9331] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9300] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... mkdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... openat resumed>) = 3 [ 270.053120][ T9301] BTRFS info (device loop2): relocating block group 1048576 flags system [ 270.066684][ T9313] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9313) [pid 5078] close(4 [pid 9312] <... ioctl resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5078] <... close resumed>) = 0 [pid 9312] close(4 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] rmdir("./125/file0" [pid 9312] <... close resumed>) = 0 [pid 5083] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 9312] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... close resumed>) = 0 [pid 5078] umount2("./125/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9312] <... futex resumed>) = 1 [pid 9309] <... futex resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9312] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9309] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] lstat("./125/.log", [pid 9312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9309] <... futex resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9333 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9312] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9309] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] unlink("./125/.log" [pid 9312] <... openat resumed>) = 3 [pid 5078] <... unlink resumed>) = 0 [pid 9312] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, ./strace-static-x86_64: Process 9333 attached [pid 9312] <... futex resumed>) = 1 [pid 9309] <... futex resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9333] set_robust_list(0x5555559d56e0, 24 [pid 9312] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9309] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 9333] <... set_robust_list resumed>) = 0 [pid 9312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9309] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9333] chdir("./127" [pid 9312] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9309] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] rmdir("./125" [pid 9333] <... chdir resumed>) = 0 [pid 9312] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./126", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9334 [pid 9333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9312] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9333] <... prctl resumed>) = 0 [pid 9312] <... futex resumed>) = 1 [pid 9309] <... futex resumed>) = 0 [ 270.107212][ T27] audit: type=1804 audit(1680236953.572:759): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/126/file0/.log" dev="loop2" ino=263 res=1 errno=0 [pid 9333] setpgid(0, 0 [pid 9312] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9309] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9333] <... setpgid resumed>) = 0 [pid 9312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9309] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9334 attached [pid 9312] openat(AT_FDCWD, ".log", O_RDONLY [pid 9309] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9334] set_robust_list(0x5555559d56e0, 24 [pid 9312] <... openat resumed>) = 4 [pid 9334] <... set_robust_list resumed>) = 0 [pid 9333] <... openat resumed>) = 3 [pid 9312] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9334] chdir("./126" [pid 9333] write(3, "1000", 4 [pid 9312] <... futex resumed>) = 1 [pid 9309] <... futex resumed>) = 0 [pid 9334] <... chdir resumed>) = 0 [pid 9333] <... write resumed>) = 4 [pid 9312] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9309] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9333] close(3 [pid 9312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9309] <... futex resumed>) = 0 [pid 9334] <... prctl resumed>) = 0 [pid 9333] <... close resumed>) = 0 [pid 9312] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9309] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9334] setpgid(0, 0 [pid 9333] symlink("/dev/binderfs", "./binderfs" [pid 9312] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9334] <... setpgid resumed>) = 0 [pid 9312] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9333] <... symlink resumed>) = 0 [pid 9312] <... futex resumed>) = 1 [pid 9309] <... futex resumed>) = 0 [pid 9334] <... openat resumed>) = 3 [pid 9333] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9312] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9309] exit_group(0 [pid 9334] write(3, "1000", 4 [pid 9333] <... futex resumed>) = 0 [pid 9312] <... futex resumed>) = ? [pid 9309] <... exit_group resumed>) = ? [pid 9334] <... write resumed>) = 4 [pid 9333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9312] +++ exited with 0 +++ [pid 9309] +++ exited with 0 +++ [pid 9334] close(3) = 0 [pid 9334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9334] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9334] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9333] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9309, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 9334] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9333] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9334] <... clone resumed>, parent_tid=[9335], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9335 [pid 9333] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9334] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9334] <... futex resumed>) = 0 [pid 9333] <... clone resumed>, parent_tid=[9336], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9336 [pid 5084] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 9335 attached [pid 9334] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9333] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 9335] set_robust_list(0x7ff2b37749e0, 24 [pid 9333] <... futex resumed>) = 0 [pid 5084] fstat(3, [pid 9335] <... set_robust_list resumed>) = 0 [pid 9333] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9336 attached [pid 9335] memfd_create("syzkaller", 0 [pid 5084] getdents64(3, [pid 9336] set_robust_list(0x7ff2b37749e0, 24 [pid 9335] <... memfd_create resumed>) = 3 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9336] <... set_robust_list resumed>) = 0 [pid 9335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9336] memfd_create("syzkaller", 0 [pid 9335] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 270.190650][ T9331] BTRFS info (device loop2): scrub: started on devid 1 [ 270.191554][ T9301] BTRFS info (device loop2): balance: ended with status: 0 [ 270.212552][ T9331] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [pid 9336] <... memfd_create resumed>) = 3 [pid 5084] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] unlink("./126/binderfs") = 0 [pid 5084] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9336] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, [pid 9331] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9331] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9331] <... futex resumed>) = 0 [ 270.255926][ T27] audit: type=1804 audit(1680236953.652:760): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/126/.log" dev="sda1" ino=1154 res=1 errno=0 [pid 9331] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9301] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] getdents64(4, [pid 9301] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9301] <... futex resumed>) = 0 [pid 9300] exit_group(0 [pid 5084] close(4 [pid 9301] +++ exited with 0 +++ [pid 9331] <... futex resumed>) = ? [pid 9300] <... exit_group resumed>) = ? [pid 5084] <... close resumed>) = 0 [pid 9331] +++ exited with 0 +++ [pid 9300] +++ exited with 0 +++ [pid 5084] rmdir("./126/file0" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9300, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=38 /* 0.38 s */} --- [pid 5084] <... rmdir resumed>) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5084] umount2("./126/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... restart_syscall resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./126/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] unlink("./126/.log" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... unlink resumed>) = 0 [pid 5084] getdents64(3, [pid 5080] <... openat resumed>) = 3 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] fstat(3, [pid 5084] close(3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... close resumed>) = 0 [pid 5080] getdents64(3, [pid 5084] rmdir("./126" [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5084] <... rmdir resumed>) = 0 [pid 5080] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] mkdir("./127", 0777 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... mkdir resumed>) = 0 [pid 5080] lstat("./126/binderfs", [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5080] unlink("./126/binderfs" [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5080] <... unlink resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9337 ./strace-static-x86_64: Process 9337 attached [pid 9337] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9337] chdir("./127") = 0 [pid 9337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9337] setpgid(0, 0) = 0 [pid 9337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9337] write(3, "1000", 4) = 4 [pid 9337] close(3) = 0 [pid 9337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9337] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9310] <... ioctl resumed>) = 0 [pid 9337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9313] <... ioctl resumed>) = 0 [pid 9310] close(4 [pid 9337] <... mmap resumed>) = 0x7ff2b3754000 [pid 9313] close(4 [pid 9310] <... close resumed>) = 0 [pid 9337] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9310] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9337] <... mprotect resumed>) = 0 [pid 9310] <... futex resumed>) = 1 [pid 9308] <... futex resumed>) = 0 [pid 9337] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9310] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9308] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9337] <... clone resumed>, parent_tid=[9338], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9338 [pid 9313] <... close resumed>) = 0 [pid 9310] <... openat resumed>) = 3 [pid 9308] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9337] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9313] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9310] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9337] <... futex resumed>) = 0 [pid 9313] <... futex resumed>) = 1 [pid 9311] <... futex resumed>) = 0 [pid 9310] <... futex resumed>) = 1 [pid 9308] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9338 attached [pid 9337] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9313] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9311] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9310] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9308] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9313] <... openat resumed>) = 3 [pid 9311] <... futex resumed>) = 0 [pid 9310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9308] <... futex resumed>) = 0 [pid 9338] set_robust_list(0x7ff2b37749e0, 24 [pid 9313] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9311] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9310] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9308] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9338] <... set_robust_list resumed>) = 0 [pid 9313] <... futex resumed>) = 0 [pid 9311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9310] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9338] memfd_create("syzkaller", 0 [pid 9313] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9311] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9310] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = 0 [pid 9338] <... memfd_create resumed>) = 3 [pid 9313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9311] <... futex resumed>) = 0 [pid 9310] <... futex resumed>) = 1 [pid 9308] <... futex resumed>) = 0 [pid 5080] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9313] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9311] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9310] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9308] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9338] <... mmap resumed>) = 0x7ff2ab354000 [pid 9313] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9308] <... futex resumed>) = 0 [pid 5080] lstat("./126/file0", [pid 9310] openat(AT_FDCWD, ".log", O_RDONLY [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9313] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9310] <... openat resumed>) = 4 [pid 9308] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9310] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9310] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9310] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... openat resumed>) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 9313] <... futex resumed>) = 1 [pid 9311] <... futex resumed>) = 0 [pid 9308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9313] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9311] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9308] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 9313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9311] <... futex resumed>) = 0 [pid 9310] <... futex resumed>) = 0 [pid 9308] <... futex resumed>) = 1 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9313] openat(AT_FDCWD, ".log", O_RDONLY [pid 9311] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9310] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9308] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(4 [pid 9313] <... openat resumed>) = 4 [pid 9310] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] <... close resumed>) = 0 [pid 9313] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9310] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./126/file0" [pid 9313] <... futex resumed>) = 1 [pid 9311] <... futex resumed>) = 0 [pid 9310] <... futex resumed>) = 1 [pid 9308] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 9313] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9311] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9310] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9308] exit_group(0 [pid 5080] getdents64(3, [pid 9313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9311] <... futex resumed>) = 0 [pid 9310] <... futex resumed>) = ? [pid 9308] <... exit_group resumed>) = ? [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9313] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9311] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9310] +++ exited with 0 +++ [pid 5080] close(3) = 0 [pid 9313] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9308] +++ exited with 0 +++ [pid 5080] rmdir("./126" [pid 9313] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9308, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 9313] <... futex resumed>) = 1 [pid 9311] <... futex resumed>) = 0 [pid 5080] mkdir("./127", 0777 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 9313] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9311] exit_group(0 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 9313] <... futex resumed>) = ? [pid 9311] <... exit_group resumed>) = ? [ 270.503870][ T27] audit: type=1804 audit(1680236953.972:761): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/126/.log" dev="sda1" ino=1154 res=1 errno=0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9313] +++ exited with 0 +++ [pid 5080] <... openat resumed>) = 3 [pid 9311] +++ exited with 0 +++ [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9311, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=32 /* 0.32 s */} --- [pid 5080] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(3 [pid 5079] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9339 [pid 5079] getdents64(3, [pid 5081] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5079] lstat("./126/binderfs", [pid 5081] fstat(3, [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 9339 attached [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] unlink("./126/binderfs" [pid 9339] set_robust_list(0x5555559d56e0, 24 [pid 5081] getdents64(3, [pid 5079] <... unlink resumed>) = 0 [pid 9339] <... set_robust_list resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9339] chdir("./127" [pid 5081] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9339] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./126/file0", [pid 9339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] lstat("./126/binderfs", [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9339] <... prctl resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9339] setpgid(0, 0 [pid 5081] unlink("./126/binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9339] <... setpgid resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 4 [pid 9339] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] fstat(4, [pid 9339] write(3, "1000", 4 [pid 5081] lstat("./126/file0", [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9339] <... write resumed>) = 4 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, [pid 9339] close(3 [pid 5081] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9339] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 9339] symlink("/dev/binderfs", "./binderfs" [pid 5081] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9339] <... symlink resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5079] close(4 [pid 9339] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 5079] <... close resumed>) = 0 [pid 9339] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] rmdir("./126/file0" [pid 9339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] getdents64(4, [pid 5079] <... rmdir resumed>) = 0 [pid 9339] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] umount2("./126/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9339] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9339] <... mprotect resumed>) = 0 [pid 5079] lstat("./126/.log", [pid 9339] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] close(4 [pid 5079] unlink("./126/.log" [pid 9339] <... clone resumed>, parent_tid=[9340], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9340 [pid 5081] <... close resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 9339] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 9339] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9339] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] close(3 [pid 5081] rmdir("./126/file0" [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./126"./strace-static-x86_64: Process 9340 attached [pid 5081] <... rmdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 9340] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] umount2("./126/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] mkdir("./127", 0777 [pid 9340] <... set_robust_list resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... mkdir resumed>) = 0 [pid 9340] memfd_create("syzkaller", 0 [pid 5081] lstat("./126/.log", [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9340] <... memfd_create resumed>) = 3 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... openat resumed>) = 3 [pid 9340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] unlink("./126/.log" [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9340] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] <... unlink resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] getdents64(3, [pid 5079] close(3 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9341 [pid 5081] close(3./strace-static-x86_64: Process 9341 attached ) = 0 [pid 9341] set_robust_list(0x5555559d56e0, 24 [pid 5081] rmdir("./126" [pid 9341] <... set_robust_list resumed>) = 0 [pid 9341] chdir("./127" [pid 5081] <... rmdir resumed>) = 0 [pid 9341] <... chdir resumed>) = 0 [pid 5081] mkdir("./127", 0777 [pid 9341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... mkdir resumed>) = 0 [pid 9341] <... prctl resumed>) = 0 [pid 9341] setpgid(0, 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9341] <... setpgid resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 9341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 9341] <... openat resumed>) = 3 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9341] write(3, "1000", 4 [pid 5081] close(3 [pid 9341] <... write resumed>) = 4 [pid 5081] <... close resumed>) = 0 [pid 9341] close(3 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9341] <... close resumed>) = 0 [pid 9341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9342 [pid 9341] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 9342 attached [pid 9341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9342] set_robust_list(0x5555559d56e0, 24 [pid 9341] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9342] <... set_robust_list resumed>) = 0 [pid 9341] <... mprotect resumed>) = 0 [pid 9342] chdir("./127" [pid 9341] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9342] <... chdir resumed>) = 0 [pid 9342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9341] <... clone resumed>, parent_tid=[9343], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9343 [pid 9342] <... prctl resumed>) = 0 [pid 9341] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9342] setpgid(0, 0 [pid 9341] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9343 attached [pid 9342] <... setpgid resumed>) = 0 [pid 9341] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9343] set_robust_list(0x7ff2b37749e0, 24 [pid 9342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9343] <... set_robust_list resumed>) = 0 [pid 9342] <... openat resumed>) = 3 [pid 9343] memfd_create("syzkaller", 0 [pid 9342] write(3, "1000", 4 [pid 9343] <... memfd_create resumed>) = 3 [pid 9342] <... write resumed>) = 4 [pid 9343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9342] close(3 [pid 9343] <... mmap resumed>) = 0x7ff2ab354000 [pid 9342] <... close resumed>) = 0 [pid 9342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9342] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9342] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9342] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9344], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9344 [pid 9342] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9342] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9344 attached [pid 9344] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9344] memfd_create("syzkaller", 0) = 3 [pid 9344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9336] <... write resumed>) = 16777216 [pid 9336] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9336] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9336] ioctl(4, LOOP_SET_FD, 3 [pid 9344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9336] <... ioctl resumed>) = 0 [pid 9336] close(3) = 0 [pid 9336] mkdir("./file0", 0777) = 0 [ 271.162162][ T9336] loop4: detected capacity change from 0 to 32768 [ 271.199807][ T9336] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (9336) [pid 9336] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9335] <... write resumed>) = 16777216 [ 271.256828][ T9336] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9335] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9335] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9335] close(3) = 0 [pid 9335] mkdir("./file0", 0777) = 0 [ 271.297453][ T9336] BTRFS info (device loop4): setting nodatasum [ 271.316269][ T9336] BTRFS info (device loop4): allowing degraded mounts [ 271.316319][ T9335] loop0: detected capacity change from 0 to 32768 [ 271.331246][ T9336] BTRFS info (device loop4): use zlib compression, level 3 [pid 9335] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9335] ioctl(4, LOOP_CLR_FD [pid 9338] <... write resumed>) = 16777216 [pid 9338] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9338] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 271.353282][ T9335] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9335) [ 271.365829][ T9336] BTRFS info (device loop4): using free space tree [pid 9338] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9338] close(3) = 0 [pid 9338] mkdir("./file0", 0777) = 0 [pid 9338] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 271.408928][ T9338] loop5: detected capacity change from 0 to 32768 [ 271.433134][ T9338] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9338) [pid 9338] ioctl(4, LOOP_CLR_FD [pid 9340] <... write resumed>) = 16777216 [pid 9343] <... write resumed>) = 16777216 [pid 9340] munmap(0x7ff2ab354000, 16777216 [pid 9343] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9343] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9343] ioctl(4, LOOP_SET_FD, 3 [pid 9340] <... munmap resumed>) = 0 [pid 9343] <... ioctl resumed>) = 0 [pid 9340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9343] close(3 [pid 9340] <... openat resumed>) = 4 [pid 9340] ioctl(4, LOOP_SET_FD, 3 [pid 9343] <... close resumed>) = 0 [pid 9343] mkdir("./file0", 0777) = 0 [pid 9343] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9340] <... ioctl resumed>) = 0 [ 271.505179][ T9343] loop1: detected capacity change from 0 to 32768 [ 271.538152][ T9340] loop2: detected capacity change from 0 to 32768 [pid 9343] <... mount resumed>) = -1 EEXIST (File exists) [pid 9340] close(3 [pid 9343] ioctl(4, LOOP_CLR_FD [pid 9340] <... close resumed>) = 0 [pid 9340] mkdir("./file0", 0777) = 0 [ 271.551471][ T9343] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9343) [ 271.568244][ T9336] BTRFS info (device loop4): enabling ssd optimizations [ 271.575397][ T9340] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9340) [ 271.576990][ T9336] BTRFS info (device loop4): auto enabling async discard [ 271.598060][ T9336] BTRFS info (device loop4): checking UUID tree [pid 9340] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9340] ioctl(4, LOOP_CLR_FD [pid 9336] <... mount resumed>) = 0 [pid 9336] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9336] chdir("./file0") = 0 [pid 9336] ioctl(4, LOOP_CLR_FD) = 0 [pid 9336] close(4) = 0 [pid 9336] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9333] <... futex resumed>) = 0 [pid 9336] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9333] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9336] <... openat resumed>) = 4 [pid 9333] <... futex resumed>) = 0 [pid 9336] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9333] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9336] <... futex resumed>) = 0 [pid 9333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9336] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9333] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9333] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9335] <... ioctl resumed>) = 0 [pid 9344] <... write resumed>) = 16777216 [pid 9335] close(4 [pid 9333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9335] <... close resumed>) = 0 [pid 9333] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9344] munmap(0x7ff2ab354000, 16777216 [pid 9335] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9333] <... futex resumed>) = 0 [pid 9335] <... futex resumed>) = 1 [pid 9334] <... futex resumed>) = 0 [pid 9333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9344] <... munmap resumed>) = 0 [pid 9335] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9334] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9344] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9334] <... futex resumed>) = 0 [pid 9333] <... mmap resumed>) = 0x7ff2ac333000 [pid 9344] <... openat resumed>) = 4 [pid 9335] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9334] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9333] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 9344] ioctl(4, LOOP_SET_FD, 3 [pid 9335] <... openat resumed>) = 3 [ 271.680573][ T9336] BTRFS info (device loop4): balance: start -s [ 271.716237][ T9336] BTRFS info (device loop4): relocating block group 1048576 flags system [pid 9335] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9333] <... mprotect resumed>) = 0 [pid 9335] <... futex resumed>) = 1 [pid 9334] <... futex resumed>) = 0 [pid 9335] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9334] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9334] <... futex resumed>) = 0 [pid 9333] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9335] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9334] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9335] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9335] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9334] <... futex resumed>) = 0 [pid 9335] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9334] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9333] <... clone resumed>, parent_tid=[9363], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9363 [pid 9335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9334] <... futex resumed>) = 0 [pid 9335] openat(AT_FDCWD, ".log", O_RDONLY [pid 9334] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9333] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9363 attached [pid 9335] <... openat resumed>) = 4 [pid 9333] <... futex resumed>) = 0 [pid 9344] <... ioctl resumed>) = 0 [pid 9363] set_robust_list(0x7ff2ac3539e0, 24 [pid 9335] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9333] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9344] close(3 [pid 9363] <... set_robust_list resumed>) = 0 [pid 9335] <... futex resumed>) = 1 [pid 9334] <... futex resumed>) = 0 [pid 9344] <... close resumed>) = 0 [pid 9363] openat(AT_FDCWD, ".log", O_RDONLY [pid 9344] mkdir("./file0", 0777 [pid 9335] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9334] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9363] <... openat resumed>) = 5 [pid 9335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9334] <... futex resumed>) = 0 [pid 9363] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9344] <... mkdir resumed>) = 0 [pid 9335] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9334] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9363] <... futex resumed>) = 1 [pid 9335] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9333] <... futex resumed>) = 0 [pid 9344] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9363] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9335] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9333] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 271.744961][ T9344] loop3: detected capacity change from 0 to 32768 [pid 9335] <... futex resumed>) = 1 [pid 9334] <... futex resumed>) = 0 [pid 9333] <... futex resumed>) = 0 [pid 9363] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9335] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9334] exit_group(0 [pid 9335] <... futex resumed>) = ? [pid 9334] <... exit_group resumed>) = ? [pid 9335] +++ exited with 0 +++ [pid 9334] +++ exited with 0 +++ [pid 9338] <... ioctl resumed>) = 0 [pid 9333] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9334, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=24 /* 0.24 s */} --- [pid 5078] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./126/binderfs") = 0 [pid 5078] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./126/file0" [pid 9338] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 9344] <... mount resumed>) = -1 EEXIST (File exists) [pid 5078] umount2("./126/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9344] ioctl(4, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./126/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9338] <... close resumed>) = 0 [pid 5078] unlink("./126/.log" [pid 9338] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... unlink resumed>) = 0 [pid 9337] <... futex resumed>) = 0 [pid 9337] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, [pid 9337] <... futex resumed>) = 0 [pid 9337] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9338] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] close(3 [pid 9338] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 9338] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9337] <... futex resumed>) = 0 [pid 5078] rmdir("./126" [pid 9338] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9337] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9338] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9337] <... futex resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9338] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9337] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] mkdir("./127", 0777 [pid 9338] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9338] <... futex resumed>) = 0 [pid 9337] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... mkdir resumed>) = 0 [pid 9338] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9337] <... futex resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 271.786881][ T9344] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9344) [ 271.821205][ T9336] BTRFS info (device loop4): balance: ended with status: 0 [ 271.825320][ T9363] BTRFS info (device loop4): scrub: started on devid 1 [pid 9338] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9337] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9338] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9338] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9337] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9337] <... futex resumed>) = 0 [pid 9336] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9338] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9337] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9336] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 9338] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9336] <... futex resumed>) = 0 [pid 9338] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... close resumed>) = 0 [pid 9338] <... futex resumed>) = 1 [pid 9337] <... futex resumed>) = 0 [pid 9336] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9343] <... ioctl resumed>) = 0 [pid 9338] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9337] exit_group(0 [pid 9338] <... futex resumed>) = ? [pid 9337] <... exit_group resumed>) = ? [pid 9338] +++ exited with 0 +++ ./strace-static-x86_64: Process 9364 attached [pid 9337] +++ exited with 0 +++ [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9364 [pid 9364] set_robust_list(0x5555559d56e0, 24 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9337, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 9364] <... set_robust_list resumed>) = 0 [pid 9364] chdir("./127") = 0 [pid 5084] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9364] <... prctl resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9364] setpgid(0, 0 [pid 5084] <... openat resumed>) = 3 [pid 5084] fstat(3, [pid 9364] <... setpgid resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] getdents64(3, [pid 9364] <... openat resumed>) = 3 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9364] write(3, "1000", 4) = 4 [ 271.866999][ T9363] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 5084] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9364] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9364] <... close resumed>) = 0 [pid 9364] symlink("/dev/binderfs", "./binderfs" [pid 5084] lstat("./127/binderfs", [pid 9363] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9340] <... ioctl resumed>) = 0 [pid 9364] <... symlink resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9364] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./127/binderfs" [pid 9364] <... futex resumed>) = 0 [pid 9364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9363] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 9364] <... mmap resumed>) = 0x7ff2b3754000 [pid 9363] <... futex resumed>) = 0 [pid 9364] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9333] exit_group(0 [pid 5084] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9364] <... mprotect resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./127/file0", [pid 9336] <... futex resumed>) = ? [pid 9333] <... exit_group resumed>) = ? [pid 9364] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9336] +++ exited with 0 +++ [pid 9343] close(4 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9365 attached [pid 9363] +++ exited with 0 +++ [pid 9343] <... close resumed>) = 0 [pid 9333] +++ exited with 0 +++ [pid 5084] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9364] <... clone resumed>, parent_tid=[9365], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9365 [pid 9343] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9341] <... futex resumed>) = 0 [pid 9343] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9341] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9343] <... openat resumed>) = 3 [pid 9341] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9333, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 9364] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9343] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9341] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9343] <... futex resumed>) = 0 [pid 9341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9343] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9341] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9341] <... futex resumed>) = 0 [pid 9343] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9341] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9343] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9343] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9364] <... futex resumed>) = 0 [pid 9343] <... futex resumed>) = 1 [pid 9341] <... futex resumed>) = 0 [pid 9365] set_robust_list(0x7ff2b37749e0, 24 [pid 9364] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9343] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9341] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 4 [pid 9365] <... set_robust_list resumed>) = 0 [pid 9343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9341] <... futex resumed>) = 0 [pid 9340] close(4 [pid 5084] fstat(4, [pid 9343] openat(AT_FDCWD, ".log", O_RDONLY [pid 9341] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9365] memfd_create("syzkaller", 0 [pid 9343] <... openat resumed>) = 4 [pid 9340] <... close resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9365] <... memfd_create resumed>) = 3 [pid 9343] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9343] <... futex resumed>) = 1 [pid 9341] <... futex resumed>) = 0 [pid 9340] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9365] <... mmap resumed>) = 0x7ff2ab354000 [pid 9343] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9341] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9341] <... futex resumed>) = 0 [pid 9340] <... futex resumed>) = 1 [pid 9339] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 9343] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9341] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9340] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9339] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9343] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9339] <... futex resumed>) = 0 [pid 9343] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9340] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9339] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9343] <... futex resumed>) = 1 [pid 9341] <... futex resumed>) = 0 [pid 9340] <... openat resumed>) = 3 [pid 9343] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9341] exit_group(0 [pid 9340] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9343] <... futex resumed>) = ? [pid 9341] <... exit_group resumed>) = ? [pid 9340] <... futex resumed>) = 1 [pid 9339] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... openat resumed>) = 3 [pid 9343] +++ exited with 0 +++ [pid 9341] +++ exited with 0 +++ [pid 9340] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9339] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(4 [pid 5083] fstat(3, [pid 9340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9339] <... futex resumed>) = 0 [pid 9340] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9339] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9341, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 9340] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] rmdir("./127/file0" [pid 5083] getdents64(3, [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 9340] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9339] <... futex resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 9340] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9339] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5079] <... restart_syscall resumed>) = 0 [pid 9340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9339] <... futex resumed>) = 0 [pid 5084] umount2("./127/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9340] openat(AT_FDCWD, ".log", O_RDONLY [pid 9339] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9340] <... openat resumed>) = 4 [pid 9340] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./127/.log", [pid 5083] lstat("./127/binderfs", [pid 9340] <... futex resumed>) = 1 [pid 9339] <... futex resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9340] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9339] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./127/.log" [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9339] <... futex resumed>) = 0 [pid 9340] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9339] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... unlink resumed>) = 0 [pid 5083] unlink("./127/binderfs" [pid 5079] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9340] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] getdents64(3, [pid 9340] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 9340] <... futex resumed>) = 1 [pid 9339] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9340] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9339] exit_group(0 [pid 5083] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] close(3 [pid 5079] fstat(3, [pid 9340] <... futex resumed>) = ? [pid 9339] <... exit_group resumed>) = ? [pid 9340] +++ exited with 0 +++ [pid 9339] +++ exited with 0 +++ [pid 5084] <... close resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] rmdir("./127" [pid 5079] getdents64(3, [pid 5084] <... rmdir resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9339, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] mkdir("./128", 0777 [pid 5080] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] lstat("./127/binderfs", [pid 5080] <... openat resumed>) = 3 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] fstat(3, [pid 5079] unlink("./127/binderfs") = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] getdents64(3, [pid 5079] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] close(3 [pid 5080] lstat("./127/binderfs", [pid 5079] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] unlink("./127/binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... unlink resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9366 [pid 5080] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./127/file0", [pid 5079] fstat(4, [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, [pid 5080] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] getdents64(4, [pid 5080] <... openat resumed>) = 4 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 9366 attached [pid 9366] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9366] chdir("./128") = 0 [pid 9366] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] fstat(4, [pid 5079] close(4 [pid 9366] <... prctl resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 5079] rmdir("./127/file0" [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9366] setpgid(0, 0) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] umount2("./127/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5079] lstat("./127/.log", [pid 5080] rmdir("./127/file0" [pid 9366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9366] write(3, "1000", 4) = 4 [pid 9366] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] umount2("./127/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9366] <... close resumed>) = 0 [pid 9366] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9366] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] unlink("./127/.log" [pid 5080] lstat("./127/.log", [pid 5079] <... unlink resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./127/.log" [pid 5079] getdents64(3, [pid 9366] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9366] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9367], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9367 [pid 9366] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9366] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... unlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3./strace-static-x86_64: Process 9367 attached [pid 9367] set_robust_list(0x7ff2b37749e0, 24 [pid 5080] close(3 [pid 5079] <... close resumed>) = 0 [pid 9367] <... set_robust_list resumed>) = 0 [pid 9367] memfd_create("syzkaller", 0) = 3 [pid 9367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5080] <... close resumed>) = 0 [pid 5079] rmdir("./127" [pid 5080] rmdir("./127" [pid 5079] <... rmdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./128", 0777 [pid 5079] mkdir("./128", 0777) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5079] close(3 [pid 5080] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9368 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9369 ./strace-static-x86_64: Process 9369 attached ./strace-static-x86_64: Process 9368 attached [pid 9369] set_robust_list(0x5555559d56e0, 24 [pid 9368] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9368] chdir("./128") = 0 [pid 9369] <... set_robust_list resumed>) = 0 [pid 9368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9368] setpgid(0, 0) = 0 [pid 9369] chdir("./128" [pid 9368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9369] <... chdir resumed>) = 0 [pid 9369] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9368] <... openat resumed>) = 3 [pid 9369] <... prctl resumed>) = 0 [pid 9369] setpgid(0, 0 [pid 9368] write(3, "1000", 4 [pid 5083] <... umount2 resumed>) = 0 [pid 5083] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9368] <... write resumed>) = 4 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9368] close(3 [pid 5083] lstat("./127/file0", [pid 9368] <... close resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9368] symlink("/dev/binderfs", "./binderfs" [pid 5083] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9369] <... setpgid resumed>) = 0 [pid 9368] <... symlink resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9368] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9369] <... openat resumed>) = 3 [pid 9368] <... futex resumed>) = 0 [pid 9369] write(3, "1000", 4 [pid 9368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... openat resumed>) = 4 [pid 9369] <... write resumed>) = 4 [pid 9369] close(3 [pid 9368] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] fstat(4, [pid 9369] <... close resumed>) = 0 [pid 9368] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9369] symlink("/dev/binderfs", "./binderfs" [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9369] <... symlink resumed>) = 0 [pid 9368] <... mprotect resumed>) = 0 [pid 9369] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9344] <... ioctl resumed>) = 0 [pid 5083] getdents64(4, [pid 9369] <... futex resumed>) = 0 [pid 9369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9369] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9369] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9368] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9344] close(4 [pid 9369] <... clone resumed>, parent_tid=[9370], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9370 [pid 9369] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9344] <... close resumed>) = 0 [pid 5083] getdents64(4, ./strace-static-x86_64: Process 9371 attached [pid 9369] <... futex resumed>) = 0 [pid 9368] <... clone resumed>, parent_tid=[9371], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9371 [pid 9344] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9371] set_robust_list(0x7ff2b37749e0, 24 [pid 9369] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9368] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9344] <... futex resumed>) = 1 [pid 5083] close(4 [pid 9342] <... futex resumed>) = 0 [pid 9371] <... set_robust_list resumed>) = 0 [pid 9368] <... futex resumed>) = 0 [pid 9344] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9342] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... close resumed>) = 0 ./strace-static-x86_64: Process 9370 attached [pid 9371] memfd_create("syzkaller", 0 [pid 9368] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9342] <... futex resumed>) = 0 [pid 5083] rmdir("./127/file0" [pid 9371] <... memfd_create resumed>) = 3 [pid 9344] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9342] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9370] set_robust_list(0x7ff2b37749e0, 24 [pid 5083] <... rmdir resumed>) = 0 [pid 9371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9370] <... set_robust_list resumed>) = 0 [pid 9344] <... openat resumed>) = 3 [pid 5083] getdents64(3, [pid 9371] <... mmap resumed>) = 0x7ff2ab354000 [pid 9344] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9370] memfd_create("syzkaller", 0) = 3 [pid 9370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9344] <... futex resumed>) = 1 [pid 9342] <... futex resumed>) = 0 [pid 9344] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9342] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 9344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9342] <... futex resumed>) = 0 [pid 9344] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9342] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... close resumed>) = 0 [pid 9344] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] rmdir("./127" [pid 9344] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... rmdir resumed>) = 0 [pid 9344] <... futex resumed>) = 1 [pid 9342] <... futex resumed>) = 0 [pid 5083] mkdir("./128", 0777 [pid 9344] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9342] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9342] <... futex resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 9344] openat(AT_FDCWD, ".log", O_RDONLY [pid 9342] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9344] <... openat resumed>) = 4 [pid 5083] <... openat resumed>) = 3 [pid 9344] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 9344] <... futex resumed>) = 1 [pid 9342] <... futex resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9344] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9342] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 9344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9342] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 9344] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9342] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9344] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9344] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9372 [pid 9344] <... futex resumed>) = 1 [pid 9342] <... futex resumed>) = 0 [pid 9344] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9342] exit_group(0 [pid 9344] <... futex resumed>) = ? [pid 9342] <... exit_group resumed>) = ? [pid 9344] +++ exited with 0 +++ [pid 9342] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9342, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 9372 attached ) = 0 [pid 9372] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9372] chdir("./128" [pid 5081] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9372] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9372] <... prctl resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 9372] setpgid(0, 0 [pid 5081] fstat(3, [pid 9372] <... setpgid resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] getdents64(3, [pid 9372] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9372] write(3, "1000", 4 [pid 5081] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9372] <... write resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9372] close(3 [pid 5081] lstat("./127/binderfs", [pid 9372] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9372] symlink("/dev/binderfs", "./binderfs" [pid 5081] unlink("./127/binderfs" [pid 9372] <... symlink resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 9372] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9372] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] lstat("./127/file0", [pid 9372] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9372] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9372] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9372] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 9372] <... clone resumed>, parent_tid=[9373], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9373 [pid 5081] fstat(4, [pid 9372] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9372] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 9372] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 9373 attached [pid 5081] close(4 [pid 9373] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] <... close resumed>) = 0 [pid 9373] <... set_robust_list resumed>) = 0 [pid 5081] rmdir("./127/file0") = 0 [pid 9373] memfd_create("syzkaller", 0 [pid 5081] umount2("./127/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9373] <... memfd_create resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] lstat("./127/.log", [pid 9373] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./127/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./127") = 0 [pid 5081] mkdir("./128", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9374 ./strace-static-x86_64: Process 9374 attached [pid 9374] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9374] chdir("./128") = 0 [pid 9374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9374] setpgid(0, 0) = 0 [pid 9374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9374] write(3, "1000", 4) = 4 [pid 9374] close(3) = 0 [pid 9374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9374] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9374] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9374] <... mprotect resumed>) = 0 [pid 9374] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9375], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9375 [pid 9374] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9374] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9375 attached [pid 9375] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9375] memfd_create("syzkaller", 0) = 3 [pid 9375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9365] <... write resumed>) = 16777216 [pid 9365] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9365] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9365] close(3) = 0 [pid 9365] mkdir("./file0", 0777) = 0 [ 272.841610][ T9365] loop0: detected capacity change from 0 to 32768 [ 272.877566][ T9365] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor373 (9365) [ 272.937091][ T9365] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 272.955094][ T9365] BTRFS info (device loop0): setting nodatasum [pid 9365] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9367] <... write resumed>) = 16777216 [pid 9371] <... write resumed>) = 16777216 [ 272.990617][ T9365] BTRFS info (device loop0): allowing degraded mounts [ 273.016714][ T9365] BTRFS info (device loop0): use zlib compression, level 3 [ 273.024893][ T9365] BTRFS info (device loop0): using free space tree [pid 9367] munmap(0x7ff2ab354000, 16777216 [pid 9371] munmap(0x7ff2ab354000, 16777216 [pid 9367] <... munmap resumed>) = 0 [pid 9371] <... munmap resumed>) = 0 [pid 9370] <... write resumed>) = 16777216 [pid 9367] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9370] munmap(0x7ff2ab354000, 16777216 [pid 9367] <... openat resumed>) = 4 [pid 9371] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9371] ioctl(4, LOOP_SET_FD, 3 [pid 9370] <... munmap resumed>) = 0 [pid 9367] ioctl(4, LOOP_SET_FD, 3 [pid 9370] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9371] <... ioctl resumed>) = 0 [pid 9370] <... openat resumed>) = 4 [pid 9367] <... ioctl resumed>) = 0 [pid 9370] ioctl(4, LOOP_SET_FD, 3 [pid 9371] close(3) = 0 [pid 9371] mkdir("./file0", 0777) = 0 [pid 9370] <... ioctl resumed>) = 0 [pid 9371] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9367] close(3 [pid 9370] close(3 [pid 9367] <... close resumed>) = 0 [pid 9370] <... close resumed>) = 0 [pid 9367] mkdir("./file0", 0777 [pid 9370] mkdir("./file0", 0777 [pid 9367] <... mkdir resumed>) = 0 [pid 9373] <... write resumed>) = 16777216 [pid 9370] <... mkdir resumed>) = 0 [pid 9367] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9373] munmap(0x7ff2ab354000, 16777216 [pid 9370] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9373] <... munmap resumed>) = 0 [ 273.090387][ T9371] loop2: detected capacity change from 0 to 32768 [ 273.097889][ T9367] loop5: detected capacity change from 0 to 32768 [ 273.106387][ T9370] loop1: detected capacity change from 0 to 32768 [ 273.121383][ T9371] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9371) [pid 9373] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9371] <... mount resumed>) = -1 EEXIST (File exists) [pid 9373] ioctl(4, LOOP_SET_FD, 3 [pid 9371] ioctl(4, LOOP_CLR_FD [pid 9367] <... mount resumed>) = -1 EEXIST (File exists) [pid 9370] <... mount resumed>) = -1 EEXIST (File exists) [pid 9370] ioctl(4, LOOP_CLR_FD [pid 9367] ioctl(4, LOOP_CLR_FD [pid 9373] <... ioctl resumed>) = 0 [pid 9373] close(3) = 0 [ 273.136468][ T9367] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9367) [ 273.150864][ T9370] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9370) [ 273.161945][ T9373] loop4: detected capacity change from 0 to 32768 [ 273.176352][ T9365] BTRFS info (device loop0): enabling ssd optimizations [ 273.183521][ T9365] BTRFS info (device loop0): auto enabling async discard [pid 9373] mkdir("./file0", 0777) = 0 [pid 9373] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9365] <... mount resumed>) = 0 [ 273.192120][ T9365] BTRFS info (device loop0): checking UUID tree [ 273.204244][ T9373] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9373) [pid 9365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9375] <... write resumed>) = 16777216 [pid 9365] chdir("./file0") = 0 [pid 9365] ioctl(4, LOOP_CLR_FD) = 0 [pid 9365] close(4) = 0 [pid 9365] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9364] <... futex resumed>) = 0 [pid 9364] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9364] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9365] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 9365] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9364] <... futex resumed>) = 0 [pid 9364] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9364] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9365] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9375] munmap(0x7ff2ab354000, 16777216 [pid 9373] <... mount resumed>) = -1 EEXIST (File exists) [pid 9373] ioctl(4, LOOP_CLR_FD [pid 9375] <... munmap resumed>) = 0 [pid 9370] <... ioctl resumed>) = 0 [pid 9375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9375] ioctl(4, LOOP_SET_FD, 3 [pid 9370] close(4) = 0 [pid 9370] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9369] <... futex resumed>) = 0 [pid 9370] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9369] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9369] <... futex resumed>) = 0 [pid 9370] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9369] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9364] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9364] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9370] <... openat resumed>) = 3 [pid 9364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9370] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9364] <... mmap resumed>) = 0x7ff2ac333000 [pid 9370] <... futex resumed>) = 1 [pid 9369] <... futex resumed>) = 0 [pid 9364] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 9370] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9369] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9364] <... mprotect resumed>) = 0 [pid 9370] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9369] <... futex resumed>) = 0 [pid 9364] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9370] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [ 273.306009][ T9365] BTRFS info (device loop0): balance: start -s [ 273.310635][ T9375] loop3: detected capacity change from 0 to 32768 [ 273.313996][ T9365] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 9369] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9375] <... ioctl resumed>) = 0 [pid 9370] <... futex resumed>) = 0 [pid 9369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9364] <... clone resumed>, parent_tid=[9393], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9393 [pid 9364] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9364] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9393 attached [pid 9393] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 9393] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 9370] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9369] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9393] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9364] <... futex resumed>) = 0 [pid 9393] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9364] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9375] close(3 [pid 9370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9369] <... futex resumed>) = 0 [pid 9364] <... futex resumed>) = 0 [ 273.375101][ T9365] BTRFS info (device loop0): balance: ended with status: 0 [ 273.382959][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 273.382972][ T27] audit: type=1804 audit(1680236956.852:769): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/127/file0/.log" dev="loop0" ino=263 res=1 errno=0 [ 273.384782][ T9393] BTRFS info (device loop0): scrub: started on devid 1 [pid 9364] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9375] <... close resumed>) = 0 [pid 9370] openat(AT_FDCWD, ".log", O_RDONLY [pid 9369] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9375] mkdir("./file0", 0777 [pid 9370] <... openat resumed>) = 4 [pid 9375] <... mkdir resumed>) = 0 [pid 9375] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9370] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9369] <... futex resumed>) = 0 [pid 9369] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9370] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9369] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9370] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9370] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9369] <... futex resumed>) = 0 [pid 9370] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9369] exit_group(0) = ? [pid 9370] <... futex resumed>) = ? [pid 9370] +++ exited with 0 +++ [pid 9369] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9369, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=25 /* 0.25 s */} --- [pid 5079] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9364] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./128/binderfs", [pid 9375] <... mount resumed>) = -1 EEXIST (File exists) [pid 9371] <... ioctl resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9375] ioctl(4, LOOP_CLR_FD [pid 9371] close(4 [pid 5079] unlink("./128/binderfs" [ 273.426166][ T27] audit: type=1804 audit(1680236956.902:770): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/128/.log" dev="sda1" ino=1161 res=1 errno=0 [ 273.450574][ T9375] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9375) [pid 9371] <... close resumed>) = 0 [pid 9365] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 9371] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9365] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9371] <... futex resumed>) = 1 [pid 9368] <... futex resumed>) = 0 [pid 9365] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9371] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9368] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9365] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] lstat("./128/file0", [pid 9371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9368] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9371] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9368] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9371] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9371] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9371] <... futex resumed>) = 1 [pid 9368] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 9371] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9368] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] fstat(4, [pid 9371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9368] <... futex resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9371] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9368] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] getdents64(4, [pid 9371] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9371] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(4, [pid 9371] <... futex resumed>) = 1 [pid 9368] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9371] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9368] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(4 [pid 9371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9368] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [ 273.491541][ T9393] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [pid 9371] openat(AT_FDCWD, ".log", O_RDONLY [pid 9368] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] rmdir("./128/file0" [pid 9371] <... openat resumed>) = 4 [pid 5079] <... rmdir resumed>) = 0 [pid 9371] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./128/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9393] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9371] <... futex resumed>) = 1 [pid 9368] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9393] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9371] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9368] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9364] exit_group(0 [pid 5079] lstat("./128/.log", [pid 9393] <... futex resumed>) = ? [pid 9371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9368] <... futex resumed>) = 0 [pid 9365] <... futex resumed>) = ? [pid 9364] <... exit_group resumed>) = ? [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9393] +++ exited with 0 +++ [pid 9371] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9368] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9365] +++ exited with 0 +++ [pid 5079] unlink("./128/.log" [pid 9371] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9364] +++ exited with 0 +++ [pid 5079] <... unlink resumed>) = 0 [pid 9371] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 9371] <... futex resumed>) = 1 [pid 9368] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9364, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=36 /* 0.36 s */} --- [pid 9371] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9368] exit_group(0 [pid 5079] close(3 [pid 9371] <... futex resumed>) = ? [pid 9368] <... exit_group resumed>) = ? [pid 5079] <... close resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 9371] +++ exited with 0 +++ [pid 9368] +++ exited with 0 +++ [pid 5079] rmdir("./128" [pid 5078] <... restart_syscall resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9368, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=22 /* 0.22 s */} --- [pid 5079] mkdir("./129", 0777 [pid 5080] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 273.538227][ T27] audit: type=1804 audit(1680236957.012:771): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/128/.log" dev="sda1" ino=1152 res=1 errno=0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... openat resumed>) = 3 [pid 5078] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] fstat(3, [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] close(3 [pid 5078] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] getdents64(3, [pid 5079] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9395 [pid 5080] lstat("./128/binderfs", [pid 5078] <... openat resumed>) = 3 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./128/binderfs" [pid 5078] fstat(3, [pid 5080] <... unlink resumed>) = 0 [pid 5080] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, ./strace-static-x86_64: Process 9395 attached [pid 5080] lstat("./128/file0", [pid 9395] set_robust_list(0x5555559d56e0, 24 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9395] <... set_robust_list resumed>) = 0 [pid 5080] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9395] chdir("./129" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9395] <... chdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... openat resumed>) = 4 [pid 9395] <... prctl resumed>) = 0 [pid 5080] fstat(4, [pid 9395] setpgid(0, 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9395] <... setpgid resumed>) = 0 [pid 5080] getdents64(4, [pid 9395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9395] <... openat resumed>) = 3 [pid 5080] getdents64(4, [pid 9395] write(3, "1000", 4 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9395] <... write resumed>) = 4 [pid 5080] close(4 [pid 5078] lstat("./127/binderfs", [pid 9395] close(3 [pid 5080] <... close resumed>) = 0 [pid 9395] <... close resumed>) = 0 [pid 5080] rmdir("./128/file0" [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9395] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... rmdir resumed>) = 0 [pid 5078] unlink("./127/binderfs" [pid 9395] <... symlink resumed>) = 0 [pid 5080] umount2("./128/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9395] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9367] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... unlink resumed>) = 0 [pid 9395] <... futex resumed>) = 0 [pid 9367] close(4 [pid 5080] lstat("./128/.log", [pid 5078] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9395] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] unlink("./128/.log" [pid 9395] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... unlink resumed>) = 0 [pid 9395] <... mprotect resumed>) = 0 [pid 5080] getdents64(3, [pid 9395] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9367] <... close resumed>) = 0 [pid 5080] close(3 [pid 9395] <... clone resumed>, parent_tid=[9396], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9396 [pid 5080] <... close resumed>) = 0 [pid 9395] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9367] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./128" [pid 9395] <... futex resumed>) = 0 [pid 9367] <... futex resumed>) = 1 [pid 9366] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 9395] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9366] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./129", 0777 [pid 9367] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9366] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 9396 attached [pid 9367] <... openat resumed>) = 3 [pid 9366] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9396] set_robust_list(0x7ff2b37749e0, 24 [pid 9367] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 9396] <... set_robust_list resumed>) = 0 [pid 9367] <... futex resumed>) = 1 [pid 9366] <... futex resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9396] memfd_create("syzkaller", 0 [pid 9367] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9366] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9396] <... memfd_create resumed>) = 3 [pid 9367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9366] <... futex resumed>) = 0 [pid 5080] close(3 [pid 9396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9367] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9366] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 9396] <... mmap resumed>) = 0x7ff2ab354000 [pid 9367] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9367] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9397 ./strace-static-x86_64: Process 9397 attached [pid 9367] <... futex resumed>) = 1 [pid 9366] <... futex resumed>) = 0 [pid 9367] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9366] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9397] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9397] chdir("./129" [pid 9367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9366] <... futex resumed>) = 0 [pid 9397] <... chdir resumed>) = 0 [pid 9397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9367] openat(AT_FDCWD, ".log", O_RDONLY [pid 9366] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9397] setpgid(0, 0 [pid 9373] <... ioctl resumed>) = 0 [pid 9367] <... openat resumed>) = 4 [pid 9397] <... setpgid resumed>) = 0 [pid 9367] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9397] write(3, "1000", 4 [pid 9367] <... futex resumed>) = 1 [pid 9366] <... futex resumed>) = 0 [pid 9397] <... write resumed>) = 4 [pid 9367] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9366] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9397] close(3) = 0 [pid 9397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9366] <... futex resumed>) = 0 [pid 9397] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9367] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9366] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9397] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9367] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9397] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9367] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9366] <... futex resumed>) = 0 [pid 9397] <... clone resumed>, parent_tid=[9398], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9398 [pid 9367] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9366] exit_group(0 [pid 9397] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9397] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9367] <... futex resumed>) = ? [pid 9366] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 9398 attached [ 273.686350][ T27] audit: type=1804 audit(1680236957.162:772): pid=9367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/128/.log" dev="sda1" ino=1152 res=1 errno=0 [pid 9398] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9398] memfd_create("syzkaller", 0) = 3 [pid 9367] +++ exited with 0 +++ [pid 9366] +++ exited with 0 +++ [pid 9398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9366, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=22 /* 0.22 s */} --- [pid 9398] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./128/binderfs") = 0 [pid 5084] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./128/file0", [pid 9373] close(4 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 9373] <... close resumed>) = 0 [pid 5084] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./128/file0") = 0 [pid 5084] umount2("./128/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./128/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] unlink("./128/.log" [pid 9373] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5078] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9373] <... futex resumed>) = 1 [pid 9372] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9373] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9372] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] lstat("./127/file0", [pid 9373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9372] <... futex resumed>) = 0 [pid 5084] close(3 [pid 9373] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9372] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9373] <... openat resumed>) = 3 [pid 5084] rmdir("./128" [pid 5078] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9373] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 5084] mkdir("./129", 0777) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9373] <... futex resumed>) = 1 [pid 9372] <... futex resumed>) = 0 [pid 9373] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9372] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 4 [pid 9373] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9372] <... futex resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5078] fstat(4, [pid 9373] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9372] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9373] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] close(3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9373] <... futex resumed>) = 0 [pid 9372] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9373] openat(AT_FDCWD, ".log", O_RDONLY [pid 9372] <... futex resumed>) = 0 [pid 5078] getdents64(4, ./strace-static-x86_64: Process 9399 attached [pid 9375] <... ioctl resumed>) = 0 [pid 9373] <... openat resumed>) = 4 [pid 9372] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9399 [pid 9399] set_robust_list(0x5555559d56e0, 24 [pid 9373] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9373] <... futex resumed>) = 1 [pid 9399] <... set_robust_list resumed>) = 0 [pid 9372] <... futex resumed>) = 0 [pid 5078] getdents64(4, [pid 9399] chdir("./129" [pid 9373] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9372] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9399] <... chdir resumed>) = 0 [pid 9373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9372] <... futex resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9373] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9372] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] close(4 [pid 9399] <... prctl resumed>) = 0 [pid 9373] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] <... close resumed>) = 0 [pid 9399] setpgid(0, 0 [pid 9373] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] rmdir("./127/file0" [pid 9375] close(4 [pid 9399] <... setpgid resumed>) = 0 [pid 9375] <... close resumed>) = 0 [pid 9373] <... futex resumed>) = 1 [pid 5078] <... rmdir resumed>) = 0 [pid 9375] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9374] <... futex resumed>) = 0 [pid 9375] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9374] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9372] <... futex resumed>) = 0 [pid 9399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9375] <... openat resumed>) = 3 [pid 9374] <... futex resumed>) = 0 [pid 9373] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9372] exit_group(0 [pid 5078] getdents64(3, [pid 9399] <... openat resumed>) = 3 [pid 9375] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9374] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9373] <... futex resumed>) = ? [pid 9372] <... exit_group resumed>) = ? [ 273.826268][ T27] audit: type=1804 audit(1680236957.302:773): pid=9373 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/128/.log" dev="sda1" ino=1151 res=1 errno=0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9399] write(3, "1000", 4 [pid 9375] <... futex resumed>) = 0 [pid 9374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9373] +++ exited with 0 +++ [pid 9372] +++ exited with 0 +++ [pid 9375] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9374] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9374] <... futex resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9372, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} --- [pid 9399] <... write resumed>) = 4 [pid 9375] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9374] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 9375] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9375] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9375] <... futex resumed>) = 1 [pid 9374] <... futex resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 9375] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9374] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(3, [pid 9375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9374] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9375] openat(AT_FDCWD, ".log", O_RDONLY [pid 9374] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] getdents64(3, [pid 9375] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9375] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9375] <... futex resumed>) = 1 [pid 9374] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9375] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9374] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./128/binderfs", [pid 9375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9374] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9375] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9374] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] unlink("./128/binderfs" [pid 9375] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... unlink resumed>) = 0 [pid 9375] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9375] <... futex resumed>) = 1 [pid 9374] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9375] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9374] exit_group(0 [pid 5083] lstat("./128/file0", [pid 9399] close(3 [pid 9375] <... futex resumed>) = ? [pid 9374] <... exit_group resumed>) = ? [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 9399] <... close resumed>) = 0 [pid 9375] +++ exited with 0 +++ [pid 9374] +++ exited with 0 +++ [pid 5083] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9399] symlink("/dev/binderfs", "./binderfs" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9374, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5078] rmdir("./127" [pid 5083] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9399] <... symlink resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 5083] fstat(4, [pid 5081] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9399] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] mkdir("./128", 0777 [pid 9399] <... futex resumed>) = 0 [pid 5083] getdents64(4, [pid 5081] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] <... openat resumed>) = 3 [pid 5078] <... mkdir resumed>) = 0 [pid 5083] getdents64(4, [pid 5081] fstat(3, [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] close(4 [pid 5081] getdents64(3, [pid 5083] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] rmdir("./128/file0" [pid 5081] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./128/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./128/binderfs", [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] lstat("./128/.log", [pid 5081] unlink("./128/binderfs" [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5083] unlink("./128/.log" [pid 5081] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... unlink resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] getdents64(3, [pid 5081] lstat("./128/file0", [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] close(3 [pid 5081] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] rmdir("./128" [pid 5081] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5083] mkdir("./129", 0777 [pid 5081] fstat(4, [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] getdents64(4, [pid 5083] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] getdents64(4, [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 5081] close(4 [pid 5083] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] rmdir("./128/file0") = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] umount2("./128/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./128/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./128/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./128") = 0 [pid 5081] mkdir("./129", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9399] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] <... openat resumed>) = 3 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9400 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9401 [pid 9399] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9399] <... mprotect resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9399] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] close(3./strace-static-x86_64: Process 9401 attached ./strace-static-x86_64: Process 9400 attached [pid 9401] set_robust_list(0x5555559d56e0, 24 [pid 9400] set_robust_list(0x5555559d56e0, 24 [pid 9399] <... clone resumed>, parent_tid=[9402], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9402 [pid 5078] <... close resumed>) = 0 [pid 9401] <... set_robust_list resumed>) = 0 [pid 9400] <... set_robust_list resumed>) = 0 [pid 9401] chdir("./129" [pid 9400] chdir("./129" [pid 9399] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9401] <... chdir resumed>) = 0 [pid 9400] <... chdir resumed>) = 0 [pid 9401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9401] <... prctl resumed>) = 0 [pid 9400] <... prctl resumed>) = 0 [pid 9401] setpgid(0, 0 [pid 9400] setpgid(0, 0 [pid 9401] <... setpgid resumed>) = 0 [pid 9400] <... setpgid resumed>) = 0 [pid 9401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9399] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9402 attached [pid 9401] <... openat resumed>) = 3 [pid 9400] <... openat resumed>) = 3 [pid 9399] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 273.925708][ T27] audit: type=1804 audit(1680236957.372:774): pid=9375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/128/.log" dev="sda1" ino=1152 res=1 errno=0 [pid 9401] write(3, "1000", 4 [pid 9400] write(3, "1000", 4 [pid 9401] <... write resumed>) = 4 [pid 9400] <... write resumed>) = 4 [pid 9401] close(3 [pid 9400] close(3 [pid 9401] <... close resumed>) = 0 [pid 9400] <... close resumed>) = 0 [pid 9401] symlink("/dev/binderfs", "./binderfs" [pid 9400] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 9403 attached [pid 9402] set_robust_list(0x7ff2b37749e0, 24 [pid 9401] <... symlink resumed>) = 0 [pid 9400] <... symlink resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9403 [pid 9403] set_robust_list(0x5555559d56e0, 24 [pid 9401] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9400] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9402] <... set_robust_list resumed>) = 0 [pid 9403] <... set_robust_list resumed>) = 0 [pid 9401] <... futex resumed>) = 0 [pid 9400] <... futex resumed>) = 0 [pid 9403] chdir("./128" [pid 9402] memfd_create("syzkaller", 0 [pid 9401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9403] <... chdir resumed>) = 0 [pid 9401] <... mmap resumed>) = 0x7ff2b3754000 [pid 9400] <... mmap resumed>) = 0x7ff2b3754000 [pid 9403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9402] <... memfd_create resumed>) = 3 [pid 9401] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9400] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9403] <... prctl resumed>) = 0 [pid 9402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9401] <... mprotect resumed>) = 0 [pid 9400] <... mprotect resumed>) = 0 [pid 9403] setpgid(0, 0 [pid 9401] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9400] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9403] <... setpgid resumed>) = 0 [pid 9402] <... mmap resumed>) = 0x7ff2ab354000 [pid 9403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9401] <... clone resumed>, parent_tid=[9404], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9404 [pid 9400] <... clone resumed>, parent_tid=[9405], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9405 [pid 9403] <... openat resumed>) = 3 [pid 9401] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9400] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9403] write(3, "1000", 4 [pid 9401] <... futex resumed>) = 0 [pid 9400] <... futex resumed>) = 0 [pid 9403] <... write resumed>) = 4 [pid 9401] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9400] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9403] close(3) = 0 ./strace-static-x86_64: Process 9404 attached [pid 9403] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 9405 attached [pid 9404] set_robust_list(0x7ff2b37749e0, 24 [pid 9403] <... symlink resumed>) = 0 [pid 9405] set_robust_list(0x7ff2b37749e0, 24 [pid 9404] <... set_robust_list resumed>) = 0 [pid 9403] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9405] <... set_robust_list resumed>) = 0 [pid 9404] memfd_create("syzkaller", 0 [pid 9403] <... futex resumed>) = 0 [pid 9404] <... memfd_create resumed>) = 3 [pid 9403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9403] <... mmap resumed>) = 0x7ff2b3754000 [pid 9404] <... mmap resumed>) = 0x7ff2ab354000 [pid 9403] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9405] memfd_create("syzkaller", 0 [pid 9403] <... mprotect resumed>) = 0 [pid 9403] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9405] <... memfd_create resumed>) = 3 [pid 9405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9403] <... clone resumed>, parent_tid=[9406], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9406 [pid 9405] <... mmap resumed>) = 0x7ff2ab354000 [pid 9403] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9403] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9406 attached [pid 9406] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9406] memfd_create("syzkaller", 0) = 3 [pid 9406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9396] <... write resumed>) = 16777216 [pid 9396] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9396] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9396] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9396] close(3) = 0 [pid 9396] mkdir("./file0", 0777) = 0 [pid 9398] <... write resumed>) = 16777216 [pid 9398] munmap(0x7ff2ab354000, 16777216 [pid 9396] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9398] <... munmap resumed>) = 0 [pid 9398] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9398] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9398] close(3) = 0 [pid 9398] mkdir("./file0", 0777) = 0 [ 274.656046][ T9396] loop1: detected capacity change from 0 to 32768 [ 274.682430][ T9398] loop2: detected capacity change from 0 to 32768 [ 274.683080][ T9396] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (9396) [pid 9398] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 274.747196][ T9398] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9398) [ 274.765363][ T9396] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9398] ioctl(4, LOOP_CLR_FD [pid 9402] <... write resumed>) = 16777216 [pid 9402] munmap(0x7ff2ab354000, 16777216 [pid 9405] <... write resumed>) = 16777216 [pid 9405] munmap(0x7ff2ab354000, 16777216 [pid 9402] <... munmap resumed>) = 0 [pid 9405] <... munmap resumed>) = 0 [pid 9402] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9405] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9402] <... openat resumed>) = 4 [pid 9405] <... openat resumed>) = 4 [ 274.800720][ T9396] BTRFS info (device loop1): setting nodatasum [ 274.824523][ T9396] BTRFS info (device loop1): allowing degraded mounts [pid 9402] ioctl(4, LOOP_SET_FD, 3 [pid 9405] ioctl(4, LOOP_SET_FD, 3 [pid 9402] <... ioctl resumed>) = 0 [pid 9402] close(3 [pid 9405] <... ioctl resumed>) = 0 [pid 9404] <... write resumed>) = 16777216 [pid 9402] <... close resumed>) = 0 [pid 9405] close(3 [pid 9404] munmap(0x7ff2ab354000, 16777216 [pid 9402] mkdir("./file0", 0777 [pid 9405] <... close resumed>) = 0 [pid 9402] <... mkdir resumed>) = 0 [pid 9405] mkdir("./file0", 0777 [pid 9404] <... munmap resumed>) = 0 [pid 9402] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9405] <... mkdir resumed>) = 0 [pid 9405] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9404] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 274.851389][ T9402] loop5: detected capacity change from 0 to 32768 [ 274.858877][ T9405] loop4: detected capacity change from 0 to 32768 [ 274.867814][ T9396] BTRFS info (device loop1): use zlib compression, level 3 [ 274.882403][ T9402] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9402) [ 274.888198][ T9396] BTRFS info (device loop1): using free space tree [pid 9404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9404] close(3) = 0 [pid 9404] mkdir("./file0", 0777) = 0 [pid 9404] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9402] <... mount resumed>) = -1 EEXIST (File exists) [pid 9402] ioctl(4, LOOP_CLR_FD [pid 9405] <... mount resumed>) = -1 EEXIST (File exists) [pid 9405] ioctl(4, LOOP_CLR_FD [pid 9406] <... write resumed>) = 16777216 [pid 9404] <... mount resumed>) = -1 EEXIST (File exists) [pid 9406] munmap(0x7ff2ab354000, 16777216 [pid 9404] ioctl(4, LOOP_CLR_FD [pid 9406] <... munmap resumed>) = 0 [pid 9406] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 274.902721][ T9404] loop3: detected capacity change from 0 to 32768 [ 274.919194][ T9405] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9405) [ 274.941398][ T9404] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9404) [pid 9406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9406] close(3) = 0 [pid 9406] mkdir("./file0", 0777) = 0 [pid 9406] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9398] <... ioctl resumed>) = 0 [ 274.963290][ T9406] loop0: detected capacity change from 0 to 32768 [ 274.983932][ T9406] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9406) [pid 9398] close(4 [pid 9406] <... mount resumed>) = -1 EEXIST (File exists) [pid 9406] ioctl(4, LOOP_CLR_FD [pid 9398] <... close resumed>) = 0 [pid 9398] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9397] <... futex resumed>) = 0 [pid 9397] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9398] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9397] <... futex resumed>) = 0 [pid 9398] <... openat resumed>) = 3 [pid 9397] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9398] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9398] <... futex resumed>) = 0 [pid 9398] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 9397] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9398] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9397] <... futex resumed>) = 0 [pid 9398] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9398] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9398] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9397] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 9397] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9398] <... futex resumed>) = 0 [pid 9397] <... futex resumed>) = 1 [pid 9398] openat(AT_FDCWD, ".log", O_RDONLY [pid 9397] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9398] <... openat resumed>) = 4 [pid 9398] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9397] <... futex resumed>) = 0 [pid 9398] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9397] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9396] <... mount resumed>) = 0 [pid 9398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9397] <... futex resumed>) = 0 [pid 9396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9398] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9397] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9396] <... openat resumed>) = 3 [pid 9398] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9396] chdir("./file0" [pid 9398] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9396] <... chdir resumed>) = 0 [pid 9402] <... ioctl resumed>) = 0 [pid 9398] <... futex resumed>) = 1 [pid 9397] <... futex resumed>) = 0 [pid 9396] ioctl(4, LOOP_CLR_FD [pid 9398] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9397] exit_group(0 [pid 9396] <... ioctl resumed>) = 0 [pid 9398] <... futex resumed>) = ? [ 275.107165][ T9396] BTRFS info (device loop1): enabling ssd optimizations [ 275.114319][ T9396] BTRFS info (device loop1): auto enabling async discard [ 275.122616][ T9396] BTRFS info (device loop1): checking UUID tree [ 275.131950][ T27] audit: type=1804 audit(1680236958.602:775): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/129/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 9397] <... exit_group resumed>) = ? [pid 9396] close(4 [pid 9404] <... ioctl resumed>) = 0 [pid 9398] +++ exited with 0 +++ [pid 9404] close(4 [pid 9397] +++ exited with 0 +++ [pid 9396] <... close resumed>) = 0 [pid 9404] <... close resumed>) = 0 [pid 9396] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9404] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9402] close(4 [pid 9396] <... futex resumed>) = 1 [pid 9395] <... futex resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9397, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=27 /* 0.27 s */} --- [pid 9404] <... futex resumed>) = 1 [pid 9401] <... futex resumed>) = 0 [pid 9396] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9395] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9404] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9402] <... close resumed>) = 0 [pid 9401] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9395] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9401] <... futex resumed>) = 0 [pid 9396] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9395] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9404] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9402] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9401] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9404] <... openat resumed>) = 3 [pid 9402] <... futex resumed>) = 1 [pid 9399] <... futex resumed>) = 0 [pid 9396] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 3 [pid 9404] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9402] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9399] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9396] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(3, [pid 9404] <... futex resumed>) = 1 [pid 9402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9401] <... futex resumed>) = 0 [pid 9399] <... futex resumed>) = 0 [pid 9396] <... futex resumed>) = 1 [pid 9395] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9404] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9402] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9401] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9399] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9396] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9395] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 9404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9402] <... openat resumed>) = 3 [pid 9401] <... futex resumed>) = 0 [pid 9396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9395] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9404] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9402] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9401] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9396] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9395] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9404] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9402] <... futex resumed>) = 1 [pid 9399] <... futex resumed>) = 0 [pid 5080] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9404] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9402] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9399] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9404] <... futex resumed>) = 1 [pid 9402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9401] <... futex resumed>) = 0 [pid 9399] <... futex resumed>) = 0 [pid 5080] lstat("./129/binderfs", [pid 9404] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9402] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9399] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9405] <... ioctl resumed>) = 0 [pid 9402] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9402] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9401] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9404] openat(AT_FDCWD, ".log", O_RDONLY [pid 9402] <... futex resumed>) = 1 [pid 9401] <... futex resumed>) = 0 [pid 9399] <... futex resumed>) = 0 [pid 5080] unlink("./129/binderfs" [pid 9404] <... openat resumed>) = 4 [pid 9402] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9399] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9399] <... futex resumed>) = 0 [pid 9402] openat(AT_FDCWD, ".log", O_RDONLY [pid 9399] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9402] <... openat resumed>) = 4 [pid 9404] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9401] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... unlink resumed>) = 0 [pid 9404] <... futex resumed>) = 0 [pid 9402] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9405] close(4 [pid 9404] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9402] <... futex resumed>) = 1 [pid 9401] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9399] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9406] <... ioctl resumed>) = 0 [pid 9405] <... close resumed>) = 0 [pid 9404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9402] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9401] <... futex resumed>) = 0 [pid 9399] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./129/file0", [pid 9405] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9399] <... futex resumed>) = 0 [pid 9405] <... futex resumed>) = 1 [pid 9402] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9399] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9405] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9402] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9402] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9399] <... futex resumed>) = 0 [pid 9402] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9399] exit_group(0 [pid 9402] <... futex resumed>) = ? [pid 9399] <... exit_group resumed>) = ? [pid 9402] +++ exited with 0 +++ [pid 9399] +++ exited with 0 +++ [pid 9406] close(4 [pid 9404] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9401] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9400] <... futex resumed>) = 0 [pid 9395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9399, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=25 /* 0.25 s */} --- [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9406] <... close resumed>) = 0 [pid 9404] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9400] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9395] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9406] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9405] <... futex resumed>) = 0 [pid 9404] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9400] <... futex resumed>) = 1 [pid 9395] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9406] <... futex resumed>) = 1 [ 275.243159][ T9396] BTRFS info (device loop1): balance: start -s [ 275.257949][ T9396] BTRFS info (device loop1): relocating block group 1048576 flags system [ 275.270912][ T27] audit: type=1804 audit(1680236958.732:776): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/129/.log" dev="sda1" ino=1163 res=1 errno=0 [pid 9405] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9404] <... futex resumed>) = 1 [pid 9403] <... futex resumed>) = 0 [pid 9401] <... futex resumed>) = 0 [pid 9400] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9406] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9405] <... openat resumed>) = 3 [pid 9405] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9405] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9404] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9403] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9401] exit_group(0 [pid 9400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9395] <... mmap resumed>) = 0x7ff2ac333000 [pid 5080] <... openat resumed>) = 4 [pid 9406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9403] <... futex resumed>) = 0 [pid 9400] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9406] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9404] <... futex resumed>) = ? [pid 9403] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9401] <... exit_group resumed>) = ? [pid 9400] <... futex resumed>) = 1 [pid 9406] <... openat resumed>) = 3 [pid 9405] <... futex resumed>) = 0 [pid 9404] +++ exited with 0 +++ [pid 9400] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9405] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9406] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9405] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9401] +++ exited with 0 +++ [pid 9395] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(4, [pid 9406] <... futex resumed>) = 1 [pid 9405] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9403] <... futex resumed>) = 0 [pid 9395] <... mprotect resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9401, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=22 /* 0.22 s */} --- [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9406] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9405] <... futex resumed>) = 1 [pid 9403] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9400] <... futex resumed>) = 0 [pid 9395] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] getdents64(4, [pid 9406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9405] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9403] <... futex resumed>) = 0 [pid 9400] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9406] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9403] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9400] <... futex resumed>) = 0 [pid 9395] <... clone resumed>, parent_tid=[9425], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9425 [pid 5084] fstat(3, [pid 5081] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, [pid 9406] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9405] openat(AT_FDCWD, ".log", O_RDONLY [pid 9400] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9395] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9406] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9405] <... openat resumed>) = 4 [pid 9395] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 5081] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 275.300063][ T27] audit: type=1804 audit(1680236958.732:777): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/129/.log" dev="sda1" ino=1164 res=1 errno=0 [pid 5080] close(4 [pid 9406] <... futex resumed>) = 1 [pid 9405] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9403] <... futex resumed>) = 0 [pid 9395] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 9406] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9405] <... futex resumed>) = 1 [pid 9403] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9400] <... futex resumed>) = 0 [pid 5084] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] fstat(3, [pid 5080] rmdir("./129/file0"./strace-static-x86_64: Process 9425 attached [pid 9406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9405] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9403] <... futex resumed>) = 0 [pid 9400] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9425] set_robust_list(0x7ff2ac3539e0, 24 [pid 9406] openat(AT_FDCWD, ".log", O_RDONLY [pid 9405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9403] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... rmdir resumed>) = 0 [pid 9425] <... set_robust_list resumed>) = 0 [pid 9405] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9425] openat(AT_FDCWD, ".log", O_RDONLY [pid 9405] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9400] <... futex resumed>) = 0 [pid 9425] <... openat resumed>) = 5 [pid 9406] <... openat resumed>) = 4 [pid 9405] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9400] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] lstat("./129/binderfs", [pid 5081] getdents64(3, [pid 5080] umount2("./129/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9425] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9406] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9405] <... futex resumed>) = 0 [pid 9400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9425] <... futex resumed>) = 1 [pid 9406] <... futex resumed>) = 1 [pid 9405] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9403] <... futex resumed>) = 0 [pid 9400] exit_group(0 [pid 9395] <... futex resumed>) = 0 [pid 5084] unlink("./129/binderfs" [pid 5081] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./129/.log", [pid 9425] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9406] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9405] <... futex resumed>) = ? [pid 9403] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9400] <... exit_group resumed>) = ? [pid 9395] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9405] +++ exited with 0 +++ [pid 9395] <... futex resumed>) = 0 [pid 9403] <... futex resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9425] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9403] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9400] +++ exited with 0 +++ [pid 9395] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./129/binderfs", [pid 5080] unlink("./129/.log" [pid 9406] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9400, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 9406] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] lstat("./129/file0", [pid 5081] unlink("./129/binderfs" [pid 5080] getdents64(3, [pid 9406] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [ 275.367833][ T9396] BTRFS info (device loop1): balance: ended with status: 0 [ 275.384448][ T9425] BTRFS info (device loop1): scrub: started on devid 1 [pid 9406] <... futex resumed>) = 1 [pid 9403] <... futex resumed>) = 0 [pid 5084] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3 [pid 9406] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9403] exit_group(0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 9406] <... futex resumed>) = ? [pid 9403] <... exit_group resumed>) = ? [pid 5084] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] lstat("./129/file0", [pid 5080] rmdir("./129" [pid 9406] +++ exited with 0 +++ [pid 9403] +++ exited with 0 +++ [pid 5084] <... openat resumed>) = 4 [pid 5083] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] fstat(4, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9403, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=22 /* 0.22 s */} --- [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] mkdir("./130", 0777 [pid 9395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] getdents64(4, [pid 5083] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... mkdir resumed>) = 0 [pid 5084] getdents64(4, [pid 5083] fstat(3, [pid 5081] <... openat resumed>) = 4 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] fstat(4, [pid 5080] <... openat resumed>) = 3 [pid 9396] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] close(4 [pid 5083] getdents64(3, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9396] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] getdents64(4, [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9396] <... futex resumed>) = 0 [pid 5084] rmdir("./129/file0" [pid 5083] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9396] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(4, [pid 5080] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] umount2("./129/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] lstat("./129/binderfs", [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] close(4 [pid 5078] fstat(3, [pid 5084] lstat("./129/.log", [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] unlink("./129/binderfs" [pid 5081] <... close resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9426 [pid 5078] getdents64(3, [pid 5084] unlink("./129/.log" [pid 5083] <... unlink resumed>) = 0 [pid 5081] rmdir("./129/file0" [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] <... unlink resumed>) = 0 [pid 5083] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9426 attached [pid 5084] getdents64(3, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... rmdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9426] set_robust_list(0x5555559d56e0, 24 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] lstat("./129/file0", [pid 5081] umount2("./129/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./128/binderfs", [pid 9426] <... set_robust_list resumed>) = 0 [pid 5084] close(3 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9426] chdir("./130" [ 275.400468][ T27] audit: type=1804 audit(1680236958.812:778): pid=9405 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/129/.log" dev="sda1" ino=1156 res=1 errno=0 [ 275.412091][ T9425] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 5084] <... close resumed>) = 0 [pid 5083] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./129/.log", [pid 5078] unlink("./128/binderfs" [pid 9426] <... chdir resumed>) = 0 [pid 5084] rmdir("./129" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9426] <... prctl resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] unlink("./129/.log" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./128/file0", [pid 5084] mkdir("./130", 0777 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5081] <... unlink resumed>) = 0 [pid 5078] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9426] setpgid(0, 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] fstat(4, [pid 5081] getdents64(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, [pid 9426] <... setpgid resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] getdents64(4, [pid 5081] close(3 [pid 9426] <... openat resumed>) = 3 [pid 5078] rmdir("./128/file0" [pid 9426] write(3, "1000", 4 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9425] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9426] <... write resumed>) = 4 [pid 9425] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] getdents64(4, [pid 5081] rmdir("./129" [pid 5078] umount2("./128/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9426] close(3 [pid 9425] <... futex resumed>) = 0 [pid 5084] close(3 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./128/.log", [pid 5083] close(4 [pid 5081] <... rmdir resumed>) = 0 [pid 9426] <... close resumed>) = 0 [pid 9425] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... close resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9426] symlink("/dev/binderfs", "./binderfs" [pid 9395] exit_group(0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... close resumed>) = 0 [pid 5081] mkdir("./130", 0777 [pid 9426] <... symlink resumed>) = 0 [pid 9425] <... futex resumed>) = ? [pid 9396] <... futex resumed>) = ? [pid 9395] <... exit_group resumed>) = ? [pid 5083] rmdir("./129/file0" [pid 5081] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 9427 attached [pid 9426] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9425] +++ exited with 0 +++ [pid 9396] +++ exited with 0 +++ [pid 9395] +++ exited with 0 +++ [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9427 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] unlink("./128/.log" [pid 9427] set_robust_list(0x5555559d56e0, 24 [pid 9426] <... futex resumed>) = 0 [pid 5083] umount2("./129/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... openat resumed>) = 3 [pid 5078] <... unlink resumed>) = 0 [pid 9427] <... set_robust_list resumed>) = 0 [pid 9426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9395, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5078] getdents64(3, [pid 9427] chdir("./130" [pid 9426] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] lstat("./129/.log", [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9427] <... chdir resumed>) = 0 [pid 9426] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9427] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9426] <... mprotect resumed>) = 0 [pid 5083] unlink("./129/.log" [pid 5081] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(3 [pid 9427] <... prctl resumed>) = 0 [pid 9426] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... unlink resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 9427] setpgid(0, 0 [pid 5083] getdents64(3, [pid 5079] fstat(3, [pid 5078] rmdir("./128" [pid 9427] <... setpgid resumed>) = 0 [pid 9426] <... clone resumed>, parent_tid=[9428], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9428 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9429 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9426] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 5079] getdents64(3, [pid 5078] mkdir("./129", 0777 [pid 9427] <... openat resumed>) = 3 [pid 9426] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] <... mkdir resumed>) = 0 [pid 9427] write(3, "1000", 4 [pid 9426] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] rmdir("./129" [pid 5079] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 9429 attached [pid 9427] <... write resumed>) = 4 [pid 5083] <... rmdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 9427] close(3 [pid 5083] mkdir("./130", 0777 [pid 5079] lstat("./129/binderfs", [pid 5078] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 9428 attached [pid 9429] set_robust_list(0x5555559d56e0, 24 [pid 9427] <... close resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9427] symlink("/dev/binderfs", "./binderfs" [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] unlink("./129/binderfs" [pid 5078] close(3 [pid 9429] <... set_robust_list resumed>) = 0 [pid 9428] set_robust_list(0x7ff2b37749e0, 24 [pid 9427] <... symlink resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9427] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5079] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9427] <... futex resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] close(3 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9430 [pid 9427] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] <... close resumed>) = 0 [pid 9427] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9431 attached [pid 9429] chdir("./130" [pid 9428] <... set_robust_list resumed>) = 0 [pid 9427] <... mprotect resumed>) = 0 [pid 9427] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9431 [pid 9429] <... chdir resumed>) = 0 [pid 9428] memfd_create("syzkaller", 0./strace-static-x86_64: Process 9430 attached [pid 9431] set_robust_list(0x5555559d56e0, 24 [pid 9429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9428] <... memfd_create resumed>) = 3 [pid 9427] <... clone resumed>, parent_tid=[9432], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9432 ./strace-static-x86_64: Process 9432 attached [pid 9431] <... set_robust_list resumed>) = 0 [pid 9430] set_robust_list(0x5555559d56e0, 24 [pid 9429] <... prctl resumed>) = 0 [pid 9428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9427] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9432] set_robust_list(0x7ff2b37749e0, 24 [pid 9431] chdir("./130" [pid 9430] <... set_robust_list resumed>) = 0 [pid 9429] setpgid(0, 0 [pid 9428] <... mmap resumed>) = 0x7ff2ab354000 [pid 9432] <... set_robust_list resumed>) = 0 [pid 9431] <... chdir resumed>) = 0 [pid 9430] chdir("./129" [pid 9429] <... setpgid resumed>) = 0 [pid 9427] <... futex resumed>) = 0 [pid 9432] memfd_create("syzkaller", 0 [pid 9431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9430] <... chdir resumed>) = 0 [pid 9429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9427] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9432] <... memfd_create resumed>) = 3 [pid 9431] <... prctl resumed>) = 0 [pid 9430] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9429] <... openat resumed>) = 3 [pid 9432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9431] setpgid(0, 0 [pid 9430] <... prctl resumed>) = 0 [pid 9429] write(3, "1000", 4 [pid 9432] <... mmap resumed>) = 0x7ff2ab354000 [pid 9431] <... setpgid resumed>) = 0 [pid 9430] setpgid(0, 0 [pid 9429] <... write resumed>) = 4 [pid 9431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9430] <... setpgid resumed>) = 0 [pid 9429] close(3 [pid 9431] <... openat resumed>) = 3 [pid 9430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9429] <... close resumed>) = 0 [pid 9431] write(3, "1000", 4 [pid 9430] <... openat resumed>) = 3 [pid 9429] symlink("/dev/binderfs", "./binderfs" [pid 9431] <... write resumed>) = 4 [pid 9430] write(3, "1000", 4 [pid 9429] <... symlink resumed>) = 0 [pid 9431] close(3 [pid 9430] <... write resumed>) = 4 [pid 9429] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9431] <... close resumed>) = 0 [pid 9430] close(3 [pid 9429] <... futex resumed>) = 0 [pid 9431] symlink("/dev/binderfs", "./binderfs" [pid 9430] <... close resumed>) = 0 [pid 9429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9431] <... symlink resumed>) = 0 [pid 9430] symlink("/dev/binderfs", "./binderfs" [pid 9429] <... mmap resumed>) = 0x7ff2b3754000 [pid 9431] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9430] <... symlink resumed>) = 0 [pid 9429] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9431] <... futex resumed>) = 0 [pid 9430] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9429] <... mprotect resumed>) = 0 [pid 9431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9430] <... futex resumed>) = 0 [pid 9429] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9431] <... mmap resumed>) = 0x7ff2b3754000 [pid 9430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9431] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9430] <... mmap resumed>) = 0x7ff2b3754000 [pid 9429] <... clone resumed>, parent_tid=[9433], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9433 [pid 9431] <... mprotect resumed>) = 0 [pid 9430] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9429] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9431] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9430] <... mprotect resumed>) = 0 [pid 9429] <... futex resumed>) = 0 [pid 9430] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9429] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9431] <... clone resumed>, parent_tid=[9434], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9434 [pid 9431] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9430] <... clone resumed>, parent_tid=[9435], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9435 ./strace-static-x86_64: Process 9433 attached [pid 9431] <... futex resumed>) = 0 [pid 9430] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9434 attached [pid 9433] set_robust_list(0x7ff2b37749e0, 24 [pid 9431] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9430] <... futex resumed>) = 0 [pid 9434] set_robust_list(0x7ff2b37749e0, 24 [pid 9433] <... set_robust_list resumed>) = 0 [pid 9430] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9434] <... set_robust_list resumed>) = 0 [pid 9433] memfd_create("syzkaller", 0./strace-static-x86_64: Process 9435 attached [pid 9434] memfd_create("syzkaller", 0 [pid 9433] <... memfd_create resumed>) = 3 [pid 9435] set_robust_list(0x7ff2b37749e0, 24 [pid 9433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9434] <... memfd_create resumed>) = 3 [pid 9434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9435] <... set_robust_list resumed>) = 0 [pid 9434] <... mmap resumed>) = 0x7ff2ab354000 [pid 9433] <... mmap resumed>) = 0x7ff2ab354000 [pid 9435] memfd_create("syzkaller", 0) = 3 [pid 9435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./129/file0") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./129") = 0 [pid 5079] mkdir("./130", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9436 ./strace-static-x86_64: Process 9436 attached [pid 9436] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9436] chdir("./130") = 0 [pid 9436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9436] setpgid(0, 0) = 0 [pid 9436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9436] write(3, "1000", 4) = 4 [pid 9436] close(3) = 0 [pid 9436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9436] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9436] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9436] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9437], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9437 [pid 9436] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9436] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9437 attached [pid 9437] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9437] memfd_create("syzkaller", 0) = 3 [pid 9437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9432] <... write resumed>) = 16777216 [pid 9432] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9432] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9432] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9432] close(3) = 0 [pid 9432] mkdir("./file0", 0777) = 0 [pid 9428] <... write resumed>) = 16777216 [pid 9432] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 276.449301][ T9432] loop5: detected capacity change from 0 to 32768 [pid 9428] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9428] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9428] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9428] close(3) = 0 [pid 9428] mkdir("./file0", 0777) = 0 [ 276.488598][ T9432] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (9432) [ 276.504089][ T9428] loop2: detected capacity change from 0 to 32768 [ 276.538484][ T9428] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9428) [pid 9428] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9435] <... write resumed>) = 16777216 [pid 9433] <... write resumed>) = 16777216 [pid 9428] <... mount resumed>) = -1 EEXIST (File exists) [pid 9435] munmap(0x7ff2ab354000, 16777216 [pid 9433] munmap(0x7ff2ab354000, 16777216 [pid 9428] ioctl(4, LOOP_CLR_FD [pid 9435] <... munmap resumed>) = 0 [pid 9435] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9435] ioctl(4, LOOP_SET_FD, 3 [pid 9434] <... write resumed>) = 16777216 [pid 9434] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9434] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9433] <... munmap resumed>) = 0 [pid 9433] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9433] ioctl(4, LOOP_SET_FD, 3 [pid 9434] ioctl(4, LOOP_SET_FD, 3 [pid 9435] <... ioctl resumed>) = 0 [pid 9433] <... ioctl resumed>) = 0 [pid 9435] close(3 [pid 9433] close(3 [pid 9435] <... close resumed>) = 0 [pid 9433] <... close resumed>) = 0 [pid 9435] mkdir("./file0", 0777 [pid 9433] mkdir("./file0", 0777 [pid 9435] <... mkdir resumed>) = 0 [pid 9435] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9433] <... mkdir resumed>) = 0 [ 276.551572][ T9432] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 276.565215][ T9435] loop0: detected capacity change from 0 to 32768 [ 276.574928][ T9433] loop3: detected capacity change from 0 to 32768 [ 276.576274][ T9434] loop4: detected capacity change from 0 to 32768 [ 276.594226][ T9432] BTRFS info (device loop5): setting nodatasum [pid 9433] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9434] <... ioctl resumed>) = 0 [pid 9434] close(3) = 0 [pid 9434] mkdir("./file0", 0777) = 0 [pid 9434] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9435] <... mount resumed>) = -1 EEXIST (File exists) [ 276.600917][ T9435] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9435) [ 276.602110][ T9432] BTRFS info (device loop5): allowing degraded mounts [ 276.624438][ T9432] BTRFS info (device loop5): use zlib compression, level 3 [ 276.631568][ T9433] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9433) [ 276.632580][ T9432] BTRFS info (device loop5): using free space tree [pid 9435] ioctl(4, LOOP_CLR_FD [pid 9433] <... mount resumed>) = -1 EEXIST (File exists) [pid 9433] ioctl(4, LOOP_CLR_FD [pid 9434] <... mount resumed>) = -1 EEXIST (File exists) [pid 9434] ioctl(4, LOOP_CLR_FD [pid 9437] <... write resumed>) = 16777216 [pid 9437] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9437] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 276.663113][ T9434] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9434) [pid 9437] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9437] close(3) = 0 [pid 9437] mkdir("./file0", 0777) = 0 [ 276.714333][ T9437] loop1: detected capacity change from 0 to 32768 [ 276.735080][ T9437] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9437) [pid 9437] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9428] <... ioctl resumed>) = 0 [pid 9437] ioctl(4, LOOP_CLR_FD [pid 9428] close(4) = 0 [pid 9428] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9426] <... futex resumed>) = 0 [pid 9426] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9428] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9426] <... futex resumed>) = 0 [pid 9426] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9428] <... openat resumed>) = 3 [pid 9428] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9426] <... futex resumed>) = 0 [pid 9426] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9426] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9428] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9428] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9426] <... futex resumed>) = 0 [pid 9428] openat(AT_FDCWD, ".log", O_RDONLY [pid 9426] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9428] <... openat resumed>) = 4 [pid 9426] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9428] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9426] <... futex resumed>) = 0 [pid 9426] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9428] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9426] <... futex resumed>) = 0 [pid 9426] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9428] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9428] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9426] <... futex resumed>) = 0 [pid 9428] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9426] exit_group(0 [pid 9428] <... futex resumed>) = ? [pid 9426] <... exit_group resumed>) = ? [pid 9428] +++ exited with 0 +++ [pid 9426] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9426, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5080] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./130/binderfs") = 0 [pid 5080] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./130/file0") = 0 [pid 5080] umount2("./130/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./130/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./130/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./130") = 0 [pid 5080] mkdir("./131", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9453 ./strace-static-x86_64: Process 9453 attached [pid 9453] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9453] chdir("./131") = 0 [pid 9453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9453] setpgid(0, 0) = 0 [pid 9453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9453] write(3, "1000", 4) = 4 [pid 9453] close(3) = 0 [pid 9453] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9453] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9453] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9435] <... ioctl resumed>) = 0 [pid 9453] <... mprotect resumed>) = 0 [pid 9453] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9455], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9455 [pid 9453] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9453] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9435] close(4) = 0 [pid 9434] <... ioctl resumed>) = 0 [pid 9435] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9434] close(4 [pid 9435] <... futex resumed>) = 1 [pid 9434] <... close resumed>) = 0 [pid 9435] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9434] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 ./strace-static-x86_64: Process 9455 attached [pid 9434] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9455] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9455] memfd_create("syzkaller", 0 [pid 9431] <... futex resumed>) = 0 [pid 9430] <... futex resumed>) = 0 [pid 9455] <... memfd_create resumed>) = 3 [pid 9455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9431] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9430] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9455] <... mmap resumed>) = 0x7ff2ab354000 [pid 9435] <... futex resumed>) = 0 [pid 9434] <... futex resumed>) = 0 [pid 9431] <... futex resumed>) = 1 [pid 9430] <... futex resumed>) = 1 [pid 9435] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [ 276.920079][ T9432] BTRFS info (device loop5): enabling ssd optimizations [ 276.931325][ T9432] BTRFS info (device loop5): auto enabling async discard [pid 9434] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9435] <... openat resumed>) = 3 [pid 9434] <... openat resumed>) = 3 [pid 9433] <... ioctl resumed>) = 0 [pid 9431] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9430] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9435] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9434] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9435] <... futex resumed>) = 0 [pid 9434] <... futex resumed>) = 0 [pid 9433] close(4 [pid 9431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9435] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9434] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9431] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9430] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9433] <... close resumed>) = 0 [pid 9435] <... futex resumed>) = 0 [pid 9434] <... futex resumed>) = 0 [pid 9431] <... futex resumed>) = 1 [pid 9430] <... futex resumed>) = 1 [pid 9435] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9434] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9431] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9430] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9435] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9434] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9433] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9435] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9434] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9435] <... futex resumed>) = 1 [pid 9434] <... futex resumed>) = 1 [pid 9433] <... futex resumed>) = 1 [pid 9431] <... futex resumed>) = 0 [pid 9430] <... futex resumed>) = 0 [pid 9429] <... futex resumed>) = 0 [pid 9435] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9434] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9431] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9430] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9431] <... futex resumed>) = 0 [pid 9430] <... futex resumed>) = 0 [pid 9435] openat(AT_FDCWD, ".log", O_RDONLY [pid 9434] openat(AT_FDCWD, ".log", O_RDONLY [pid 9431] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9430] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9433] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9429] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9435] <... openat resumed>) = 4 [pid 9434] <... openat resumed>) = 4 [pid 9435] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9434] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9429] <... futex resumed>) = 0 [pid 9435] <... futex resumed>) = 1 [pid 9434] <... futex resumed>) = 1 [pid 9433] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9432] <... mount resumed>) = 0 [pid 9431] <... futex resumed>) = 0 [pid 9430] <... futex resumed>) = 0 [pid 9429] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9435] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9434] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9431] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9430] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9433] <... openat resumed>) = 3 [pid 9432] <... openat resumed>) = 3 [pid 9431] <... futex resumed>) = 0 [pid 9430] <... futex resumed>) = 0 [pid 9435] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9434] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9433] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9432] chdir("./file0" [pid 9431] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9430] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9435] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9434] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9432] <... chdir resumed>) = 0 [pid 9435] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9434] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9432] ioctl(4, LOOP_CLR_FD [pid 9435] <... futex resumed>) = 1 [pid 9434] <... futex resumed>) = 1 [pid 9433] <... futex resumed>) = 1 [pid 9432] <... ioctl resumed>) = 0 [pid 9431] <... futex resumed>) = 0 [pid 9430] <... futex resumed>) = 0 [pid 9429] <... futex resumed>) = 0 [pid 9435] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9434] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9433] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9432] close(4 [pid 9431] exit_group(0 [ 276.966420][ T9432] BTRFS info (device loop5): checking UUID tree [pid 9430] exit_group(0 [pid 9429] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9437] <... ioctl resumed>) = 0 [pid 9435] <... futex resumed>) = ? [pid 9434] <... futex resumed>) = ? [pid 9433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9432] <... close resumed>) = 0 [pid 9431] <... exit_group resumed>) = ? [pid 9430] <... exit_group resumed>) = ? [pid 9429] <... futex resumed>) = 0 [pid 9437] close(4 [pid 9435] +++ exited with 0 +++ [pid 9434] +++ exited with 0 +++ [pid 9433] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9432] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9431] +++ exited with 0 +++ [pid 9429] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9437] <... close resumed>) = 0 [pid 9433] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9432] <... futex resumed>) = 1 [pid 9430] +++ exited with 0 +++ [pid 9427] <... futex resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9431, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=33 /* 0.33 s */} --- [pid 9437] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9433] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9432] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9427] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9430, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 9432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9427] <... futex resumed>) = 0 [pid 9437] <... futex resumed>) = 1 [pid 9436] <... futex resumed>) = 0 [pid 9433] <... futex resumed>) = 1 [pid 9432] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9429] <... futex resumed>) = 0 [pid 9427] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9437] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9436] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9433] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9432] <... openat resumed>) = 4 [pid 9429] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9436] <... futex resumed>) = 0 [pid 9433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9432] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9429] <... futex resumed>) = 0 [pid 9432] <... futex resumed>) = 1 [pid 9427] <... futex resumed>) = 0 [pid 9437] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5083] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9436] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9433] openat(AT_FDCWD, ".log", O_RDONLY [pid 9432] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9429] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9427] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9427] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9432] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9427] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9437] <... openat resumed>) = 3 [pid 9433] <... openat resumed>) = 4 [pid 5083] fstat(3, [pid 5078] <... openat resumed>) = 3 [pid 9437] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9433] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] fstat(3, [pid 5083] getdents64(3, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] getdents64(3, [pid 9437] <... futex resumed>) = 1 [pid 9436] <... futex resumed>) = 0 [pid 9433] <... futex resumed>) = 1 [pid 9429] <... futex resumed>) = 0 [pid 5083] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9437] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9436] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9433] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9429] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./130/binderfs", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9436] <... futex resumed>) = 0 [pid 9433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9429] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] lstat("./129/binderfs", [pid 5083] unlink("./130/binderfs" [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5078] unlink("./129/binderfs" [pid 9437] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9436] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9433] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9429] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 9437] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9433] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] lstat("./130/file0", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9437] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9433] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] lstat("./129/file0", [pid 5083] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9437] <... futex resumed>) = 1 [pid 9436] <... futex resumed>) = 0 [pid 9433] <... futex resumed>) = 1 [pid 9429] <... futex resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9437] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9436] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9433] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9429] exit_group(0 [pid 5083] fstat(4, [pid 5078] <... openat resumed>) = 4 [pid 9437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9436] <... futex resumed>) = 0 [pid 9429] <... exit_group resumed>) = ? [pid 9437] openat(AT_FDCWD, ".log", O_RDONLY [pid 9436] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9433] <... futex resumed>) = ? [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] fstat(4, [pid 9437] <... openat resumed>) = 4 [pid 5083] getdents64(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 9427] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] getdents64(4, [pid 9433] +++ exited with 0 +++ [pid 9429] +++ exited with 0 +++ [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9437] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9436] <... futex resumed>) = 0 [pid 9427] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9429, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 5078] getdents64(4, [pid 9437] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9436] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9427] <... futex resumed>) = 0 [pid 5083] close(4 [pid 9437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9436] <... futex resumed>) = 0 [pid 9427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9437] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9436] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9427] <... mmap resumed>) = 0x7ff2ac333000 [pid 5083] rmdir("./130/file0" [pid 5081] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4 [pid 9437] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9427] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 9437] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9427] <... mprotect resumed>) = 0 [pid 5083] umount2("./130/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] rmdir("./129/file0" [pid 9437] <... futex resumed>) = 1 [pid 9436] <... futex resumed>) = 0 [pid 9427] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 9437] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9436] exit_group(0 [pid 5083] lstat("./130/.log", [pid 5081] fstat(3, [pid 5078] umount2("./129/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9437] <... futex resumed>) = ? [pid 9436] <... exit_group resumed>) = ? [pid 9427] <... clone resumed>, parent_tid=[9458], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9458 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9437] +++ exited with 0 +++ [pid 9427] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./130/.log" [pid 5081] getdents64(3, [pid 5078] lstat("./129/.log", [pid 9436] +++ exited with 0 +++ [pid 9427] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9427] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] getdents64(3, [pid 5081] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./129/.log" [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9436, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=23 /* 0.23 s */} --- [pid 5078] <... unlink resumed>) = 0 [pid 5083] close(3 [pid 5081] lstat("./130/binderfs", [pid 5079] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5083] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 9458 attached [pid 5083] rmdir("./130" [pid 5081] unlink("./130/binderfs" [pid 5079] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(3 [pid 9458] set_robust_list(0x7ff2ac3539e0, 24 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 9458] <... set_robust_list resumed>) = 0 [pid 5083] mkdir("./131", 0777 [pid 5081] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] fstat(3, [pid 5078] rmdir("./129" [pid 9458] openat(AT_FDCWD, ".log", O_RDONLY [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9458] <... openat resumed>) = 5 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] lstat("./130/file0", [pid 5079] getdents64(3, [pid 5078] mkdir("./130", 0777 [pid 9458] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... mkdir resumed>) = 0 [pid 9458] <... futex resumed>) = 1 [pid 9427] <... futex resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9458] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9427] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 9458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9427] <... futex resumed>) = 0 [ 277.074773][ T9432] BTRFS info (device loop5): balance: start -s [ 277.107924][ T9432] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 5083] close(3 [pid 5081] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] lstat("./130/binderfs", [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9458] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9427] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... close resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] fstat(4, [pid 5079] unlink("./130/binderfs" [pid 5078] close(3 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9459 [pid 5081] getdents64(4, [pid 5079] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(4, [pid 5079] lstat("./130/file0", [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9460 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] close(4 [pid 5079] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] rmdir("./130/file0" [pid 5079] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 9459 attached [pid 5081] <... rmdir resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 9459] set_robust_list(0x5555559d56e0, 24 [pid 5081] umount2("./130/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] fstat(4, ./strace-static-x86_64: Process 9460 attached [pid 9459] <... set_robust_list resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9460] set_robust_list(0x5555559d56e0, 24 [pid 9459] chdir("./131" [pid 5081] lstat("./130/.log", [pid 5079] getdents64(4, [pid 9460] <... set_robust_list resumed>) = 0 [pid 9459] <... chdir resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9460] chdir("./130" [pid 9459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] unlink("./130/.log" [pid 5079] getdents64(4, [pid 9460] <... chdir resumed>) = 0 [pid 9459] <... prctl resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9459] setpgid(0, 0 [pid 9455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] getdents64(3, [pid 5079] close(4 [pid 9460] <... prctl resumed>) = 0 [pid 9459] <... setpgid resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... close resumed>) = 0 [pid 9460] setpgid(0, 0 [pid 9459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] close(3 [pid 5079] rmdir("./130/file0" [pid 9460] <... setpgid resumed>) = 0 [pid 9459] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 9460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9459] write(3, "1000", 4 [pid 5081] rmdir("./130" [pid 5079] umount2("./130/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9460] <... openat resumed>) = 3 [pid 9459] <... write resumed>) = 4 [pid 5081] <... rmdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9460] write(3, "1000", 4 [pid 9459] close(3 [pid 9427] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] mkdir("./131", 0777 [pid 5079] lstat("./130/.log", [pid 9460] <... write resumed>) = 4 [pid 9459] <... close resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9460] close(3 [pid 9459] symlink("/dev/binderfs", "./binderfs" [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] unlink("./130/.log" [pid 9460] <... close resumed>) = 0 [pid 9459] <... symlink resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5079] <... unlink resumed>) = 0 [pid 9460] symlink("/dev/binderfs", "./binderfs" [pid 9459] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5079] getdents64(3, [pid 9460] <... symlink resumed>) = 0 [pid 9459] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9460] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] close(3 [pid 5079] close(3 [pid 9460] <... futex resumed>) = 0 [pid 9459] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 9460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9459] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] rmdir("./130" [pid 9460] <... mmap resumed>) = 0x7ff2b3754000 [pid 9459] <... mprotect resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 9460] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9459] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9461 [pid 5079] mkdir("./131", 0777./strace-static-x86_64: Process 9462 attached [pid 9460] <... mprotect resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 9462] set_robust_list(0x7ff2b37749e0, 24 [pid 9460] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9459] <... clone resumed>, parent_tid=[9462], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9462 [pid 9458] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9462] <... set_robust_list resumed>) = 0 [pid 9459] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9458] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9461 attached [pid 9460] <... clone resumed>, parent_tid=[9463], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9463 [pid 9459] <... futex resumed>) = 0 [pid 9458] <... futex resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9461] set_robust_list(0x5555559d56e0, 24 [pid 9460] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9459] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9458] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9462] memfd_create("syzkaller", 0 [pid 9461] <... set_robust_list resumed>) = 0 [pid 9460] <... futex resumed>) = 0 [pid 5079] close(3./strace-static-x86_64: Process 9463 attached [pid 9461] chdir("./131" [pid 9460] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 9463] set_robust_list(0x7ff2b37749e0, 24 [pid 9462] <... memfd_create resumed>) = 3 [pid 9461] <... chdir resumed>) = 0 [ 277.183505][ T9458] BTRFS info (device loop5): scrub: started on devid 1 [ 277.184359][ T9432] BTRFS info (device loop5): balance: ended with status: 0 [ 277.203917][ T9458] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9463] <... set_robust_list resumed>) = 0 [pid 9462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9463] memfd_create("syzkaller", 0 [pid 9462] <... mmap resumed>) = 0x7ff2ab354000 [pid 9461] <... prctl resumed>) = 0 [pid 9432] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9464 [pid 9463] <... memfd_create resumed>) = 3 [pid 9461] setpgid(0, 0 [pid 9463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9461] <... setpgid resumed>) = 0 [pid 9463] <... mmap resumed>) = 0x7ff2ab354000 [pid 9461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9432] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9464 attached [pid 9461] <... openat resumed>) = 3 [pid 9432] <... futex resumed>) = 0 [pid 9461] write(3, "1000", 4) = 4 [pid 9461] close(3) = 0 [pid 9427] exit_group(0 [pid 9461] symlink("/dev/binderfs", "./binderfs" [pid 9458] <... futex resumed>) = ? [pid 9427] <... exit_group resumed>) = ? [pid 9464] set_robust_list(0x5555559d56e0, 24 [pid 9461] <... symlink resumed>) = 0 [pid 9458] +++ exited with 0 +++ [pid 9464] <... set_robust_list resumed>) = 0 [pid 9461] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9432] +++ exited with 0 +++ [pid 9427] +++ exited with 0 +++ [pid 9461] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9427, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=39 /* 0.39 s */} --- [pid 9461] <... mprotect resumed>) = 0 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 9464] chdir("./131" [pid 9461] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... restart_syscall resumed>) = 0 [pid 9464] <... chdir resumed>) = 0 [pid 9464] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9461] <... clone resumed>, parent_tid=[9465], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9465 [pid 9464] <... prctl resumed>) = 0 [pid 9461] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9461] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9461] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9464] setpgid(0, 0 [pid 5084] <... openat resumed>) = 3 [pid 9464] <... setpgid resumed>) = 0 [pid 5084] fstat(3, [pid 9464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9465 attached [pid 9464] <... openat resumed>) = 3 [pid 5084] getdents64(3, [pid 9465] set_robust_list(0x7ff2b37749e0, 24 [pid 9464] write(3, "1000", 4 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9465] <... set_robust_list resumed>) = 0 [pid 9464] <... write resumed>) = 4 [pid 5084] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9465] memfd_create("syzkaller", 0 [pid 9464] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9465] <... memfd_create resumed>) = 3 [pid 9464] <... close resumed>) = 0 [pid 5084] lstat("./130/binderfs", [pid 9465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9464] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9465] <... mmap resumed>) = 0x7ff2ab354000 [pid 9464] <... symlink resumed>) = 0 [pid 5084] unlink("./130/binderfs" [pid 9464] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 9464] <... futex resumed>) = 0 [pid 5084] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9464] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9464] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9466], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9466 [pid 9464] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9464] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9466 attached [pid 9466] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9466] memfd_create("syzkaller", 0) = 3 [pid 9466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./130/file0") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./130") = 0 [pid 5084] mkdir("./131", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9467 ./strace-static-x86_64: Process 9467 attached [pid 9467] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9467] chdir("./131") = 0 [pid 9467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9467] setpgid(0, 0) = 0 [pid 9467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9467] write(3, "1000", 4) = 4 [pid 9467] close(3) = 0 [pid 9467] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9467] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9467] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9467] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9468], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9468 [pid 9467] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9467] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9468 attached [pid 9468] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9468] memfd_create("syzkaller", 0) = 3 [pid 9468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9455] <... write resumed>) = 16777216 [pid 9455] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9455] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9455] ioctl(4, LOOP_SET_FD, 3 [pid 9465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9455] <... ioctl resumed>) = 0 [pid 9455] close(3) = 0 [pid 9455] mkdir("./file0", 0777) = 0 [ 277.765051][ T9455] loop2: detected capacity change from 0 to 32768 [ 277.811467][ T9455] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor373 (9455) [ 277.865786][ T9455] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9455] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 277.907143][ T9455] BTRFS info (device loop2): setting nodatasum [ 277.913331][ T9455] BTRFS info (device loop2): allowing degraded mounts [ 277.935476][ T9455] BTRFS info (device loop2): use zlib compression, level 3 [ 277.955332][ T9455] BTRFS info (device loop2): using free space tree [pid 9468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9462] <... write resumed>) = 16777216 [pid 9462] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9462] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9462] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9462] close(3) = 0 [pid 9462] mkdir("./file0", 0777) = 0 [ 278.099341][ T9462] loop4: detected capacity change from 0 to 32768 [pid 9462] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9463] <... write resumed>) = 16777216 [pid 9463] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9463] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9463] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9463] close(3) = 0 [pid 9463] mkdir("./file0", 0777 [pid 9462] <... mount resumed>) = -1 EEXIST (File exists) [pid 9463] <... mkdir resumed>) = 0 [pid 9463] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 278.166531][ T9462] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9462) [ 278.181915][ T9455] BTRFS info (device loop2): enabling ssd optimizations [ 278.182014][ T9463] loop0: detected capacity change from 0 to 32768 [ 278.192334][ T9455] BTRFS info (device loop2): auto enabling async discard [pid 9462] ioctl(4, LOOP_CLR_FD [pid 9463] <... mount resumed>) = -1 EEXIST (File exists) [pid 9466] <... write resumed>) = 16777216 [pid 9466] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9466] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 278.210961][ T9463] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9463) [ 278.225223][ T9455] BTRFS info (device loop2): checking UUID tree [pid 9466] ioctl(4, LOOP_SET_FD, 3 [pid 9463] ioctl(4, LOOP_CLR_FD [pid 9466] <... ioctl resumed>) = 0 [pid 9466] close(3) = 0 [pid 9465] <... write resumed>) = 16777216 [pid 9466] mkdir("./file0", 0777 [pid 9465] munmap(0x7ff2ab354000, 16777216 [pid 9466] <... mkdir resumed>) = 0 [pid 9466] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9465] <... munmap resumed>) = 0 [pid 9455] <... mount resumed>) = 0 [pid 9465] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9465] <... openat resumed>) = 4 [pid 9455] <... openat resumed>) = 3 [pid 9465] ioctl(4, LOOP_SET_FD, 3 [pid 9455] chdir("./file0" [pid 9465] <... ioctl resumed>) = 0 [pid 9455] <... chdir resumed>) = 0 [pid 9455] ioctl(4, LOOP_CLR_FD) = 0 [pid 9455] close(4 [pid 9466] <... mount resumed>) = -1 EEXIST (File exists) [pid 9465] close(3 [pid 9455] <... close resumed>) = 0 [pid 9466] ioctl(4, LOOP_CLR_FD [pid 9465] <... close resumed>) = 0 [pid 9455] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9465] mkdir("./file0", 0777 [pid 9455] <... futex resumed>) = 1 [pid 9453] <... futex resumed>) = 0 [pid 9465] <... mkdir resumed>) = 0 [pid 9455] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9465] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9453] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9455] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9453] <... futex resumed>) = 0 [ 278.256884][ T9466] loop1: detected capacity change from 0 to 32768 [ 278.275079][ T9466] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9466) [ 278.287874][ T9465] loop3: detected capacity change from 0 to 32768 [pid 9455] <... openat resumed>) = 4 [pid 9453] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9465] <... mount resumed>) = -1 EEXIST (File exists) [pid 9455] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9465] ioctl(4, LOOP_CLR_FD [pid 9455] <... futex resumed>) = 0 [pid 9453] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9455] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9453] <... futex resumed>) = 0 [pid 9453] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9468] <... write resumed>) = 16777216 [pid 9468] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9468] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 278.310258][ T9465] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9465) [ 278.339277][ T9455] BTRFS info (device loop2): balance: start -s [pid 9468] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9468] close(3) = 0 [pid 9453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9468] mkdir("./file0", 0777 [pid 9453] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9468] <... mkdir resumed>) = 0 [pid 9453] <... futex resumed>) = 0 [pid 9468] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 9453] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9453] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9487], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9487 [pid 9453] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 278.366827][ T9468] loop5: detected capacity change from 0 to 32768 [ 278.406310][ T9468] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9468) [pid 9453] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9487 attached [pid 9487] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 9487] openat(AT_FDCWD, ".log", O_RDONLY [ 278.408653][ T9455] BTRFS info (device loop2): relocating block group 1048576 flags system [pid 9468] <... mount resumed>) = -1 EEXIST (File exists) [pid 9487] <... openat resumed>) = 5 [pid 9468] ioctl(4, LOOP_CLR_FD [pid 9462] <... ioctl resumed>) = 0 [pid 9453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9487] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9462] close(4 [pid 9453] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9487] <... futex resumed>) = 0 [pid 9462] <... close resumed>) = 0 [pid 9453] <... futex resumed>) = 0 [pid 9487] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9462] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9453] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9462] <... futex resumed>) = 1 [pid 9459] <... futex resumed>) = 0 [pid 9462] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9459] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9459] <... futex resumed>) = 0 [pid 9462] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9459] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9462] <... openat resumed>) = 3 [pid 9462] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9459] <... futex resumed>) = 0 [pid 9462] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9459] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9459] <... futex resumed>) = 0 [pid 9462] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9459] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9462] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9462] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9459] <... futex resumed>) = 0 [pid 9462] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9459] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9459] <... futex resumed>) = 0 [pid 9462] openat(AT_FDCWD, ".log", O_RDONLY [pid 9459] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9462] <... openat resumed>) = 4 [pid 9462] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9459] <... futex resumed>) = 0 [pid 9462] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9459] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9459] <... futex resumed>) = 0 [pid 9462] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9459] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9462] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [ 278.457539][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 278.457552][ T27] audit: type=1804 audit(1680236961.932:787): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/131/file0/.log" dev="loop2" ino=263 res=1 errno=0 [pid 9462] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9462] <... futex resumed>) = 1 [pid 9459] <... futex resumed>) = 0 [pid 9462] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9459] exit_group(0 [pid 9462] <... futex resumed>) = ? [pid 9459] <... exit_group resumed>) = ? [pid 9462] +++ exited with 0 +++ [pid 9459] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9459, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=27 /* 0.27 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./131/binderfs") = 0 [pid 5083] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./131/file0") = 0 [pid 5083] umount2("./131/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./131/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./131/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [ 278.578739][ T27] audit: type=1804 audit(1680236961.982:788): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/131/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5083] rmdir("./131") = 0 [pid 5083] mkdir("./132", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9488 ./strace-static-x86_64: Process 9488 attached [pid 9488] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9488] chdir("./132") = 0 [pid 9466] <... ioctl resumed>) = 0 [pid 9488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9466] close(4 [pid 9488] <... prctl resumed>) = 0 [pid 9488] setpgid(0, 0) = 0 [pid 9488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9488] write(3, "1000", 4 [pid 9466] <... close resumed>) = 0 [pid 9488] <... write resumed>) = 4 [pid 9466] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9488] close(3 [pid 9466] <... futex resumed>) = 1 [pid 9464] <... futex resumed>) = 0 [pid 9488] <... close resumed>) = 0 [pid 9466] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9465] <... ioctl resumed>) = 0 [pid 9464] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9488] symlink("/dev/binderfs", "./binderfs" [pid 9466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9465] close(4 [pid 9464] <... futex resumed>) = 0 [pid 9488] <... symlink resumed>) = 0 [pid 9466] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [ 278.618968][ T9487] BTRFS info (device loop2): scrub: started on devid 1 [ 278.628199][ T9455] BTRFS info (device loop2): balance: ended with status: 0 [ 278.641822][ T9487] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [pid 9465] <... close resumed>) = 0 [pid 9464] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9488] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9487] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9466] <... openat resumed>) = 3 [pid 9465] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9488] <... futex resumed>) = 0 [pid 9487] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9466] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9465] <... futex resumed>) = 1 [pid 9461] <... futex resumed>) = 0 [pid 9488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9487] <... futex resumed>) = 0 [pid 9466] <... futex resumed>) = 1 [pid 9465] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9464] <... futex resumed>) = 0 [pid 9461] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9488] <... mmap resumed>) = 0x7ff2b3754000 [pid 9487] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9466] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9464] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9461] <... futex resumed>) = 0 [pid 9488] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9465] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9464] <... futex resumed>) = 0 [pid 9461] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9455] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9488] <... mprotect resumed>) = 0 [pid 9466] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9465] <... openat resumed>) = 3 [pid 9464] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9455] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9488] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9466] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9465] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9455] <... futex resumed>) = 0 [pid 9466] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9465] <... futex resumed>) = 1 [pid 9461] <... futex resumed>) = 0 [pid 9455] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9453] exit_group(0 [pid 9488] <... clone resumed>, parent_tid=[9489], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9489 [pid 9487] <... futex resumed>) = ? [pid 9466] <... futex resumed>) = 1 [pid 9465] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9464] <... futex resumed>) = 0 [pid 9461] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9455] <... futex resumed>) = ? [pid 9453] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 9489 attached [pid 9488] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9487] +++ exited with 0 +++ [pid 9466] openat(AT_FDCWD, ".log", O_RDONLY [pid 9465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9464] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9461] <... futex resumed>) = 0 [pid 9455] +++ exited with 0 +++ [pid 9453] +++ exited with 0 +++ [pid 9489] set_robust_list(0x7ff2b37749e0, 24 [pid 9488] <... futex resumed>) = 0 [pid 9466] <... openat resumed>) = 4 [pid 9465] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9464] <... futex resumed>) = 0 [pid 9488] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9464] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9463] <... ioctl resumed>) = 0 [pid 9463] close(4) = 0 [pid 9465] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9466] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9463] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9489] <... set_robust_list resumed>) = 0 [pid 9461] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9453, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 9489] memfd_create("syzkaller", 0 [pid 9466] <... futex resumed>) = 1 [pid 9465] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9464] <... futex resumed>) = 0 [pid 9463] <... futex resumed>) = 1 [pid 9461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9460] <... futex resumed>) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 9489] <... memfd_create resumed>) = 3 [pid 9466] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9465] <... futex resumed>) = 0 [pid 9464] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9463] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9461] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9460] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... restart_syscall resumed>) = 0 [pid 9489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9465] openat(AT_FDCWD, ".log", O_RDONLY [pid 9464] <... futex resumed>) = 0 [pid 9463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9461] <... futex resumed>) = 0 [pid 9460] <... futex resumed>) = 0 [pid 9489] <... mmap resumed>) = 0x7ff2ab354000 [pid 9466] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9465] <... openat resumed>) = 4 [pid 9464] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9463] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9461] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9460] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9466] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9465] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9463] <... openat resumed>) = 3 [pid 9461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9466] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9465] <... futex resumed>) = 0 [pid 9463] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9461] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9466] <... futex resumed>) = 1 [pid 9465] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9464] <... futex resumed>) = 0 [pid 9463] <... futex resumed>) = 1 [pid 9461] <... futex resumed>) = 0 [pid 9460] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9466] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9465] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9464] exit_group(0 [pid 9463] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9461] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9460] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 9466] <... futex resumed>) = ? [pid 9465] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9464] <... exit_group resumed>) = ? [pid 9468] <... ioctl resumed>) = 0 [pid 9463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9460] <... futex resumed>) = 0 [ 278.732964][ T27] audit: type=1804 audit(1680236962.202:789): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/131/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 5080] fstat(3, [pid 9468] close(4 [pid 9466] +++ exited with 0 +++ [pid 9465] <... futex resumed>) = 0 [pid 9464] +++ exited with 0 +++ [pid 9463] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9461] exit_group(0 [pid 9460] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9468] <... close resumed>) = 0 [pid 9463] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9461] <... exit_group resumed>) = ? [pid 5080] getdents64(3, [pid 9468] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9465] +++ exited with 0 +++ [pid 9463] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9461] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9464, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 9468] <... futex resumed>) = 1 [pid 9467] <... futex resumed>) = 0 [pid 9463] <... futex resumed>) = 1 [pid 9460] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9461, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=22 /* 0.22 s */} --- [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 9468] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9467] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9463] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9460] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... restart_syscall resumed>) = 0 [pid 9468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9467] <... futex resumed>) = 0 [pid 9463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9460] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9468] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9467] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9463] openat(AT_FDCWD, ".log", O_RDONLY [pid 9460] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./131/binderfs", [pid 9468] <... openat resumed>) = 3 [pid 9463] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9468] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9463] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] unlink("./131/binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9468] <... futex resumed>) = 1 [pid 9467] <... futex resumed>) = 0 [pid 9463] <... futex resumed>) = 1 [pid 9460] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... unlink resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9468] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9467] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9463] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9460] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 5080] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 9468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9467] <... futex resumed>) = 0 [pid 9463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9460] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] fstat(3, [pid 9468] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9467] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9463] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9468] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9463] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9460] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(3, [pid 5079] getdents64(3, [pid 9468] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9463] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9463] <... futex resumed>) = 0 [pid 9460] exit_group(0 [pid 5079] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9468] <... futex resumed>) = 1 [pid 9467] <... futex resumed>) = 0 [pid 9460] <... exit_group resumed>) = ? [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9468] openat(AT_FDCWD, ".log", O_RDONLY [pid 9467] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9463] +++ exited with 0 +++ [pid 5081] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./131/binderfs", [pid 9468] <... openat resumed>) = 4 [pid 9467] <... futex resumed>) = 0 [pid 9460] +++ exited with 0 +++ [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./131/binderfs" [pid 9468] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9467] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... unlink resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9460, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 9468] <... futex resumed>) = 0 [pid 9467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] lstat("./131/binderfs", [pid 5079] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9468] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9467] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9468] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9467] <... futex resumed>) = 0 [pid 5079] lstat("./131/file0", [pid 5078] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5079] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(3, [pid 5079] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] fstat(4, [pid 5078] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9468] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9467] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] unlink("./131/binderfs" [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 5078] lstat("./130/binderfs", [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] getdents64(4, [pid 5078] unlink("./130/binderfs" [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5079] close(4 [ 278.831055][ T27] audit: type=1804 audit(1680236962.252:790): pid=9465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/131/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5078] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./131/file0" [pid 5078] lstat("./130/file0", [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./131/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9468] <... futex resumed>) = 0 [pid 9467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... unlink resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./131/.log", [pid 5078] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9468] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9467] exit_group(0 [pid 5081] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... openat resumed>) = 4 [pid 9468] <... futex resumed>) = ? [pid 9467] <... exit_group resumed>) = ? [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] unlink("./131/.log" [pid 5078] fstat(4, [pid 9468] +++ exited with 0 +++ [pid 9467] +++ exited with 0 +++ [pid 5081] lstat("./131/file0", [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9467, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=22 /* 0.22 s */} --- [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5078] getdents64(4, [pid 5081] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(3 [pid 5078] getdents64(4, [pid 5084] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = 0 [pid 5079] rmdir("./131" [pid 5078] close(4 [pid 5084] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 4 [pid 5080] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5081] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] mkdir("./132", 0777 [pid 5078] rmdir("./130/file0" [pid 5084] fstat(3, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] lstat("./131/file0", [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] umount2("./130/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] getdents64(3, [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] getdents64(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] lstat("./130/.log", [pid 5084] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(4 [pid 5080] <... openat resumed>) = 4 [pid 5079] close(3 [pid 5078] unlink("./130/.log" [pid 5084] lstat("./131/binderfs", [pid 5081] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 5079] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] getdents64(3, [pid 5084] unlink("./131/binderfs" [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9490 [pid 5078] close(3 [pid 5084] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] rmdir("./131/file0" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... rmdir resumed>) = 0 [pid 5080] getdents64(4, [pid 5078] rmdir("./130" [pid 5084] lstat("./131/file0", [pid 5081] umount2("./131/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... rmdir resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] mkdir("./131", 0777 [pid 5084] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(4, [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5084] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] lstat("./131/.log", [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9490 attached [pid 5084] <... openat resumed>) = 4 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] close(4 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9490] set_robust_list(0x5555559d56e0, 24 [pid 5084] fstat(4, [pid 5081] unlink("./131/.log" [pid 5080] <... close resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9490] <... set_robust_list resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] close(3 [pid 9490] chdir("./132" [pid 5084] getdents64(4, [pid 5081] <... unlink resumed>) = 0 [pid 5080] rmdir("./131/file0" [pid 5078] <... close resumed>) = 0 [pid 9490] <... chdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(3, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] getdents64(4, [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 9490] <... prctl resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5080] getdents64(3, [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9491 ./strace-static-x86_64: Process 9491 attached [pid 9490] setpgid(0, 0 [pid 9489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] close(4 [pid 5081] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9491] set_robust_list(0x5555559d56e0, 24 [pid 9490] <... setpgid resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] rmdir("./131" [pid 5080] close(3 [pid 9491] <... set_robust_list resumed>) = 0 [pid 9490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] rmdir("./131/file0" [pid 5081] <... rmdir resumed>) = 0 [pid 9491] chdir("./131" [pid 9490] <... openat resumed>) = 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] mkdir("./132", 0777 [pid 5080] <... close resumed>) = 0 [pid 9491] <... chdir resumed>) = 0 [pid 9490] write(3, "1000", 4 [pid 5084] umount2("./131/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9491] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9490] <... write resumed>) = 4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... mkdir resumed>) = 0 [pid 5080] rmdir("./131" [pid 9491] <... prctl resumed>) = 0 [pid 9490] close(3 [pid 5084] lstat("./131/.log", [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... rmdir resumed>) = 0 [pid 9491] setpgid(0, 0 [pid 9490] <... close resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] mkdir("./132", 0777 [pid 9491] <... setpgid resumed>) = 0 [pid 9490] symlink("/dev/binderfs", "./binderfs" [pid 5084] unlink("./131/.log" [pid 5081] ioctl(3, LOOP_CLR_FD [pid 9491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9490] <... symlink resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... mkdir resumed>) = 0 [pid 9491] <... openat resumed>) = 3 [pid 9490] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 5081] close(3 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9491] write(3, "1000", 4 [pid 9490] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... close resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./131" [pid 9491] <... write resumed>) = 4 [pid 9490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... openat resumed>) = 3 [pid 9491] close(3 [pid 9490] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] mkdir("./132", 0777 [pid 9491] <... close resumed>) = 0 [pid 9490] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... mkdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9491] symlink("/dev/binderfs", "./binderfs" [pid 9490] <... mprotect resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9492 [pid 5080] <... ioctl resumed>) = 0 [pid 9491] <... symlink resumed>) = 0 [pid 9490] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... openat resumed>) = 3 [pid 5080] close(3./strace-static-x86_64: Process 9492 attached [pid 9491] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 9492] set_robust_list(0x5555559d56e0, 24 [pid 9491] <... futex resumed>) = 0 [pid 9490] <... clone resumed>, parent_tid=[9493], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9493 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9492] <... set_robust_list resumed>) = 0 [pid 9491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9490] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 9492] chdir("./132" [pid 5084] <... close resumed>) = 0 [pid 9492] <... chdir resumed>) = 0 [ 278.958340][ T27] audit: type=1804 audit(1680236962.292:791): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/130/.log" dev="sda1" ino=1163 res=1 errno=0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9494 [pid 9492] setpgid(0, 0) = 0 [pid 9491] <... mmap resumed>) = 0x7ff2b3754000 [pid 9490] <... futex resumed>) = 0 [pid 9492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9491] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9490] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9495 ./strace-static-x86_64: Process 9494 attached [pid 9492] <... openat resumed>) = 3 [pid 9491] <... mprotect resumed>) = 0 [pid 9494] set_robust_list(0x5555559d56e0, 24 [pid 9492] write(3, "1000", 4 [pid 9491] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9494] <... set_robust_list resumed>) = 0 [pid 9492] <... write resumed>) = 4 ./strace-static-x86_64: Process 9493 attached [pid 9494] chdir("./132" [pid 9492] close(3 [pid 9491] <... clone resumed>, parent_tid=[9496], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9496 ./strace-static-x86_64: Process 9495 attached [pid 9494] <... chdir resumed>) = 0 [pid 9493] set_robust_list(0x7ff2b37749e0, 24 [pid 9492] <... close resumed>) = 0 [pid 9491] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9495] set_robust_list(0x5555559d56e0, 24 [pid 9494] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9493] <... set_robust_list resumed>) = 0 [pid 9492] symlink("/dev/binderfs", "./binderfs" [pid 9491] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9496 attached [pid 9495] <... set_robust_list resumed>) = 0 [pid 9494] <... prctl resumed>) = 0 [pid 9493] memfd_create("syzkaller", 0 [pid 9492] <... symlink resumed>) = 0 [pid 9491] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9496] set_robust_list(0x7ff2b37749e0, 24 [pid 9495] chdir("./132" [pid 9494] setpgid(0, 0 [pid 9493] <... memfd_create resumed>) = 3 [pid 9492] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9496] <... set_robust_list resumed>) = 0 [pid 9495] <... chdir resumed>) = 0 [pid 9494] <... setpgid resumed>) = 0 [pid 9493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9492] <... futex resumed>) = 0 [pid 9496] memfd_create("syzkaller", 0 [pid 9495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9493] <... mmap resumed>) = 0x7ff2ab354000 [pid 9492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9496] <... memfd_create resumed>) = 3 [pid 9495] <... prctl resumed>) = 0 [pid 9494] <... openat resumed>) = 3 [pid 9492] <... mmap resumed>) = 0x7ff2b3754000 [pid 9496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9495] setpgid(0, 0 [pid 9494] write(3, "1000", 4 [pid 9492] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9496] <... mmap resumed>) = 0x7ff2ab354000 [pid 9495] <... setpgid resumed>) = 0 [pid 9494] <... write resumed>) = 4 [pid 9492] <... mprotect resumed>) = 0 [pid 9495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9494] close(3 [pid 9492] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9495] <... openat resumed>) = 3 [pid 9494] <... close resumed>) = 0 [pid 9495] write(3, "1000", 4 [pid 9494] symlink("/dev/binderfs", "./binderfs" [pid 9492] <... clone resumed>, parent_tid=[9497], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9497 [pid 9495] <... write resumed>) = 4 [pid 9494] <... symlink resumed>) = 0 [pid 9492] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9495] close(3 [pid 9494] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9492] <... futex resumed>) = 0 [pid 9495] <... close resumed>) = 0 [pid 9494] <... futex resumed>) = 0 [pid 9492] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9497 attached [pid 9495] symlink("/dev/binderfs", "./binderfs" [pid 9494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9497] set_robust_list(0x7ff2b37749e0, 24 [pid 9495] <... symlink resumed>) = 0 [pid 9494] <... mmap resumed>) = 0x7ff2b3754000 [pid 9497] <... set_robust_list resumed>) = 0 [pid 9495] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9494] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9497] memfd_create("syzkaller", 0 [pid 9495] <... futex resumed>) = 0 [pid 9494] <... mprotect resumed>) = 0 [pid 9497] <... memfd_create resumed>) = 3 [pid 9495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9494] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9495] <... mmap resumed>) = 0x7ff2b3754000 [pid 9497] <... mmap resumed>) = 0x7ff2ab354000 [pid 9495] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9494] <... clone resumed>, parent_tid=[9498], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9498 ./strace-static-x86_64: Process 9498 attached [pid 9495] <... mprotect resumed>) = 0 [pid 9494] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9498] set_robust_list(0x7ff2b37749e0, 24 [pid 9495] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9494] <... futex resumed>) = 0 [ 279.062927][ T27] audit: type=1804 audit(1680236962.332:792): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/131/.log" dev="sda1" ino=1164 res=1 errno=0 [pid 9498] <... set_robust_list resumed>) = 0 [pid 9494] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9498] memfd_create("syzkaller", 0 [pid 9495] <... clone resumed>, parent_tid=[9499], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9499 ./strace-static-x86_64: Process 9499 attached [pid 9498] <... memfd_create resumed>) = 3 [pid 9495] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9499] set_robust_list(0x7ff2b37749e0, 24 [pid 9498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9495] <... futex resumed>) = 0 [pid 9499] <... set_robust_list resumed>) = 0 [pid 9498] <... mmap resumed>) = 0x7ff2ab354000 [pid 9495] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9499] memfd_create("syzkaller", 0) = 3 [pid 9499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9489] <... write resumed>) = 16777216 [pid 9489] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9489] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9489] ioctl(4, LOOP_SET_FD, 3 [pid 9496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9489] <... ioctl resumed>) = 0 [pid 9489] close(3) = 0 [pid 9498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9489] mkdir("./file0", 0777) = 0 [ 279.496039][ T9489] loop4: detected capacity change from 0 to 32768 [pid 9489] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 279.537657][ T9489] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (9489) [ 279.593689][ T9489] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 279.627781][ T9489] BTRFS info (device loop4): setting nodatasum [ 279.646284][ T9489] BTRFS info (device loop4): allowing degraded mounts [ 279.669042][ T9489] BTRFS info (device loop4): use zlib compression, level 3 [ 279.705882][ T9489] BTRFS info (device loop4): using free space tree [pid 9499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9493] <... write resumed>) = 16777216 [pid 9493] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9493] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 279.846219][ T9489] BTRFS info (device loop4): enabling ssd optimizations [ 279.854774][ T9489] BTRFS info (device loop4): auto enabling async discard [ 279.880670][ T9493] loop1: detected capacity change from 0 to 32768 [ 279.890331][ T9489] BTRFS info (device loop4): checking UUID tree [pid 9493] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9493] close(3) = 0 [pid 9493] mkdir("./file0", 0777) = 0 [pid 9493] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9489] <... mount resumed>) = 0 [pid 9489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9489] chdir("./file0") = 0 [pid 9489] ioctl(4, LOOP_CLR_FD) = 0 [pid 9489] close(4) = 0 [pid 9489] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9488] <... futex resumed>) = 0 [pid 9489] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9488] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9488] <... futex resumed>) = 0 [pid 9489] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9488] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9489] <... openat resumed>) = 4 [pid 9489] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9488] <... futex resumed>) = 0 [pid 9489] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9488] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9488] <... futex resumed>) = 0 [pid 9489] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9488] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9493] <... mount resumed>) = -1 EEXIST (File exists) [ 279.910331][ T9493] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9493) [pid 9493] ioctl(4, LOOP_CLR_FD [pid 9488] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 279.954191][ T9489] BTRFS info (device loop4): balance: start -s [pid 9498] <... write resumed>) = 16777216 [pid 9496] <... write resumed>) = 16777216 [pid 9488] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9498] munmap(0x7ff2ab354000, 16777216 [pid 9496] munmap(0x7ff2ab354000, 16777216 [pid 9488] <... futex resumed>) = 0 [pid 9498] <... munmap resumed>) = 0 [pid 9496] <... munmap resumed>) = 0 [pid 9488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9498] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9496] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9488] <... mmap resumed>) = 0x7ff2ac333000 [pid 9498] <... openat resumed>) = 4 [pid 9496] <... openat resumed>) = 4 [pid 9488] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 9498] ioctl(4, LOOP_SET_FD, 3 [pid 9496] ioctl(4, LOOP_SET_FD, 3 [pid 9488] <... mprotect resumed>) = 0 [pid 9488] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9518], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9518 [pid 9488] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9488] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9497] <... write resumed>) = 16777216 [pid 9498] <... ioctl resumed>) = 0 [pid 9496] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 9518 attached [pid 9498] close(3 [pid 9497] munmap(0x7ff2ab354000, 16777216 [pid 9496] close(3 [pid 9518] set_robust_list(0x7ff2ac3539e0, 24 [pid 9499] <... write resumed>) = 16777216 [pid 9498] <... close resumed>) = 0 [ 280.001983][ T9489] BTRFS info (device loop4): relocating block group 1048576 flags system [ 280.033384][ T9498] loop5: detected capacity change from 0 to 32768 [ 280.040099][ T9496] loop0: detected capacity change from 0 to 32768 [pid 9518] <... set_robust_list resumed>) = 0 [pid 9499] munmap(0x7ff2ab354000, 16777216 [pid 9497] <... munmap resumed>) = 0 [pid 9496] <... close resumed>) = 0 [pid 9498] mkdir("./file0", 0777 [pid 9518] openat(AT_FDCWD, ".log", O_RDONLY [pid 9499] <... munmap resumed>) = 0 [pid 9496] mkdir("./file0", 0777 [pid 9518] <... openat resumed>) = 5 [pid 9499] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9498] <... mkdir resumed>) = 0 [pid 9497] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9489] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9488] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9518] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9499] <... openat resumed>) = 4 [pid 9498] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9497] <... openat resumed>) = 4 [pid 9496] <... mkdir resumed>) = 0 [pid 9489] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9488] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9518] <... futex resumed>) = 0 [pid 9499] ioctl(4, LOOP_SET_FD, 3 [pid 9497] ioctl(4, LOOP_SET_FD, 3 [pid 9496] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9489] <... futex resumed>) = 0 [pid 9488] <... futex resumed>) = 0 [ 280.068416][ T9489] BTRFS info (device loop4): balance: ended with status: 0 [ 280.077671][ T27] audit: type=1804 audit(1680236963.552:793): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/132/file0/.log" dev="loop4" ino=263 res=1 errno=0 [pid 9488] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9518] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9499] <... ioctl resumed>) = 0 [pid 9489] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9499] close(3 [pid 9497] <... ioctl resumed>) = 0 [pid 9499] <... close resumed>) = 0 [pid 9497] close(3 [pid 9499] mkdir("./file0", 0777 [pid 9497] <... close resumed>) = 0 [pid 9499] <... mkdir resumed>) = 0 [pid 9497] mkdir("./file0", 0777) = 0 [pid 9499] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9497] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9488] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9498] <... mount resumed>) = -1 EEXIST (File exists) [ 280.116147][ T9498] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9498) [ 280.127373][ T9499] loop2: detected capacity change from 0 to 32768 [ 280.134506][ T9497] loop3: detected capacity change from 0 to 32768 [ 280.141859][ T9489] BTRFS info (device loop4): scrub: started on devid 1 [ 280.157650][ T9489] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 9498] ioctl(4, LOOP_CLR_FD [pid 9496] <... mount resumed>) = -1 EEXIST (File exists) [pid 9489] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9497] <... mount resumed>) = -1 EEXIST (File exists) [pid 9496] ioctl(4, LOOP_CLR_FD [pid 9489] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9489] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9488] exit_group(0 [pid 9489] <... futex resumed>) = ? [pid 9488] <... exit_group resumed>) = ? [pid 9489] +++ exited with 0 +++ [pid 9518] <... futex resumed>) = ? [pid 9518] +++ exited with 0 +++ [pid 9488] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9488, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=32 /* 0.32 s */} --- [pid 5083] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./132/binderfs") = 0 [pid 5083] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9497] ioctl(4, LOOP_CLR_FD [pid 9493] <... ioctl resumed>) = 0 [pid 9493] close(4) = 0 [ 280.168887][ T9496] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9496) [ 280.185968][ T9497] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9497) [ 280.205880][ T9499] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9499) [pid 9493] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9499] <... mount resumed>) = -1 EEXIST (File exists) [pid 9499] ioctl(4, LOOP_CLR_FD [pid 9493] <... futex resumed>) = 1 [pid 9490] <... futex resumed>) = 0 [pid 9493] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9490] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9490] <... futex resumed>) = 0 [pid 9493] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9490] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9493] <... openat resumed>) = 3 [pid 9493] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9490] <... futex resumed>) = 0 [pid 9493] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9490] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9490] <... futex resumed>) = 0 [pid 9493] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9490] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9493] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9493] <... futex resumed>) = 0 [pid 9490] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9493] openat(AT_FDCWD, ".log", O_RDONLY [pid 9490] <... futex resumed>) = 0 [pid 9493] <... openat resumed>) = 4 [pid 9490] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9493] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9493] <... futex resumed>) = 0 [pid 9490] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9493] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9490] <... futex resumed>) = 0 [pid 9493] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9490] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9493] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9493] <... futex resumed>) = 0 [pid 9490] exit_group(0) = ? [pid 9493] +++ exited with 0 +++ [pid 9490] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9490, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5079] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 280.337622][ T27] audit: type=1804 audit(1680236963.812:794): pid=9493 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/132/.log" dev="sda1" ino=1151 res=1 errno=0 [pid 5079] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] fstat(3, [pid 5083] lstat("./132/file0", [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5083] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... openat resumed>) = 4 [pid 5079] lstat("./132/binderfs", [pid 5083] fstat(4, [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] unlink("./132/binderfs" [pid 5083] getdents64(4, [pid 5079] <... unlink resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] lstat("./132/file0", [pid 5083] close(4 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... close resumed>) = 0 [pid 5079] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] rmdir("./132/file0" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... rmdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] getdents64(3, [pid 5079] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] fstat(4, [pid 5083] close(3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 5083] rmdir("./132" [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 5083] mkdir("./133", 0777 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5079] close(4 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5079] rmdir("./132/file0" [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5079] <... rmdir resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5079] umount2("./132/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... close resumed>) = 0 [pid 5079] lstat("./132/.log", [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./132/.log" [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9519 [pid 5079] <... unlink resumed>) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3./strace-static-x86_64: Process 9519 attached ) = 0 [pid 9519] set_robust_list(0x5555559d56e0, 24 [pid 5079] rmdir("./132" [pid 9519] <... set_robust_list resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 9519] chdir("./133" [pid 5079] mkdir("./133", 0777 [pid 9519] <... chdir resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 9519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9519] <... prctl resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 9519] setpgid(0, 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9519] <... setpgid resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] close(3 [pid 9519] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 9519] write(3, "1000", 4 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9519] <... write resumed>) = 4 [pid 9519] close(3 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9520 [pid 9519] <... close resumed>) = 0 [pid 9519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9519] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9519] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9519] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9521], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9521 [pid 9519] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9519] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9521 attached [pid 9521] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9521] memfd_create("syzkaller", 0./strace-static-x86_64: Process 9520 attached ) = 3 [pid 9521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9520] set_robust_list(0x5555559d56e0, 24 [pid 9521] <... mmap resumed>) = 0x7ff2ab354000 [pid 9520] <... set_robust_list resumed>) = 0 [pid 9520] chdir("./133" [pid 9498] <... ioctl resumed>) = 0 [pid 9520] <... chdir resumed>) = 0 [pid 9520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9520] setpgid(0, 0) = 0 [pid 9520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9520] write(3, "1000", 4) = 4 [pid 9520] close(3 [pid 9498] close(4 [pid 9520] <... close resumed>) = 0 [pid 9520] symlink("/dev/binderfs", "./binderfs" [pid 9498] <... close resumed>) = 0 [pid 9520] <... symlink resumed>) = 0 [pid 9498] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9520] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9498] <... futex resumed>) = 1 [pid 9494] <... futex resumed>) = 0 [pid 9520] <... futex resumed>) = 0 [pid 9498] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9496] <... ioctl resumed>) = 0 [pid 9494] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9496] close(4 [pid 9494] <... futex resumed>) = 0 [pid 9520] <... mmap resumed>) = 0x7ff2b3754000 [pid 9498] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9496] <... close resumed>) = 0 [pid 9494] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9520] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9498] <... openat resumed>) = 3 [pid 9496] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9520] <... mprotect resumed>) = 0 [pid 9498] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9496] <... futex resumed>) = 1 [pid 9491] <... futex resumed>) = 0 [pid 9520] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9491] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9496] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9491] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9520] <... clone resumed>, parent_tid=[9522], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9522 [pid 9498] <... futex resumed>) = 1 [pid 9496] <... openat resumed>) = 3 [pid 9494] <... futex resumed>) = 0 [pid 9520] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9498] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9496] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9494] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9522 attached [pid 9520] <... futex resumed>) = 0 [pid 9498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9496] <... futex resumed>) = 1 [pid 9491] <... futex resumed>) = 0 [pid 9494] <... futex resumed>) = 0 [pid 9522] set_robust_list(0x7ff2b37749e0, 24 [pid 9520] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9498] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9496] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9494] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9491] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9522] <... set_robust_list resumed>) = 0 [pid 9499] <... ioctl resumed>) = 0 [pid 9498] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9497] <... ioctl resumed>) = 0 [pid 9496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9491] <... futex resumed>) = 0 [pid 9522] memfd_create("syzkaller", 0 [pid 9499] close(4 [pid 9498] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9496] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9491] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9522] <... memfd_create resumed>) = 3 [pid 9499] <... close resumed>) = 0 [pid 9497] close(4) = 0 [pid 9497] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9492] <... futex resumed>) = 0 [pid 9492] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9492] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9497] <... futex resumed>) = 1 [pid 9497] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9498] <... futex resumed>) = 1 [pid 9522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9496] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9494] <... futex resumed>) = 0 [pid 9498] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9522] <... mmap resumed>) = 0x7ff2ab354000 [pid 9499] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9496] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9494] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9499] <... futex resumed>) = 1 [pid 9495] <... futex resumed>) = 0 [pid 9497] <... openat resumed>) = 3 [pid 9497] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9492] <... futex resumed>) = 0 [pid 9492] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9492] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9497] <... futex resumed>) = 1 [pid 9497] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9495] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9494] <... futex resumed>) = 0 [pid 9498] openat(AT_FDCWD, ".log", O_RDONLY [pid 9496] <... futex resumed>) = 1 [pid 9495] <... futex resumed>) = 0 [pid 9494] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9491] <... futex resumed>) = 0 [pid 9499] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9498] <... openat resumed>) = 4 [pid 9496] openat(AT_FDCWD, ".log", O_RDONLY [pid 9495] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9491] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9499] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9498] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9496] <... openat resumed>) = 4 [pid 9495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9491] <... futex resumed>) = 0 [pid 9499] <... futex resumed>) = 0 [pid 9498] <... futex resumed>) = 1 [pid 9494] <... futex resumed>) = 0 [pid 9499] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9498] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9496] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9495] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9494] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9491] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9499] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9496] <... futex resumed>) = 0 [pid 9495] <... futex resumed>) = 0 [pid 9494] <... futex resumed>) = 0 [pid 9491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9499] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9498] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9496] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9495] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9494] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9491] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9499] <... futex resumed>) = 0 [pid 9498] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9491] <... futex resumed>) = 0 [pid 9499] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9498] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9496] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9495] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9491] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9498] <... futex resumed>) = 1 [pid 9494] <... futex resumed>) = 0 [pid 9496] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9495] <... futex resumed>) = 0 [pid 9499] openat(AT_FDCWD, ".log", O_RDONLY [pid 9498] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9495] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9494] exit_group(0 [pid 9496] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9499] <... openat resumed>) = 4 [pid 9494] <... exit_group resumed>) = ? [pid 9496] <... futex resumed>) = 1 [pid 9491] <... futex resumed>) = 0 [pid 9498] <... futex resumed>) = ? [pid 9491] exit_group(0 [pid 9496] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9499] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9498] +++ exited with 0 +++ [pid 9497] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9496] <... futex resumed>) = ? [pid 9494] +++ exited with 0 +++ [pid 9491] <... exit_group resumed>) = ? [pid 9499] <... futex resumed>) = 1 [pid 9497] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9496] +++ exited with 0 +++ [pid 9495] <... futex resumed>) = 0 [pid 9499] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9497] <... futex resumed>) = 1 [pid 9495] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9492] <... futex resumed>) = 0 [pid 9491] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9494, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 9499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9497] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9495] <... futex resumed>) = 0 [pid 9492] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 9499] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9495] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9492] <... futex resumed>) = 0 [pid 5084] <... restart_syscall resumed>) = 0 [pid 9499] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9497] openat(AT_FDCWD, ".log", O_RDONLY [pid 9492] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9491, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} --- [pid 9499] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9497] <... openat resumed>) = 4 [pid 9497] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9499] <... futex resumed>) = 1 [pid 9497] <... futex resumed>) = 1 [ 280.616143][ T27] audit: type=1804 audit(1680236964.092:795): pid=9498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/132/.log" dev="sda1" ino=1156 res=1 errno=0 [pid 9492] <... futex resumed>) = 0 [pid 9495] <... futex resumed>) = 0 [pid 5078] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9499] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9497] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9495] exit_group(0 [pid 9492] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9492] <... futex resumed>) = 0 [pid 9497] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9492] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9497] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9497] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9492] <... futex resumed>) = 0 [pid 9497] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9492] exit_group(0 [pid 9497] <... futex resumed>) = ? [pid 9492] <... exit_group resumed>) = ? [pid 9497] +++ exited with 0 +++ [pid 9492] +++ exited with 0 +++ [pid 9499] <... futex resumed>) = ? [pid 9495] <... exit_group resumed>) = ? [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9499] +++ exited with 0 +++ [pid 9495] +++ exited with 0 +++ [pid 5084] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9492, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9495, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5078] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... openat resumed>) = 3 [pid 5081] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5084] fstat(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] fstat(3, [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, [pid 5081] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] fstat(3, [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5080] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] lstat("./132/binderfs", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./131/binderfs", [pid 5084] unlink("./132/binderfs" [pid 5081] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 3 [pid 5084] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./132/binderfs", [pid 5080] fstat(3, [pid 5078] unlink("./131/binderfs" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] lstat("./132/file0", [pid 5081] unlink("./132/binderfs" [pid 5080] getdents64(3, [pid 5078] <... unlink resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] lstat("./132/file0", [pid 5080] lstat("./132/binderfs", [pid 5078] lstat("./131/file0", [pid 5084] <... openat resumed>) = 4 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./132/binderfs" [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] fstat(4, [pid 5081] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... unlink resumed>) = 0 [pid 5078] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] getdents64(4, [pid 5081] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] getdents64(4, [pid 5081] fstat(4, [pid 5078] <... openat resumed>) = 4 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] fstat(4, [pid 5084] close(4 [pid 5081] getdents64(4, [pid 5080] lstat("./132/file0", [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 5084] rmdir("./132/file0" [pid 5081] getdents64(4, [pid 5080] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(4, [pid 5084] umount2("./132/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] close(4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 280.677712][ T27] audit: type=1804 audit(1680236964.112:796): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/131/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 5084] lstat("./132/.log", [pid 5081] rmdir("./132/file0" [pid 5078] close(4 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5084] unlink("./132/.log" [pid 5081] <... rmdir resumed>) = 0 [pid 5080] fstat(4, [pid 5078] <... close resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5081] umount2("./132/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./131/file0" [pid 5084] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(4, [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] lstat("./132/.log", [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... rmdir resumed>) = 0 [pid 5084] close(3 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] getdents64(4, [pid 5078] umount2("./131/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... close resumed>) = 0 [pid 5081] unlink("./132/.log" [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] rmdir("./132" [pid 5081] <... unlink resumed>) = 0 [pid 5080] close(4 [pid 5078] lstat("./131/.log", [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5084] mkdir("./133", 0777 [pid 5081] getdents64(3, [pid 5080] rmdir("./132/file0" [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] unlink("./131/.log" [pid 5084] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5080] umount2("./132/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] rmdir("./132" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... unlink resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... rmdir resumed>) = 0 [pid 5084] close(3 [pid 5081] mkdir("./133", 0777 [pid 5080] lstat("./132/.log", [pid 5078] getdents64(3, [pid 5084] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] unlink("./132/.log" [pid 5078] close(3 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5078] rmdir("./131" [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9523 [pid 5081] <... openat resumed>) = 3 [pid 5080] getdents64(3, [pid 5078] <... rmdir resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] mkdir("./132", 0777 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5078] <... mkdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5081] close(3 [pid 5080] rmdir("./132" [pid 5081] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5080] mkdir("./133", 0777 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9524 [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... close resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9525 ./strace-static-x86_64: Process 9523 attached [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9526 [pid 9523] set_robust_list(0x5555559d56e0, 24) = 0 ./strace-static-x86_64: Process 9525 attached [pid 9525] set_robust_list(0x5555559d56e0, 24 [pid 9523] chdir("./133"./strace-static-x86_64: Process 9526 attached ./strace-static-x86_64: Process 9524 attached [pid 9525] <... set_robust_list resumed>) = 0 [pid 9523] <... chdir resumed>) = 0 [pid 9526] set_robust_list(0x5555559d56e0, 24 [pid 9525] chdir("./132" [pid 9524] set_robust_list(0x5555559d56e0, 24 [pid 9523] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9526] <... set_robust_list resumed>) = 0 [pid 9525] <... chdir resumed>) = 0 [pid 9524] <... set_robust_list resumed>) = 0 [pid 9523] <... prctl resumed>) = 0 [pid 9525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9526] chdir("./133" [pid 9525] <... prctl resumed>) = 0 [pid 9524] chdir("./133" [pid 9523] setpgid(0, 0 [pid 9526] <... chdir resumed>) = 0 [pid 9525] setpgid(0, 0 [pid 9524] <... chdir resumed>) = 0 [pid 9523] <... setpgid resumed>) = 0 [pid 9526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9525] <... setpgid resumed>) = 0 [pid 9524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9526] <... prctl resumed>) = 0 [pid 9525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9524] <... prctl resumed>) = 0 [pid 9523] <... openat resumed>) = 3 [pid 9526] setpgid(0, 0 [pid 9525] <... openat resumed>) = 3 [pid 9524] setpgid(0, 0 [pid 9523] write(3, "1000", 4 [pid 9526] <... setpgid resumed>) = 0 [pid 9525] write(3, "1000", 4 [pid 9524] <... setpgid resumed>) = 0 [pid 9523] <... write resumed>) = 4 [pid 9526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9525] <... write resumed>) = 4 [pid 9524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9523] close(3 [pid 9526] <... openat resumed>) = 3 [pid 9525] close(3 [pid 9524] <... openat resumed>) = 3 [pid 9523] <... close resumed>) = 0 [pid 9526] write(3, "1000", 4 [pid 9525] <... close resumed>) = 0 [pid 9524] write(3, "1000", 4 [pid 9523] symlink("/dev/binderfs", "./binderfs" [pid 9526] <... write resumed>) = 4 [pid 9525] symlink("/dev/binderfs", "./binderfs" [pid 9524] <... write resumed>) = 4 [pid 9523] <... symlink resumed>) = 0 [pid 9526] close(3 [pid 9525] <... symlink resumed>) = 0 [pid 9524] close(3 [pid 9523] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9526] <... close resumed>) = 0 [pid 9525] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9524] <... close resumed>) = 0 [pid 9523] <... futex resumed>) = 0 [pid 9526] symlink("/dev/binderfs", "./binderfs" [pid 9524] symlink("/dev/binderfs", "./binderfs" [pid 9523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9526] <... symlink resumed>) = 0 [pid 9524] <... symlink resumed>) = 0 [pid 9523] <... mmap resumed>) = 0x7ff2b3754000 [pid 9526] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9525] <... futex resumed>) = 0 [pid 9524] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9523] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9526] <... futex resumed>) = 0 [pid 9525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9524] <... futex resumed>) = 0 [pid 9523] <... mprotect resumed>) = 0 [pid 9526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9523] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9526] <... mmap resumed>) = 0x7ff2b3754000 [pid 9524] <... mmap resumed>) = 0x7ff2b3754000 [pid 9526] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9524] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9523] <... clone resumed>, parent_tid=[9527], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9527 [pid 9526] <... mprotect resumed>) = 0 [pid 9524] <... mprotect resumed>) = 0 [pid 9523] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9526] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9525] <... mmap resumed>) = 0x7ff2b3754000 [pid 9524] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9523] <... futex resumed>) = 0 [pid 9525] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9523] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9526] <... clone resumed>, parent_tid=[9528], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9528 [pid 9525] <... mprotect resumed>) = 0 [pid 9524] <... clone resumed>, parent_tid=[9529], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9529 [pid 9526] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9525] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9524] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9527 attached [pid 9526] <... futex resumed>) = 0 [pid 9524] <... futex resumed>) = 0 [pid 9527] set_robust_list(0x7ff2b37749e0, 24 [pid 9526] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9525] <... clone resumed>, parent_tid=[9530], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9530 [pid 9524] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9529 attached ./strace-static-x86_64: Process 9528 attached [pid 9527] <... set_robust_list resumed>) = 0 [pid 9525] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9529] set_robust_list(0x7ff2b37749e0, 24 [pid 9528] set_robust_list(0x7ff2b37749e0, 24 [pid 9527] memfd_create("syzkaller", 0 [pid 9525] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9530 attached [pid 9529] <... set_robust_list resumed>) = 0 [pid 9528] <... set_robust_list resumed>) = 0 [pid 9527] <... memfd_create resumed>) = 3 [pid 9525] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9530] set_robust_list(0x7ff2b37749e0, 24 [pid 9529] memfd_create("syzkaller", 0 [pid 9528] memfd_create("syzkaller", 0 [pid 9527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9530] <... set_robust_list resumed>) = 0 [pid 9529] <... memfd_create resumed>) = 3 [pid 9528] <... memfd_create resumed>) = 3 [pid 9527] <... mmap resumed>) = 0x7ff2ab354000 [pid 9530] memfd_create("syzkaller", 0 [pid 9529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9530] <... memfd_create resumed>) = 3 [pid 9529] <... mmap resumed>) = 0x7ff2ab354000 [pid 9528] <... mmap resumed>) = 0x7ff2ab354000 [pid 9530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9528] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9522] <... write resumed>) = 16777216 [pid 9522] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9521] <... write resumed>) = 16777216 [pid 9521] munmap(0x7ff2ab354000, 16777216 [pid 9522] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9521] <... munmap resumed>) = 0 [pid 9522] <... openat resumed>) = 4 [pid 9522] ioctl(4, LOOP_SET_FD, 3 [pid 9521] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9521] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9522] <... ioctl resumed>) = 0 [pid 9522] close(3 [pid 9521] close(3 [pid 9522] <... close resumed>) = 0 [pid 9522] mkdir("./file0", 0777) = 0 [pid 9522] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9521] <... close resumed>) = 0 [pid 9521] mkdir("./file0", 0777) = 0 [ 281.406156][ T9522] loop1: detected capacity change from 0 to 32768 [ 281.426512][ T9521] loop4: detected capacity change from 0 to 32768 [ 281.438357][ T9522] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (9522) [pid 9521] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 281.500481][ T9521] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9521) [ 281.512991][ T9522] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 281.545369][ T9522] BTRFS info (device loop1): setting nodatasum [ 281.551681][ T9522] BTRFS info (device loop1): allowing degraded mounts [ 281.570734][ T9522] BTRFS info (device loop1): use zlib compression, level 3 [ 281.610125][ T9522] BTRFS info (device loop1): using free space tree [pid 9521] ioctl(4, LOOP_CLR_FD [pid 9529] <... write resumed>) = 16777216 [pid 9529] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9529] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9529] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9529] close(3) = 0 [pid 9529] mkdir("./file0", 0777) = 0 [pid 9529] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9529] ioctl(4, LOOP_CLR_FD [pid 9528] <... write resumed>) = 16777216 [pid 9528] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9527] <... write resumed>) = 16777216 [pid 9528] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9527] munmap(0x7ff2ab354000, 16777216 [pid 9528] <... openat resumed>) = 4 [ 281.691420][ T9529] loop3: detected capacity change from 0 to 32768 [ 281.711286][ T9529] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9529) [pid 9528] ioctl(4, LOOP_SET_FD, 3 [pid 9527] <... munmap resumed>) = 0 [pid 9527] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9527] ioctl(4, LOOP_SET_FD, 3 [pid 9528] <... ioctl resumed>) = 0 [pid 9528] close(3) = 0 [pid 9528] mkdir("./file0", 0777) = 0 [pid 9528] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 281.754146][ T9528] loop2: detected capacity change from 0 to 32768 [ 281.764979][ T9527] loop5: detected capacity change from 0 to 32768 [pid 9530] <... write resumed>) = 16777216 [pid 9530] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9530] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9530] ioctl(4, LOOP_SET_FD, 3 [pid 9527] <... ioctl resumed>) = 0 [pid 9527] close(3) = 0 [pid 9530] <... ioctl resumed>) = 0 [pid 9528] <... mount resumed>) = -1 EEXIST (File exists) [pid 9527] mkdir("./file0", 0777 [pid 9521] <... ioctl resumed>) = 0 [pid 9527] <... mkdir resumed>) = 0 [pid 9527] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9528] ioctl(4, LOOP_CLR_FD [pid 9530] close(3 [pid 9521] close(4 [pid 9530] <... close resumed>) = 0 [pid 9521] <... close resumed>) = 0 [pid 9530] mkdir("./file0", 0777 [ 281.794734][ T9528] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9528) [ 281.803777][ T9530] loop0: detected capacity change from 0 to 32768 [ 281.826152][ T9522] BTRFS info (device loop1): enabling ssd optimizations [ 281.833118][ T9522] BTRFS info (device loop1): auto enabling async discard [pid 9521] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9530] <... mkdir resumed>) = 0 [pid 9521] <... futex resumed>) = 1 [pid 9519] <... futex resumed>) = 0 [pid 9530] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9527] <... mount resumed>) = -1 EEXIST (File exists) [pid 9521] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9519] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9527] ioctl(4, LOOP_CLR_FD [pid 9521] <... openat resumed>) = 3 [pid 9519] <... futex resumed>) = 0 [pid 9521] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9519] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9521] <... futex resumed>) = 0 [pid 9519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9521] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9519] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9521] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9519] <... futex resumed>) = 0 [pid 9530] <... mount resumed>) = -1 EEXIST (File exists) [pid 9529] <... ioctl resumed>) = 0 [pid 9521] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9519] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9521] <... futex resumed>) = 0 [pid 9519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9521] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9519] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9519] <... futex resumed>) = 0 [pid 9521] openat(AT_FDCWD, ".log", O_RDONLY [pid 9519] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9521] <... openat resumed>) = 4 [pid 9530] ioctl(4, LOOP_CLR_FD [pid 9521] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9529] close(4 [pid 9521] <... futex resumed>) = 1 [pid 9519] <... futex resumed>) = 0 [pid 9521] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9519] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9519] <... futex resumed>) = 0 [pid 9521] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9519] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9521] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9529] <... close resumed>) = 0 [pid 9521] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9529] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9521] <... futex resumed>) = 1 [pid 9519] <... futex resumed>) = 0 [pid 9529] <... futex resumed>) = 1 [pid 9524] <... futex resumed>) = 0 [pid 9521] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9519] exit_group(0 [pid 9529] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9524] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9522] <... mount resumed>) = 0 [pid 9521] <... futex resumed>) = ? [pid 9519] <... exit_group resumed>) = ? [pid 9529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9524] <... futex resumed>) = 0 [pid 9522] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9521] +++ exited with 0 +++ [pid 9519] +++ exited with 0 +++ [pid 9529] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9524] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9522] <... openat resumed>) = 3 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9519, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 9529] <... openat resumed>) = 3 [pid 9522] chdir("./file0" [pid 5083] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 9529] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9522] <... chdir resumed>) = 0 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [ 281.845959][ T9527] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9527) [ 281.861289][ T9530] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9530) [ 281.881278][ T9522] BTRFS info (device loop1): checking UUID tree [pid 5083] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9529] <... futex resumed>) = 1 [pid 9524] <... futex resumed>) = 0 [pid 9522] ioctl(4, LOOP_CLR_FD [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9529] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9524] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9522] <... ioctl resumed>) = 0 [pid 5083] lstat("./133/binderfs", [pid 9529] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9524] <... futex resumed>) = 0 [pid 9522] close(4 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9529] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9524] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9522] <... close resumed>) = 0 [pid 5083] unlink("./133/binderfs" [pid 9529] <... futex resumed>) = 0 [pid 9524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9522] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 9529] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9524] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9522] <... futex resumed>) = 1 [pid 9520] <... futex resumed>) = 0 [pid 5083] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9524] <... futex resumed>) = 0 [pid 9522] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9520] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9529] openat(AT_FDCWD, ".log", O_RDONLY [pid 9524] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9520] <... futex resumed>) = 0 [pid 5083] lstat("./133/file0", [pid 9529] <... openat resumed>) = 4 [pid 9522] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9520] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9529] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9522] <... openat resumed>) = 4 [pid 5083] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9529] <... futex resumed>) = 1 [pid 9524] <... futex resumed>) = 0 [pid 9522] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9529] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9524] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9522] <... futex resumed>) = 1 [pid 9520] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9524] <... futex resumed>) = 0 [pid 9522] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9520] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 4 [pid 9529] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9524] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9520] <... futex resumed>) = 0 [pid 5083] fstat(4, [pid 9529] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9522] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9520] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9529] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9529] <... futex resumed>) = 1 [pid 9524] <... futex resumed>) = 0 [pid 5083] getdents64(4, [pid 9529] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9524] exit_group(0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9529] <... futex resumed>) = ? [pid 9524] <... exit_group resumed>) = ? [pid 5083] close(4) = 0 [pid 5083] rmdir("./133/file0") = 0 [pid 5083] umount2("./133/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./133/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./133/.log") = 0 [pid 5083] getdents64(3, [pid 9529] +++ exited with 0 +++ [pid 9524] +++ exited with 0 +++ [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9524, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=27 /* 0.27 s */} --- [pid 5083] rmdir("./133" [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5083] mkdir("./134", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 5081] <... openat resumed>) = 3 [pid 5083] <... close resumed>) = 0 [pid 5081] fstat(3, [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9548 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./133/binderfs", [pid 9520] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9520] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 9548 attached [pid 9520] <... futex resumed>) = 0 [pid 5081] unlink("./133/binderfs" [pid 9548] set_robust_list(0x5555559d56e0, 24 [pid 9520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9548] <... set_robust_list resumed>) = 0 [pid 9520] <... mmap resumed>) = 0x7ff2ac333000 [ 281.992958][ T9522] BTRFS info (device loop1): balance: start -s [pid 5081] <... unlink resumed>) = 0 [pid 9548] chdir("./134") = 0 [pid 9548] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9548] setpgid(0, 0) = 0 [pid 9548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9548] write(3, "1000", 4) = 4 [pid 9548] close(3) = 0 [pid 9520] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9548] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9548] <... symlink resumed>) = 0 [pid 5081] lstat("./133/file0", [pid 9548] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9548] <... futex resumed>) = 0 [pid 9520] <... mprotect resumed>) = 0 [pid 5081] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9548] <... mmap resumed>) = 0x7ff2b3754000 [pid 9520] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9548] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... openat resumed>) = 4 [pid 9548] <... mprotect resumed>) = 0 [pid 9520] <... clone resumed>, parent_tid=[9550], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9550 [pid 5081] fstat(4, [pid 9548] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9520] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9520] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 9548] <... clone resumed>, parent_tid=[9551], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9551 [pid 9520] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9548] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 9550 attached [pid 9548] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 9550] set_robust_list(0x7ff2ac3539e0, 24 [pid 9548] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 9551 attached [pid 9550] <... set_robust_list resumed>) = 0 [pid 5081] close(4 [pid 9551] set_robust_list(0x7ff2b37749e0, 24 [pid 9550] openat(AT_FDCWD, ".log", O_RDONLY [pid 5081] <... close resumed>) = 0 [pid 9551] <... set_robust_list resumed>) = 0 [pid 9550] <... openat resumed>) = 5 [pid 5081] rmdir("./133/file0" [pid 9551] memfd_create("syzkaller", 0 [pid 9550] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9551] <... memfd_create resumed>) = 3 [pid 9550] <... futex resumed>) = 1 [pid 9520] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 9551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9550] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9520] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./133/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9551] <... mmap resumed>) = 0x7ff2ab354000 [pid 9550] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9520] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9550] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9520] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] lstat("./133/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./133/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./133") = 0 [pid 5081] mkdir("./134", 0777) = 0 [ 282.045562][ T9522] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 9520] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9552 ./strace-static-x86_64: Process 9552 attached [pid 9552] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9552] chdir("./134" [pid 9528] <... ioctl resumed>) = 0 [pid 9552] <... chdir resumed>) = 0 [pid 9552] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9552] setpgid(0, 0) = 0 [pid 9552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9552] write(3, "1000", 4) = 4 [pid 9527] <... ioctl resumed>) = 0 [pid 9552] close(3 [pid 9528] close(4 [pid 9527] close(4 [ 282.117664][ T9550] BTRFS info (device loop1): scrub: started on devid 1 [ 282.118481][ T9522] BTRFS info (device loop1): balance: ended with status: 0 [ 282.140306][ T9550] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 9552] <... close resumed>) = 0 [pid 9528] <... close resumed>) = 0 [pid 9527] <... close resumed>) = 0 [pid 9522] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9552] symlink("/dev/binderfs", "./binderfs" [pid 9550] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9528] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9527] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9522] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9552] <... symlink resumed>) = 0 [pid 9550] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9528] <... futex resumed>) = 1 [pid 9527] <... futex resumed>) = 1 [pid 9526] <... futex resumed>) = 0 [pid 9523] <... futex resumed>) = 0 [pid 9522] <... futex resumed>) = 0 [pid 9552] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9550] <... futex resumed>) = 0 [pid 9528] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9527] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9526] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9523] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9522] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9552] <... futex resumed>) = 0 [pid 9550] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9526] <... futex resumed>) = 0 [pid 9523] <... futex resumed>) = 0 [pid 9520] exit_group(0 [pid 9552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9550] <... futex resumed>) = ? [pid 9528] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9527] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9526] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9523] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9522] <... futex resumed>) = ? [pid 9520] <... exit_group resumed>) = ? [pid 9552] <... mmap resumed>) = 0x7ff2b3754000 [pid 9550] +++ exited with 0 +++ [pid 9528] <... openat resumed>) = 3 [pid 9527] <... openat resumed>) = 3 [pid 9522] +++ exited with 0 +++ [pid 9520] +++ exited with 0 +++ [pid 9552] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9528] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9527] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9520, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 9552] <... mprotect resumed>) = 0 [pid 9528] <... futex resumed>) = 1 [pid 9527] <... futex resumed>) = 1 [pid 9526] <... futex resumed>) = 0 [pid 9523] <... futex resumed>) = 0 [pid 9552] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9528] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9527] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9526] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9523] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9528] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9526] <... futex resumed>) = 0 [pid 9523] <... futex resumed>) = 0 [pid 9552] <... clone resumed>, parent_tid=[9553], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9553 [pid 9528] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9527] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9526] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9523] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9552] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9528] <... futex resumed>) = 0 [pid 9527] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 9553 attached [pid 9552] <... futex resumed>) = 0 [pid 9528] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9527] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9526] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9553] set_robust_list(0x7ff2b37749e0, 24 [pid 9552] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9527] <... futex resumed>) = 1 [pid 9526] <... futex resumed>) = 0 [pid 9523] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9553] <... set_robust_list resumed>) = 0 [pid 9528] openat(AT_FDCWD, ".log", O_RDONLY [pid 9527] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9526] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9523] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9553] memfd_create("syzkaller", 0 [pid 9528] <... openat resumed>) = 4 [pid 9527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9523] <... futex resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 9553] <... memfd_create resumed>) = 3 [pid 9530] <... ioctl resumed>) = 0 [pid 9528] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9527] openat(AT_FDCWD, ".log", O_RDONLY [pid 9523] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] fstat(3, [pid 9553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9530] close(4 [pid 9528] <... futex resumed>) = 1 [pid 9527] <... openat resumed>) = 4 [pid 9526] <... futex resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9553] <... mmap resumed>) = 0x7ff2ab354000 [pid 9530] <... close resumed>) = 0 [pid 9528] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9527] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9526] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 9526] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9526] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./133/binderfs") = 0 [pid 5079] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9530] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9528] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9527] <... futex resumed>) = 1 [pid 9523] <... futex resumed>) = 0 [pid 9530] <... futex resumed>) = 1 [pid 9528] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9527] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9525] <... futex resumed>) = 0 [pid 9523] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9530] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9528] <... futex resumed>) = 1 [pid 9527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9526] <... futex resumed>) = 0 [pid 9525] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9523] <... futex resumed>) = 0 [pid 9530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9528] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9527] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9526] exit_group(0 [pid 9525] <... futex resumed>) = 0 [pid 9523] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9530] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9528] <... futex resumed>) = ? [pid 9527] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9526] <... exit_group resumed>) = ? [pid 9525] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9530] <... openat resumed>) = 3 [pid 9528] +++ exited with 0 +++ [pid 9527] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9526] +++ exited with 0 +++ [pid 9530] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9527] <... futex resumed>) = 1 [pid 9523] <... futex resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9526, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 9530] <... futex resumed>) = 1 [pid 9525] <... futex resumed>) = 0 [pid 9523] exit_group(0) = ? [pid 9530] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9525] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9530] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9525] <... futex resumed>) = 0 [pid 9527] +++ exited with 0 +++ [pid 9525] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9523] +++ exited with 0 +++ [pid 9530] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9523, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=22 /* 0.22 s */} --- [pid 9530] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9525] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9525] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9525] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 3 [pid 9530] openat(AT_FDCWD, ".log", O_RDONLY [pid 5084] fstat(3, [pid 5080] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9530] <... openat resumed>) = 4 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9530] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9530] <... futex resumed>) = 1 [pid 9525] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9530] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9525] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./133/binderfs" [pid 5080] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9530] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9525] <... futex resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 9530] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9525] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./133/file0", [pid 9530] <... futex resumed>) = 0 [pid 9525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] fstat(3, [pid 5084] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9530] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9525] exit_group(0 [pid 5084] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9530] <... futex resumed>) = ? [pid 9525] <... exit_group resumed>) = ? [pid 5084] <... openat resumed>) = 4 [pid 5080] getdents64(3, [pid 9530] +++ exited with 0 +++ [pid 5084] fstat(4, [pid 9525] +++ exited with 0 +++ [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] getdents64(4, [pid 5080] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9525, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5084] getdents64(4, [pid 5080] lstat("./133/binderfs", [pid 5078] <... restart_syscall resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] close(4 [pid 5080] unlink("./133/binderfs" [pid 5084] <... close resumed>) = 0 [pid 5078] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] rmdir("./133/file0" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... rmdir resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] umount2("./133/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(3, [pid 5084] lstat("./133/.log", [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 5084] unlink("./133/.log" [pid 5080] lstat("./133/file0", [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] <... unlink resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] getdents64(3, [pid 5080] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./132/binderfs", [pid 5084] close(3 [pid 5080] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5079] lstat("./133/file0", [pid 5078] unlink("./132/binderfs" [pid 5084] rmdir("./133" [pid 5078] <... unlink resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5078] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] mkdir("./134", 0777 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... mkdir resumed>) = 0 [pid 5078] lstat("./132/file0", [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5078] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5080] fstat(4, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] close(3 [pid 5080] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 4 [pid 5084] <... close resumed>) = 0 [pid 5078] fstat(4, [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9554 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(4, [pid 5080] getdents64(4, [pid 5079] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] fstat(4, [pid 5078] close(4 [pid 5080] close(4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] rmdir("./132/file0" [pid 5080] rmdir("./133/file0" [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9554 attached [pid 5080] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] umount2("./132/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9554] set_robust_list(0x5555559d56e0, 24 [pid 5080] umount2("./133/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9554] <... set_robust_list resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(4 [pid 5078] lstat("./132/.log", [pid 9554] chdir("./134" [pid 5080] lstat("./133/.log", [pid 5079] <... close resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9554] <... chdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] rmdir("./133/file0" [pid 5078] unlink("./132/.log" [pid 9554] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] unlink("./133/.log" [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9554] <... prctl resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5079] getdents64(3, [pid 5078] getdents64(3, [pid 9554] setpgid(0, 0 [pid 5080] getdents64(3, [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9554] <... setpgid resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 5078] close(3 [pid 9554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] close(3 [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9554] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 5079] rmdir("./133" [pid 5078] rmdir("./132" [pid 9554] write(3, "1000", 4 [pid 5080] rmdir("./133" [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9554] <... write resumed>) = 4 [pid 5078] mkdir("./133", 0777 [pid 9554] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] mkdir("./134", 0777 [pid 5078] <... mkdir resumed>) = 0 [pid 9554] <... close resumed>) = 0 [pid 5080] mkdir("./134", 0777 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9554] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9554] <... symlink resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9554] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] <... openat resumed>) = 3 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9554] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] close(3 [pid 9554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9555 ./strace-static-x86_64: Process 9555 attached [pid 9555] set_robust_list(0x5555559d56e0, 24 [pid 9554] <... mmap resumed>) = 0x7ff2b3754000 [pid 9554] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 9554] <... mprotect resumed>) = 0 [pid 5080] close(3 [pid 5079] <... close resumed>) = 0 [pid 9555] <... set_robust_list resumed>) = 0 [pid 9554] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9555] chdir("./133" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9555] <... chdir resumed>) = 0 [pid 9554] <... clone resumed>, parent_tid=[9556], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9556 [pid 9555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9554] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9557 [pid 9555] setpgid(0, 0) = 0 [pid 9555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9555] write(3, "1000", 4) = 4 [pid 9555] close(3 [pid 9554] <... futex resumed>) = 0 [pid 9555] <... close resumed>) = 0 [pid 9554] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9558 ./strace-static-x86_64: Process 9558 attached ./strace-static-x86_64: Process 9557 attached ./strace-static-x86_64: Process 9556 attached [pid 9555] symlink("/dev/binderfs", "./binderfs" [pid 9558] set_robust_list(0x5555559d56e0, 24 [pid 9557] set_robust_list(0x5555559d56e0, 24 [pid 9556] set_robust_list(0x7ff2b37749e0, 24 [pid 9555] <... symlink resumed>) = 0 [pid 9558] <... set_robust_list resumed>) = 0 [pid 9557] <... set_robust_list resumed>) = 0 [pid 9556] <... set_robust_list resumed>) = 0 [pid 9555] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9558] chdir("./134" [pid 9557] chdir("./134" [pid 9556] memfd_create("syzkaller", 0 [pid 9555] <... futex resumed>) = 0 [pid 9558] <... chdir resumed>) = 0 [pid 9557] <... chdir resumed>) = 0 [pid 9556] <... memfd_create resumed>) = 3 [pid 9555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9555] <... mmap resumed>) = 0x7ff2b3754000 [pid 9558] <... prctl resumed>) = 0 [pid 9557] <... prctl resumed>) = 0 [pid 9556] <... mmap resumed>) = 0x7ff2ab354000 [pid 9555] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9558] setpgid(0, 0 [pid 9557] setpgid(0, 0 [pid 9555] <... mprotect resumed>) = 0 [pid 9558] <... setpgid resumed>) = 0 [pid 9557] <... setpgid resumed>) = 0 [pid 9555] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9558] <... openat resumed>) = 3 [pid 9557] <... openat resumed>) = 3 [pid 9555] <... clone resumed>, parent_tid=[9559], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9559 [pid 9558] write(3, "1000", 4 [pid 9557] write(3, "1000", 4 [pid 9555] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9559 attached [pid 9558] <... write resumed>) = 4 [pid 9557] <... write resumed>) = 4 [pid 9555] <... futex resumed>) = 0 [pid 9559] set_robust_list(0x7ff2b37749e0, 24 [pid 9558] close(3 [pid 9557] close(3 [pid 9555] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9559] <... set_robust_list resumed>) = 0 [pid 9558] <... close resumed>) = 0 [pid 9557] <... close resumed>) = 0 [pid 9559] memfd_create("syzkaller", 0 [pid 9558] symlink("/dev/binderfs", "./binderfs" [pid 9557] symlink("/dev/binderfs", "./binderfs" [pid 9559] <... memfd_create resumed>) = 3 [pid 9558] <... symlink resumed>) = 0 [pid 9557] <... symlink resumed>) = 0 [pid 9559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9558] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9557] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9559] <... mmap resumed>) = 0x7ff2ab354000 [pid 9558] <... futex resumed>) = 0 [pid 9557] <... futex resumed>) = 0 [pid 9558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9558] <... mmap resumed>) = 0x7ff2b3754000 [pid 9557] <... mmap resumed>) = 0x7ff2b3754000 [pid 9558] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9557] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9558] <... mprotect resumed>) = 0 [pid 9557] <... mprotect resumed>) = 0 [pid 9558] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9557] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9558] <... clone resumed>, parent_tid=[9560], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9560 [pid 9558] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9557] <... clone resumed>, parent_tid=[9561], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9561 [pid 9558] <... futex resumed>) = 0 [pid 9558] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9560 attached [pid 9560] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9557] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9561 attached ) = 0 [pid 9561] set_robust_list(0x7ff2b37749e0, 24 [pid 9560] memfd_create("syzkaller", 0 [pid 9557] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9561] <... set_robust_list resumed>) = 0 [pid 9560] <... memfd_create resumed>) = 3 [pid 9561] memfd_create("syzkaller", 0 [pid 9560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9561] <... memfd_create resumed>) = 3 [pid 9560] <... mmap resumed>) = 0x7ff2ab354000 [pid 9561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9551] <... write resumed>) = 16777216 [pid 9551] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9551] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9551] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9551] close(3) = 0 [pid 9551] mkdir("./file0", 0777) = 0 [pid 9551] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9553] <... write resumed>) = 16777216 [pid 9553] munmap(0x7ff2ab354000, 16777216) = 0 [ 283.117138][ T9551] loop4: detected capacity change from 0 to 32768 [ 283.137085][ T9551] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (9551) [pid 9553] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9553] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9553] close(3) = 0 [pid 9553] mkdir("./file0", 0777) = 0 [ 283.181792][ T9551] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 283.196809][ T9553] loop3: detected capacity change from 0 to 32768 [ 283.205737][ T9551] BTRFS info (device loop4): setting nodatasum [ 283.214444][ T9551] BTRFS info (device loop4): allowing degraded mounts [pid 9553] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 283.224887][ T9553] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9553) [ 283.249393][ T9551] BTRFS info (device loop4): use zlib compression, level 3 [pid 9553] ioctl(4, LOOP_CLR_FD [pid 9556] <... write resumed>) = 16777216 [pid 9556] munmap(0x7ff2ab354000, 16777216) = 0 [ 283.275455][ T9551] BTRFS info (device loop4): using free space tree [pid 9556] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9556] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9556] close(3) = 0 [pid 9560] <... write resumed>) = 16777216 [pid 9556] mkdir("./file0", 0777 [pid 9560] munmap(0x7ff2ab354000, 16777216 [pid 9556] <... mkdir resumed>) = 0 [pid 9556] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9560] <... munmap resumed>) = 0 [pid 9560] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9560] ioctl(4, LOOP_SET_FD, 3 [pid 9561] <... write resumed>) = 16777216 [pid 9561] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9561] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 283.351177][ T9556] loop5: detected capacity change from 0 to 32768 [ 283.379388][ T9556] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9556) [ 283.392585][ T9560] loop2: detected capacity change from 0 to 32768 [pid 9561] ioctl(4, LOOP_SET_FD, 3 [pid 9560] <... ioctl resumed>) = 0 [pid 9560] close(3) = 0 [pid 9556] <... mount resumed>) = -1 EEXIST (File exists) [pid 9560] mkdir("./file0", 0777 [pid 9556] ioctl(4, LOOP_CLR_FD [pid 9560] <... mkdir resumed>) = 0 [pid 9559] <... write resumed>) = 16777216 [pid 9559] munmap(0x7ff2ab354000, 16777216 [pid 9560] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9559] <... munmap resumed>) = 0 [pid 9559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9559] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9559] close(3) = 0 [pid 9559] mkdir("./file0", 0777) = 0 [pid 9559] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9561] <... ioctl resumed>) = 0 [pid 9561] close(3) = 0 [pid 9561] mkdir("./file0", 0777) = 0 [ 283.397350][ T9561] loop1: detected capacity change from 0 to 32768 [ 283.413924][ T9559] loop0: detected capacity change from 0 to 32768 [ 283.414470][ T9560] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9560) [pid 9561] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9560] <... mount resumed>) = -1 EEXIST (File exists) [pid 9559] <... mount resumed>) = -1 EEXIST (File exists) [pid 9553] <... ioctl resumed>) = 0 [pid 9560] ioctl(4, LOOP_CLR_FD [pid 9553] close(4) = 0 [pid 9553] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9552] <... futex resumed>) = 0 [pid 9553] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9552] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9553] <... openat resumed>) = 3 [pid 9552] <... futex resumed>) = 0 [pid 9553] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9552] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9553] <... futex resumed>) = 0 [pid 9552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9553] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9552] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9553] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9552] <... futex resumed>) = 0 [pid 9553] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9552] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9553] <... futex resumed>) = 0 [pid 9552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9553] openat(AT_FDCWD, ".log", O_RDONLY [ 283.443869][ T9559] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9559) [ 283.459452][ T9561] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9561) [ 283.473674][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 283.473686][ T27] audit: type=1804 audit(1680236966.952:805): pid=9553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/134/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 9552] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9561] <... mount resumed>) = -1 EEXIST (File exists) [pid 9553] <... openat resumed>) = 4 [pid 9552] <... futex resumed>) = 0 [pid 9553] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9552] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9553] <... futex resumed>) = 0 [pid 9552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9553] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9552] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9553] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9552] <... futex resumed>) = 0 [pid 9553] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9552] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9553] <... futex resumed>) = 0 [pid 9552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9553] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9552] exit_group(0 [pid 9553] <... futex resumed>) = ? [pid 9552] <... exit_group resumed>) = ? [pid 9553] +++ exited with 0 +++ [pid 9552] +++ exited with 0 +++ [pid 9561] ioctl(4, LOOP_CLR_FD [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9552, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5081] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9559] ioctl(4, LOOP_CLR_FD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./134/binderfs") = 0 [pid 5081] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./134/file0") = 0 [pid 5081] umount2("./134/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./134/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./134/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./134") = 0 [ 283.480940][ T9551] BTRFS info (device loop4): enabling ssd optimizations [pid 5081] mkdir("./135", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9578 attached [pid 9578] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9578] chdir("./135") = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9578 [pid 9578] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9578] setpgid(0, 0) = 0 [pid 9578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9578] write(3, "1000", 4 [pid 9556] <... ioctl resumed>) = 0 [pid 9578] <... write resumed>) = 4 [pid 9556] close(4 [pid 9578] close(3 [pid 9556] <... close resumed>) = 0 [pid 9578] <... close resumed>) = 0 [pid 9556] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9578] symlink("/dev/binderfs", "./binderfs" [pid 9556] <... futex resumed>) = 1 [pid 9554] <... futex resumed>) = 0 [pid 9578] <... symlink resumed>) = 0 [pid 9556] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9554] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9578] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9554] <... futex resumed>) = 0 [pid 9578] <... futex resumed>) = 0 [pid 9556] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9554] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9551] <... mount resumed>) = 0 [pid 9578] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9556] <... openat resumed>) = 3 [pid 9551] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9578] <... mmap resumed>) = 0x7ff2b3754000 [pid 9556] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9551] <... openat resumed>) = 3 [pid 9578] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9556] <... futex resumed>) = 1 [pid 9554] <... futex resumed>) = 0 [pid 9551] chdir("./file0" [pid 9578] <... mprotect resumed>) = 0 [pid 9556] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9554] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9551] <... chdir resumed>) = 0 [pid 9578] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9554] <... futex resumed>) = 0 [ 283.603382][ T9551] BTRFS info (device loop4): auto enabling async discard [ 283.612505][ T9551] BTRFS info (device loop4): checking UUID tree [pid 9551] ioctl(4, LOOP_CLR_FD [pid 9556] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9554] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9551] <... ioctl resumed>) = 0 [pid 9578] <... clone resumed>, parent_tid=[9580], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9580 [pid 9556] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9551] close(4./strace-static-x86_64: Process 9580 attached [pid 9578] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9556] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9551] <... close resumed>) = 0 [pid 9580] set_robust_list(0x7ff2b37749e0, 24 [pid 9578] <... futex resumed>) = 0 [pid 9556] <... futex resumed>) = 1 [pid 9554] <... futex resumed>) = 0 [pid 9551] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9580] <... set_robust_list resumed>) = 0 [pid 9578] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9556] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9554] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9551] <... futex resumed>) = 1 [pid 9548] <... futex resumed>) = 0 [pid 9580] memfd_create("syzkaller", 0 [pid 9556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9554] <... futex resumed>) = 0 [pid 9551] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9548] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9580] <... memfd_create resumed>) = 3 [pid 9556] openat(AT_FDCWD, ".log", O_RDONLY [pid 9554] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9551] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9548] <... futex resumed>) = 0 [pid 9580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9556] <... openat resumed>) = 4 [pid 9551] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9548] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9556] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9580] <... mmap resumed>) = 0x7ff2ab354000 [pid 9559] <... ioctl resumed>) = 0 [pid 9556] <... futex resumed>) = 1 [pid 9554] <... futex resumed>) = 0 [pid 9551] <... openat resumed>) = 4 [pid 9559] close(4 [pid 9556] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9554] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9551] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9559] <... close resumed>) = 0 [pid 9556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9554] <... futex resumed>) = 0 [pid 9551] <... futex resumed>) = 1 [pid 9548] <... futex resumed>) = 0 [pid 9559] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9556] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9554] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9551] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9548] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9559] <... futex resumed>) = 1 [pid 9556] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9555] <... futex resumed>) = 0 [pid 9551] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9548] <... futex resumed>) = 0 [pid 9559] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9556] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9555] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9551] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9548] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9556] <... futex resumed>) = 1 [pid 9555] <... futex resumed>) = 0 [pid 9554] <... futex resumed>) = 0 [pid 9555] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 283.684918][ T27] audit: type=1804 audit(1680236967.152:806): pid=9556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/134/.log" dev="sda1" ino=1157 res=1 errno=0 [pid 9559] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9556] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9554] exit_group(0 [pid 9559] <... openat resumed>) = 3 [pid 9556] <... futex resumed>) = ? [pid 9554] <... exit_group resumed>) = ? [pid 9556] +++ exited with 0 +++ [pid 9554] +++ exited with 0 +++ [pid 9559] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9555] <... futex resumed>) = 0 [pid 9559] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9555] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9554, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 9559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9555] <... futex resumed>) = 0 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 9559] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9555] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... restart_syscall resumed>) = 0 [pid 9559] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9559] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9555] <... futex resumed>) = 0 [pid 5084] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9559] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9555] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9555] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9559] openat(AT_FDCWD, ".log", O_RDONLY [pid 9555] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9548] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... openat resumed>) = 3 [ 283.746119][ T9551] BTRFS info (device loop4): balance: start -s [ 283.754451][ T9551] BTRFS info (device loop4): relocating block group 1048576 flags system [pid 9559] <... openat resumed>) = 4 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./134/binderfs") = 0 [pid 5084] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9559] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9548] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9559] <... futex resumed>) = 1 [pid 9555] <... futex resumed>) = 0 [pid 9548] <... futex resumed>) = 0 [pid 5084] lstat("./134/file0", [pid 9559] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9555] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9555] <... futex resumed>) = 0 [pid 9548] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9559] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9555] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9548] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9560] <... ioctl resumed>) = 0 [pid 9559] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9548] <... mprotect resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9559] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9548] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... openat resumed>) = 4 [pid 9559] <... futex resumed>) = 1 [pid 9555] <... futex resumed>) = 0 [pid 5084] fstat(4, [pid 9559] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9555] exit_group(0 [pid 9548] <... clone resumed>, parent_tid=[9581], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9581 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9559] <... futex resumed>) = ? [pid 9555] <... exit_group resumed>) = ? [pid 9548] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, [pid 9559] +++ exited with 0 +++ [pid 9555] +++ exited with 0 +++ [pid 9548] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 9581 attached [pid 9548] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(4, [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9555, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=25 /* 0.25 s */} --- [pid 9560] close(4 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 9581] set_robust_list(0x7ff2ac3539e0, 24 [pid 5084] close(4 [pid 5078] <... restart_syscall resumed>) = 0 [ 283.792112][ T27] audit: type=1804 audit(1680236967.262:807): pid=9559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/133/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 9581] <... set_robust_list resumed>) = 0 [pid 9560] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 9581] openat(AT_FDCWD, ".log", O_RDONLY [pid 9560] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] rmdir("./134/file0" [pid 9581] <... openat resumed>) = 5 [pid 9560] <... futex resumed>) = 1 [pid 9558] <... futex resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5078] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9581] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9560] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9558] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./134/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9581] <... futex resumed>) = 1 [pid 9560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9558] <... futex resumed>) = 0 [pid 9548] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9581] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9560] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9558] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9548] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./134/.log", [pid 5078] <... openat resumed>) = 3 [pid 9581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9548] <... futex resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] fstat(3, [pid 9581] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9548] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] unlink("./134/.log" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9560] <... openat resumed>) = 3 [pid 5084] <... unlink resumed>) = 0 [pid 5078] getdents64(3, [pid 9560] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9560] <... futex resumed>) = 1 [pid 9558] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9560] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9558] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9558] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5078] lstat("./133/binderfs", [pid 9560] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9558] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] rmdir("./134" [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9560] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... rmdir resumed>) = 0 [pid 5078] unlink("./133/binderfs" [pid 9560] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [ 283.863227][ T9551] BTRFS info (device loop4): balance: ended with status: 0 [ 283.867483][ T9581] BTRFS info (device loop4): scrub: started on devid 1 [pid 5084] mkdir("./135", 0777 [pid 5078] <... unlink resumed>) = 0 [pid 9560] <... futex resumed>) = 1 [pid 9558] <... futex resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5078] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9560] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9558] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9561] <... ioctl resumed>) = 0 [pid 9560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9558] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5078] lstat("./133/file0", [pid 9561] close(4 [pid 9560] openat(AT_FDCWD, ".log", O_RDONLY [pid 9558] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9561] <... close resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... openat resumed>) = 4 [pid 5078] fstat(4, [pid 9560] <... openat resumed>) = 4 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9583 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9561] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9560] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9548] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] getdents64(4, [pid 9561] <... futex resumed>) = 1 [pid 9560] <... futex resumed>) = 1 [pid 9558] <... futex resumed>) = 0 [pid 9557] <... futex resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 9583 attached [pid 9561] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9560] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9558] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9557] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9551] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5078] getdents64(4, [pid 9583] set_robust_list(0x5555559d56e0, 24 [pid 9561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9560] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9558] <... futex resumed>) = 0 [pid 9557] <... futex resumed>) = 0 [pid 9551] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9583] <... set_robust_list resumed>) = 0 [pid 9561] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9560] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9558] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9557] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9551] <... futex resumed>) = 0 [pid 5078] close(4 [pid 9583] chdir("./135" [pid 9561] <... openat resumed>) = 3 [pid 9560] <... futex resumed>) = 0 [pid 9558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9551] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] <... close resumed>) = 0 [pid 9583] <... chdir resumed>) = 0 [pid 9561] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9560] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9558] exit_group(0 [pid 5078] rmdir("./133/file0" [pid 9583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9561] <... futex resumed>) = 1 [pid 9560] <... futex resumed>) = ? [pid 9558] <... exit_group resumed>) = ? [pid 9557] <... futex resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9583] <... prctl resumed>) = 0 [pid 9561] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9560] +++ exited with 0 +++ [pid 9558] +++ exited with 0 +++ [pid 9557] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./133/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9583] setpgid(0, 0 [pid 9561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9557] <... futex resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9558, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9583] <... setpgid resumed>) = 0 [pid 9561] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9557] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] lstat("./133/.log", [pid 9583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9561] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9583] <... openat resumed>) = 3 [pid 9561] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./133/.log" [pid 9583] write(3, "1000", 4 [pid 9561] <... futex resumed>) = 1 [pid 9557] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9583] <... write resumed>) = 4 [pid 9581] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9561] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9557] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, [pid 9583] close(3 [pid 9581] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9557] <... futex resumed>) = 0 [pid 5080] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9583] <... close resumed>) = 0 [pid 9581] <... futex resumed>) = 0 [pid 9561] openat(AT_FDCWD, ".log", O_RDONLY [pid 9557] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(3 [pid 9583] symlink("/dev/binderfs", "./binderfs" [pid 9581] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9561] <... openat resumed>) = 4 [pid 9548] exit_group(0 [pid 5080] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 9583] <... symlink resumed>) = 0 [pid 9581] <... futex resumed>) = ? [pid 9561] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9551] <... futex resumed>) = ? [pid 9548] <... exit_group resumed>) = ? [pid 5080] <... openat resumed>) = 3 [ 283.891883][ T27] audit: type=1804 audit(1680236967.322:808): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/134/file0/.log" dev="loop4" ino=263 res=1 errno=0 [ 283.932299][ T9581] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [pid 5078] rmdir("./133" [pid 9583] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9581] +++ exited with 0 +++ [pid 9561] <... futex resumed>) = 1 [pid 9557] <... futex resumed>) = 0 [pid 9551] +++ exited with 0 +++ [pid 9548] +++ exited with 0 +++ [pid 5080] fstat(3, [pid 5078] <... rmdir resumed>) = 0 [pid 9583] <... futex resumed>) = 0 [pid 9561] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9557] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9548, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=35 /* 0.35 s */} --- [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] mkdir("./134", 0777 [pid 9583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9557] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 5078] <... mkdir resumed>) = 0 [pid 9583] <... mmap resumed>) = 0x7ff2b3754000 [pid 9561] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9557] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9583] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9561] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 9583] <... mprotect resumed>) = 0 [pid 9561] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9583] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9561] <... futex resumed>) = 1 [pid 9557] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] lstat("./134/binderfs", [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9561] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9557] exit_group(0 [pid 5083] <... openat resumed>) = 3 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] close(3 [pid 9583] <... clone resumed>, parent_tid=[9584], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9584 [pid 9561] <... futex resumed>) = ? [pid 9557] <... exit_group resumed>) = ? [pid 5083] fstat(3, [pid 5080] unlink("./134/binderfs" [pid 5078] <... close resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] getdents64(3, [pid 5080] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9583] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9561] +++ exited with 0 +++ [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9585 ./strace-static-x86_64: Process 9584 attached [pid 9583] <... futex resumed>) = 0 [pid 9580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9557] +++ exited with 0 +++ [pid 5083] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./134/file0", [pid 9584] set_robust_list(0x7ff2b37749e0, 24 [pid 9583] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9557, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- ./strace-static-x86_64: Process 9585 attached [pid 9584] <... set_robust_list resumed>) = 0 [pid 5083] lstat("./134/binderfs", [pid 5080] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 9585] set_robust_list(0x5555559d56e0, 24 [pid 9584] memfd_create("syzkaller", 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... restart_syscall resumed>) = 0 [pid 9585] <... set_robust_list resumed>) = 0 [pid 9584] <... memfd_create resumed>) = 3 [pid 5083] unlink("./134/binderfs" [pid 5080] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9585] chdir("./134" [pid 9584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] <... unlink resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 9585] <... chdir resumed>) = 0 [pid 9584] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(4, [pid 5079] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9585] <... prctl resumed>) = 0 [pid 5080] getdents64(4, [pid 5079] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9585] setpgid(0, 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... openat resumed>) = 3 [pid 9585] <... setpgid resumed>) = 0 [pid 5080] getdents64(4, [pid 5079] fstat(3, [pid 9585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9585] <... openat resumed>) = 3 [pid 5080] close(4 [pid 5079] getdents64(3, [pid 9585] write(3, "1000", 4 [pid 5080] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9585] <... write resumed>) = 4 [pid 5080] rmdir("./134/file0" [pid 5079] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9585] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9585] <... close resumed>) = 0 [pid 5080] umount2("./134/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./134/binderfs", [pid 9585] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9585] <... symlink resumed>) = 0 [pid 5080] lstat("./134/.log", [pid 5079] unlink("./134/binderfs" [pid 9585] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... unlink resumed>) = 0 [ 284.017156][ T27] audit: type=1804 audit(1680236967.402:809): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/134/.log" dev="sda1" ino=1151 res=1 errno=0 [pid 9585] <... futex resumed>) = 0 [pid 5080] unlink("./134/.log" [pid 5079] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... unlink resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9585] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] getdents64(3, [pid 5079] lstat("./134/file0", [pid 9585] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9585] <... mprotect resumed>) = 0 [pid 5080] close(3 [pid 5079] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9585] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9586 attached [pid 5080] rmdir("./134" [pid 5079] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9586] set_robust_list(0x7ff2b37749e0, 24 [pid 9585] <... clone resumed>, parent_tid=[9586], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9586 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 9585] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./135", 0777 [pid 5079] fstat(4, [pid 9586] <... set_robust_list resumed>) = 0 [pid 9585] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9586] memfd_create("syzkaller", 0 [pid 9585] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] getdents64(4, [pid 9586] <... memfd_create resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] getdents64(4, [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 5079] close(4 [pid 5080] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] rmdir("./134/file0") = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9587 [pid 5079] umount2("./134/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./134/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./134/.log") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 ./strace-static-x86_64: Process 9587 attached [pid 5079] rmdir("./134" [pid 9587] set_robust_list(0x5555559d56e0, 24 [pid 5079] <... rmdir resumed>) = 0 [pid 9587] <... set_robust_list resumed>) = 0 [pid 5079] mkdir("./135", 0777 [pid 9587] chdir("./135" [pid 5079] <... mkdir resumed>) = 0 [pid 9587] <... chdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9587] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... openat resumed>) = 3 [pid 9587] <... prctl resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9587] setpgid(0, 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9587] <... setpgid resumed>) = 0 [pid 5079] close(3 [pid 9587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... close resumed>) = 0 [pid 9587] <... openat resumed>) = 3 [pid 9586] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9587] write(3, "1000", 4) = 4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9588 [pid 9587] close(3) = 0 [pid 9587] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 9588 attached ) = 0 [pid 9588] set_robust_list(0x5555559d56e0, 24 [pid 9587] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9588] <... set_robust_list resumed>) = 0 [pid 9587] <... futex resumed>) = 0 [pid 9588] chdir("./135" [pid 9587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9588] <... chdir resumed>) = 0 [pid 9587] <... mmap resumed>) = 0x7ff2b3754000 [pid 9588] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9587] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9588] <... prctl resumed>) = 0 [pid 9587] <... mprotect resumed>) = 0 [pid 9588] setpgid(0, 0 [pid 9587] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9588] <... setpgid resumed>) = 0 [pid 9588] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9587] <... clone resumed>, parent_tid=[9589], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9589 [pid 9588] <... openat resumed>) = 3 [pid 9587] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9588] write(3, "1000", 4 [pid 9587] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9589 attached [pid 9588] <... write resumed>) = 4 [pid 9587] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9589] set_robust_list(0x7ff2b37749e0, 24 [pid 9588] close(3 [pid 9589] <... set_robust_list resumed>) = 0 [pid 9588] <... close resumed>) = 0 [pid 9589] memfd_create("syzkaller", 0 [pid 9588] symlink("/dev/binderfs", "./binderfs" [pid 9589] <... memfd_create resumed>) = 3 [pid 9588] <... symlink resumed>) = 0 [pid 9589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 284.131174][ T27] audit: type=1804 audit(1680236967.462:810): pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/134/.log" dev="sda1" ino=1152 res=1 errno=0 [pid 9588] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9589] <... mmap resumed>) = 0x7ff2ab354000 [pid 9588] <... futex resumed>) = 0 [pid 9588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 5083] <... umount2 resumed>) = 0 [pid 9588] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9588] <... mprotect resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9588] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] lstat("./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9588] <... clone resumed>, parent_tid=[9590], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9590 [pid 5083] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9588] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9588] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 9590 attached [pid 9588] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 4 [pid 9590] set_robust_list(0x7ff2b37749e0, 24 [pid 5083] fstat(4, [pid 9590] <... set_robust_list resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9590] memfd_create("syzkaller", 0 [pid 5083] getdents64(4, [pid 9590] <... memfd_create resumed>) = 3 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] getdents64(4, [pid 9590] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./134/file0") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./134") = 0 [pid 5083] mkdir("./135", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9591 ./strace-static-x86_64: Process 9591 attached [pid 9591] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9591] chdir("./135") = 0 [pid 9591] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9591] setpgid(0, 0) = 0 [pid 9591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9591] write(3, "1000", 4) = 4 [pid 9591] close(3) = 0 [pid 9591] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9591] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9591] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9591] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9592], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9592 [pid 9591] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9591] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9592 attached [pid 9592] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9592] memfd_create("syzkaller", 0) = 3 [pid 9592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9580] <... write resumed>) = 16777216 [pid 9580] munmap(0x7ff2ab354000, 16777216 [pid 9590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9580] <... munmap resumed>) = 0 [pid 9589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9580] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9580] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9580] close(3) = 0 [pid 9580] mkdir("./file0", 0777) = 0 [ 284.618578][ T9580] loop3: detected capacity change from 0 to 32768 [ 284.659230][ T9580] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor373 (9580) [pid 9580] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 284.704703][ T9580] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 284.745066][ T9580] BTRFS info (device loop3): setting nodatasum [ 284.780058][ T9580] BTRFS info (device loop3): allowing degraded mounts [ 284.797155][ T9580] BTRFS info (device loop3): use zlib compression, level 3 [ 284.804381][ T9580] BTRFS info (device loop3): using free space tree [pid 9592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9584] <... write resumed>) = 16777216 [pid 9584] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9584] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9590] <... write resumed>) = 16777216 [pid 9584] ioctl(4, LOOP_SET_FD, 3 [pid 9590] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9590] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9584] <... ioctl resumed>) = 0 [pid 9590] ioctl(4, LOOP_SET_FD, 3 [pid 9584] close(3) = 0 [pid 9584] mkdir("./file0", 0777) = 0 [pid 9584] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9586] <... write resumed>) = 16777216 [pid 9590] <... ioctl resumed>) = 0 [pid 9590] close(3) = 0 [pid 9590] mkdir("./file0", 0777) = 0 [ 285.011703][ T9584] loop5: detected capacity change from 0 to 32768 [ 285.020420][ T9590] loop1: detected capacity change from 0 to 32768 [ 285.045429][ T9580] BTRFS info (device loop3): enabling ssd optimizations [ 285.052401][ T9580] BTRFS info (device loop3): auto enabling async discard [pid 9590] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9589] <... write resumed>) = 16777216 [pid 9586] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9589] munmap(0x7ff2ab354000, 16777216 [pid 9586] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9589] <... munmap resumed>) = 0 [pid 9589] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9586] <... openat resumed>) = 4 [pid 9589] <... openat resumed>) = 4 [pid 9586] ioctl(4, LOOP_SET_FD, 3 [pid 9589] ioctl(4, LOOP_SET_FD, 3 [pid 9586] <... ioctl resumed>) = 0 [pid 9586] close(3) = 0 [pid 9586] mkdir("./file0", 0777 [pid 9589] <... ioctl resumed>) = 0 [pid 9589] close(3) = 0 [pid 9589] mkdir("./file0", 0777) = 0 [pid 9589] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9586] <... mkdir resumed>) = 0 [pid 9586] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 285.056622][ T9590] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9590) [ 285.071171][ T9580] BTRFS info (device loop3): checking UUID tree [ 285.083594][ T9586] loop0: detected capacity change from 0 to 32768 [ 285.091555][ T9589] loop2: detected capacity change from 0 to 32768 [pid 9590] <... mount resumed>) = -1 EEXIST (File exists) [pid 9592] <... write resumed>) = 16777216 [pid 9580] <... mount resumed>) = 0 [pid 9580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9580] chdir("./file0") = 0 [pid 9580] ioctl(4, LOOP_CLR_FD) = 0 [pid 9580] close(4) = 0 [pid 9580] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9578] <... futex resumed>) = 0 [pid 9580] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9578] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9578] <... futex resumed>) = 0 [pid 9580] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9578] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9580] <... openat resumed>) = 4 [pid 9580] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9578] <... futex resumed>) = 0 [pid 9580] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9578] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9578] <... futex resumed>) = 0 [pid 9580] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9578] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9592] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9592] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9592] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9592] close(3) = 0 [pid 9592] mkdir("./file0", 0777) = 0 [pid 9592] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9584] <... mount resumed>) = -1 EEXIST (File exists) [pid 9590] ioctl(4, LOOP_CLR_FD [pid 9584] ioctl(4, LOOP_CLR_FD [pid 9589] <... mount resumed>) = -1 EEXIST (File exists) [ 285.111275][ T9584] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9584) [ 285.126149][ T9592] loop4: detected capacity change from 0 to 32768 [ 285.142100][ T9580] BTRFS info (device loop3): balance: start -s [ 285.148438][ T9589] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9589) [pid 9589] ioctl(4, LOOP_CLR_FD [pid 9578] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9578] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9578] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 9578] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9586] <... mount resumed>) = -1 EEXIST (File exists) [pid 9578] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9610], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9610 [pid 9578] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 285.154424][ T9580] BTRFS info (device loop3): relocating block group 1048576 flags system [ 285.168032][ T9586] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9586) [ 285.179974][ T9592] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9592) [pid 9578] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9610 attached [pid 9592] <... mount resumed>) = -1 EEXIST (File exists) [pid 9586] ioctl(4, LOOP_CLR_FD [pid 9580] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9610] set_robust_list(0x7ff2ac3539e0, 24 [pid 9592] ioctl(4, LOOP_CLR_FD [pid 9610] <... set_robust_list resumed>) = 0 [pid 9580] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9610] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 9580] <... futex resumed>) = 0 [pid 9578] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9610] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9580] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9610] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9578] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9580] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9578] <... futex resumed>) = 0 [ 285.209131][ T9580] BTRFS info (device loop3): balance: ended with status: 0 [ 285.224528][ T27] audit: type=1804 audit(1680236968.692:811): pid=9610 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/135/file0/.log" dev="loop3" ino=263 res=1 errno=0 [ 285.255158][ T9580] BTRFS info (device loop3): scrub: started on devid 1 [pid 9578] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 9580] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9580] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 285.287001][ T9580] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [pid 9580] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9578] exit_group(0 [pid 9610] <... futex resumed>) = ? [pid 9580] <... futex resumed>) = ? [pid 9578] <... exit_group resumed>) = ? [pid 9580] +++ exited with 0 +++ [pid 9610] +++ exited with 0 +++ [pid 9578] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9578, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5081] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./135/binderfs") = 0 [pid 5081] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9590] <... ioctl resumed>) = 0 [pid 9590] close(4 [pid 9584] <... ioctl resumed>) = 0 [pid 9590] <... close resumed>) = 0 [pid 9584] close(4 [pid 9590] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9584] <... close resumed>) = 0 [pid 9590] <... futex resumed>) = 1 [pid 9588] <... futex resumed>) = 0 [pid 9590] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9588] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9590] <... openat resumed>) = 3 [pid 9588] <... futex resumed>) = 0 [pid 9584] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9590] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9588] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9590] <... futex resumed>) = 0 [pid 9588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9584] <... futex resumed>) = 1 [pid 9583] <... futex resumed>) = 0 [pid 9590] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9588] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9590] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9588] <... futex resumed>) = 0 [pid 9584] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9583] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9590] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9588] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9583] <... futex resumed>) = 0 [pid 9590] <... futex resumed>) = 0 [pid 9588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9584] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9583] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9590] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9588] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9588] <... futex resumed>) = 0 [pid 9584] <... openat resumed>) = 3 [pid 9590] openat(AT_FDCWD, ".log", O_RDONLY [pid 9588] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9590] <... openat resumed>) = 4 [pid 9584] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9590] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9584] <... futex resumed>) = 1 [pid 9583] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 9590] <... futex resumed>) = 1 [pid 9588] <... futex resumed>) = 0 [pid 9584] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9583] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9590] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9588] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9583] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9588] <... futex resumed>) = 0 [pid 9583] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9584] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5081] lstat("./135/file0", [pid 9590] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9588] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9584] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9590] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9584] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9590] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9584] <... futex resumed>) = 1 [pid 9583] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9590] <... futex resumed>) = 1 [pid 9588] <... futex resumed>) = 0 [pid 9584] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9583] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9590] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9588] exit_group(0 [pid 9584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9583] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 9590] <... futex resumed>) = ? [pid 9588] <... exit_group resumed>) = ? [pid 9584] openat(AT_FDCWD, ".log", O_RDONLY [pid 9583] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(4, [pid 9590] +++ exited with 0 +++ [pid 9588] +++ exited with 0 +++ [pid 9584] <... openat resumed>) = 4 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9584] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 9584] <... futex resumed>) = 1 [pid 9583] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9588, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 9589] <... ioctl resumed>) = 0 [pid 9584] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9583] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5079] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9589] close(4 [pid 9584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9583] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9589] <... close resumed>) = 0 [pid 9584] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9583] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(4 [pid 5079] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9589] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] <... ioctl resumed>) = 0 [pid 9584] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... close resumed>) = 0 [pid 9589] <... futex resumed>) = 1 [pid 9587] <... futex resumed>) = 0 [pid 9586] close(4 [pid 9584] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./135/file0" [pid 5079] <... openat resumed>) = 3 [ 285.559005][ T27] audit: type=1804 audit(1680236969.032:812): pid=9590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/135/.log" dev="sda1" ino=1155 res=1 errno=0 [pid 9589] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9587] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] <... close resumed>) = 0 [pid 9584] <... futex resumed>) = 1 [pid 9583] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5079] fstat(3, [pid 9589] <... openat resumed>) = 3 [pid 9587] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 9589] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9587] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9589] <... futex resumed>) = 0 [pid 9587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] close(3 [pid 9589] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9587] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 9589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9587] <... futex resumed>) = 0 [pid 5081] rmdir("./135" [pid 9589] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9587] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9584] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9583] exit_group(0 [pid 5081] <... rmdir resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9589] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9584] <... futex resumed>) = ? [pid 9583] <... exit_group resumed>) = ? [pid 5081] mkdir("./136", 0777 [pid 5079] getdents64(3, [pid 9589] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9584] +++ exited with 0 +++ [pid 5081] <... mkdir resumed>) = 0 [pid 9589] <... futex resumed>) = 1 [pid 9587] <... futex resumed>) = 0 [pid 9583] +++ exited with 0 +++ [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9589] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9587] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5079] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9587] <... futex resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9583, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=24 /* 0.24 s */} --- [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9589] openat(AT_FDCWD, ".log", O_RDONLY [pid 9587] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5081] <... ioctl resumed>) = 0 [pid 9586] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./135/binderfs", [pid 9589] <... openat resumed>) = 4 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5081] close(3 [pid 9589] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] <... futex resumed>) = 1 [pid 9585] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9592] <... ioctl resumed>) = 0 [pid 9589] <... futex resumed>) = 1 [pid 9587] <... futex resumed>) = 0 [pid 9586] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9585] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9592] close(4 [pid 9589] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9587] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] <... openat resumed>) = 3 [pid 9585] <... futex resumed>) = 0 [pid 5084] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./135/binderfs" [pid 9592] <... close resumed>) = 0 [pid 9589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9587] <... futex resumed>) = 0 [pid 9586] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9585] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9612 [pid 9592] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9589] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9587] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9586] <... futex resumed>) = 0 [pid 9585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... unlink resumed>) = 0 [pid 9592] <... futex resumed>) = 1 [pid 9591] <... futex resumed>) = 0 [pid 9589] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9586] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9585] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5079] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9592] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9591] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9589] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9585] <... futex resumed>) = 0 [pid 5084] fstat(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9612 attached [pid 9591] <... futex resumed>) = 0 [pid 9589] <... futex resumed>) = 1 [pid 9587] <... futex resumed>) = 0 [pid 9586] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9585] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] lstat("./135/file0", [pid 9612] set_robust_list(0x5555559d56e0, 24 [pid 9592] <... openat resumed>) = 3 [pid 9591] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9589] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9587] exit_group(0 [pid 9586] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] getdents64(3, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9612] <... set_robust_list resumed>) = 0 [pid 9592] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9589] <... futex resumed>) = ? [pid 9587] <... exit_group resumed>) = ? [pid 9586] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9612] chdir("./136" [pid 9592] <... futex resumed>) = 1 [pid 9591] <... futex resumed>) = 0 [pid 9589] +++ exited with 0 +++ [pid 9587] +++ exited with 0 +++ [pid 9586] <... futex resumed>) = 1 [pid 9585] <... futex resumed>) = 0 [pid 5084] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9612] <... chdir resumed>) = 0 [pid 9592] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9591] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9585] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9587, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5079] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9591] <... futex resumed>) = 0 [pid 9586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9585] <... futex resumed>) = 0 [pid 5084] lstat("./135/binderfs", [pid 5079] <... openat resumed>) = 4 [pid 9612] <... prctl resumed>) = 0 [pid 9592] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9591] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9586] openat(AT_FDCWD, ".log", O_RDONLY [pid 9585] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] fstat(4, [pid 9612] setpgid(0, 0 [pid 9592] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9586] <... openat resumed>) = 4 [pid 5084] unlink("./135/binderfs" [pid 9612] <... setpgid resumed>) = 0 [pid 9592] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9592] <... futex resumed>) = 1 [pid 9591] <... futex resumed>) = 0 [pid 9586] <... futex resumed>) = 1 [pid 9585] <... futex resumed>) = 0 [pid 5084] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] getdents64(4, [pid 9612] <... openat resumed>) = 3 [pid 9592] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9591] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9585] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9612] write(3, "1000", 4 [pid 9592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9591] <... futex resumed>) = 0 [pid 9586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9585] <... futex resumed>) = 0 [pid 5084] lstat("./135/file0", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 9612] <... write resumed>) = 4 [pid 9592] openat(AT_FDCWD, ".log", O_RDONLY [pid 9591] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9586] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9585] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9612] close(3 [pid 9592] <... openat resumed>) = 4 [pid 9586] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [ 285.623920][ T27] audit: type=1804 audit(1680236969.072:813): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/135/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5084] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 5079] close(4 [pid 9612] <... close resumed>) = 0 [pid 9592] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] fstat(3, [pid 5079] <... close resumed>) = 0 [pid 9592] <... futex resumed>) = 1 [pid 9591] <... futex resumed>) = 0 [pid 9586] <... futex resumed>) = 1 [pid 9585] <... futex resumed>) = 0 [pid 5079] rmdir("./135/file0" [pid 9592] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9591] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9586] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9585] exit_group(0 [pid 9612] symlink("/dev/binderfs", "./binderfs" [pid 9592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9591] <... futex resumed>) = 0 [pid 9586] <... futex resumed>) = ? [pid 9585] <... exit_group resumed>) = ? [pid 5084] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 9592] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9591] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9586] +++ exited with 0 +++ [pid 9612] <... symlink resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5080] getdents64(3, [pid 9585] +++ exited with 0 +++ [pid 9612] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9592] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] fstat(4, [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./135/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9585, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 9612] <... futex resumed>) = 0 [pid 9592] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9592] <... futex resumed>) = 1 [pid 9591] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./135/.log", [pid 9612] <... mmap resumed>) = 0x7ff2b3754000 [pid 9592] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9591] exit_group(0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] lstat("./135/binderfs", [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9612] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9592] <... futex resumed>) = ? [pid 9591] <... exit_group resumed>) = ? [pid 5084] getdents64(4, [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./135/.log" [pid 5078] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9612] <... mprotect resumed>) = 0 [pid 9592] +++ exited with 0 +++ [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] unlink("./135/binderfs" [pid 9612] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9591] +++ exited with 0 +++ [pid 5084] close(4 [pid 5080] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... close resumed>) = 0 [pid 5080] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 9612] <... clone resumed>, parent_tid=[9613], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9613 [pid 5084] rmdir("./135/file0" [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9591, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, [pid 5078] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9612] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5080] lstat("./135/file0", [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9612] <... futex resumed>) = 0 [pid 5084] umount2("./135/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... restart_syscall resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] close(3 [pid 5078] <... openat resumed>) = 3 [pid 9612] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 [pid 5078] fstat(3, [pid 5084] lstat("./135/.log", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./135" [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] unlink("./135/.log" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 4 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5084] <... unlink resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] fstat(4, [pid 5079] mkdir("./136", 0777./strace-static-x86_64: Process 9613 attached [pid 5084] getdents64(3, [pid 5083] <... openat resumed>) = 3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] fstat(3, [pid 5080] getdents64(4, [pid 9613] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] close(3 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... close resumed>) = 0 [pid 5083] getdents64(3, [pid 5080] getdents64(4, [pid 5084] rmdir("./135" [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(4 [pid 5084] mkdir("./136", 0777 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] lstat("./135/binderfs", [pid 5080] rmdir("./135/file0" [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] unlink("./135/binderfs" [pid 5080] umount2("./135/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... unlink resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9613] <... set_robust_list resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./135/.log", [pid 5079] <... openat resumed>) = 3 [pid 5078] lstat("./134/binderfs", [pid 9613] memfd_create("syzkaller", 0 [pid 5084] close(3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9613] <... memfd_create resumed>) = 3 [pid 5084] <... close resumed>) = 0 [pid 5083] lstat("./135/file0", [pid 5080] unlink("./135/.log" [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] unlink("./134/binderfs" [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5079] close(3 [pid 5083] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(3, [pid 5078] <... unlink resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 9613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9614 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] close(3 [pid 5083] <... openat resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5083] fstat(4, [pid 5080] rmdir("./135" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9613] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 285.674402][ T27] audit: type=1804 audit(1680236969.092:814): pid=9589 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/135/.log" dev="sda1" ino=1154 res=1 errno=0 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9615 [pid 5078] lstat("./134/file0", [pid 5083] getdents64(4, [pid 5080] mkdir("./136", 0777 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... mkdir resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9614 attached [pid 5083] close(4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9614] set_robust_list(0x5555559d56e0, 24 [pid 5083] <... close resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9614] <... set_robust_list resumed>) = 0 [pid 5083] rmdir("./135/file0" [pid 5080] close(3 [pid 9614] chdir("./136" [pid 5083] <... rmdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 9614] <... chdir resumed>) = 0 [pid 5083] umount2("./135/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] fstat(4, [pid 9614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9615 attached [pid 9614] <... prctl resumed>) = 0 [pid 5083] lstat("./135/.log", [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9616 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9615] set_robust_list(0x5555559d56e0, 24 [pid 9614] setpgid(0, 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] getdents64(4, [pid 9615] <... set_robust_list resumed>) = 0 [pid 9614] <... setpgid resumed>) = 0 [pid 5083] unlink("./135/.log" [pid 9615] chdir("./136" [pid 9614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... unlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9615] <... chdir resumed>) = 0 [pid 9614] <... openat resumed>) = 3 [pid 5083] getdents64(3, [pid 5078] getdents64(4, [pid 9615] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9614] write(3, "1000", 4 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 9616 attached [pid 9614] <... write resumed>) = 4 [pid 9615] <... prctl resumed>) = 0 [pid 5083] close(3 [pid 5078] close(4 [pid 9616] set_robust_list(0x5555559d56e0, 24 [pid 9615] setpgid(0, 0 [pid 9614] close(3 [pid 5083] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9616] <... set_robust_list resumed>) = 0 [pid 9615] <... setpgid resumed>) = 0 [pid 9614] <... close resumed>) = 0 [pid 5083] rmdir("./135" [pid 5078] rmdir("./134/file0" [pid 9616] chdir("./136" [pid 9615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9614] symlink("/dev/binderfs", "./binderfs" [pid 5083] <... rmdir resumed>) = 0 [pid 9616] <... chdir resumed>) = 0 [pid 9615] <... openat resumed>) = 3 [pid 9614] <... symlink resumed>) = 0 [pid 5083] mkdir("./136", 0777 [pid 5078] <... rmdir resumed>) = 0 [pid 9616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9615] write(3, "1000", 4 [pid 9614] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... mkdir resumed>) = 0 [pid 5078] umount2("./134/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9616] <... prctl resumed>) = 0 [pid 9615] <... write resumed>) = 4 [pid 9614] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9616] setpgid(0, 0 [pid 9615] close(3 [pid 9614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... openat resumed>) = 3 [pid 5078] lstat("./134/.log", [pid 9616] <... setpgid resumed>) = 0 [pid 9615] <... close resumed>) = 0 [pid 9614] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9615] symlink("/dev/binderfs", "./binderfs" [pid 9614] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] unlink("./134/.log" [pid 9616] <... openat resumed>) = 3 [pid 9614] <... mprotect resumed>) = 0 [pid 5083] close(3 [pid 9616] write(3, "1000", 4 [pid 9614] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... close resumed>) = 0 [pid 9616] <... write resumed>) = 4 [pid 9615] <... symlink resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... unlink resumed>) = 0 [pid 9616] close(3 [pid 9615] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9614] <... clone resumed>, parent_tid=[9617], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9617 [pid 9616] <... close resumed>) = 0 [pid 9614] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9618 [pid 9616] symlink("/dev/binderfs", "./binderfs" [pid 9614] <... futex resumed>) = 0 [pid 9616] <... symlink resumed>) = 0 [pid 9614] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9616] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9616] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9616] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 9618 attached [pid 9618] set_robust_list(0x5555559d56e0, 24 [pid 9616] <... clone resumed>, parent_tid=[9619], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9619 [pid 9615] <... futex resumed>) = 0 [pid 5078] getdents64(3, [pid 9618] <... set_robust_list resumed>) = 0 [pid 9616] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9618] chdir("./136" [pid 9616] <... futex resumed>) = 0 [pid 9615] <... mmap resumed>) = 0x7ff2b3754000 [pid 5078] close(3./strace-static-x86_64: Process 9617 attached [pid 9618] <... chdir resumed>) = 0 [pid 9616] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9615] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... close resumed>) = 0 [pid 9618] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9617] set_robust_list(0x7ff2b37749e0, 24 [pid 9615] <... mprotect resumed>) = 0 [pid 5078] rmdir("./134" [pid 9618] <... prctl resumed>) = 0 [pid 9617] <... set_robust_list resumed>) = 0 [pid 9615] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9618] setpgid(0, 0 [pid 9617] memfd_create("syzkaller", 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9618] <... setpgid resumed>) = 0 [pid 9617] <... memfd_create resumed>) = 3 [pid 9615] <... clone resumed>, parent_tid=[9620], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9620 [pid 5078] mkdir("./135", 0777 [pid 9618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9615] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9618] <... openat resumed>) = 3 [pid 9617] <... mmap resumed>) = 0x7ff2ab354000 [pid 9615] <... futex resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 9618] write(3, "1000", 4 [pid 9615] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9619 attached [pid 9618] <... write resumed>) = 4 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9619] set_robust_list(0x7ff2b37749e0, 24 [pid 9618] close(3 [pid 9619] <... set_robust_list resumed>) = 0 [pid 9618] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9620 attached [pid 9619] memfd_create("syzkaller", 0 [pid 9618] symlink("/dev/binderfs", "./binderfs" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9620] set_robust_list(0x7ff2b37749e0, 24 [pid 9619] <... memfd_create resumed>) = 3 [pid 9618] <... symlink resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9620] <... set_robust_list resumed>) = 0 [pid 9619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9618] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 9620] memfd_create("syzkaller", 0 [pid 9619] <... mmap resumed>) = 0x7ff2ab354000 [pid 9618] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9620] <... memfd_create resumed>) = 3 [pid 9618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9618] <... mmap resumed>) = 0x7ff2b3754000 [pid 9618] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9620] <... mmap resumed>) = 0x7ff2ab354000 [pid 9618] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9621 [pid 9618] <... clone resumed>, parent_tid=[9622], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9622 [pid 9618] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9618] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9621 attached ./strace-static-x86_64: Process 9622 attached [pid 9622] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9621] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9622] memfd_create("syzkaller", 0) = 3 [pid 9622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9621] chdir("./135" [pid 9622] <... mmap resumed>) = 0x7ff2ab354000 [pid 9621] <... chdir resumed>) = 0 [pid 9621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9621] setpgid(0, 0) = 0 [pid 9621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9621] write(3, "1000", 4) = 4 [pid 9621] close(3) = 0 [pid 9621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9621] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9621] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9621] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9623], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9623 [pid 9621] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9621] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9623 attached [pid 9623] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9623] memfd_create("syzkaller", 0) = 3 [pid 9623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9622] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9613] <... write resumed>) = 16777216 [pid 9613] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9613] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9613] ioctl(4, LOOP_SET_FD, 3 [pid 9620] <... write resumed>) = 16777216 [pid 9613] <... ioctl resumed>) = 0 [pid 9613] close(3) = 0 [pid 9613] mkdir("./file0", 0777) = 0 [pid 9613] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9620] munmap(0x7ff2ab354000, 16777216 [pid 9619] <... write resumed>) = 16777216 [pid 9617] <... write resumed>) = 16777216 [pid 9617] munmap(0x7ff2ab354000, 16777216 [pid 9620] <... munmap resumed>) = 0 [pid 9620] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9617] <... munmap resumed>) = 0 [pid 9620] <... openat resumed>) = 4 [pid 9617] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9620] ioctl(4, LOOP_SET_FD, 3 [pid 9617] <... openat resumed>) = 4 [ 286.676019][ T9613] loop3: detected capacity change from 0 to 32768 [ 286.689322][ T9613] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor373 (9613) [pid 9619] munmap(0x7ff2ab354000, 16777216 [pid 9622] <... write resumed>) = 16777216 [pid 9620] <... ioctl resumed>) = 0 [pid 9619] <... munmap resumed>) = 0 [pid 9617] ioctl(4, LOOP_SET_FD, 3 [pid 9623] <... write resumed>) = 16777216 [pid 9622] munmap(0x7ff2ab354000, 16777216 [pid 9620] close(3 [pid 9619] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9617] <... ioctl resumed>) = 0 [pid 9622] <... munmap resumed>) = 0 [pid 9620] <... close resumed>) = 0 [pid 9619] <... openat resumed>) = 4 [pid 9622] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9620] mkdir("./file0", 0777 [pid 9619] ioctl(4, LOOP_SET_FD, 3 [pid 9617] close(3 [pid 9623] munmap(0x7ff2ab354000, 16777216 [pid 9622] <... openat resumed>) = 4 [pid 9620] <... mkdir resumed>) = 0 [pid 9619] <... ioctl resumed>) = 0 [pid 9617] <... close resumed>) = 0 [pid 9622] ioctl(4, LOOP_SET_FD, 3 [ 286.726334][ T9620] loop1: detected capacity change from 0 to 32768 [ 286.733375][ T9613] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 286.738490][ T9617] loop5: detected capacity change from 0 to 32768 [ 286.744288][ T9613] BTRFS info (device loop3): setting nodatasum [ 286.756312][ T9619] loop2: detected capacity change from 0 to 32768 [ 286.762809][ T9613] BTRFS info (device loop3): allowing degraded mounts [ 286.765957][ T9622] loop4: detected capacity change from 0 to 32768 [pid 9620] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9619] close(3 [pid 9617] mkdir("./file0", 0777 [pid 9623] <... munmap resumed>) = 0 [pid 9622] <... ioctl resumed>) = 0 [pid 9623] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9622] close(3 [pid 9623] <... openat resumed>) = 4 [pid 9622] <... close resumed>) = 0 [pid 9623] ioctl(4, LOOP_SET_FD, 3 [pid 9622] mkdir("./file0", 0777 [pid 9620] <... mount resumed>) = -1 EEXIST (File exists) [pid 9619] <... close resumed>) = 0 [pid 9617] <... mkdir resumed>) = 0 [pid 9622] <... mkdir resumed>) = 0 [pid 9620] ioctl(4, LOOP_CLR_FD [pid 9619] mkdir("./file0", 0777 [pid 9617] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9623] <... ioctl resumed>) = 0 [pid 9622] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9619] <... mkdir resumed>) = 0 [pid 9623] close(3) = 0 [pid 9623] mkdir("./file0", 0777) = 0 [pid 9623] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9619] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9617] <... mount resumed>) = -1 EEXIST (File exists) [ 286.777700][ T9620] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9620) [ 286.788481][ T9613] BTRFS info (device loop3): use zlib compression, level 3 [ 286.788504][ T9613] BTRFS info (device loop3): using free space tree [ 286.797354][ T9623] loop0: detected capacity change from 0 to 32768 [ 286.809912][ T9617] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9617) [pid 9617] ioctl(4, LOOP_CLR_FD [pid 9623] <... mount resumed>) = -1 EEXIST (File exists) [pid 9623] ioctl(4, LOOP_CLR_FD [pid 9622] <... mount resumed>) = -1 EEXIST (File exists) [pid 9619] <... mount resumed>) = -1 EEXIST (File exists) [ 286.821255][ T9623] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9623) [ 286.832849][ T9622] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9622) [ 286.851120][ T9619] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9619) [pid 9622] ioctl(4, LOOP_CLR_FD [ 286.914919][ T9613] BTRFS info (device loop3): enabling ssd optimizations [ 286.923637][ T9613] BTRFS info (device loop3): auto enabling async discard [pid 9619] ioctl(4, LOOP_CLR_FD [pid 9613] <... mount resumed>) = 0 [pid 9613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9613] chdir("./file0") = 0 [pid 9613] ioctl(4, LOOP_CLR_FD) = 0 [pid 9613] close(4) = 0 [pid 9613] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9613] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9612] <... futex resumed>) = 0 [pid 9612] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9613] <... futex resumed>) = 0 [ 286.982574][ T9613] BTRFS info (device loop3): checking UUID tree [pid 9612] <... futex resumed>) = 1 [pid 9613] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 9612] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9613] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9613] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9612] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9613] <... futex resumed>) = 0 [pid 9612] <... futex resumed>) = 1 [pid 9612] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9613] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9623] <... ioctl resumed>) = 0 [pid 9623] close(4) = 0 [pid 9623] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9621] <... futex resumed>) = 0 [pid 9621] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9621] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9623] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9623] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9621] <... futex resumed>) = 0 [pid 9623] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9621] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9621] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9623] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9623] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9621] <... futex resumed>) = 0 [pid 9621] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9621] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9623] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9623] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9621] <... futex resumed>) = 0 [pid 9623] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9621] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9621] <... futex resumed>) = 0 [pid 9623] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9621] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9623] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9623] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9621] <... futex resumed>) = 0 [pid 9623] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9621] exit_group(0 [pid 9619] <... ioctl resumed>) = 0 [pid 9612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9621] <... exit_group resumed>) = ? [pid 9623] <... futex resumed>) = ? [pid 9620] <... ioctl resumed>) = 0 [pid 9619] close(4 [pid 9612] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9623] +++ exited with 0 +++ [pid 9621] +++ exited with 0 +++ [pid 9612] <... futex resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9621, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=19 /* 0.19 s */} --- [pid 9612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9620] close(4) = 0 [pid 9619] <... close resumed>) = 0 [pid 9612] <... mmap resumed>) = 0x7ff2ac333000 [pid 9620] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9615] <... futex resumed>) = 0 [pid 9615] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9615] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9620] <... futex resumed>) = 1 [pid 9620] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9619] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9612] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5078] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9620] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9615] <... futex resumed>) = 0 [pid 9615] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9615] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9620] <... futex resumed>) = 1 [pid 9620] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9620] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9615] <... futex resumed>) = 0 [pid 9615] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9620] <... futex resumed>) = 1 [pid 9615] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9620] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9620] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9615] <... futex resumed>) = 0 [pid 9620] <... futex resumed>) = 1 [pid 9615] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9620] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9615] <... futex resumed>) = 0 [pid 9620] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9615] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9620] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9615] <... futex resumed>) = 0 [pid 9620] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9615] exit_group(0 [pid 9620] <... futex resumed>) = ? [pid 9615] <... exit_group resumed>) = ? [ 287.077261][ T9613] BTRFS info (device loop3): balance: start -s [ 287.116933][ T9613] BTRFS info (device loop3): relocating block group 1048576 flags system [pid 9622] <... ioctl resumed>) = 0 [pid 9620] +++ exited with 0 +++ [pid 9619] <... futex resumed>) = 1 [pid 9616] <... futex resumed>) = 0 [pid 9615] +++ exited with 0 +++ [pid 9612] <... mprotect resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9622] close(4 [pid 9619] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9616] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9612] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9616] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9619] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9622] <... close resumed>) = 0 [pid 9616] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9619] <... openat resumed>) = 3 [pid 9622] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9618] <... futex resumed>) = 0 [pid 5078] fstat(3, [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9615, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 9612] <... clone resumed>, parent_tid=[9642], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9642 [pid 9622] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9618] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9619] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9612] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9618] <... futex resumed>) = 0 [pid 9622] <... openat resumed>) = 3 [pid 9618] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9612] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9619] <... futex resumed>) = 1 [pid 9616] <... futex resumed>) = 0 [pid 9612] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] getdents64(3, [pid 5079] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9622] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9619] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9618] <... futex resumed>) = 0 [pid 9616] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9617] <... ioctl resumed>) = 0 [pid 9622] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9619] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9618] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9616] <... futex resumed>) = 0 [pid 5079] fstat(3, [pid 5078] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9617] close(4) = 0 [pid 9617] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 ./strace-static-x86_64: Process 9642 attached [pid 9617] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9642] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 9642] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 9622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9619] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9618] <... futex resumed>) = 0 [pid 9616] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9614] <... futex resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9642] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9612] <... futex resumed>) = 0 [pid 9642] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9612] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9619] <... futex resumed>) = 0 [pid 9616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9612] <... futex resumed>) = 0 [pid 9622] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9619] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9618] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9616] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9614] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9612] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] getdents64(3, [pid 5078] lstat("./135/binderfs", [pid 9622] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9617] <... futex resumed>) = 0 [pid 9616] <... futex resumed>) = 0 [pid 9614] <... futex resumed>) = 1 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9622] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9619] openat(AT_FDCWD, ".log", O_RDONLY [pid 9617] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9616] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9614] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9622] <... futex resumed>) = 1 [pid 9619] <... openat resumed>) = 4 [pid 9618] <... futex resumed>) = 0 [pid 9617] <... openat resumed>) = 3 [pid 5079] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./135/binderfs" [pid 9622] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9619] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9618] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9617] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9617] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9619] <... futex resumed>) = 1 [pid 9618] <... futex resumed>) = 0 [pid 9614] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9622] openat(AT_FDCWD, ".log", O_RDONLY [pid 9619] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9618] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9616] <... futex resumed>) = 0 [pid 9614] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] lstat("./136/binderfs", [pid 5078] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9622] <... openat resumed>) = 4 [pid 9616] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9617] <... futex resumed>) = 0 [pid 9616] <... futex resumed>) = 0 [pid 9614] <... futex resumed>) = 1 [pid 9622] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9619] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9617] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9616] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9614] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9622] <... futex resumed>) = 1 [pid 9619] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9618] <... futex resumed>) = 0 [pid 9617] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] unlink("./136/binderfs" [pid 5078] lstat("./135/file0", [pid 9622] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9619] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9618] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9617] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9622] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9619] <... futex resumed>) = 1 [pid 9618] <... futex resumed>) = 0 [pid 9617] <... futex resumed>) = 1 [pid 9616] <... futex resumed>) = 0 [pid 9614] <... futex resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9617] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9622] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9619] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9618] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9616] exit_group(0 [pid 9614] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9622] <... futex resumed>) = 0 [pid 9619] <... futex resumed>) = ? [pid 9618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9617] <... futex resumed>) = 0 [pid 9616] <... exit_group resumed>) = ? [pid 9614] <... futex resumed>) = 1 [pid 5079] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9617] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9617] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9617] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9618] exit_group(0 [pid 9614] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9622] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9619] +++ exited with 0 +++ [pid 9614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] lstat("./136/file0", [pid 9622] <... futex resumed>) = ? [pid 9618] <... exit_group resumed>) = ? [pid 9616] +++ exited with 0 +++ [pid 9614] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 4 [pid 9622] +++ exited with 0 +++ [pid 9618] +++ exited with 0 +++ [pid 9617] <... futex resumed>) = 0 [pid 9614] <... futex resumed>) = 1 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9616, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=25 /* 0.25 s */} --- [pid 5079] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(4, [pid 9617] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9614] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9617] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9618, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=31 /* 0.31 s */} --- [pid 5079] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(4, [pid 9617] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9617] <... futex resumed>) = 1 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9614] <... futex resumed>) = 0 [pid 9617] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9614] exit_group(0 [pid 5083] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] fstat(4, [pid 5078] getdents64(4, [pid 9617] <... futex resumed>) = ? [pid 9614] <... exit_group resumed>) = ? [pid 9612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9617] +++ exited with 0 +++ [pid 9614] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9614, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5083] fstat(3, [pid 5080] fstat(3, [pid 5079] getdents64(4, [pid 5078] close(4 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... close resumed>) = 0 [pid 5083] getdents64(3, [pid 5080] getdents64(3, [pid 5078] rmdir("./135/file0" [pid 5079] getdents64(4, [pid 5078] <... rmdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./135/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] lstat("./136/binderfs", [pid 5079] <... close resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] lstat("./136/binderfs", [pid 5079] rmdir("./136/file0" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] fstat(3, [pid 5083] unlink("./136/binderfs" [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5080] unlink("./136/binderfs" [pid 5079] <... rmdir resumed>) = 0 [pid 5078] lstat("./135/.log", [pid 5084] getdents64(3, [pid 5083] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... unlink resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./136/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./136/file0", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./135/.log" [pid 5084] lstat("./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] lstat("./136/file0", [pid 5079] lstat("./136/.log", [pid 5078] <... unlink resumed>) = 0 [pid 5084] unlink("./136/binderfs" [pid 5083] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] getdents64(3, [pid 5084] <... unlink resumed>) = 0 [pid 5080] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./136/.log" [pid 5084] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] lstat("./136/file0", [pid 5083] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 4 [pid 5079] getdents64(3, [pid 5078] close(3 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] fstat(4, [pid 5080] fstat(4, [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... close resumed>) = 0 [pid 9642] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 5084] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] close(3 [pid 5078] rmdir("./135" [pid 9642] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] getdents64(4, [pid 5080] getdents64(4, [pid 5079] <... close resumed>) = 0 [pid 9642] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] rmdir("./136" [pid 5078] mkdir("./136", 0777 [pid 9613] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] <... openat resumed>) = 4 [pid 9613] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... rmdir resumed>) = 0 [pid 9613] <... futex resumed>) = 0 [pid 9612] exit_group(0 [pid 5084] fstat(4, [pid 5083] getdents64(4, [pid 5080] getdents64(4, [pid 9642] <... futex resumed>) = ? [pid 9612] <... exit_group resumed>) = ? [pid 9642] +++ exited with 0 +++ [pid 9613] +++ exited with 0 +++ [pid 9612] +++ exited with 0 +++ [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 287.214772][ T9642] BTRFS info (device loop3): scrub: started on devid 1 [ 287.223245][ T9613] BTRFS info (device loop3): balance: ended with status: 0 [ 287.238621][ T9642] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] mkdir("./137", 0777 [pid 5078] <... mkdir resumed>) = 0 [pid 5084] getdents64(4, [pid 5083] close(4 [pid 5080] close(4 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] <... close resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9612, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5080] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5084] getdents64(4, [pid 5083] rmdir("./136/file0" [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5080] rmdir("./136/file0" [pid 5079] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] close(4 [pid 5083] umount2("./136/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./136/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] close(3 [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(3 [pid 5078] <... close resumed>) = 0 [pid 5084] rmdir("./136/file0" [pid 5083] lstat("./136/.log", [pid 5081] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./136/.log", [pid 5079] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] umount2("./136/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] unlink("./136/.log" [pid 5081] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] unlink("./136/.log" [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9643 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... unlink resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... unlink resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9644 [pid 5084] lstat("./136/.log", [pid 5083] getdents64(3, [pid 5081] fstat(3, [pid 5080] getdents64(3, [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] unlink("./136/.log" [pid 5083] close(3 [pid 5081] getdents64(3, [pid 5080] close(3 [pid 5084] <... unlink resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5080] <... close resumed>) = 0 [pid 5084] getdents64(3, [pid 5083] rmdir("./136" [pid 5081] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./136" [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9644 attached [pid 5084] close(3 [pid 5083] mkdir("./137", 0777 [pid 5081] lstat("./136/binderfs", [pid 5080] mkdir("./137", 0777 [pid 9644] set_robust_list(0x5555559d56e0, 24 [pid 5084] <... close resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 9644] <... set_robust_list resumed>) = 0 [pid 5084] rmdir("./136" [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] unlink("./136/binderfs" [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9644] chdir("./137" [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 9644] <... chdir resumed>) = 0 [pid 5084] mkdir("./137", 0777 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9644] <... prctl resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] close(3 [pid 5080] close(3./strace-static-x86_64: Process 9643 attached [pid 9644] setpgid(0, 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 9644] <... setpgid resumed>) = 0 [pid 9643] set_robust_list(0x5555559d56e0, 24 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9643] <... set_robust_list resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9644] <... openat resumed>) = 3 [pid 9643] chdir("./136" [pid 5084] close(3 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9645 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9646 [pid 9644] write(3, "1000", 4 [pid 5084] <... close resumed>) = 0 [pid 9644] <... write resumed>) = 4 [pid 9643] <... chdir resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9644] close(3 [pid 9643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9644] <... close resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9647 [pid 9644] symlink("/dev/binderfs", "./binderfs" [pid 9643] <... prctl resumed>) = 0 [pid 9644] <... symlink resumed>) = 0 [pid 9644] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9645 attached ) = 0 [pid 9643] setpgid(0, 0 [pid 9645] set_robust_list(0x5555559d56e0, 24 [pid 9644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9645] <... set_robust_list resumed>) = 0 [pid 9644] <... mmap resumed>) = 0x7ff2b3754000 [pid 9643] <... setpgid resumed>) = 0 [pid 9645] chdir("./137" [pid 9644] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9645] <... chdir resumed>) = 0 [pid 9644] <... mprotect resumed>) = 0 [pid 9643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9644] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9645] <... prctl resumed>) = 0 [pid 9643] <... openat resumed>) = 3 [pid 9645] setpgid(0, 0 [pid 9644] <... clone resumed>, parent_tid=[9648], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9648 [pid 9643] write(3, "1000", 4 [pid 9645] <... setpgid resumed>) = 0 [pid 9644] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9646 attached [pid 9645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9644] <... futex resumed>) = 0 [pid 9643] <... write resumed>) = 4 [pid 9645] <... openat resumed>) = 3 [pid 9644] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9643] close(3 [pid 9646] set_robust_list(0x5555559d56e0, 24 [pid 9645] write(3, "1000", 4 [pid 9643] <... close resumed>) = 0 ./strace-static-x86_64: Process 9648 attached ./strace-static-x86_64: Process 9647 attached [pid 9646] <... set_robust_list resumed>) = 0 [pid 9645] <... write resumed>) = 4 [pid 9643] symlink("/dev/binderfs", "./binderfs" [pid 9648] set_robust_list(0x7ff2b37749e0, 24 [pid 9646] chdir("./137" [pid 9645] close(3 [pid 9643] <... symlink resumed>) = 0 [pid 9648] <... set_robust_list resumed>) = 0 [pid 9645] <... close resumed>) = 0 [pid 9648] memfd_create("syzkaller", 0 [pid 9645] symlink("/dev/binderfs", "./binderfs" [pid 9648] <... memfd_create resumed>) = 3 [pid 9645] <... symlink resumed>) = 0 [pid 9648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9645] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9648] <... mmap resumed>) = 0x7ff2ab354000 [pid 9645] <... futex resumed>) = 0 [pid 9645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9643] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9645] <... mmap resumed>) = 0x7ff2b3754000 [pid 9645] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9647] set_robust_list(0x5555559d56e0, 24 [pid 9646] <... chdir resumed>) = 0 [pid 9645] <... mprotect resumed>) = 0 [pid 9643] <... futex resumed>) = 0 [pid 9647] <... set_robust_list resumed>) = 0 [pid 9646] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9645] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9647] chdir("./137" [pid 9646] <... prctl resumed>) = 0 [pid 9643] <... mmap resumed>) = 0x7ff2b3754000 [pid 9647] <... chdir resumed>) = 0 [pid 9646] setpgid(0, 0 [pid 9645] <... clone resumed>, parent_tid=[9649], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9649 [pid 9647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9646] <... setpgid resumed>) = 0 [pid 9645] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9643] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9647] <... prctl resumed>) = 0 [pid 9646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9645] <... futex resumed>) = 0 [pid 9643] <... mprotect resumed>) = 0 [pid 9647] setpgid(0, 0 [pid 9646] <... openat resumed>) = 3 [pid 9645] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9643] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 9649 attached [pid 9647] <... setpgid resumed>) = 0 [pid 9646] write(3, "1000", 4 [pid 9649] set_robust_list(0x7ff2b37749e0, 24 [pid 9647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9646] <... write resumed>) = 4 [pid 9643] <... clone resumed>, parent_tid=[9650], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9650 [pid 9649] <... set_robust_list resumed>) = 0 [pid 9647] <... openat resumed>) = 3 [pid 9646] close(3 [pid 9643] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9649] memfd_create("syzkaller", 0 [pid 9647] write(3, "1000", 4 [pid 9646] <... close resumed>) = 0 [pid 9643] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9650 attached [pid 9649] <... memfd_create resumed>) = 3 [pid 9647] <... write resumed>) = 4 [pid 9646] symlink("/dev/binderfs", "./binderfs" [pid 9643] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9650] set_robust_list(0x7ff2b37749e0, 24 [pid 9649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9647] close(3 [pid 9646] <... symlink resumed>) = 0 [pid 9650] <... set_robust_list resumed>) = 0 [pid 9649] <... mmap resumed>) = 0x7ff2ab354000 [pid 9647] <... close resumed>) = 0 [pid 9646] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9650] memfd_create("syzkaller", 0 [pid 9647] symlink("/dev/binderfs", "./binderfs" [pid 9646] <... futex resumed>) = 0 [pid 9650] <... memfd_create resumed>) = 3 [pid 9647] <... symlink resumed>) = 0 [pid 9646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9647] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9646] <... mmap resumed>) = 0x7ff2b3754000 [pid 9650] <... mmap resumed>) = 0x7ff2ab354000 [pid 9647] <... futex resumed>) = 0 [pid 9646] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9646] <... mprotect resumed>) = 0 [pid 9647] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9646] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9647] <... mprotect resumed>) = 0 [pid 9647] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9646] <... clone resumed>, parent_tid=[9651], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9651 [pid 9646] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9647] <... clone resumed>, parent_tid=[9652], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9652 [pid 9646] <... futex resumed>) = 0 [pid 9647] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9646] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9651 attached [pid 9647] <... futex resumed>) = 0 [pid 9651] set_robust_list(0x7ff2b37749e0, 24 [pid 9647] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9651] <... set_robust_list resumed>) = 0 [pid 9651] memfd_create("syzkaller", 0) = 3 [pid 9651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 9652 attached ) = 0x7ff2ab354000 [pid 9652] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9652] memfd_create("syzkaller", 0) = 3 [pid 9652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./136/file0") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./136") = 0 [pid 5081] mkdir("./137", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9653 ./strace-static-x86_64: Process 9653 attached [pid 9653] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9653] chdir("./137") = 0 [pid 9653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9653] setpgid(0, 0 [pid 9648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9653] <... setpgid resumed>) = 0 [pid 9653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9653] write(3, "1000", 4) = 4 [pid 9653] close(3) = 0 [pid 9653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9653] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9653] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9653] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9654], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9654 [pid 9653] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9653] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9654 attached [pid 9654] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9654] memfd_create("syzkaller", 0) = 3 [pid 9654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9648] <... write resumed>) = 16777216 [pid 9648] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9648] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9648] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9648] close(3) = 0 [pid 9648] mkdir("./file0", 0777) = 0 [pid 9648] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9650] <... write resumed>) = 16777216 [ 288.223847][ T9648] loop1: detected capacity change from 0 to 32768 [ 288.260355][ T9648] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (9648) [pid 9650] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9650] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9651] <... write resumed>) = 16777216 [pid 9651] munmap(0x7ff2ab354000, 16777216 [pid 9650] <... openat resumed>) = 4 [pid 9650] ioctl(4, LOOP_SET_FD, 3 [pid 9651] <... munmap resumed>) = 0 [pid 9650] <... ioctl resumed>) = 0 [pid 9651] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9651] ioctl(4, LOOP_SET_FD, 3 [pid 9650] close(3) = 0 [pid 9650] mkdir("./file0", 0777) = 0 [pid 9650] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9651] <... ioctl resumed>) = 0 [pid 9649] <... write resumed>) = 16777216 [pid 9649] munmap(0x7ff2ab354000, 16777216 [ 288.311641][ T9650] loop0: detected capacity change from 0 to 32768 [ 288.318546][ T9648] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 288.330054][ T9651] loop2: detected capacity change from 0 to 32768 [ 288.341401][ T9650] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9650) [ 288.355374][ T9648] BTRFS info (device loop1): setting nodatasum [pid 9651] close(3 [pid 9649] <... munmap resumed>) = 0 [pid 9649] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9649] ioctl(4, LOOP_SET_FD, 3 [pid 9651] <... close resumed>) = 0 [pid 9651] mkdir("./file0", 0777) = 0 [pid 9651] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9649] <... ioctl resumed>) = 0 [pid 9649] close(3) = 0 [pid 9649] mkdir("./file0", 0777) = 0 [pid 9649] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9650] <... mount resumed>) = -1 EEXIST (File exists) [pid 9650] ioctl(4, LOOP_CLR_FD [pid 9652] <... write resumed>) = 16777216 [pid 9652] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9652] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 288.361602][ T9648] BTRFS info (device loop1): allowing degraded mounts [ 288.366439][ T9649] loop4: detected capacity change from 0 to 32768 [ 288.385304][ T9648] BTRFS info (device loop1): use zlib compression, level 3 [ 288.393008][ T9651] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9651) [ 288.403907][ T9648] BTRFS info (device loop1): using free space tree [pid 9652] ioctl(4, LOOP_SET_FD, 3 [pid 9651] <... mount resumed>) = -1 EEXIST (File exists) [pid 9651] ioctl(4, LOOP_CLR_FD [pid 9652] <... ioctl resumed>) = 0 [pid 9652] close(3) = 0 [pid 9652] mkdir("./file0", 0777) = 0 [ 288.409595][ T9652] loop5: detected capacity change from 0 to 32768 [ 288.417845][ T9649] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9649) [pid 9652] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9654] <... write resumed>) = 16777216 [pid 9649] <... mount resumed>) = -1 EEXIST (File exists) [pid 9654] munmap(0x7ff2ab354000, 16777216 [pid 9649] ioctl(4, LOOP_CLR_FD [pid 9654] <... munmap resumed>) = 0 [pid 9652] <... mount resumed>) = -1 EEXIST (File exists) [pid 9652] ioctl(4, LOOP_CLR_FD [pid 9654] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9654] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9654] close(3) = 0 [pid 9654] mkdir("./file0", 0777) = 0 [ 288.463431][ T9652] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9652) [ 288.488362][ T9654] loop3: detected capacity change from 0 to 32768 [ 288.511229][ T9654] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9654) [pid 9654] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 288.591000][ T9648] BTRFS info (device loop1): enabling ssd optimizations [ 288.600747][ T9648] BTRFS info (device loop1): auto enabling async discard [pid 9654] ioctl(4, LOOP_CLR_FD [pid 9650] <... ioctl resumed>) = 0 [pid 9650] close(4) = 0 [pid 9650] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9643] <... futex resumed>) = 0 [pid 9643] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9650] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9643] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9650] <... openat resumed>) = 3 [pid 9650] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9643] <... futex resumed>) = 0 [pid 9650] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9643] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9643] <... futex resumed>) = 0 [ 288.636739][ T9648] BTRFS info (device loop1): checking UUID tree [pid 9650] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9643] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9650] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9650] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9643] <... futex resumed>) = 0 [pid 9650] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9648] <... mount resumed>) = 0 [pid 9643] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9648] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9643] <... futex resumed>) = 0 [pid 9650] openat(AT_FDCWD, ".log", O_RDONLY [pid 9648] <... openat resumed>) = 3 [pid 9643] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9650] <... openat resumed>) = 4 [pid 9648] chdir("./file0" [pid 9650] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9648] <... chdir resumed>) = 0 [pid 9650] <... futex resumed>) = 1 [pid 9648] ioctl(4, LOOP_CLR_FD [pid 9643] <... futex resumed>) = 0 [pid 9650] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9648] <... ioctl resumed>) = 0 [pid 9643] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9648] close(4 [pid 9643] <... futex resumed>) = 0 [pid 9650] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9648] <... close resumed>) = 0 [pid 9650] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9648] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9650] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9648] <... futex resumed>) = 1 [pid 9644] <... futex resumed>) = 0 [pid 9650] <... futex resumed>) = 0 [pid 9648] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9644] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9650] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9644] <... futex resumed>) = 0 [pid 9648] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9644] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9648] <... openat resumed>) = 4 [pid 9643] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9648] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9648] <... futex resumed>) = 1 [pid 9644] <... futex resumed>) = 0 [pid 9643] exit_group(0 [pid 9651] <... ioctl resumed>) = 0 [pid 9650] <... futex resumed>) = ? [pid 9648] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9644] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9643] <... exit_group resumed>) = ? [pid 9650] +++ exited with 0 +++ [pid 9648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9644] <... futex resumed>) = 0 [ 288.707729][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 288.707741][ T27] audit: type=1804 audit(1680236972.182:823): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/136/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 9651] close(4 [pid 9648] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9644] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9643] +++ exited with 0 +++ [pid 9651] <... close resumed>) = 0 [pid 9651] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9646] <... futex resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9643, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=23 /* 0.23 s */} --- [pid 9651] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9646] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9646] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9651] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9646] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9651] <... openat resumed>) = 3 [pid 9651] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 3 [pid 9651] <... futex resumed>) = 1 [pid 9646] <... futex resumed>) = 0 [pid 5078] fstat(3, [pid 9651] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9646] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9646] <... futex resumed>) = 0 [pid 9651] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9646] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] getdents64(3, [pid 9651] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9651] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9651] <... futex resumed>) = 1 [pid 9646] <... futex resumed>) = 0 [pid 5078] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9651] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9646] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9646] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9651] openat(AT_FDCWD, ".log", O_RDONLY [pid 9646] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] lstat("./136/binderfs", [pid 9651] <... openat resumed>) = 4 [pid 9651] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9651] <... futex resumed>) = 1 [pid 9646] <... futex resumed>) = 0 [pid 9651] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9646] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./136/binderfs" [pid 9651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9646] <... futex resumed>) = 0 [pid 9651] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9646] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... unlink resumed>) = 0 [pid 9651] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9651] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9644] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9651] <... futex resumed>) = 1 [pid 9646] <... futex resumed>) = 0 [pid 9644] <... futex resumed>) = 0 [pid 5078] lstat("./136/file0", [pid 9651] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9646] exit_group(0 [pid 9644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9651] <... futex resumed>) = ? [pid 9646] <... exit_group resumed>) = ? [pid 9644] <... mmap resumed>) = 0x7ff2ac333000 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9651] +++ exited with 0 +++ [pid 9644] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 9646] +++ exited with 0 +++ [pid 9644] <... mprotect resumed>) = 0 [pid 5078] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9644] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9646, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9644] <... clone resumed>, parent_tid=[9673], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9673 [pid 5078] <... openat resumed>) = 4 ./strace-static-x86_64: Process 9673 attached [pid 9644] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] fstat(4, [pid 9673] set_robust_list(0x7ff2ac3539e0, 24 [pid 9644] <... futex resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9673] <... set_robust_list resumed>) = 0 [pid 9644] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] getdents64(4, [pid 9673] openat(AT_FDCWD, ".log", O_RDONLY [pid 9652] <... ioctl resumed>) = 0 [ 288.768762][ T9648] BTRFS info (device loop1): balance: start -s [ 288.803753][ T9648] BTRFS info (device loop1): relocating block group 1048576 flags system [pid 5080] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9673] <... openat resumed>) = 5 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5078] getdents64(4, [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5080] lstat("./137/binderfs", [pid 5078] rmdir("./136/file0" [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5080] unlink("./137/binderfs" [pid 5078] umount2("./136/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9673] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./136/.log", [pid 9652] close(4 [pid 9673] <... futex resumed>) = 1 [pid 9644] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9649] <... ioctl resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9644] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./137/file0", [pid 5078] unlink("./136/.log" [pid 9673] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9652] <... close resumed>) = 0 [pid 9649] close(4 [pid 9644] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9652] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9649] <... close resumed>) = 0 [pid 9644] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 9652] <... futex resumed>) = 1 [pid 9649] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9647] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9652] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9649] <... futex resumed>) = 1 [pid 9647] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9645] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(3 [pid 9652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9649] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9647] <... futex resumed>) = 0 [pid 9645] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 9645] <... futex resumed>) = 0 [pid 5080] fstat(4, [pid 5078] rmdir("./136" [pid 9645] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9652] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9647] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(4, [pid 5078] mkdir("./137", 0777 [pid 9652] <... openat resumed>) = 3 [pid 9649] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [ 288.847807][ T27] audit: type=1804 audit(1680236972.292:824): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/137/.log" dev="sda1" ino=1163 res=1 errno=0 [pid 5078] <... mkdir resumed>) = 0 [pid 9652] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9649] <... openat resumed>) = 3 [pid 5080] getdents64(4, [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9652] <... futex resumed>) = 1 [pid 9649] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9647] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... openat resumed>) = 3 [pid 9652] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9649] <... futex resumed>) = 1 [pid 9647] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9645] <... futex resumed>) = 0 [pid 5080] close(4 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9649] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9647] <... futex resumed>) = 0 [pid 9645] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] rmdir("./137/file0" [pid 5078] close(3 [pid 9644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5080] umount2("./137/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./137/.log", [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9674 [pid 9652] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9649] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9647] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9645] <... futex resumed>) = 0 [pid 5080] unlink("./137/.log"./strace-static-x86_64: Process 9674 attached ) = 0 [pid 9674] set_robust_list(0x5555559d56e0, 24 [pid 9645] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(3, [pid 9649] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9674] <... set_robust_list resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9674] chdir("./137" [pid 9649] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(3 [pid 9674] <... chdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 9674] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9649] <... futex resumed>) = 1 [pid 9645] <... futex resumed>) = 0 [pid 5080] rmdir("./137" [pid 9674] <... prctl resumed>) = 0 [pid 9673] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9649] openat(AT_FDCWD, ".log", O_RDONLY [pid 9645] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 9674] setpgid(0, 0 [pid 9673] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9652] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9649] <... openat resumed>) = 4 [pid 9645] <... futex resumed>) = 0 [pid 5080] mkdir("./138", 0777 [pid 9674] <... setpgid resumed>) = 0 [ 288.912258][ T9673] BTRFS info (device loop1): scrub: started on devid 1 [ 288.913118][ T9648] BTRFS info (device loop1): balance: ended with status: 0 [ 288.936538][ T9673] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 9673] <... futex resumed>) = 0 [pid 9652] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9649] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9645] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... mkdir resumed>) = 0 [pid 9674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9674] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 9674] write(3, "1000", 4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9674] <... write resumed>) = 4 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9674] close(3 [pid 5080] close(3 [pid 9674] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 9674] symlink("/dev/binderfs", "./binderfs" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9674] <... symlink resumed>) = 0 [pid 9674] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9675 [pid 9674] <... futex resumed>) = 0 [pid 9674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9674] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 9675 attached ) = 0 [pid 9675] set_robust_list(0x5555559d56e0, 24 [pid 9674] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9675] <... set_robust_list resumed>) = 0 [pid 9675] chdir("./138" [pid 9674] <... clone resumed>, parent_tid=[9676], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9676 [pid 9675] <... chdir resumed>) = 0 [pid 9674] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9675] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9674] <... futex resumed>) = 0 [pid 9673] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9652] <... futex resumed>) = 1 [pid 9649] <... futex resumed>) = 0 [pid 9647] <... futex resumed>) = 0 [pid 9645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 9676 attached [pid 9675] <... prctl resumed>) = 0 [pid 9674] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9654] <... ioctl resumed>) = 0 [pid 9652] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9649] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9647] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9645] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9676] set_robust_list(0x7ff2b37749e0, 24 [pid 9675] setpgid(0, 0 [pid 9654] close(4 [pid 9652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9647] <... futex resumed>) = 0 [pid 9645] <... futex resumed>) = 0 [pid 9676] <... set_robust_list resumed>) = 0 [pid 9675] <... setpgid resumed>) = 0 [pid 9654] <... close resumed>) = 0 [pid 9652] openat(AT_FDCWD, ".log", O_RDONLY [pid 9649] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9647] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9645] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9676] memfd_create("syzkaller", 0 [pid 9675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9675] write(3, "1000", 4) = 4 [pid 9675] close(3 [pid 9654] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9652] <... openat resumed>) = 4 [pid 9649] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9676] <... memfd_create resumed>) = 3 [pid 9675] <... close resumed>) = 0 [pid 9654] <... futex resumed>) = 1 [pid 9653] <... futex resumed>) = 0 [pid 9652] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9649] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9648] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9675] symlink("/dev/binderfs", "./binderfs" [pid 9654] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9653] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9652] <... futex resumed>) = 1 [pid 9649] <... futex resumed>) = 1 [pid 9648] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9647] <... futex resumed>) = 0 [pid 9645] <... futex resumed>) = 0 [pid 9676] <... mmap resumed>) = 0x7ff2ab354000 [pid 9675] <... symlink resumed>) = 0 [pid 9654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9653] <... futex resumed>) = 0 [pid 9652] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9649] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9648] <... futex resumed>) = 0 [pid 9647] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9645] exit_group(0 [pid 9675] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9648] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9675] <... futex resumed>) = 0 [pid 9644] exit_group(0 [pid 9675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9673] <... futex resumed>) = ? [pid 9654] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9653] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9649] <... futex resumed>) = ? [pid 9648] <... futex resumed>) = ? [ 288.974009][ T27] audit: type=1804 audit(1680236972.322:825): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/137/file0/.log" dev="loop1" ino=263 res=1 errno=0 [pid 9647] <... futex resumed>) = 0 [pid 9645] <... exit_group resumed>) = ? [pid 9644] <... exit_group resumed>) = ? [pid 9675] <... mmap resumed>) = 0x7ff2b3754000 [pid 9673] +++ exited with 0 +++ [pid 9654] <... openat resumed>) = 3 [pid 9652] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9649] +++ exited with 0 +++ [pid 9648] +++ exited with 0 +++ [pid 9647] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9645] +++ exited with 0 +++ [pid 9644] +++ exited with 0 +++ [pid 9675] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9654] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9652] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9645, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=32 /* 0.32 s */} --- [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9644, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 9675] <... mprotect resumed>) = 0 [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 9675] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... restart_syscall resumed>) = 0 [pid 9675] <... clone resumed>, parent_tid=[9677], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9677 [pid 9675] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9675] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9675] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] fstat(3, [pid 5079] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9677 attached [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] fstat(3, [pid 9677] set_robust_list(0x7ff2b37749e0, 24 [pid 5083] getdents64(3, [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9677] <... set_robust_list resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] getdents64(3, [pid 9677] memfd_create("syzkaller", 0 [pid 5083] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9677] <... memfd_create resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9654] <... futex resumed>) = 1 [pid 9653] <... futex resumed>) = 0 [pid 9652] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./137/binderfs", [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9677] <... mmap resumed>) = 0x7ff2ab354000 [pid 9654] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9653] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9652] <... futex resumed>) = 1 [pid 9647] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] lstat("./137/binderfs", [pid 9654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9653] <... futex resumed>) = 0 [pid 9652] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9647] exit_group(0 [pid 5083] unlink("./137/binderfs" [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9654] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9653] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9652] <... futex resumed>) = ? [pid 9647] <... exit_group resumed>) = ? [pid 5083] <... unlink resumed>) = 0 [pid 5079] unlink("./137/binderfs" [pid 9654] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9652] +++ exited with 0 +++ [pid 9647] +++ exited with 0 +++ [ 289.045893][ T27] audit: type=1804 audit(1680236972.432:826): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/137/.log" dev="sda1" ino=1153 res=1 errno=0 [pid 5083] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 9654] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9647, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5083] lstat("./137/file0", [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5083] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... openat resumed>) = 4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] fstat(4, [pid 5084] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] getdents64(4, [pid 5084] fstat(3, [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, [pid 5084] getdents64(3, [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] close(4 [pid 5084] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... close resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] rmdir("./137/file0" [pid 5084] lstat("./137/binderfs", [pid 5083] <... rmdir resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] umount2("./137/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9654] <... futex resumed>) = 1 [pid 9653] <... futex resumed>) = 0 [pid 5084] unlink("./137/binderfs" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9654] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9653] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5083] lstat("./137/.log", [pid 9654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9653] <... futex resumed>) = 0 [pid 5084] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9654] openat(AT_FDCWD, ".log", O_RDONLY [pid 9653] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] unlink("./137/.log" [pid 9654] <... openat resumed>) = 4 [ 289.089094][ T27] audit: type=1804 audit(1680236972.482:827): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/137/.log" dev="sda1" ino=1139 res=1 errno=0 [pid 5084] lstat("./137/file0", [pid 5083] <... unlink resumed>) = 0 [pid 9654] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, [pid 9654] <... futex resumed>) = 1 [pid 9653] <... futex resumed>) = 0 [pid 5084] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] close(3 [pid 5084] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... close resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5083] rmdir("./137" [pid 5084] fstat(4, [pid 5083] <... rmdir resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] mkdir("./138", 0777 [pid 5084] getdents64(4, [pid 5083] <... mkdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] getdents64(4, [pid 5083] <... openat resumed>) = 3 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5084] close(4 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] <... close resumed>) = 0 [pid 5083] close(3 [pid 9654] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9653] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] rmdir("./137/file0" [pid 5083] <... close resumed>) = 0 [pid 9654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9653] <... futex resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9654] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9653] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./137/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9654] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9678 [pid 5079] <... umount2 resumed>) = 0 [pid 9654] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./137/.log", [pid 9654] <... futex resumed>) = 1 [pid 9653] <... futex resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9654] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9653] exit_group(0 [pid 5084] unlink("./137/.log" [pid 5079] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9678 attached [pid 9654] <... futex resumed>) = ? [pid 9653] <... exit_group resumed>) = ? [pid 5084] <... unlink resumed>) = 0 [pid 9678] set_robust_list(0x5555559d56e0, 24 [pid 9654] +++ exited with 0 +++ [pid 5084] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9678] <... set_robust_list resumed>) = 0 [pid 9653] +++ exited with 0 +++ [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [ 289.159132][ T27] audit: type=1804 audit(1680236972.602:828): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/137/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5079] lstat("./137/file0", [pid 9678] chdir("./138" [pid 5084] close(3 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9653, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9678] <... chdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5079] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9678] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] rmdir("./137" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9678] <... prctl resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9678] setpgid(0, 0 [pid 5084] mkdir("./138", 0777 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 4 [pid 9678] <... setpgid resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] fstat(4, [pid 9678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] <... openat resumed>) = 3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9678] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5081] fstat(3, [pid 5079] getdents64(4, [pid 9678] write(3, "1000", 4 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9678] <... write resumed>) = 4 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] getdents64(3, [pid 5079] getdents64(4, [pid 9678] close(3 [pid 5084] close(3 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9678] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(4 [pid 9678] symlink("/dev/binderfs", "./binderfs" [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... close resumed>) = 0 [pid 9678] <... symlink resumed>) = 0 [pid 5081] lstat("./137/binderfs", [pid 5079] rmdir("./137/file0" [pid 9678] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9679 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 9678] <... futex resumed>) = 0 [pid 5081] unlink("./137/binderfs" [pid 5079] getdents64(3, [pid 9678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... unlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9678] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(3 [pid 9678] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... close resumed>) = 0 [pid 9678] <... mprotect resumed>) = 0 [pid 5081] lstat("./137/file0", [pid 5079] rmdir("./137" [pid 9678] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5081] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] mkdir("./138", 0777 [pid 9678] <... clone resumed>, parent_tid=[9680], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9680 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 9679 attached [pid 9678] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9679] set_robust_list(0x5555559d56e0, 24 [pid 9678] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5079] <... openat resumed>) = 3 [pid 9679] <... set_robust_list resumed>) = 0 [pid 9678] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] fstat(4, [pid 5079] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 9680 attached [pid 9679] chdir("./138" [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... ioctl resumed>) = 0 [pid 9680] set_robust_list(0x7ff2b37749e0, 24 [pid 9679] <... chdir resumed>) = 0 [pid 5081] getdents64(4, [pid 5079] close(3 [pid 9680] <... set_robust_list resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... close resumed>) = 0 [pid 9680] memfd_create("syzkaller", 0 [pid 9679] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] getdents64(4, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9680] <... memfd_create resumed>) = 3 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] close(4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9681 [pid 9680] <... mmap resumed>) = 0x7ff2ab354000 [pid 9679] <... prctl resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 9679] setpgid(0, 0 [pid 5081] rmdir("./137/file0" [pid 9679] <... setpgid resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 9679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] umount2("./137/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9679] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9679] write(3, "1000", 4 [pid 5081] lstat("./137/.log", [pid 9679] <... write resumed>) = 4 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 ./strace-static-x86_64: Process 9681 attached [pid 9679] close(3 [pid 5081] unlink("./137/.log" [pid 9681] set_robust_list(0x5555559d56e0, 24 [pid 9679] <... close resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 9681] <... set_robust_list resumed>) = 0 [pid 9679] symlink("/dev/binderfs", "./binderfs" [pid 5081] getdents64(3, [pid 9681] chdir("./138" [pid 9679] <... symlink resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9681] <... chdir resumed>) = 0 [pid 9679] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 9681] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9679] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 9681] <... prctl resumed>) = 0 [pid 9679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] rmdir("./137" [pid 9681] setpgid(0, 0 [pid 9679] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] <... rmdir resumed>) = 0 [pid 9681] <... setpgid resumed>) = 0 [pid 9679] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] mkdir("./138", 0777 [pid 9681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9679] <... mprotect resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 9681] <... openat resumed>) = 3 [pid 9679] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9681] write(3, "1000", 4 [pid 5081] <... openat resumed>) = 3 [pid 9681] <... write resumed>) = 4 [pid 9679] <... clone resumed>, parent_tid=[9682], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9682 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 9681] close(3 [pid 9679] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9681] <... close resumed>) = 0 [pid 9679] <... futex resumed>) = 0 [pid 5081] close(3 [pid 9681] symlink("/dev/binderfs", "./binderfs" [pid 9679] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 ./strace-static-x86_64: Process 9682 attached [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9682] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9683 [pid 9682] memfd_create("syzkaller", 0) = 3 [pid 9682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9681] <... symlink resumed>) = 0 [pid 9681] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 9683 attached ) = 0x7ff2b3754000 [pid 9683] set_robust_list(0x5555559d56e0, 24 [pid 9681] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9683] <... set_robust_list resumed>) = 0 [pid 9681] <... mprotect resumed>) = 0 [pid 9683] chdir("./138" [pid 9681] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9683] <... chdir resumed>) = 0 [pid 9683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9681] <... clone resumed>, parent_tid=[9684], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9684 [pid 9683] <... prctl resumed>) = 0 [pid 9681] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9683] setpgid(0, 0 [pid 9681] <... futex resumed>) = 0 [pid 9683] <... setpgid resumed>) = 0 [pid 9681] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 9684 attached [pid 9683] write(3, "1000", 4 [pid 9684] set_robust_list(0x7ff2b37749e0, 24 [pid 9683] <... write resumed>) = 4 [pid 9684] <... set_robust_list resumed>) = 0 [pid 9683] close(3 [pid 9684] memfd_create("syzkaller", 0 [pid 9683] <... close resumed>) = 0 [pid 9684] <... memfd_create resumed>) = 3 [pid 9683] symlink("/dev/binderfs", "./binderfs" [pid 9684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9683] <... symlink resumed>) = 0 [pid 9684] <... mmap resumed>) = 0x7ff2ab354000 [pid 9683] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9683] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9683] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9685], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9685 [pid 9683] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9683] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9685 attached [pid 9685] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9685] memfd_create("syzkaller", 0) = 3 [pid 9685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9676] <... write resumed>) = 16777216 [pid 9676] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9676] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9676] close(3) = 0 [pid 9676] mkdir("./file0", 0777) = 0 [ 289.778603][ T9676] loop0: detected capacity change from 0 to 32768 [ 289.820607][ T9676] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor373 (9676) [ 289.869224][ T9676] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 289.905322][ T9676] BTRFS info (device loop0): setting nodatasum [ 289.911510][ T9676] BTRFS info (device loop0): allowing degraded mounts [ 289.945305][ T9676] BTRFS info (device loop0): use zlib compression, level 3 [ 289.952533][ T9676] BTRFS info (device loop0): using free space tree [pid 9676] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9677] <... write resumed>) = 16777216 [pid 9677] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9682] <... write resumed>) = 16777216 [pid 9677] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9677] ioctl(4, LOOP_SET_FD, 3 [pid 9682] munmap(0x7ff2ab354000, 16777216 [pid 9680] <... write resumed>) = 16777216 [pid 9682] <... munmap resumed>) = 0 [pid 9680] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9680] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9682] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9680] <... openat resumed>) = 4 [pid 9682] <... openat resumed>) = 4 [pid 9682] ioctl(4, LOOP_SET_FD, 3 [pid 9680] ioctl(4, LOOP_SET_FD, 3 [pid 9682] <... ioctl resumed>) = 0 [pid 9677] <... ioctl resumed>) = 0 [pid 9677] close(3) = 0 [pid 9677] mkdir("./file0", 0777) = 0 [pid 9677] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9682] close(3 [pid 9680] <... ioctl resumed>) = 0 [pid 9682] <... close resumed>) = 0 [pid 9680] close(3 [pid 9682] mkdir("./file0", 0777 [pid 9680] <... close resumed>) = 0 [pid 9680] mkdir("./file0", 0777 [pid 9682] <... mkdir resumed>) = 0 [pid 9680] <... mkdir resumed>) = 0 [pid 9680] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 290.102648][ T9677] loop2: detected capacity change from 0 to 32768 [ 290.116743][ T9682] loop5: detected capacity change from 0 to 32768 [ 290.124026][ T9680] loop4: detected capacity change from 0 to 32768 [ 290.127543][ T9677] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9677) [pid 9682] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9677] <... mount resumed>) = -1 EEXIST (File exists) [pid 9677] ioctl(4, LOOP_CLR_FD [pid 9684] <... write resumed>) = 16777216 [pid 9680] <... mount resumed>) = -1 EEXIST (File exists) [pid 9680] ioctl(4, LOOP_CLR_FD [pid 9684] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9684] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9682] <... mount resumed>) = -1 EEXIST (File exists) [pid 9682] ioctl(4, LOOP_CLR_FD [pid 9684] ioctl(4, LOOP_SET_FD, 3 [pid 9685] <... write resumed>) = 16777216 [pid 9685] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9685] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9685] ioctl(4, LOOP_SET_FD, 3 [pid 9684] <... ioctl resumed>) = 0 [pid 9684] close(3) = 0 [ 290.163775][ T9680] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9680) [ 290.184086][ T9682] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9682) [ 290.204583][ T9684] loop1: detected capacity change from 0 to 32768 [pid 9684] mkdir("./file0", 0777 [pid 9685] <... ioctl resumed>) = 0 [pid 9685] close(3 [pid 9684] <... mkdir resumed>) = 0 [pid 9684] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9685] <... close resumed>) = 0 [pid 9685] mkdir("./file0", 0777) = 0 [ 290.208780][ T9685] loop3: detected capacity change from 0 to 32768 [ 290.214720][ T9676] BTRFS info (device loop0): enabling ssd optimizations [ 290.224676][ T9676] BTRFS info (device loop0): auto enabling async discard [ 290.232401][ T9684] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9684) [ 290.244108][ T9676] BTRFS info (device loop0): checking UUID tree [pid 9685] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9684] <... mount resumed>) = -1 EEXIST (File exists) [pid 9684] ioctl(4, LOOP_CLR_FD [pid 9676] <... mount resumed>) = 0 [pid 9676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9676] chdir("./file0") = 0 [pid 9685] <... mount resumed>) = -1 EEXIST (File exists) [pid 9676] ioctl(4, LOOP_CLR_FD [pid 9685] ioctl(4, LOOP_CLR_FD [pid 9676] <... ioctl resumed>) = 0 [ 290.295921][ T9685] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9685) [pid 9676] close(4) = 0 [pid 9676] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9674] <... futex resumed>) = 0 [pid 9676] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9674] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9674] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9676] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 9676] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9674] <... futex resumed>) = 0 [pid 9674] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9674] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9676] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9680] <... ioctl resumed>) = 0 [pid 9680] close(4) = 0 [pid 9680] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9678] <... futex resumed>) = 0 [pid 9680] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9678] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9682] <... ioctl resumed>) = 0 [pid 9680] <... openat resumed>) = 3 [pid 9678] <... futex resumed>) = 0 [pid 9680] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9678] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9680] <... futex resumed>) = 0 [pid 9678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9680] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9678] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9680] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9678] <... futex resumed>) = 0 [pid 9680] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9678] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9680] <... futex resumed>) = 0 [pid 9678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9680] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9678] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9678] <... futex resumed>) = 0 [pid 9674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9682] close(4 [ 290.401779][ T9676] BTRFS info (device loop0): balance: start -s [pid 9680] openat(AT_FDCWD, ".log", O_RDONLY [pid 9678] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9674] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9682] <... close resumed>) = 0 [pid 9680] <... openat resumed>) = 4 [pid 9674] <... futex resumed>) = 0 [pid 9682] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9680] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9682] <... futex resumed>) = 1 [pid 9680] <... futex resumed>) = 1 [pid 9679] <... futex resumed>) = 0 [pid 9678] <... futex resumed>) = 0 [pid 9674] <... mmap resumed>) = 0x7ff2ac333000 [pid 9682] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9680] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9679] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9678] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9674] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 9682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9679] <... futex resumed>) = 0 [pid 9678] <... futex resumed>) = 0 [pid 9674] <... mprotect resumed>) = 0 [pid 9682] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9680] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9679] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9678] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9674] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9682] <... openat resumed>) = 3 [pid 9680] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9682] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9680] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9674] <... clone resumed>, parent_tid=[9703], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9703 [pid 9682] <... futex resumed>) = 1 [pid 9680] <... futex resumed>) = 1 [pid 9679] <... futex resumed>) = 0 [pid 9678] <... futex resumed>) = 0 [pid 9674] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9682] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9680] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9679] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9678] exit_group(0 [pid 9674] <... futex resumed>) = 0 [pid 9682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9680] <... futex resumed>) = ? [pid 9679] <... futex resumed>) = 0 [pid 9678] <... exit_group resumed>) = ? [pid 9674] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9703 attached [pid 9682] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9680] +++ exited with 0 +++ [pid 9679] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9678] +++ exited with 0 +++ [pid 9703] set_robust_list(0x7ff2ac3539e0, 24 [pid 9682] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9703] <... set_robust_list resumed>) = 0 [pid 9682] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9678, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=22 /* 0.22 s */} --- [pid 9703] openat(AT_FDCWD, ".log", O_RDONLY [pid 9682] <... futex resumed>) = 1 [pid 9679] <... futex resumed>) = 0 [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 9703] <... openat resumed>) = 5 [pid 9682] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9679] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... restart_syscall resumed>) = 0 [pid 9703] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9679] <... futex resumed>) = 0 [pid 9703] <... futex resumed>) = 1 [pid 9682] openat(AT_FDCWD, ".log", O_RDONLY [pid 9679] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9674] <... futex resumed>) = 0 [pid 9703] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9682] <... openat resumed>) = 4 [pid 9674] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9682] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9674] <... futex resumed>) = 0 [pid 5083] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9703] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9682] <... futex resumed>) = 1 [pid 9679] <... futex resumed>) = 0 [pid 9674] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9682] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9679] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9679] <... futex resumed>) = 0 [pid 9682] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9679] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 3 [pid 9682] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] fstat(3, [pid 9682] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9679] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9682] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9679] exit_group(0 [pid 5083] getdents64(3, [pid 9682] <... futex resumed>) = ? [pid 9679] <... exit_group resumed>) = ? [pid 9682] +++ exited with 0 +++ [pid 9679] +++ exited with 0 +++ [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9679, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5083] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./138/binderfs" [pid 5084] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] <... unlink resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [ 290.443053][ T27] audit: type=1804 audit(1680236973.912:829): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/138/.log" dev="sda1" ino=1162 res=1 errno=0 [ 290.466226][ T9676] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5084] fstat(3, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] lstat("./138/file0", [pid 5084] getdents64(3, [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./138/binderfs", [pid 5083] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./138/binderfs" [pid 5083] <... openat resumed>) = 4 [pid 5084] <... unlink resumed>) = 0 [pid 5083] fstat(4, [pid 5084] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] getdents64(4, [pid 5084] lstat("./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] getdents64(4, [pid 9677] <... ioctl resumed>) = 0 [pid 9674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./138/file0") = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9677] close(4 [pid 5084] umount2("./138/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] close(4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./138/.log", [pid 5083] <... close resumed>) = 0 [pid 9677] <... close resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] unlink("./138/.log") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./138") = 0 [pid 5084] mkdir("./139", 0777 [pid 9677] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] rmdir("./138/file0" [pid 9677] <... futex resumed>) = 1 [pid 9675] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9677] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9675] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... rmdir resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 9677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9675] <... futex resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9677] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9675] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./138/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9677] <... openat resumed>) = 3 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9705 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9677] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./138/.log", [pid 9677] <... futex resumed>) = 1 [pid 9675] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9677] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9675] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./138/.log" [pid 9677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9675] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9705 attached [pid 9677] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9675] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... unlink resumed>) = 0 [ 290.537679][ T27] audit: type=1804 audit(1680236973.972:830): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/137/file0/.log" dev="loop0" ino=263 res=1 errno=0 [ 290.545967][ T9676] BTRFS info (device loop0): balance: ended with status: 0 [ 290.560299][ T9703] BTRFS info (device loop0): scrub: started on devid 1 [pid 9705] set_robust_list(0x5555559d56e0, 24 [pid 9677] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] getdents64(3, [pid 9705] <... set_robust_list resumed>) = 0 [pid 9677] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9705] chdir("./139" [pid 9677] <... futex resumed>) = 1 [pid 9675] <... futex resumed>) = 0 [pid 5083] close(3 [pid 9705] <... chdir resumed>) = 0 [pid 9677] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9675] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... close resumed>) = 0 [pid 9705] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9675] <... futex resumed>) = 0 [pid 5083] rmdir("./138" [pid 9677] openat(AT_FDCWD, ".log", O_RDONLY [pid 9675] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9705] <... prctl resumed>) = 0 [pid 9705] setpgid(0, 0) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 9705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9677] <... openat resumed>) = 4 [pid 5083] mkdir("./139", 0777 [pid 9677] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9705] <... openat resumed>) = 3 [pid 9705] write(3, "1000", 4 [pid 5083] <... mkdir resumed>) = 0 [pid 9677] <... futex resumed>) = 1 [pid 9675] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9677] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9675] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 9705] <... write resumed>) = 4 [pid 9677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9675] <... futex resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 9705] close(3 [pid 9677] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9675] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9705] <... close resumed>) = 0 [pid 9677] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] close(3 [pid 9705] symlink("/dev/binderfs", "./binderfs" [pid 9677] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9705] <... symlink resumed>) = 0 [pid 9677] <... futex resumed>) = 1 [pid 9675] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 9705] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9677] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9675] exit_group(0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9705] <... futex resumed>) = 0 [pid 9677] <... futex resumed>) = ? [pid 9675] <... exit_group resumed>) = ? [pid 9705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9705] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9705] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9707], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9707 [pid 9705] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9677] +++ exited with 0 +++ [pid 9675] +++ exited with 0 +++ [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9706 [pid 9705] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9684] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 9707 attached [pid 9707] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9707] memfd_create("syzkaller", 0 [pid 9684] close(4 [pid 9707] <... memfd_create resumed>) = 3 [pid 9684] <... close resumed>) = 0 [pid 9707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9684] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9707] <... mmap resumed>) = 0x7ff2ab354000 [pid 9684] <... futex resumed>) = 1 [pid 9681] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9706 attached [pid 9684] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9681] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9676] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9675, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=29 /* 0.29 s */} --- [pid 9684] <... openat resumed>) = 3 [pid 9681] <... futex resumed>) = 0 [pid 9684] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9681] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9684] <... futex resumed>) = 0 [pid 9681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9684] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9681] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9684] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9681] <... futex resumed>) = 0 [pid 9706] set_robust_list(0x5555559d56e0, 24 [pid 9703] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=14, data_bytes_scrubbed=12288, tree_bytes_scrubbed=57344, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9684] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9681] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9676] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9706] <... set_robust_list resumed>) = 0 [pid 9703] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9684] <... futex resumed>) = 0 [pid 9681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9684] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9681] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9681] <... futex resumed>) = 0 [pid 9684] openat(AT_FDCWD, ".log", O_RDONLY [pid 9681] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9684] <... openat resumed>) = 4 [pid 9676] <... futex resumed>) = 0 [pid 9674] exit_group(0 [pid 9706] chdir("./139" [pid 9703] <... futex resumed>) = ? [pid 9684] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9674] <... exit_group resumed>) = ? [pid 9684] <... futex resumed>) = 1 [pid 9681] <... futex resumed>) = 0 [pid 9684] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9681] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9681] <... futex resumed>) = 0 [pid 9684] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9681] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9684] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9684] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9681] <... futex resumed>) = 0 [pid 9684] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9681] exit_group(0 [pid 9684] <... futex resumed>) = ? [pid 9681] <... exit_group resumed>) = ? [pid 9706] <... chdir resumed>) = 0 [pid 9703] +++ exited with 0 +++ [pid 9684] +++ exited with 0 +++ [pid 9681] +++ exited with 0 +++ [pid 9706] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9676] +++ exited with 0 +++ [pid 9674] +++ exited with 0 +++ [pid 5080] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9706] <... prctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9681, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=24 /* 0.24 s */} --- [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9674, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=31 /* 0.31 s */} --- [pid 9706] setpgid(0, 0 [pid 5080] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 9706] <... setpgid resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... restart_syscall resumed>) = 0 [pid 9706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] fstat(3, [pid 9706] <... openat resumed>) = 3 [pid 9706] write(3, "1000", 4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5079] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9706] <... write resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9706] close(3 [pid 5080] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 9706] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 9706] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 290.640264][ T9703] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 290.658308][ T27] audit: type=1804 audit(1680236973.972:831): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/138/.log" dev="sda1" ino=1163 res=1 errno=0 [pid 5079] fstat(3, [pid 9706] <... symlink resumed>) = 0 [pid 5080] lstat("./138/binderfs", [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9706] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9685] <... ioctl resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] getdents64(3, [pid 5078] getdents64(3, [pid 9706] <... futex resumed>) = 0 [pid 9685] close(4 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9685] <... close resumed>) = 0 [pid 9706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9685] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] unlink("./138/binderfs" [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9706] <... mmap resumed>) = 0x7ff2b3754000 [pid 9685] <... futex resumed>) = 1 [pid 9683] <... futex resumed>) = 0 [pid 9706] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9685] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... unlink resumed>) = 0 [pid 5079] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9706] <... mprotect resumed>) = 0 [pid 9706] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9683] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./137/binderfs", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./138/binderfs", [pid 9706] <... clone resumed>, parent_tid=[9708], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9708 [pid 5080] lstat("./138/file0", [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9706] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9685] <... futex resumed>) = 0 [pid 9683] <... futex resumed>) = 1 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./137/binderfs" [pid 9706] <... futex resumed>) = 0 [pid 9685] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9683] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./138/binderfs" [pid 9706] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9685] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... unlink resumed>) = 0 [pid 9685] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... unlink resumed>) = 0 [pid 9685] <... futex resumed>) = 1 [pid 9683] <... futex resumed>) = 0 [pid 5078] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9685] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9683] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 4 [pid 5079] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9683] <... futex resumed>) = 0 [pid 5080] fstat(4, [pid 9683] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9685] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9685] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] lstat("./138/file0", [pid 9685] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 9685] <... futex resumed>) = 1 [pid 9683] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 290.730700][ T27] audit: type=1804 audit(1680236974.102:832): pid=9677 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/138/.log" dev="sda1" ino=1149 res=1 errno=0 ./strace-static-x86_64: Process 9708 attached [pid 9685] openat(AT_FDCWD, ".log", O_RDONLY [pid 9683] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9708] set_robust_list(0x7ff2b37749e0, 24 [pid 9685] <... openat resumed>) = 4 [pid 9683] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9708] <... set_robust_list resumed>) = 0 [pid 9685] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9683] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9708] memfd_create("syzkaller", 0 [pid 9685] <... futex resumed>) = 0 [pid 9683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9708] <... memfd_create resumed>) = 3 [pid 9685] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9683] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(4 [pid 9683] <... futex resumed>) = 0 [pid 9708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9685] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9683] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... openat resumed>) = 4 [pid 9708] <... mmap resumed>) = 0x7ff2ab354000 [pid 9685] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5079] fstat(4, [pid 5078] <... umount2 resumed>) = 0 [pid 5078] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9685] <... futex resumed>) = 1 [pid 9683] <... futex resumed>) = 0 [pid 5080] rmdir("./138/file0" [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9685] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9683] exit_group(0 [pid 5078] getdents64(4, [pid 9685] <... futex resumed>) = ? [pid 9683] <... exit_group resumed>) = ? [pid 5080] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9685] +++ exited with 0 +++ [pid 5078] getdents64(4, [pid 9683] +++ exited with 0 +++ [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9683, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5080] umount2("./138/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] close(4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 5078] <... close resumed>) = 0 [pid 5080] lstat("./138/.log", [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] rmdir("./137/file0" [pid 5081] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] unlink("./138/.log" [pid 5079] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5081] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... unlink resumed>) = 0 [pid 5079] rmdir("./138/file0" [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] getdents64(3, [pid 5078] close(3 [pid 9707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] fstat(3, [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] close(3 [pid 5079] umount2("./138/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./137" [pid 5081] getdents64(3, [pid 5080] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... rmdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] rmdir("./138" [pid 5079] lstat("./138/.log", [pid 5078] mkdir("./138", 0777 [pid 5081] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] mkdir("./139", 0777 [pid 5079] unlink("./138/.log" [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] lstat("./138/binderfs", [pid 5078] <... openat resumed>) = 3 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5081] unlink("./138/binderfs" [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] getdents64(3, [pid 5078] <... ioctl resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5078] close(3 [pid 5081] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] close(3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] lstat("./138/file0", [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] close(3 [pid 5079] rmdir("./138" [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9709 [pid 5081] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... rmdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] mkdir("./139", 0777 [pid 5081] close(4) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5081] rmdir("./138/file0") = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9710 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] umount2("./138/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./138/.log", [pid 5079] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9710 attached [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9710] set_robust_list(0x5555559d56e0, 24 [pid 5081] unlink("./138/.log" [pid 9710] <... set_robust_list resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9710] chdir("./139" [pid 5081] getdents64(3, [pid 5079] close(3 [pid 9710] <... chdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... close resumed>) = 0 [pid 9710] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] close(3 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9710] <... prctl resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 9710] setpgid(0, 0 [pid 5081] rmdir("./138" [pid 9710] <... setpgid resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9709 attached [pid 9710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] mkdir("./139", 0777 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9711 ./strace-static-x86_64: Process 9711 attached [pid 9710] <... openat resumed>) = 3 [pid 9709] set_robust_list(0x5555559d56e0, 24 [pid 5081] <... mkdir resumed>) = 0 [pid 9711] set_robust_list(0x5555559d56e0, 24 [pid 9710] write(3, "1000", 4 [pid 9709] <... set_robust_list resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9710] <... write resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 9711] <... set_robust_list resumed>) = 0 [pid 9710] close(3 [pid 9709] chdir("./138" [pid 5081] ioctl(3, LOOP_CLR_FD [pid 9711] chdir("./139" [pid 9710] <... close resumed>) = 0 [pid 9709] <... chdir resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9711] <... chdir resumed>) = 0 [pid 9710] symlink("/dev/binderfs", "./binderfs" [pid 9709] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] close(3 [pid 9711] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9710] <... symlink resumed>) = 0 [pid 9709] <... prctl resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 9711] <... prctl resumed>) = 0 [pid 9710] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9709] setpgid(0, 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9711] setpgid(0, 0 [pid 9710] <... futex resumed>) = 0 [pid 9709] <... setpgid resumed>) = 0 [pid 9711] <... setpgid resumed>) = 0 [pid 9710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9712 [pid 9711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9710] <... mmap resumed>) = 0x7ff2b3754000 [pid 9709] <... openat resumed>) = 3 [pid 9711] <... openat resumed>) = 3 [pid 9710] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9709] write(3, "1000", 4 [pid 9711] write(3, "1000", 4 [pid 9710] <... mprotect resumed>) = 0 [pid 9709] <... write resumed>) = 4 ./strace-static-x86_64: Process 9712 attached [pid 9711] <... write resumed>) = 4 [pid 9710] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9712] set_robust_list(0x5555559d56e0, 24 [pid 9711] close(3 [pid 9709] close(3./strace-static-x86_64: Process 9713 attached [pid 9712] <... set_robust_list resumed>) = 0 [pid 9711] <... close resumed>) = 0 [pid 9710] <... clone resumed>, parent_tid=[9713], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9713 [pid 9709] <... close resumed>) = 0 [pid 9713] set_robust_list(0x7ff2b37749e0, 24 [pid 9712] chdir("./139" [pid 9711] symlink("/dev/binderfs", "./binderfs" [pid 9710] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9709] symlink("/dev/binderfs", "./binderfs" [pid 9713] <... set_robust_list resumed>) = 0 [pid 9712] <... chdir resumed>) = 0 [pid 9711] <... symlink resumed>) = 0 [pid 9710] <... futex resumed>) = 0 [pid 9709] <... symlink resumed>) = 0 [pid 9713] memfd_create("syzkaller", 0 [pid 9712] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9711] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9710] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9709] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9713] <... memfd_create resumed>) = 3 [pid 9712] <... prctl resumed>) = 0 [pid 9713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9712] setpgid(0, 0 [pid 9711] <... futex resumed>) = 0 [pid 9709] <... futex resumed>) = 0 [pid 9712] <... setpgid resumed>) = 0 [pid 9711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9713] <... mmap resumed>) = 0x7ff2ab354000 [pid 9712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9711] <... mmap resumed>) = 0x7ff2b3754000 [pid 9712] <... openat resumed>) = 3 [pid 9711] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9709] <... mmap resumed>) = 0x7ff2b3754000 [pid 9712] write(3, "1000", 4 [pid 9711] <... mprotect resumed>) = 0 [pid 9709] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9712] <... write resumed>) = 4 [pid 9709] <... mprotect resumed>) = 0 [pid 9712] close(3 [pid 9711] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9709] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9712] <... close resumed>) = 0 [pid 9712] symlink("/dev/binderfs", "./binderfs" [pid 9711] <... clone resumed>, parent_tid=[9714], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9714 [pid 9712] <... symlink resumed>) = 0 [pid 9711] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9709] <... clone resumed>, parent_tid=[9715], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9715 [pid 9712] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9711] <... futex resumed>) = 0 [pid 9709] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9712] <... futex resumed>) = 0 [pid 9711] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9709] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9715 attached ./strace-static-x86_64: Process 9714 attached [pid 9712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9709] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9715] set_robust_list(0x7ff2b37749e0, 24 [pid 9714] set_robust_list(0x7ff2b37749e0, 24 [pid 9712] <... mmap resumed>) = 0x7ff2b3754000 [pid 9715] <... set_robust_list resumed>) = 0 [pid 9712] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9715] memfd_create("syzkaller", 0 [pid 9714] <... set_robust_list resumed>) = 0 [pid 9712] <... mprotect resumed>) = 0 [pid 9715] <... memfd_create resumed>) = 3 [pid 9714] memfd_create("syzkaller", 0 [pid 9712] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9712] <... clone resumed>, parent_tid=[9716], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9716 [pid 9714] <... memfd_create resumed>) = 3 [pid 9712] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9712] <... futex resumed>) = 0 [pid 9714] <... mmap resumed>) = 0x7ff2ab354000 [pid 9712] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9716 attached [pid 9716] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9716] memfd_create("syzkaller", 0) = 3 [pid 9716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9707] <... write resumed>) = 16777216 [pid 9713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9707] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9707] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9707] ioctl(4, LOOP_SET_FD, 3 [pid 9716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9707] <... ioctl resumed>) = 0 [pid 9707] close(3) = 0 [pid 9707] mkdir("./file0", 0777) = 0 [pid 9707] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 291.409017][ T9707] loop5: detected capacity change from 0 to 32768 [ 291.446510][ T9707] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (9707) [ 291.505943][ T9707] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 291.515256][ T9707] BTRFS info (device loop5): setting nodatasum [ 291.540051][ T9707] BTRFS info (device loop5): allowing degraded mounts [ 291.576836][ T9707] BTRFS info (device loop5): use zlib compression, level 3 [ 291.584402][ T9707] BTRFS info (device loop5): using free space tree [pid 9715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9713] <... write resumed>) = 16777216 [pid 9713] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9713] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9713] close(3) = 0 [pid 9713] mkdir("./file0", 0777) = 0 [pid 9713] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [pid 9713] ioctl(4, LOOP_CLR_FD [pid 9714] <... write resumed>) = 16777216 [pid 9714] munmap(0x7ff2ab354000, 16777216 [pid 9708] <... write resumed>) = 16777216 [pid 9714] <... munmap resumed>) = 0 [pid 9708] munmap(0x7ff2ab354000, 16777216 [ 291.746604][ T9713] loop2: detected capacity change from 0 to 32768 [ 291.759424][ T9713] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9713) [pid 9714] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9708] <... munmap resumed>) = 0 [pid 9714] ioctl(4, LOOP_SET_FD, 3 [pid 9708] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9714] <... ioctl resumed>) = 0 [pid 9708] ioctl(4, LOOP_SET_FD, 3 [pid 9714] close(3) = 0 [pid 9708] <... ioctl resumed>) = 0 [pid 9714] mkdir("./file0", 0777 [pid 9708] close(3 [pid 9714] <... mkdir resumed>) = 0 [pid 9708] <... close resumed>) = 0 [pid 9714] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 291.801152][ T9707] BTRFS info (device loop5): enabling ssd optimizations [ 291.827193][ T9714] loop1: detected capacity change from 0 to 32768 [ 291.830057][ T9707] BTRFS info (device loop5): auto enabling async discard [ 291.842575][ T9708] loop4: detected capacity change from 0 to 32768 [pid 9708] mkdir("./file0", 0777) = 0 [pid 9708] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9715] <... write resumed>) = 16777216 [pid 9714] <... mount resumed>) = -1 EEXIST (File exists) [pid 9715] munmap(0x7ff2ab354000, 16777216 [pid 9714] ioctl(4, LOOP_CLR_FD [pid 9708] <... mount resumed>) = -1 EEXIST (File exists) [pid 9715] <... munmap resumed>) = 0 [pid 9708] ioctl(4, LOOP_CLR_FD [pid 9715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9715] ioctl(4, LOOP_SET_FD, 3 [pid 9707] <... mount resumed>) = 0 [pid 9715] <... ioctl resumed>) = 0 [pid 9707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9715] close(3 [pid 9707] <... openat resumed>) = 3 [pid 9715] <... close resumed>) = 0 [pid 9707] chdir("./file0" [pid 9715] mkdir("./file0", 0777 [pid 9707] <... chdir resumed>) = 0 [pid 9715] <... mkdir resumed>) = 0 [pid 9707] ioctl(4, LOOP_CLR_FD [pid 9715] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9707] <... ioctl resumed>) = 0 [ 291.870287][ T9714] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9714) [ 291.885634][ T9708] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9708) [ 291.897429][ T9707] BTRFS info (device loop5): checking UUID tree [ 291.909174][ T9715] loop0: detected capacity change from 0 to 32768 [pid 9707] close(4) = 0 [pid 9716] <... write resumed>) = 16777216 [pid 9707] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9705] <... futex resumed>) = 0 [pid 9707] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9705] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9705] <... futex resumed>) = 0 [pid 9707] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9705] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9707] <... openat resumed>) = 4 [pid 9707] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9705] <... futex resumed>) = 0 [pid 9707] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9705] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9705] <... futex resumed>) = 0 [pid 9707] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9705] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9716] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9716] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 291.926351][ T9715] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9715) [pid 9716] ioctl(4, LOOP_SET_FD, 3 [pid 9715] <... mount resumed>) = -1 EEXIST (File exists) [pid 9716] <... ioctl resumed>) = 0 [pid 9716] close(3) = 0 [pid 9715] ioctl(4, LOOP_CLR_FD [pid 9716] mkdir("./file0", 0777) = 0 [ 291.972479][ T9716] loop3: detected capacity change from 0 to 32768 [ 291.979597][ T9707] BTRFS info (device loop5): balance: start -s [ 292.007006][ T9707] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 9716] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9705] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 9705] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9705] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9734], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9734 [pid 9705] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9705] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9734 attached [pid 9734] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 9734] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 9734] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9705] <... futex resumed>) = 0 [pid 9734] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9705] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9734] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9705] <... futex resumed>) = 0 [pid 9734] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9705] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9716] <... mount resumed>) = -1 EEXIST (File exists) [ 292.011577][ T9716] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9716) [pid 9716] ioctl(4, LOOP_CLR_FD [pid 9705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9713] <... ioctl resumed>) = 0 [pid 9713] close(4) = 0 [pid 9713] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9710] <... futex resumed>) = 0 [pid 9713] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9710] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9713] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9710] <... futex resumed>) = 0 [pid 9710] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9713] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9713] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9710] <... futex resumed>) = 0 [pid 9713] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9710] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9713] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9710] <... futex resumed>) = 0 [pid 9713] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9710] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9713] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9713] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9710] <... futex resumed>) = 0 [pid 9713] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9710] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9713] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9710] <... futex resumed>) = 0 [pid 9713] openat(AT_FDCWD, ".log", O_RDONLY [pid 9710] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9713] <... openat resumed>) = 4 [pid 9713] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9710] <... futex resumed>) = 0 [pid 9713] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9710] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9713] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9710] <... futex resumed>) = 0 [pid 9713] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 292.120978][ T9734] BTRFS info (device loop5): scrub: started on devid 1 [ 292.121689][ T9707] BTRFS info (device loop5): balance: ended with status: 0 [pid 9710] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9713] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9713] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9707] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9713] <... futex resumed>) = 1 [pid 9710] <... futex resumed>) = 0 [pid 9707] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9713] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9710] exit_group(0 [pid 9707] <... futex resumed>) = 0 [pid 9713] <... futex resumed>) = ? [pid 9710] <... exit_group resumed>) = ? [pid 9707] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9713] +++ exited with 0 +++ [pid 9710] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9710, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=21 /* 0.21 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5080] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./139/binderfs") = 0 [pid 5080] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9714] <... ioctl resumed>) = 0 [pid 5080] lstat("./139/file0", [ 292.188649][ T9734] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 9714] close(4 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9714] <... close resumed>) = 0 [pid 5080] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9734] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9714] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9734] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9714] <... futex resumed>) = 1 [pid 9711] <... futex resumed>) = 0 [pid 9705] exit_group(0 [pid 5080] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9734] <... futex resumed>) = ? [pid 9714] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9711] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9707] <... futex resumed>) = ? [pid 9705] <... exit_group resumed>) = ? [pid 5080] <... openat resumed>) = 4 [pid 9734] +++ exited with 0 +++ [pid 9714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9711] <... futex resumed>) = 0 [pid 9707] +++ exited with 0 +++ [pid 9705] +++ exited with 0 +++ [pid 5080] fstat(4, [pid 9714] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9711] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9705, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=31 /* 0.31 s */} --- [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9714] <... openat resumed>) = 3 [pid 5080] getdents64(4, [pid 9714] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9714] <... futex resumed>) = 1 [pid 9711] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 9714] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9711] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9711] <... futex resumed>) = 0 [pid 5084] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(4 [pid 9714] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9711] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9708] <... ioctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 9714] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] rmdir("./139/file0" [pid 9714] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 9714] <... futex resumed>) = 1 [pid 9711] <... futex resumed>) = 0 [pid 5084] fstat(3, [pid 5080] umount2("./139/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9714] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9711] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9711] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 5080] lstat("./139/.log", [pid 9715] <... ioctl resumed>) = 0 [pid 9714] openat(AT_FDCWD, ".log", O_RDONLY [pid 9711] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9715] close(4 [pid 9714] <... openat resumed>) = 4 [pid 5084] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] unlink("./139/.log" [pid 9715] <... close resumed>) = 0 [pid 9714] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... unlink resumed>) = 0 [pid 9715] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9714] <... futex resumed>) = 1 [pid 9711] <... futex resumed>) = 0 [pid 5084] lstat("./139/binderfs", [pid 5080] getdents64(3, [pid 9715] <... futex resumed>) = 1 [pid 9714] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9711] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9709] <... futex resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9715] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9711] <... futex resumed>) = 0 [pid 9709] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./139/binderfs" [pid 5080] close(3 [pid 9715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9714] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9711] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9709] <... futex resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 9715] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9714] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9709] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./139") = 0 [pid 5080] mkdir("./140", 0777 [pid 9715] <... openat resumed>) = 3 [pid 9714] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... mkdir resumed>) = 0 [pid 9715] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9714] <... futex resumed>) = 1 [pid 9711] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9715] <... futex resumed>) = 1 [pid 9714] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9711] exit_group(0 [pid 9709] <... futex resumed>) = 0 [pid 9708] close(4 [pid 5080] <... openat resumed>) = 3 [pid 9715] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9714] <... futex resumed>) = ? [pid 9711] <... exit_group resumed>) = ? [pid 9709] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9708] <... close resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9714] +++ exited with 0 +++ [pid 9711] +++ exited with 0 +++ [pid 9709] <... futex resumed>) = 0 [pid 9708] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9715] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9709] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9708] <... futex resumed>) = 1 [pid 9706] <... futex resumed>) = 0 [pid 5080] close(3 [pid 9715] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9708] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9706] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9711, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=27 /* 0.27 s */} --- [pid 9708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9706] <... futex resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9715] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9708] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9706] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9715] <... futex resumed>) = 1 [pid 9709] <... futex resumed>) = 0 [pid 9708] <... openat resumed>) = 3 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9736 [pid 5079] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9708] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9709] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9715] openat(AT_FDCWD, ".log", O_RDONLY [pid 5079] <... openat resumed>) = 3 [pid 9708] <... futex resumed>) = 1 [pid 9706] <... futex resumed>) = 0 [pid 5079] fstat(3, [pid 9708] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9706] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9709] <... futex resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9715] <... openat resumed>) = 4 [pid 9709] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9706] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 9708] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9706] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9708] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9708] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9715] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9708] <... futex resumed>) = 1 [pid 9706] <... futex resumed>) = 0 [pid 5079] lstat("./139/binderfs", [pid 9708] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9706] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9706] <... futex resumed>) = 0 [pid 5079] unlink("./139/binderfs" [pid 9708] openat(AT_FDCWD, ".log", O_RDONLY [pid 9706] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... unlink resumed>) = 0 [pid 9715] <... futex resumed>) = 1 [pid 9709] <... futex resumed>) = 0 [pid 9708] <... openat resumed>) = 4 [pid 5079] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9709] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9708] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9715] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9709] <... futex resumed>) = 0 [pid 9708] <... futex resumed>) = 1 [pid 9706] <... futex resumed>) = 0 [pid 5079] lstat("./139/file0", [pid 9715] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9709] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9708] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9706] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9715] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9706] <... futex resumed>) = 0 [pid 5079] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9715] <... futex resumed>) = 0 [pid 9709] exit_group(0 [pid 9708] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9706] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9709] <... exit_group resumed>) = ? [pid 9708] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9715] +++ exited with 0 +++ [pid 9709] +++ exited with 0 +++ [pid 9708] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 4 [pid 9708] <... futex resumed>) = 1 [pid 9706] <... futex resumed>) = 0 [pid 5079] fstat(4, [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9709, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=22 /* 0.22 s */} --- [pid 9716] <... ioctl resumed>) = 0 [pid 9708] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9706] exit_group(0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9708] <... futex resumed>) = ? [pid 9706] <... exit_group resumed>) = ? [pid 5079] getdents64(4, [pid 9708] +++ exited with 0 +++ [pid 9706] +++ exited with 0 +++ [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9706, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=27 /* 0.27 s */} --- [pid 5079] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] close(4 [pid 5078] <... openat resumed>) = 3 [pid 5083] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 [pid 5078] fstat(3, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./139/file0" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 9716] close(4 [pid 5083] <... openat resumed>) = 3 [pid 5079] umount2("./139/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9716] <... close resumed>) = 0 [pid 5083] fstat(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9716] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] lstat("./139/.log", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9716] <... futex resumed>) = 1 [pid 9712] <... futex resumed>) = 0 [pid 5083] getdents64(3, [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] lstat("./138/binderfs", [pid 9716] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9712] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] unlink("./139/.log" [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 9736 attached [pid 9716] <... openat resumed>) = 3 [pid 9712] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 5078] unlink("./138/binderfs" [pid 9736] set_robust_list(0x5555559d56e0, 24 [pid 9716] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9712] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, [pid 5078] <... unlink resumed>) = 0 [pid 9736] <... set_robust_list resumed>) = 0 [pid 9716] <... futex resumed>) = 0 [pid 9712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./139/binderfs", [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9736] chdir("./140" [pid 9716] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9712] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] lstat("./139/file0", [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9736] <... chdir resumed>) = 0 [pid 9716] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9712] <... futex resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] unlink("./139/binderfs" [pid 5079] <... close resumed>) = 0 [pid 5078] lstat("./138/file0", [pid 9736] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9716] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9712] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... unlink resumed>) = 0 [pid 5079] rmdir("./139" [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9736] <... prctl resumed>) = 0 [pid 9716] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... rmdir resumed>) = 0 [pid 5078] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9736] setpgid(0, 0 [pid 9716] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] mkdir("./140", 0777 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9736] <... setpgid resumed>) = 0 [pid 9716] <... futex resumed>) = 1 [pid 9712] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5083] lstat("./139/file0", [pid 5079] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9716] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9712] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(4, [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] <... openat resumed>) = 4 [pid 9736] <... openat resumed>) = 3 [pid 9716] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9712] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 3 [pid 5078] fstat(4, [pid 9736] write(3, "1000", 4 [pid 9716] openat(AT_FDCWD, ".log", O_RDONLY [pid 9712] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(4, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9736] <... write resumed>) = 4 [pid 9716] <... openat resumed>) = 4 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] getdents64(4, [pid 9736] close(3 [pid 9716] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, [pid 5083] <... openat resumed>) = 4 [pid 5079] close(3 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9736] <... close resumed>) = 0 [pid 9716] <... futex resumed>) = 1 [pid 9712] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] fstat(4, [pid 5079] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 9716] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9712] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9716] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] getdents64(4, [pid 5078] close(4 [pid 9716] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9737 [pid 5078] <... close resumed>) = 0 [pid 9716] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] getdents64(4, [pid 5078] rmdir("./138/file0" [pid 9716] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9716] <... futex resumed>) = 0 [pid 5083] close(4 [pid 5078] umount2("./138/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9716] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] rmdir("./139/file0" [pid 5078] lstat("./138/.log", [pid 5083] <... rmdir resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9736] symlink("/dev/binderfs", "./binderfs" [pid 5084] close(4 [pid 5083] umount2("./139/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9716] <... futex resumed>) = 0 [pid 9712] <... futex resumed>) = 1 [pid 5078] unlink("./138/.log"./strace-static-x86_64: Process 9737 attached [pid 9736] <... symlink resumed>) = 0 [pid 9716] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9712] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... unlink resumed>) = 0 [pid 9737] set_robust_list(0x5555559d56e0, 24 [pid 9736] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] rmdir("./139/file0" [pid 5083] lstat("./139/.log", [pid 5078] getdents64(3, [pid 9737] <... set_robust_list resumed>) = 0 [pid 9736] <... futex resumed>) = 0 [pid 9712] exit_group(0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9737] chdir("./140" [pid 9736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9716] <... futex resumed>) = ? [pid 9712] <... exit_group resumed>) = ? [pid 5084] getdents64(3, [pid 5083] unlink("./139/.log" [pid 5078] close(3 [pid 9737] <... chdir resumed>) = 0 [pid 9736] <... mmap resumed>) = 0x7ff2b3754000 [pid 9716] +++ exited with 0 +++ [pid 9712] +++ exited with 0 +++ [pid 5083] <... unlink resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... close resumed>) = 0 [pid 9737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9736] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] close(3 [pid 5083] getdents64(3, [pid 5078] rmdir("./138" [pid 9737] <... prctl resumed>) = 0 [pid 9736] <... mprotect resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9712, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=31 /* 0.31 s */} --- [pid 5078] <... rmdir resumed>) = 0 [pid 9737] setpgid(0, 0 [pid 9736] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] rmdir("./139" [pid 5083] close(3 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5078] mkdir("./139", 0777 [pid 9737] <... setpgid resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 9737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9736] <... clone resumed>, parent_tid=[9738], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9738 [pid 5084] mkdir("./140", 0777 [pid 5083] rmdir("./139" [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9737] <... openat resumed>) = 3 [pid 9736] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 ./strace-static-x86_64: Process 9738 attached [pid 9737] write(3, "1000", 4 [pid 9736] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] mkdir("./140", 0777 [pid 5081] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9738] set_robust_list(0x7ff2b37749e0, 24 [pid 9737] <... write resumed>) = 4 [pid 9736] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 3 [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9738] <... set_robust_list resumed>) = 0 [pid 9737] close(3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(3 [pid 9738] memfd_create("syzkaller", 0 [pid 9737] <... close resumed>) = 0 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] <... openat resumed>) = 3 [pid 5081] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 9737] symlink("/dev/binderfs", "./binderfs" [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] fstat(3, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9737] <... symlink resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9737] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 5081] getdents64(3, [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9739 [pid 9737] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9738] <... memfd_create resumed>) = 3 [pid 9737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] close(3 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9737] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9738] <... mmap resumed>) = 0x7ff2ab354000 [pid 9737] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9740 [pid 5081] lstat("./139/binderfs", [pid 9737] <... mprotect resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9737] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] unlink("./139/binderfs"./strace-static-x86_64: Process 9739 attached ) = 0 [pid 9739] set_robust_list(0x5555559d56e0, 24 [pid 9737] <... clone resumed>, parent_tid=[9741], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9741 [pid 5081] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9739] <... set_robust_list resumed>) = 0 [pid 9737] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9739] chdir("./139" [pid 9737] <... futex resumed>) = 0 [pid 5081] lstat("./139/file0", [pid 9739] <... chdir resumed>) = 0 [pid 9737] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9741 attached [pid 9739] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9741] set_robust_list(0x7ff2b37749e0, 24 [pid 9739] <... prctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9741] <... set_robust_list resumed>) = 0 [pid 9739] setpgid(0, 0 [pid 5081] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9741] memfd_create("syzkaller", 0 [pid 9739] <... setpgid resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 9741] <... memfd_create resumed>) = 3 [pid 9739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] fstat(4, [pid 9741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9739] <... openat resumed>) = 3 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9742 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9740 attached [pid 9741] <... mmap resumed>) = 0x7ff2ab354000 [pid 9739] write(3, "1000", 4 [pid 5081] getdents64(4, ./strace-static-x86_64: Process 9742 attached [pid 9740] set_robust_list(0x5555559d56e0, 24 [pid 9739] <... write resumed>) = 4 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9742] set_robust_list(0x5555559d56e0, 24 [pid 9740] <... set_robust_list resumed>) = 0 [pid 9739] close(3 [pid 5081] getdents64(4, [pid 9742] <... set_robust_list resumed>) = 0 [pid 9740] chdir("./140" [pid 9739] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9742] chdir("./140" [pid 9740] <... chdir resumed>) = 0 [pid 9739] symlink("/dev/binderfs", "./binderfs" [pid 5081] close(4 [pid 9742] <... chdir resumed>) = 0 [pid 9740] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9739] <... symlink resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 9742] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9740] <... prctl resumed>) = 0 [pid 9739] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./139/file0" [pid 9742] <... prctl resumed>) = 0 [pid 9740] setpgid(0, 0 [pid 9739] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 9742] setpgid(0, 0 [pid 9740] <... setpgid resumed>) = 0 [pid 9739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] umount2("./139/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9742] <... setpgid resumed>) = 0 [pid 9740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9739] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9740] <... openat resumed>) = 3 [pid 9739] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] lstat("./139/.log", [pid 9742] <... openat resumed>) = 3 [pid 9740] write(3, "1000", 4 [pid 9739] <... mprotect resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9742] write(3, "1000", 4 [pid 9740] <... write resumed>) = 4 [pid 9739] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] unlink("./139/.log" [pid 9742] <... write resumed>) = 4 [pid 9740] close(3 [pid 5081] <... unlink resumed>) = 0 [pid 9742] close(3 [pid 9740] <... close resumed>) = 0 [pid 9739] <... clone resumed>, parent_tid=[9743], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9743 [pid 5081] getdents64(3, [pid 9742] <... close resumed>) = 0 [pid 9740] symlink("/dev/binderfs", "./binderfs" [pid 9739] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9742] symlink("/dev/binderfs", "./binderfs" [pid 9740] <... symlink resumed>) = 0 [pid 9739] <... futex resumed>) = 0 [pid 5081] close(3 [pid 9742] <... symlink resumed>) = 0 [pid 9740] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9739] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 ./strace-static-x86_64: Process 9743 attached [pid 9742] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9740] <... futex resumed>) = 0 [pid 5081] rmdir("./139" [pid 9743] set_robust_list(0x7ff2b37749e0, 24 [pid 9742] <... futex resumed>) = 0 [pid 9740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... rmdir resumed>) = 0 [pid 9743] <... set_robust_list resumed>) = 0 [pid 5081] mkdir("./140", 0777 [pid 9743] memfd_create("syzkaller", 0 [pid 9742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9740] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] <... mkdir resumed>) = 0 [pid 9743] <... memfd_create resumed>) = 3 [pid 9742] <... mmap resumed>) = 0x7ff2b3754000 [pid 9740] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9742] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9740] <... mprotect resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 9743] <... mmap resumed>) = 0x7ff2ab354000 [pid 9742] <... mprotect resumed>) = 0 [pid 9740] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 9744 attached [pid 9742] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9744] set_robust_list(0x7ff2b37749e0, 24 [pid 9740] <... clone resumed>, parent_tid=[9744], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9744 [pid 5081] close(3 [pid 9744] <... set_robust_list resumed>) = 0 [pid 9742] <... clone resumed>, parent_tid=[9745], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9745 [pid 9740] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 9744] memfd_create("syzkaller", 0 [pid 9742] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9740] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 9745 attached [pid 9744] <... memfd_create resumed>) = 3 [pid 9742] <... futex resumed>) = 0 [pid 9740] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9745] set_robust_list(0x7ff2b37749e0, 24 [pid 9744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9742] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9746 [pid 9745] <... set_robust_list resumed>) = 0 [pid 9744] <... mmap resumed>) = 0x7ff2ab354000 ./strace-static-x86_64: Process 9746 attached [pid 9746] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9746] chdir("./140") = 0 [pid 9746] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9745] memfd_create("syzkaller", 0 [pid 9746] <... prctl resumed>) = 0 [pid 9745] <... memfd_create resumed>) = 3 [pid 9746] setpgid(0, 0 [pid 9745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9746] <... setpgid resumed>) = 0 [pid 9746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9746] write(3, "1000", 4) = 4 [pid 9746] close(3 [pid 9745] <... mmap resumed>) = 0x7ff2ab354000 [pid 9746] <... close resumed>) = 0 [pid 9746] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9746] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9746] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9746] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9747], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9747 [pid 9746] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9746] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9747 attached [pid 9747] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9747] memfd_create("syzkaller", 0) = 3 [pid 9747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9738] <... write resumed>) = 16777216 [pid 9738] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9738] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9738] ioctl(4, LOOP_SET_FD, 3 [pid 9741] <... write resumed>) = 16777216 [pid 9738] <... ioctl resumed>) = 0 [pid 9738] close(3) = 0 [pid 9738] mkdir("./file0", 0777) = 0 [pid 9738] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9745] <... write resumed>) = 16777216 [pid 9741] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9741] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9745] munmap(0x7ff2ab354000, 16777216 [ 293.366844][ T9738] loop2: detected capacity change from 0 to 32768 [ 293.403509][ T9738] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor373 (9738) [pid 9741] ioctl(4, LOOP_SET_FD, 3 [pid 9745] <... munmap resumed>) = 0 [pid 9745] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9744] <... write resumed>) = 16777216 [pid 9745] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9744] munmap(0x7ff2ab354000, 16777216 [pid 9741] <... ioctl resumed>) = 0 [pid 9745] close(3) = 0 [pid 9744] <... munmap resumed>) = 0 [pid 9741] close(3 [pid 9745] mkdir("./file0", 0777 [pid 9744] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9743] <... write resumed>) = 16777216 [pid 9741] <... close resumed>) = 0 [pid 9745] <... mkdir resumed>) = 0 [pid 9744] <... openat resumed>) = 4 [pid 9745] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9744] ioctl(4, LOOP_SET_FD, 3 [ 293.434343][ T9741] loop1: detected capacity change from 0 to 32768 [ 293.449064][ T9745] loop5: detected capacity change from 0 to 32768 [ 293.474451][ T9738] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [pid 9743] munmap(0x7ff2ab354000, 16777216 [pid 9741] mkdir("./file0", 0777 [pid 9744] <... ioctl resumed>) = 0 [pid 9743] <... munmap resumed>) = 0 [pid 9741] <... mkdir resumed>) = 0 [pid 9744] close(3 [pid 9743] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9744] <... close resumed>) = 0 [pid 9743] <... openat resumed>) = 4 [pid 9741] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9744] mkdir("./file0", 0777 [ 293.483921][ T9744] loop4: detected capacity change from 0 to 32768 [ 293.484608][ T9745] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9745) [ 293.490446][ T9738] BTRFS info (device loop2): setting nodatasum [ 293.509984][ T9738] BTRFS info (device loop2): allowing degraded mounts [ 293.517252][ T9738] BTRFS info (device loop2): use zlib compression, level 3 [ 293.524986][ T9738] BTRFS info (device loop2): using free space tree [pid 9743] ioctl(4, LOOP_SET_FD, 3 [pid 9745] <... mount resumed>) = -1 EEXIST (File exists) [pid 9745] ioctl(4, LOOP_CLR_FD [pid 9744] <... mkdir resumed>) = 0 [pid 9743] <... ioctl resumed>) = 0 [pid 9741] <... mount resumed>) = -1 EEXIST (File exists) [pid 9747] <... write resumed>) = 16777216 [pid 9744] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9743] close(3 [pid 9741] ioctl(4, LOOP_CLR_FD [pid 9747] munmap(0x7ff2ab354000, 16777216 [pid 9743] <... close resumed>) = 0 [pid 9747] <... munmap resumed>) = 0 [pid 9743] mkdir("./file0", 0777 [pid 9747] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9743] <... mkdir resumed>) = 0 [pid 9747] <... openat resumed>) = 4 [pid 9743] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9747] ioctl(4, LOOP_SET_FD, 3 [pid 9744] <... mount resumed>) = -1 EEXIST (File exists) [pid 9744] ioctl(4, LOOP_CLR_FD [pid 9747] <... ioctl resumed>) = 0 [pid 9747] close(3) = 0 [pid 9747] mkdir("./file0", 0777) = 0 [pid 9747] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9743] <... mount resumed>) = -1 EEXIST (File exists) [ 293.531758][ T9743] loop0: detected capacity change from 0 to 32768 [ 293.539732][ T9741] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9741) [ 293.554184][ T9744] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9744) [ 293.558500][ T9747] loop3: detected capacity change from 0 to 32768 [ 293.571946][ T9743] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9743) [pid 9747] <... mount resumed>) = -1 EEXIST (File exists) [pid 9747] ioctl(4, LOOP_CLR_FD [ 293.583990][ T9747] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9747) [pid 9743] ioctl(4, LOOP_CLR_FD [pid 9744] <... ioctl resumed>) = 0 [pid 9744] close(4) = 0 [pid 9744] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9740] <... futex resumed>) = 0 [pid 9740] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9740] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9744] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9744] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9740] <... futex resumed>) = 0 [pid 9744] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9740] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9740] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9744] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9744] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9744] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9740] <... futex resumed>) = 0 [pid 9744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9740] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9744] openat(AT_FDCWD, ".log", O_RDONLY [pid 9740] <... futex resumed>) = 0 [pid 9740] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9744] <... openat resumed>) = 4 [pid 9744] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9740] <... futex resumed>) = 0 [pid 9744] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9740] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9744] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9740] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9744] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9744] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9740] <... futex resumed>) = 0 [pid 9740] exit_group(0 [pid 9744] <... futex resumed>) = ? [pid 9740] <... exit_group resumed>) = ? [pid 9744] +++ exited with 0 +++ [pid 9740] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9740, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=24 /* 0.24 s */} --- [pid 5083] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./140/binderfs" [pid 9743] <... ioctl resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5083] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 293.722967][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 293.722980][ T27] audit: type=1804 audit(1680236977.192:841): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/140/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 5083] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9743] close(4 [pid 5083] <... openat resumed>) = 4 [pid 9743] <... close resumed>) = 0 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9743] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 9743] <... futex resumed>) = 1 [pid 9739] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9743] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9739] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 9739] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9743] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9739] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] close(4 [pid 9743] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./140/file0" [pid 9743] <... openat resumed>) = 3 [pid 5083] <... rmdir resumed>) = 0 [pid 5083] umount2("./140/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./140/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./140/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./140" [pid 9743] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... rmdir resumed>) = 0 [pid 9743] <... futex resumed>) = 1 [pid 9739] <... futex resumed>) = 0 [pid 5083] mkdir("./141", 0777 [pid 9743] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9739] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... mkdir resumed>) = 0 [pid 9743] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9739] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9743] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9739] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 3 [pid 9743] <... futex resumed>) = 0 [pid 9739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] ioctl(3, LOOP_CLR_FD [pid 9747] <... ioctl resumed>) = 0 [pid 9743] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9739] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 293.822813][ T9738] BTRFS info (device loop2): enabling ssd optimizations [ 293.830135][ T9738] BTRFS info (device loop2): auto enabling async discard [ 293.838686][ T9738] BTRFS info (device loop2): checking UUID tree [pid 9747] close(4 [pid 9743] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9739] <... futex resumed>) = 0 [pid 5083] close(3 [pid 9747] <... close resumed>) = 0 [pid 9743] openat(AT_FDCWD, ".log", O_RDONLY [pid 9739] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... close resumed>) = 0 [pid 9747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9743] <... openat resumed>) = 4 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9743] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9739] <... futex resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9765 [pid 9743] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9739] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9743] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9739] <... futex resumed>) = 0 [pid 9743] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9739] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9765 attached [pid 9743] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9765] set_robust_list(0x5555559d56e0, 24 [pid 9743] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9765] <... set_robust_list resumed>) = 0 [pid 9743] <... futex resumed>) = 1 [pid 9739] <... futex resumed>) = 0 [pid 9765] chdir("./141" [pid 9747] <... futex resumed>) = 1 [pid 9746] <... futex resumed>) = 0 [pid 9743] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9739] exit_group(0 [pid 9738] <... mount resumed>) = 0 [pid 9765] <... chdir resumed>) = 0 [pid 9747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9746] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9745] <... ioctl resumed>) = 0 [pid 9743] <... futex resumed>) = ? [pid 9739] <... exit_group resumed>) = ? [pid 9738] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9765] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9747] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9746] <... futex resumed>) = 0 [pid 9745] close(4 [pid 9743] +++ exited with 0 +++ [pid 9739] +++ exited with 0 +++ [pid 9738] <... openat resumed>) = 3 [pid 9765] <... prctl resumed>) = 0 [pid 9747] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9746] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9745] <... close resumed>) = 0 [pid 9738] chdir("./file0" [pid 9765] setpgid(0, 0 [pid 9747] <... openat resumed>) = 3 [pid 9745] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9741] <... ioctl resumed>) = 0 [pid 9738] <... chdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9739, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=25 /* 0.25 s */} --- [pid 9765] <... setpgid resumed>) = 0 [pid 9747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9745] <... futex resumed>) = 1 [pid 9742] <... futex resumed>) = 0 [pid 9741] close(4 [pid 9738] ioctl(4, LOOP_CLR_FD [pid 9765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9765] <... openat resumed>) = 3 [pid 9747] <... futex resumed>) = 1 [pid 9746] <... futex resumed>) = 0 [pid 9745] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9742] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9741] <... close resumed>) = 0 [pid 9738] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9765] write(3, "1000", 4 [pid 9746] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9765] <... write resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9765] close(3 [pid 9746] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... openat resumed>) = 3 [pid 9765] <... close resumed>) = 0 [pid 5078] fstat(3, [pid 9765] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9747] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9742] <... futex resumed>) = 0 [pid 9741] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9738] close(4 [pid 9765] <... symlink resumed>) = 0 [pid 9747] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9745] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9742] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9741] <... futex resumed>) = 1 [pid 9738] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 9765] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9745] <... openat resumed>) = 3 [pid 9741] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9738] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9737] <... futex resumed>) = 0 [pid 9765] <... futex resumed>) = 0 [pid 9747] <... futex resumed>) = 1 [pid 9746] <... futex resumed>) = 0 [pid 9745] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9738] <... futex resumed>) = 1 [pid 9736] <... futex resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9746] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9745] <... futex resumed>) = 1 [pid 9742] <... futex resumed>) = 0 [pid 9738] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9737] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9736] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9765] <... mmap resumed>) = 0x7ff2b3754000 [pid 9747] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9746] <... futex resumed>) = 0 [pid 9745] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9742] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9741] <... futex resumed>) = 0 [pid 9738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9737] <... futex resumed>) = 1 [pid 9736] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9765] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [ 293.889103][ T27] audit: type=1804 audit(1680236977.362:842): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/139/.log" dev="sda1" ino=1152 res=1 errno=0 [pid 9747] openat(AT_FDCWD, ".log", O_RDONLY [pid 9746] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9742] <... futex resumed>) = 0 [pid 9741] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9738] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9737] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9736] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] lstat("./139/binderfs", [pid 9765] <... mprotect resumed>) = 0 [pid 9747] <... openat resumed>) = 4 [pid 9745] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9742] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9741] <... openat resumed>) = 3 [pid 9738] <... openat resumed>) = 4 [pid 9747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9745] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9741] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9738] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9747] <... futex resumed>) = 1 [pid 9745] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9741] <... futex resumed>) = 0 [pid 9738] <... futex resumed>) = 1 [pid 9736] <... futex resumed>) = 0 [pid 9747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9745] <... futex resumed>) = 1 [pid 9742] <... futex resumed>) = 0 [pid 9741] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9738] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9736] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9745] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9742] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9736] <... futex resumed>) = 0 [pid 9745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9742] <... futex resumed>) = 0 [pid 9738] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9736] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9765] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9746] <... futex resumed>) = 0 [pid 9745] openat(AT_FDCWD, ".log", O_RDONLY [pid 9742] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 9766 attached [pid 9746] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9745] <... openat resumed>) = 4 [pid 9745] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9742] <... futex resumed>) = 0 [pid 9745] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9742] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9742] <... futex resumed>) = 0 [pid 9745] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9742] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9745] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9745] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9742] <... futex resumed>) = 0 [pid 9745] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9742] exit_group(0 [pid 9745] <... futex resumed>) = ? [pid 9742] <... exit_group resumed>) = ? [pid 9766] set_robust_list(0x7ff2b37749e0, 24 [pid 9765] <... clone resumed>, parent_tid=[9766], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9766 [pid 9747] <... futex resumed>) = 0 [pid 9746] <... futex resumed>) = 1 [pid 9745] +++ exited with 0 +++ [pid 9742] +++ exited with 0 +++ [pid 9737] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./139/binderfs" [pid 9747] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9747] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9747] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9765] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9746] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9741] <... futex resumed>) = 0 [pid 9737] <... futex resumed>) = 1 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9742, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 9741] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5078] <... unlink resumed>) = 0 [pid 9741] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9741] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9765] <... futex resumed>) = 0 [pid 9746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9741] <... futex resumed>) = 0 [pid 9737] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9765] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9746] exit_group(0 [pid 9741] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9747] <... futex resumed>) = ? [pid 9746] <... exit_group resumed>) = ? [pid 9737] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9747] +++ exited with 0 +++ [ 293.949438][ T27] audit: type=1804 audit(1680236977.422:843): pid=9747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/140/.log" dev="sda1" ino=1159 res=1 errno=0 [ 293.982434][ T9738] BTRFS info (device loop2): balance: start -s [pid 5078] lstat("./139/file0", [pid 9766] <... set_robust_list resumed>) = 0 [pid 9746] +++ exited with 0 +++ [pid 9741] <... futex resumed>) = 0 [pid 9737] <... futex resumed>) = 1 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9741] openat(AT_FDCWD, ".log", O_RDONLY [pid 9737] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9741] <... openat resumed>) = 4 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9746, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} --- [pid 5078] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9741] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9741] <... futex resumed>) = 1 [pid 9737] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9741] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9737] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9741] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9737] <... futex resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9741] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9737] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 3 [pid 5081] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9741] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5084] fstat(3, [pid 5078] <... openat resumed>) = 4 [pid 9766] memfd_create("syzkaller", 0 [pid 9741] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] fstat(4, [pid 5084] getdents64(3, [pid 5081] <... openat resumed>) = 3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] fstat(3, [pid 5078] getdents64(4, [pid 5084] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5078] getdents64(4, [pid 5084] lstat("./140/binderfs", [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4 [pid 5084] unlink("./140/binderfs" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5081] lstat("./140/binderfs", [pid 5078] rmdir("./139/file0" [pid 5084] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9766] <... memfd_create resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] unlink("./140/binderfs" [pid 5078] umount2("./139/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] lstat("./140/file0", [pid 5081] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9766] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./139/.log", [pid 9741] <... futex resumed>) = 1 [pid 9737] <... futex resumed>) = 0 [pid 9736] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9737] exit_group(0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./140/file0", [pid 5078] unlink("./139/.log" [pid 9737] <... exit_group resumed>) = ? [pid 5084] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5081] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [ 293.998355][ T9738] BTRFS info (device loop2): relocating block group 1048576 flags system [ 294.010225][ T27] audit: type=1804 audit(1680236977.462:844): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/140/.log" dev="sda1" ino=1163 res=1 errno=0 [pid 5084] fstat(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(3 [pid 5084] getdents64(4, [pid 5081] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] fstat(4, [pid 5078] rmdir("./139" [pid 9736] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9741] +++ exited with 0 +++ [pid 9737] +++ exited with 0 +++ [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9736] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5078] mkdir("./140", 0777 [pid 9736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] close(4 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... mkdir resumed>) = 0 [pid 9736] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] <... close resumed>) = 0 [pid 5081] getdents64(4, [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9737, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=22 /* 0.22 s */} --- [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9736] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5084] rmdir("./140/file0" [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 9736] <... mprotect resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] close(4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9736] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] umount2("./140/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] rmdir("./140/file0" [pid 5079] <... openat resumed>) = 3 [pid 5078] close(3 [pid 9736] <... clone resumed>, parent_tid=[9768], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9768 [pid 5084] lstat("./140/.log", [pid 5081] <... rmdir resumed>) = 0 [pid 5079] fstat(3, [pid 5078] <... close resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] umount2("./140/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9736] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] unlink("./140/.log" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, ./strace-static-x86_64: Process 9768 attached [pid 9736] <... futex resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5081] lstat("./140/.log", [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [ 294.032531][ T27] audit: type=1804 audit(1680236977.482:845): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/140/.log" dev="sda1" ino=1164 res=1 errno=0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9769 [pid 9768] set_robust_list(0x7ff2ac3539e0, 24 [pid 9736] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(3, [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9769 attached [pid 9768] <... set_robust_list resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] unlink("./140/.log" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9769] set_robust_list(0x5555559d56e0, 24 [pid 9768] openat(AT_FDCWD, ".log", O_RDONLY [pid 5084] close(3 [pid 5081] <... unlink resumed>) = 0 [pid 5079] lstat("./140/binderfs", [pid 9769] <... set_robust_list resumed>) = 0 [pid 9768] <... openat resumed>) = 5 [pid 5084] <... close resumed>) = 0 [pid 5081] getdents64(3, [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9769] chdir("./140" [pid 9768] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] rmdir("./140" [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] unlink("./140/binderfs" [pid 9769] <... chdir resumed>) = 0 [pid 9768] <... futex resumed>) = 1 [pid 9736] <... futex resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] close(3 [pid 5079] <... unlink resumed>) = 0 [pid 9769] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9768] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9736] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] mkdir("./141", 0777 [pid 5081] <... close resumed>) = 0 [pid 5079] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9769] <... prctl resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5081] rmdir("./140" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9769] setpgid(0, 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] <... rmdir resumed>) = 0 [pid 5079] lstat("./140/file0", [pid 9769] <... setpgid resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5081] mkdir("./141", 0777 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] <... mkdir resumed>) = 0 [pid 5079] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9769] <... openat resumed>) = 3 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9769] write(3, "1000", 4 [pid 5084] close(3 [pid 5081] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9769] <... write resumed>) = 4 [pid 5084] <... close resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5079] <... openat resumed>) = 4 [pid 9769] close(3 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] fstat(4, [pid 9769] <... close resumed>) = 0 [pid 9768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9736] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9769] symlink("/dev/binderfs", "./binderfs" [pid 9768] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9736] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9770 [pid 5081] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 9769] <... symlink resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9769] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(4, [pid 9769] <... futex resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9771 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 9770 attached [pid 9769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] close(4 [pid 9770] set_robust_list(0x5555559d56e0, 24 [pid 9769] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] <... close resumed>) = 0 [pid 9770] <... set_robust_list resumed>) = 0 [pid 9769] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5079] rmdir("./140/file0" [pid 9770] chdir("./141" [pid 9769] <... mprotect resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 9771 attached [pid 9770] <... chdir resumed>) = 0 [pid 9769] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] umount2("./140/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9771] set_robust_list(0x5555559d56e0, 24 [pid 9770] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9771] <... set_robust_list resumed>) = 0 [pid 9770] <... prctl resumed>) = 0 [pid 9769] <... clone resumed>, parent_tid=[9772], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9772 [pid 5079] lstat("./140/.log", [pid 9771] chdir("./141" [pid 9770] setpgid(0, 0 [pid 9769] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9771] <... chdir resumed>) = 0 [pid 9770] <... setpgid resumed>) = 0 [pid 9769] <... futex resumed>) = 0 [pid 5079] unlink("./140/.log" [pid 9771] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9769] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... unlink resumed>) = 0 [pid 9771] <... prctl resumed>) = 0 [pid 9770] <... openat resumed>) = 3 [pid 5079] getdents64(3, [pid 9771] setpgid(0, 0 [pid 9770] write(3, "1000", 4 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9771] <... setpgid resumed>) = 0 [pid 9770] <... write resumed>) = 4 [pid 5079] close(3 [pid 9771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9770] close(3 [pid 5079] <... close resumed>) = 0 [pid 9771] <... openat resumed>) = 3 [pid 9770] <... close resumed>) = 0 [pid 5079] rmdir("./140" [pid 9771] write(3, "1000", 4 [pid 9770] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... rmdir resumed>) = 0 [pid 9771] <... write resumed>) = 4 [pid 9770] <... symlink resumed>) = 0 [pid 5079] mkdir("./141", 0777./strace-static-x86_64: Process 9772 attached [pid 9771] close(3 [pid 9770] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... mkdir resumed>) = 0 [pid 9772] set_robust_list(0x7ff2b37749e0, 24 [pid 9771] <... close resumed>) = 0 [pid 9770] <... futex resumed>) = 0 [pid 9738] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [ 294.103123][ T27] audit: type=1804 audit(1680236977.572:846): pid=9768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/140/file0/.log" dev="loop2" ino=263 res=1 errno=0 [ 294.130396][ T9738] BTRFS info (device loop2): balance: ended with status: 0 [ 294.140828][ T9768] BTRFS info (device loop2): scrub: started on devid 1 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9771] symlink("/dev/binderfs", "./binderfs" [pid 9770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9738] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 3 [pid 9771] <... symlink resumed>) = 0 [pid 9770] <... mmap resumed>) = 0x7ff2b3754000 [pid 9738] <... futex resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9771] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9770] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9738] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9771] <... futex resumed>) = 0 [pid 9770] <... mprotect resumed>) = 0 [pid 5079] close(3 [pid 9772] <... set_robust_list resumed>) = 0 [pid 9771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9770] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... close resumed>) = 0 [pid 9772] memfd_create("syzkaller", 0 [pid 9771] <... mmap resumed>) = 0x7ff2b3754000 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9772] <... memfd_create resumed>) = 3 [pid 9771] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9770] <... clone resumed>, parent_tid=[9773], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9773 [pid 9772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9771] <... mprotect resumed>) = 0 [pid 9770] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9736] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9774 [pid 9771] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9770] <... futex resumed>) = 0 [pid 9772] <... mmap resumed>) = 0x7ff2ab354000 [pid 9770] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9773 attached [pid 9771] <... clone resumed>, parent_tid=[9775], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9775 [pid 9773] set_robust_list(0x7ff2b37749e0, 24 [pid 9771] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9773] <... set_robust_list resumed>) = 0 [pid 9771] <... futex resumed>) = 0 [pid 9773] memfd_create("syzkaller", 0 [pid 9771] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9775 attached [pid 9773] <... memfd_create resumed>) = 3 [pid 9775] set_robust_list(0x7ff2b37749e0, 24 [pid 9773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9775] <... set_robust_list resumed>) = 0 [pid 9773] <... mmap resumed>) = 0x7ff2ab354000 [pid 9775] memfd_create("syzkaller", 0 [pid 9768] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9775] <... memfd_create resumed>) = 3 [pid 9775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9768] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9775] <... mmap resumed>) = 0x7ff2ab354000 [pid 9768] <... futex resumed>) = 0 ./strace-static-x86_64: Process 9774 attached [pid 9768] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9736] exit_group(0 [pid 9774] set_robust_list(0x5555559d56e0, 24 [pid 9768] <... futex resumed>) = ? [pid 9738] <... futex resumed>) = ? [pid 9736] <... exit_group resumed>) = ? [pid 9774] <... set_robust_list resumed>) = 0 [pid 9768] +++ exited with 0 +++ [pid 9738] +++ exited with 0 +++ [pid 9774] chdir("./141" [pid 9736] +++ exited with 0 +++ [pid 9774] <... chdir resumed>) = 0 [ 294.181549][ T9768] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [pid 9774] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9736, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=36 /* 0.36 s */} --- [pid 9774] <... prctl resumed>) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 9774] setpgid(0, 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 9774] <... setpgid resumed>) = 0 [pid 9774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9774] write(3, "1000", 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9774] <... write resumed>) = 4 [pid 5080] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9774] close(3 [pid 5080] <... openat resumed>) = 3 [pid 9774] <... close resumed>) = 0 [pid 5080] fstat(3, [pid 9774] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9774] <... symlink resumed>) = 0 [pid 5080] getdents64(3, [pid 9774] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9774] <... futex resumed>) = 0 [pid 5080] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9774] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] lstat("./140/binderfs", [pid 9774] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9774] <... mprotect resumed>) = 0 [pid 5080] unlink("./140/binderfs" [pid 9774] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... unlink resumed>) = 0 [pid 5080] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9774] <... clone resumed>, parent_tid=[9776], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9776 [pid 9774] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 9776 attached ) = 0 [pid 9776] set_robust_list(0x7ff2b37749e0, 24 [pid 9774] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9776] <... set_robust_list resumed>) = 0 [pid 9776] memfd_create("syzkaller", 0) = 3 [pid 9776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./140/file0") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./140") = 0 [pid 5080] mkdir("./141", 0777 [pid 9766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = 0 [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9777 ./strace-static-x86_64: Process 9777 attached [pid 9777] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9777] chdir("./141") = 0 [pid 9777] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9777] setpgid(0, 0) = 0 [pid 9777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9777] write(3, "1000", 4) = 4 [pid 9777] close(3) = 0 [pid 9777] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9777] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9777] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9777] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9777] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9778], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9778 [pid 9777] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 9778 attached [pid 9777] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9778] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9778] memfd_create("syzkaller", 0) = 3 [pid 9778] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9772] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9766] <... write resumed>) = 16777216 [pid 9778] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9766] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9766] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9766] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9766] close(3) = 0 [pid 9766] mkdir("./file0", 0777) = 0 [ 294.929077][ T9766] loop4: detected capacity change from 0 to 32768 [ 294.948560][ T9766] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor373 (9766) [ 295.013679][ T9766] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 295.049362][ T9766] BTRFS info (device loop4): setting nodatasum [ 295.085323][ T9766] BTRFS info (device loop4): allowing degraded mounts [ 295.092147][ T9766] BTRFS info (device loop4): use zlib compression, level 3 [ 295.099438][ T9766] BTRFS info (device loop4): using free space tree [pid 9766] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9772] <... write resumed>) = 16777216 [pid 9772] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9772] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9773] <... write resumed>) = 16777216 [pid 9772] <... openat resumed>) = 4 [pid 9772] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9773] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9773] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9773] ioctl(4, LOOP_SET_FD, 3 [pid 9776] <... write resumed>) = 16777216 [pid 9776] munmap(0x7ff2ab354000, 16777216 [pid 9772] close(3) = 0 [pid 9772] mkdir("./file0", 0777) = 0 [pid 9776] <... munmap resumed>) = 0 [pid 9772] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9776] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9776] ioctl(4, LOOP_SET_FD, 3 [pid 9773] <... ioctl resumed>) = 0 [pid 9773] close(3) = 0 [pid 9773] mkdir("./file0", 0777) = 0 [ 295.177046][ T9772] loop0: detected capacity change from 0 to 32768 [ 295.188527][ T9773] loop5: detected capacity change from 0 to 32768 [ 295.203236][ T9772] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9772) [ 295.203841][ T9776] loop1: detected capacity change from 0 to 32768 [pid 9773] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9772] <... mount resumed>) = -1 EEXIST (File exists) [pid 9772] ioctl(4, LOOP_CLR_FD [pid 9775] <... write resumed>) = 16777216 [pid 9773] <... mount resumed>) = -1 EEXIST (File exists) [pid 9775] munmap(0x7ff2ab354000, 16777216 [pid 9773] ioctl(4, LOOP_CLR_FD [pid 9776] <... ioctl resumed>) = 0 [pid 9776] close(3) = 0 [pid 9776] mkdir("./file0", 0777) = 0 [pid 9776] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9775] <... munmap resumed>) = 0 [pid 9775] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9776] <... mount resumed>) = -1 EEXIST (File exists) [pid 9775] <... openat resumed>) = 4 [pid 9776] ioctl(4, LOOP_CLR_FD [pid 9775] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9775] close(3) = 0 [pid 9775] mkdir("./file0", 0777) = 0 [ 295.229785][ T9773] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9773) [ 295.248013][ T9776] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9776) [ 295.261137][ T9775] loop3: detected capacity change from 0 to 32768 [pid 9775] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress,") = -1 EEXIST (File exists) [ 295.273946][ T9775] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9775) [pid 9775] ioctl(4, LOOP_CLR_FD [pid 9778] <... write resumed>) = 16777216 [pid 9778] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9778] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 9778] ioctl(4, LOOP_SET_FD, 3 [pid 9773] <... ioctl resumed>) = 0 [pid 9773] close(4) = 0 [pid 9773] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9770] <... futex resumed>) = 0 [pid 9773] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9770] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9770] <... futex resumed>) = 0 [pid 9773] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9770] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9773] <... openat resumed>) = 3 [pid 9772] <... ioctl resumed>) = 0 [pid 9773] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9772] close(4 [pid 9773] <... futex resumed>) = 1 [pid 9772] <... close resumed>) = 0 [pid 9770] <... futex resumed>) = 0 [pid 9773] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9772] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9770] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9772] <... futex resumed>) = 1 [pid 9770] <... futex resumed>) = 0 [pid 9769] <... futex resumed>) = 0 [pid 9778] <... ioctl resumed>) = 0 [pid 9773] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9772] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9770] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9769] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9778] close(3 [pid 9773] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9769] <... futex resumed>) = 0 [pid 9778] <... close resumed>) = 0 [pid 9773] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9772] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9769] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9773] <... futex resumed>) = 1 [pid 9770] <... futex resumed>) = 0 [pid 9778] mkdir("./file0", 0777 [pid 9773] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9772] <... openat resumed>) = 3 [pid 9770] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9778] <... mkdir resumed>) = 0 [pid 9773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9772] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9770] <... futex resumed>) = 0 [ 295.399897][ T9778] loop2: detected capacity change from 0 to 32768 [ 295.425614][ T9766] BTRFS info (device loop4): enabling ssd optimizations [ 295.432630][ T9766] BTRFS info (device loop4): auto enabling async discard [pid 9778] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9773] openat(AT_FDCWD, ".log", O_RDONLY [pid 9772] <... futex resumed>) = 1 [pid 9770] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9769] <... futex resumed>) = 0 [pid 9775] <... ioctl resumed>) = 0 [pid 9778] <... mount resumed>) = -1 EEXIST (File exists) [pid 9778] ioctl(4, LOOP_CLR_FD [pid 9775] close(4 [pid 9773] <... openat resumed>) = 4 [pid 9772] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9769] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9775] <... close resumed>) = 0 [pid 9773] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9769] <... futex resumed>) = 0 [pid 9773] <... futex resumed>) = 1 [pid 9772] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9769] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9776] <... ioctl resumed>) = 0 [pid 9775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9773] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9772] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9770] <... futex resumed>) = 0 [pid 9766] <... mount resumed>) = 0 [pid 9772] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9772] <... futex resumed>) = 1 [pid 9769] <... futex resumed>) = 0 [pid 9766] <... openat resumed>) = 3 [pid 9772] openat(AT_FDCWD, ".log", O_RDONLY [pid 9769] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9766] chdir("./file0" [pid 9772] <... openat resumed>) = 4 [pid 9769] <... futex resumed>) = 0 [pid 9766] <... chdir resumed>) = 0 [pid 9772] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9769] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9766] ioctl(4, LOOP_CLR_FD [pid 9772] <... futex resumed>) = 0 [pid 9769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9766] <... ioctl resumed>) = 0 [pid 9772] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9769] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9766] close(4 [pid 9772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9769] <... futex resumed>) = 0 [pid 9766] <... close resumed>) = 0 [pid 9772] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9769] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9766] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9772] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9766] <... futex resumed>) = 1 [pid 9765] <... futex resumed>) = 0 [pid 9772] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9766] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9765] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9775] <... futex resumed>) = 1 [pid 9772] <... futex resumed>) = 1 [pid 9771] <... futex resumed>) = 0 [pid 9770] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9769] <... futex resumed>) = 0 [ 295.478099][ T9778] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9778) [ 295.483901][ T9766] BTRFS info (device loop4): checking UUID tree [ 295.496617][ T27] audit: type=1804 audit(1680236978.972:847): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/141/.log" dev="sda1" ino=1160 res=1 errno=0 [pid 9766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9765] <... futex resumed>) = 0 [pid 9775] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9773] <... futex resumed>) = 0 [pid 9772] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9771] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9770] <... futex resumed>) = 1 [pid 9769] exit_group(0 [pid 9766] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9765] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9773] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9772] <... futex resumed>) = ? [pid 9771] <... futex resumed>) = 0 [pid 9769] <... exit_group resumed>) = ? [pid 9766] <... openat resumed>) = 4 [pid 9773] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9772] +++ exited with 0 +++ [pid 9771] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9769] +++ exited with 0 +++ [pid 9766] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9776] close(4 [pid 9773] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9766] <... futex resumed>) = 1 [pid 9765] <... futex resumed>) = 0 [pid 9776] <... close resumed>) = 0 [pid 9773] <... futex resumed>) = 0 [pid 9766] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9765] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9776] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9773] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9765] <... futex resumed>) = 0 [pid 9776] <... futex resumed>) = 1 [pid 9766] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9765] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9776] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9774] <... futex resumed>) = 0 [pid 9775] <... openat resumed>) = 3 [pid 9774] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9770] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9776] <... futex resumed>) = 0 [pid 9775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9774] <... futex resumed>) = 1 [pid 9770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9769, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 9776] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9775] <... futex resumed>) = 1 [pid 9774] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9770] exit_group(0 [pid 5078] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9776] <... openat resumed>) = 3 [pid 9775] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9773] <... futex resumed>) = ? [pid 9771] <... futex resumed>) = 0 [pid 9770] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9776] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9773] +++ exited with 0 +++ [pid 9771] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9776] <... futex resumed>) = 1 [pid 9771] <... futex resumed>) = 1 [pid 9776] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9771] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9770] +++ exited with 0 +++ [pid 9775] <... futex resumed>) = 0 [pid 9774] <... futex resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9775] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9774] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9776] <... futex resumed>) = 0 [pid 9775] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9774] <... futex resumed>) = 1 [pid 5078] <... openat resumed>) = 3 [pid 9776] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9774] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9770, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} --- [pid 5078] fstat(3, [pid 9776] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9776] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9775] <... futex resumed>) = 1 [pid 9771] <... futex resumed>) = 0 [pid 9774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9771] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9771] <... futex resumed>) = 0 [pid 9771] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9774] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9775] openat(AT_FDCWD, ".log", O_RDONLY [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9776] <... futex resumed>) = 0 [pid 9774] <... futex resumed>) = 1 [pid 5078] getdents64(3, [pid 9776] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9775] <... openat resumed>) = 4 [pid 9774] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9776] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9776] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9774] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5078] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9776] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9775] <... futex resumed>) = 1 [pid 9774] <... futex resumed>) = 0 [pid 9771] <... futex resumed>) = 0 [pid 5084] fstat(3, [pid 9776] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9775] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9774] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9771] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9776] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9771] <... futex resumed>) = 0 [pid 9765] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] getdents64(3, [pid 9776] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9775] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9771] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9765] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] lstat("./140/binderfs", [pid 9776] <... futex resumed>) = 1 [pid 9775] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9774] <... futex resumed>) = 0 [pid 9765] <... futex resumed>) = 0 [pid 5084] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9776] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9775] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9774] exit_group(0 [pid 9776] <... futex resumed>) = ? [ 295.551491][ T27] audit: type=1804 audit(1680236979.022:848): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/140/.log" dev="sda1" ino=1161 res=1 errno=0 [ 295.587636][ T9766] BTRFS info (device loop4): balance: start -s [pid 9775] <... futex resumed>) = 1 [pid 9774] <... exit_group resumed>) = ? [pid 9771] <... futex resumed>) = 0 [pid 9765] <... mmap resumed>) = 0x7ff2ac333000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./140/binderfs" [pid 9776] +++ exited with 0 +++ [pid 9771] exit_group(0 [pid 9765] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 9771] <... exit_group resumed>) = ? [pid 9765] <... mprotect resumed>) = 0 [pid 9765] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9774] +++ exited with 0 +++ [pid 9765] <... clone resumed>, parent_tid=[9796], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9796 [pid 5084] lstat("./141/binderfs", [pid 9765] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9765] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9774, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5078] <... unlink resumed>) = 0 [pid 9775] +++ exited with 0 +++ [pid 9771] +++ exited with 0 +++ [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] unlink("./141/binderfs" [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9771, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=28 /* 0.28 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... unlink resumed>) = 0 [pid 5079] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] fstat(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./140/file0", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 9796 attached [pid 5084] lstat("./141/file0", [pid 5081] getdents64(3, [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... openat resumed>) = 3 [pid 5078] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9796] set_robust_list(0x7ff2ac3539e0, 24 [pid 5084] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] fstat(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./141/binderfs", [pid 9796] <... set_robust_list resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] unlink("./141/binderfs" [pid 5079] getdents64(3, [pid 9796] openat(AT_FDCWD, ".log", O_RDONLY [pid 5084] <... openat resumed>) = 4 [pid 5081] <... unlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... openat resumed>) = 4 [pid 5081] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9796] <... openat resumed>) = 5 [pid 5084] fstat(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(4, [pid 9796] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] lstat("./141/file0", [pid 9796] <... futex resumed>) = 1 [pid 9765] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9796] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9765] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./141/binderfs", [pid 5078] getdents64(4, [pid 9796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9765] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9796] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9765] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] unlink("./141/binderfs" [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] close(4 [pid 5081] <... openat resumed>) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 5084] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... unlink resumed>) = 0 [pid 5078] getdents64(4, [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] rmdir("./141/file0" [pid 5081] close(4 [pid 5079] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./141/file0") = 0 [pid 5081] umount2("./141/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./141/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] unlink("./141/.log") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./141") = 0 [pid 5081] mkdir("./142", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5084] umount2("./141/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 295.620848][ T9766] BTRFS info (device loop4): relocating block group 1048576 flags system [pid 5081] close(3 [pid 5079] lstat("./141/file0", [pid 5078] <... close resumed>) = 0 [pid 9778] <... ioctl resumed>) = 0 [pid 5084] lstat("./141/.log", [pid 5081] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./140/file0" [pid 9778] close(4 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 9778] <... close resumed>) = 0 [pid 5084] unlink("./141/.log" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./140/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9778] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9778] <... futex resumed>) = 1 [pid 9777] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 5079] <... openat resumed>) = 4 [pid 5078] lstat("./140/.log", [pid 9778] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9777] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] fstat(4, [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9778] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9777] <... futex resumed>) = 0 [pid 5084] close(3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] unlink("./140/.log" [pid 9778] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9777] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] <... unlink resumed>) = 0 [pid 9778] <... openat resumed>) = 3 [pid 5084] rmdir("./141" [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(3, [pid 9778] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9778] <... futex resumed>) = 1 [pid 9777] <... futex resumed>) = 0 [pid 5084] mkdir("./142", 0777 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] close(3./strace-static-x86_64: Process 9797 attached [pid 9778] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9777] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9765] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... mkdir resumed>) = 0 [pid 5079] close(4 [pid 5078] <... close resumed>) = 0 [pid 9797] set_robust_list(0x5555559d56e0, 24 [pid 9778] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9777] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9797 [pid 5079] <... close resumed>) = 0 [pid 5078] rmdir("./140" [pid 9797] <... set_robust_list resumed>) = 0 [ 295.673905][ T27] audit: type=1804 audit(1680236979.072:849): pid=9775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/141/.log" dev="sda1" ino=1164 res=1 errno=0 [ 295.707608][ T9796] BTRFS info (device loop4): scrub: started on devid 1 [pid 9778] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9777] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 3 [pid 5079] rmdir("./141/file0" [pid 5078] <... rmdir resumed>) = 0 [pid 9797] chdir("./142" [pid 9778] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [ 295.721837][ T9766] BTRFS info (device loop4): balance: ended with status: 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5079] <... rmdir resumed>) = 0 [pid 5078] mkdir("./141", 0777 [pid 9797] <... chdir resumed>) = 0 [pid 9778] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] umount2("./141/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... mkdir resumed>) = 0 [pid 9797] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9778] <... futex resumed>) = 1 [pid 9777] <... futex resumed>) = 0 [pid 5084] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9797] <... prctl resumed>) = 0 [pid 9778] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9777] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5079] lstat("./141/.log", [pid 5078] <... openat resumed>) = 3 [pid 9778] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9777] <... futex resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9778] openat(AT_FDCWD, ".log", O_RDONLY [pid 9777] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] unlink("./141/.log" [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9778] <... openat resumed>) = 4 [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9799 [pid 5079] <... unlink resumed>) = 0 [pid 5078] close(3 [pid 9778] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 9797] setpgid(0, 0 [pid 9778] <... futex resumed>) = 1 [pid 9777] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9797] <... setpgid resumed>) = 0 [pid 9778] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9777] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3./strace-static-x86_64: Process 9799 attached [pid 9797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9778] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9777] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9800 [pid 9799] set_robust_list(0x5555559d56e0, 24 [pid 9797] <... openat resumed>) = 3 [pid 9778] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9777] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] rmdir("./141"./strace-static-x86_64: Process 9800 attached [pid 9799] <... set_robust_list resumed>) = 0 [pid 9797] write(3, "1000", 4 [pid 9778] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5079] <... rmdir resumed>) = 0 [pid 9800] set_robust_list(0x5555559d56e0, 24 [pid 9799] chdir("./142" [pid 9797] <... write resumed>) = 4 [pid 9778] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] mkdir("./142", 0777 [pid 9800] <... set_robust_list resumed>) = 0 [pid 9799] <... chdir resumed>) = 0 [pid 9797] close(3 [pid 9778] <... futex resumed>) = 1 [pid 9777] <... futex resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 9800] chdir("./141" [pid 9799] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9797] <... close resumed>) = 0 [pid 9778] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9777] exit_group(0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9800] <... chdir resumed>) = 0 [pid 9799] <... prctl resumed>) = 0 [pid 9797] symlink("/dev/binderfs", "./binderfs" [pid 9778] <... futex resumed>) = ? [pid 9777] <... exit_group resumed>) = ? [pid 5079] <... openat resumed>) = 3 [pid 9800] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9799] setpgid(0, 0 [pid 9797] <... symlink resumed>) = 0 [pid 9778] +++ exited with 0 +++ [pid 9777] +++ exited with 0 +++ [pid 5079] ioctl(3, LOOP_CLR_FD [pid 9800] <... prctl resumed>) = 0 [pid 9799] <... setpgid resumed>) = 0 [pid 9797] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9796] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9766] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 295.745018][ T9796] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 295.753636][ T27] audit: type=1804 audit(1680236979.072:850): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/141/.log" dev="sda1" ino=1165 res=1 errno=0 [pid 9800] setpgid(0, 0 [pid 9799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9797] <... futex resumed>) = 0 [pid 9796] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9766] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9777, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 5079] close(3 [pid 9800] <... setpgid resumed>) = 0 [pid 9799] <... openat resumed>) = 3 [pid 9797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9796] <... futex resumed>) = 0 [pid 9766] <... futex resumed>) = 0 [pid 9765] exit_group(0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5079] <... close resumed>) = 0 [pid 9800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9765] <... exit_group resumed>) = ? [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9800] <... openat resumed>) = 3 [pid 9796] +++ exited with 0 +++ [pid 9766] +++ exited with 0 +++ [pid 9765] +++ exited with 0 +++ [pid 9800] write(3, "1000", 4 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9765, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9801 [pid 9800] <... write resumed>) = 4 [pid 9800] close(3 [pid 9799] write(3, "1000", 4 [pid 9800] <... close resumed>) = 0 [pid 9799] <... write resumed>) = 4 [pid 9797] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... restart_syscall resumed>) = 0 [pid 9800] symlink("/dev/binderfs", "./binderfs" [pid 9799] close(3 [pid 9797] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9800] <... symlink resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 9801 attached [pid 9800] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9799] <... close resumed>) = 0 [pid 9797] <... mprotect resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 9801] set_robust_list(0x5555559d56e0, 24 [pid 9800] <... futex resumed>) = 0 [pid 9799] symlink("/dev/binderfs", "./binderfs" [pid 9797] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] fstat(3, [pid 9801] <... set_robust_list resumed>) = 0 [pid 9800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9801] chdir("./142" [pid 9800] <... mmap resumed>) = 0x7ff2b3754000 [pid 9799] <... symlink resumed>) = 0 [pid 5083] getdents64(3, [pid 5080] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9801] <... chdir resumed>) = 0 [pid 9800] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9799] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9797] <... clone resumed>, parent_tid=[9802], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9802 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9801] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9800] <... mprotect resumed>) = 0 [pid 9799] <... futex resumed>) = 0 [pid 9797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9801] <... prctl resumed>) = 0 [pid 9800] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9797] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 3 [pid 9801] setpgid(0, 0 [pid 9799] <... mmap resumed>) = 0x7ff2b3754000 [pid 9797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] lstat("./141/binderfs", [pid 5080] fstat(3, [pid 9801] <... setpgid resumed>) = 0 [pid 9800] <... clone resumed>, parent_tid=[9803], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9803 [pid 9799] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9802 attached [pid 9801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9800] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9799] <... mprotect resumed>) = 0 [pid 5083] unlink("./141/binderfs" [pid 5080] getdents64(3, [pid 9802] set_robust_list(0x7ff2b37749e0, 24 [pid 9801] <... openat resumed>) = 3 [pid 9800] <... futex resumed>) = 0 [pid 9799] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9802] <... set_robust_list resumed>) = 0 [pid 9801] write(3, "1000", 4 [pid 9800] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9804 attached ./strace-static-x86_64: Process 9803 attached [pid 9802] memfd_create("syzkaller", 0 [pid 9801] <... write resumed>) = 4 [pid 9799] <... clone resumed>, parent_tid=[9804], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9804 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9804] set_robust_list(0x7ff2b37749e0, 24 [pid 9803] set_robust_list(0x7ff2b37749e0, 24 [pid 9802] <... memfd_create resumed>) = 3 [pid 9801] close(3 [pid 9799] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./141/binderfs", [pid 9804] <... set_robust_list resumed>) = 0 [pid 9803] <... set_robust_list resumed>) = 0 [pid 9802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9801] <... close resumed>) = 0 [pid 9799] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9804] memfd_create("syzkaller", 0 [pid 9803] memfd_create("syzkaller", 0 [pid 9802] <... mmap resumed>) = 0x7ff2ab354000 [pid 9801] symlink("/dev/binderfs", "./binderfs" [pid 9799] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] unlink("./141/binderfs" [pid 9803] <... memfd_create resumed>) = 3 [pid 9801] <... symlink resumed>) = 0 [pid 9803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9801] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9803] <... mmap resumed>) = 0x7ff2ab354000 [pid 9801] <... futex resumed>) = 0 [pid 9804] <... memfd_create resumed>) = 3 [pid 9801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... unlink resumed>) = 0 [pid 9804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9801] <... mmap resumed>) = 0x7ff2b3754000 [pid 5080] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9804] <... mmap resumed>) = 0x7ff2ab354000 [pid 9801] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9801] <... mprotect resumed>) = 0 [pid 5080] lstat("./141/file0", [pid 9801] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9801] <... clone resumed>, parent_tid=[9805], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9805 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9801] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9801] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 9801] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./141/file0") = 0 [pid 5080] umount2("./141/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./141/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./141/.log") = 0 [pid 5080] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./141") = 0 [pid 5080] mkdir("./142", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3./strace-static-x86_64: Process 9805 attached ) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9806 ./strace-static-x86_64: Process 9806 attached [pid 9806] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9806] chdir("./142") = 0 [pid 9806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9806] setpgid(0, 0) = 0 [pid 9806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9806] write(3, "1000", 4) = 4 [pid 9806] close(3) = 0 [pid 9806] symlink("/dev/binderfs", "./binderfs" [pid 9805] set_robust_list(0x7ff2b37749e0, 24 [pid 9806] <... symlink resumed>) = 0 [pid 9805] <... set_robust_list resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 9806] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9805] memfd_create("syzkaller", 0 [pid 5083] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9806] <... futex resumed>) = 0 [pid 9805] <... memfd_create resumed>) = 3 [pid 9806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9805] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9806] <... mmap resumed>) = 0x7ff2b3754000 [pid 9805] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] lstat("./141/file0", [pid 9806] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9806] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9807], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9807 [pid 9806] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9806] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./141/file0") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3./strace-static-x86_64: Process 9807 attached ) = 0 [pid 9807] set_robust_list(0x7ff2b37749e0, 24 [pid 5083] rmdir("./141" [pid 9807] <... set_robust_list resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 9807] memfd_create("syzkaller", 0 [pid 5083] mkdir("./142", 0777 [pid 9807] <... memfd_create resumed>) = 3 [pid 5083] <... mkdir resumed>) = 0 [pid 9807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 9807] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9808 ./strace-static-x86_64: Process 9808 attached [pid 9808] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9808] chdir("./142") = 0 [pid 9808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9808] setpgid(0, 0) = 0 [pid 9808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9808] write(3, "1000", 4) = 4 [pid 9808] close(3) = 0 [pid 9808] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9808] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9808] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9808] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9809], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9809 [pid 9808] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9808] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9809 attached [pid 9809] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9809] memfd_create("syzkaller", 0) = 3 [pid 9809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9804] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9805] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9804] <... write resumed>) = 16777216 [pid 9804] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9804] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9804] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9804] close(3) = 0 [pid 9805] <... write resumed>) = 16777216 [pid 9804] mkdir("./file0", 0777 [pid 9802] <... write resumed>) = 16777216 [pid 9804] <... mkdir resumed>) = 0 [ 296.767309][ T9804] loop5: detected capacity change from 0 to 32768 [pid 9804] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9805] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9805] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9805] ioctl(4, LOOP_SET_FD, 3 [pid 9803] <... write resumed>) = 16777216 [pid 9807] <... write resumed>) = 16777216 [pid 9805] <... ioctl resumed>) = 0 [pid 9803] munmap(0x7ff2ab354000, 16777216 [ 296.809932][ T9804] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (9804) [ 296.840504][ T9805] loop1: detected capacity change from 0 to 32768 [pid 9802] munmap(0x7ff2ab354000, 16777216 [pid 9807] munmap(0x7ff2ab354000, 16777216 [pid 9803] <... munmap resumed>) = 0 [pid 9802] <... munmap resumed>) = 0 [pid 9807] <... munmap resumed>) = 0 [pid 9805] close(3 [pid 9803] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9802] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9807] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9805] <... close resumed>) = 0 [pid 9803] <... openat resumed>) = 4 [pid 9805] mkdir("./file0", 0777 [pid 9802] <... openat resumed>) = 4 [pid 9805] <... mkdir resumed>) = 0 [pid 9803] ioctl(4, LOOP_SET_FD, 3 [pid 9807] <... openat resumed>) = 4 [pid 9805] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9802] ioctl(4, LOOP_SET_FD, 3 [pid 9807] ioctl(4, LOOP_SET_FD, 3 [pid 9802] <... ioctl resumed>) = 0 [ 296.852558][ T9804] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 296.867127][ T9804] BTRFS info (device loop5): setting nodatasum [ 296.873655][ T9804] BTRFS info (device loop5): allowing degraded mounts [ 296.882595][ T9804] BTRFS info (device loop5): use zlib compression, level 3 [ 296.890310][ T9803] loop0: detected capacity change from 0 to 32768 [ 296.897810][ T9802] loop3: detected capacity change from 0 to 32768 [pid 9807] <... ioctl resumed>) = 0 [pid 9803] <... ioctl resumed>) = 0 [pid 9802] close(3 [pid 9807] close(3 [pid 9805] <... mount resumed>) = -1 EEXIST (File exists) [pid 9803] close(3 [pid 9802] <... close resumed>) = 0 [pid 9807] <... close resumed>) = 0 [pid 9805] ioctl(4, LOOP_CLR_FD [pid 9803] <... close resumed>) = 0 [pid 9802] mkdir("./file0", 0777 [pid 9807] mkdir("./file0", 0777 [pid 9803] mkdir("./file0", 0777 [pid 9807] <... mkdir resumed>) = 0 [pid 9802] <... mkdir resumed>) = 0 [pid 9807] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9803] <... mkdir resumed>) = 0 [pid 9802] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9803] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9809] <... write resumed>) = 16777216 [pid 9807] <... mount resumed>) = -1 EEXIST (File exists) [ 296.904634][ T9807] loop2: detected capacity change from 0 to 32768 [ 296.911391][ T9805] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9805) [ 296.922447][ T9804] BTRFS info (device loop5): using free space tree [ 296.938676][ T9807] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9807) [pid 9807] ioctl(4, LOOP_CLR_FD [pid 9802] <... mount resumed>) = -1 EEXIST (File exists) [pid 9809] munmap(0x7ff2ab354000, 16777216 [pid 9802] ioctl(4, LOOP_CLR_FD [pid 9809] <... munmap resumed>) = 0 [pid 9809] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 9809] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9809] close(3) = 0 [pid 9809] mkdir("./file0", 0777) = 0 [pid 9809] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9803] <... mount resumed>) = -1 EEXIST (File exists) [pid 9809] <... mount resumed>) = -1 EEXIST (File exists) [pid 9803] ioctl(4, LOOP_CLR_FD [ 296.952470][ T9802] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9802) [ 296.971141][ T9809] loop4: detected capacity change from 0 to 32768 [ 296.976162][ T9803] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9803) [ 296.995003][ T9809] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9809) [pid 9809] ioctl(4, LOOP_CLR_FD [pid 9805] <... ioctl resumed>) = 0 [ 297.116718][ T9804] BTRFS info (device loop5): enabling ssd optimizations [ 297.123686][ T9804] BTRFS info (device loop5): auto enabling async discard [pid 9805] close(4) = 0 [pid 9805] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9801] <... futex resumed>) = 0 [pid 9801] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9805] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9801] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9805] <... openat resumed>) = 3 [pid 9805] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9801] <... futex resumed>) = 0 [pid 9801] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9805] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9801] <... futex resumed>) = 0 [pid 9805] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9801] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9805] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9801] <... futex resumed>) = 0 [pid 9801] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9801] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9805] openat(AT_FDCWD, ".log", O_RDONLY) = 4 [pid 9805] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9801] <... futex resumed>) = 0 [pid 9805] <... futex resumed>) = 1 [pid 9801] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9801] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9805] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9805] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9801] <... futex resumed>) = 0 [pid 9805] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9801] exit_group(0 [pid 9805] <... futex resumed>) = ? [pid 9801] <... exit_group resumed>) = ? [pid 9805] +++ exited with 0 +++ [pid 9801] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9801, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=27 /* 0.27 s */} --- [pid 5079] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5079] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./142/binderfs") = 0 [pid 5079] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 297.178500][ T9804] BTRFS info (device loop5): checking UUID tree [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, [pid 9804] <... mount resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9804] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] close(4 [pid 9804] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 9804] chdir("./file0" [pid 5079] rmdir("./142/file0" [pid 9804] <... chdir resumed>) = 0 [pid 9804] ioctl(4, LOOP_CLR_FD) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 9804] close(4 [pid 5079] umount2("./142/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9804] <... close resumed>) = 0 [pid 9804] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9804] <... futex resumed>) = 1 [pid 9799] <... futex resumed>) = 0 [pid 5079] lstat("./142/.log", [pid 9804] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9799] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9799] <... futex resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9804] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9799] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] unlink("./142/.log" [pid 9804] <... openat resumed>) = 4 [pid 9804] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9799] <... futex resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 9804] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9799] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(3, [pid 9804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9799] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9804] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9799] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] close(3) = 0 [pid 5079] rmdir("./142") = 0 [pid 5079] mkdir("./143", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9827 ./strace-static-x86_64: Process 9827 attached [pid 9827] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9827] chdir("./143") = 0 [pid 9827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9827] setpgid(0, 0) = 0 [pid 9827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9827] write(3, "1000", 4) = 4 [pid 9827] close(3) = 0 [pid 9827] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9827] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9802] <... ioctl resumed>) = 0 [pid 9827] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9802] close(4 [pid 9827] <... mprotect resumed>) = 0 [pid 9802] <... close resumed>) = 0 [pid 9827] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9802] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9797] <... futex resumed>) = 0 [pid 9827] <... clone resumed>, parent_tid=[9828], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9828 [pid 9802] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9827] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9802] <... openat resumed>) = 3 [pid 9797] <... futex resumed>) = 0 [pid 9827] <... futex resumed>) = 0 [pid 9802] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9827] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9802] <... futex resumed>) = 0 [pid 9797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9802] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9802] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9797] <... futex resumed>) = 0 [pid 9802] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9799] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 9797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9828 attached [pid 9802] <... futex resumed>) = 0 [pid 9799] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 297.267820][ T9804] BTRFS info (device loop5): balance: start -s [ 297.282811][ T9804] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 9828] set_robust_list(0x7ff2b37749e0, 24 [pid 9802] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9799] <... futex resumed>) = 0 [pid 9797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9828] <... set_robust_list resumed>) = 0 [pid 9802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9797] <... futex resumed>) = 0 [pid 9828] memfd_create("syzkaller", 0 [pid 9802] openat(AT_FDCWD, ".log", O_RDONLY [pid 9799] <... mmap resumed>) = 0x7ff2ac333000 [pid 9797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9828] <... memfd_create resumed>) = 3 [pid 9802] <... openat resumed>) = 4 [pid 9799] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 9828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9802] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9799] <... mprotect resumed>) = 0 [pid 9828] <... mmap resumed>) = 0x7ff2ab354000 [pid 9802] <... futex resumed>) = 1 [pid 9799] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9797] <... futex resumed>) = 0 [pid 9807] <... ioctl resumed>) = 0 [pid 9802] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9797] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9799] <... clone resumed>, parent_tid=[9829], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9829 [pid 9797] <... futex resumed>) = 0 [pid 9802] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9799] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9797] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9803] <... ioctl resumed>) = 0 [pid 9802] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9799] <... futex resumed>) = 0 [pid 9802] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9799] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9802] <... futex resumed>) = 1 [pid 9797] <... futex resumed>) = 0 [pid 9802] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9797] exit_group(0./strace-static-x86_64: Process 9829 attached [pid 9802] <... futex resumed>) = ? [pid 9797] <... exit_group resumed>) = ? [pid 9829] set_robust_list(0x7ff2ac3539e0, 24 [pid 9802] +++ exited with 0 +++ [pid 9797] +++ exited with 0 +++ [pid 9829] <... set_robust_list resumed>) = 0 [pid 9829] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9797, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 9829] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9803] close(4 [pid 5081] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9829] <... futex resumed>) = 1 [pid 9803] <... close resumed>) = 0 [pid 9799] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9829] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9799] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9803] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9807] close(4 [pid 9803] <... futex resumed>) = 1 [pid 9800] <... futex resumed>) = 0 [pid 9799] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 9803] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9800] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9799] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(3, [pid 9800] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9800] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(3, [pid 9807] <... close resumed>) = 0 [pid 9803] <... openat resumed>) = 3 [pid 9807] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9803] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9800] <... futex resumed>) = 0 [pid 9806] <... futex resumed>) = 0 [pid 9803] <... futex resumed>) = 1 [pid 9800] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9807] <... futex resumed>) = 1 [pid 9806] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9803] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9800] <... futex resumed>) = 0 [pid 9807] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9806] <... futex resumed>) = 0 [pid 9803] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9800] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] lstat("./142/binderfs", [pid 9807] <... openat resumed>) = 3 [pid 9806] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9803] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9807] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9803] <... futex resumed>) = 1 [pid 9800] <... futex resumed>) = 0 [pid 5081] unlink("./142/binderfs" [pid 9807] <... futex resumed>) = 1 [pid 9806] <... futex resumed>) = 0 [pid 9803] openat(AT_FDCWD, ".log", O_RDONLY [pid 9800] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 9806] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9800] <... futex resumed>) = 0 [pid 5081] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9806] <... futex resumed>) = 0 [pid 9800] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9806] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9807] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9803] <... openat resumed>) = 4 [pid 5081] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9803] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9807] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9803] <... futex resumed>) = 1 [pid 9800] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 9807] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9803] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9800] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 9807] <... futex resumed>) = 1 [pid 9806] <... futex resumed>) = 0 [pid 9803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9800] <... futex resumed>) = 0 [pid 9806] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9800] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9806] <... futex resumed>) = 0 [pid 9807] openat(AT_FDCWD, ".log", O_RDONLY [pid 9806] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9803] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 9807] <... openat resumed>) = 4 [pid 9803] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9807] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./142/file0" [pid 9807] <... futex resumed>) = 1 [pid 9806] <... futex resumed>) = 0 [pid 9803] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9807] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9806] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9803] <... futex resumed>) = 1 [pid 5081] <... rmdir resumed>) = 0 [pid 9800] <... futex resumed>) = 0 [pid 9806] <... futex resumed>) = 0 [pid 9800] exit_group(0 [pid 5081] umount2("./142/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9806] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9803] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9803] +++ exited with 0 +++ [pid 9800] <... exit_group resumed>) = ? [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9807] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9800] +++ exited with 0 +++ [pid 5081] lstat("./142/.log", [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9800, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=24 /* 0.24 s */} --- [pid 9807] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9807] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5081] unlink("./142/.log" [pid 9807] <... futex resumed>) = 1 [pid 9806] <... futex resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 9806] exit_group(0) = ? [pid 5078] <... restart_syscall resumed>) = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5078] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9807] +++ exited with 0 +++ [pid 9806] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... close resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9806, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=25 /* 0.25 s */} --- [pid 5081] rmdir("./142" [pid 5078] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5081] <... rmdir resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 9799] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... openat resumed>) = 3 [pid 5081] mkdir("./143", 0777 [pid 5078] fstat(3, [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... openat resumed>) = 3 [pid 5081] close(3 [pid 5080] fstat(3, [pid 5078] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... close resumed>) = 0 [pid 5080] getdents64(3, [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] lstat("./141/binderfs", [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 297.376545][ T9829] BTRFS info (device loop5): scrub: started on devid 1 [ 297.406361][ T9804] BTRFS info (device loop5): balance: ended with status: 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9831 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./141/binderfs" [pid 5080] lstat("./142/binderfs", [pid 5078] <... unlink resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] unlink("./142/binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... unlink resumed>) = 0 [pid 5078] lstat("./141/file0", [pid 5080] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./142/file0", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9804] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9804] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9804] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 4 [pid 9804] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] fstat(4, [pid 5080] <... openat resumed>) = 4 [pid 5080] fstat(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9831 attached [pid 5080] getdents64(4, [pid 5078] getdents64(4, [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9831] set_robust_list(0x5555559d56e0, 24 [pid 5078] getdents64(4, [pid 5080] close(4 [pid 9831] <... set_robust_list resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] close(4 [pid 5080] rmdir("./142/file0" [pid 5078] <... close resumed>) = 0 [pid 9831] chdir("./143") = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] rmdir("./141/file0" [pid 9831] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] umount2("./142/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9831] <... prctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... rmdir resumed>) = 0 [pid 9831] setpgid(0, 0 [pid 5080] lstat("./142/.log", [pid 5078] umount2("./141/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9831] <... setpgid resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] unlink("./142/.log" [pid 5078] lstat("./141/.log", [pid 9831] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9831] write(3, "1000", 4 [pid 5080] <... unlink resumed>) = 0 [pid 9831] <... write resumed>) = 4 [pid 5080] getdents64(3, [pid 5078] unlink("./141/.log" [pid 9831] close(3 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5080] close(3 [pid 9831] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 9831] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9829] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9831] <... symlink resumed>) = 0 [pid 9829] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./142" [pid 5078] close(3 [pid 9831] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9829] <... futex resumed>) = 0 [pid 9829] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] <... close resumed>) = 0 [pid 9831] <... futex resumed>) = 0 [pid 5078] rmdir("./141" [pid 9831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... rmdir resumed>) = 0 [pid 9799] exit_group(0 [pid 9829] <... futex resumed>) = ? [pid 9804] <... futex resumed>) = ? [pid 9799] <... exit_group resumed>) = ? [pid 9831] <... mmap resumed>) = 0x7ff2b3754000 [pid 9829] +++ exited with 0 +++ [pid 9804] +++ exited with 0 +++ [pid 9799] +++ exited with 0 +++ [pid 5080] mkdir("./143", 0777 [pid 5078] <... rmdir resumed>) = 0 [pid 9831] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9799, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 9831] <... mprotect resumed>) = 0 [pid 9809] <... ioctl resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5078] mkdir("./142", 0777 [pid 9831] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... mkdir resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 9831] <... clone resumed>, parent_tid=[9832], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9832 [pid 5084] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9831] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 297.430606][ T9829] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9831] <... futex resumed>) = 0 [pid 5080] close(3 [pid 5084] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9831] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5084] getdents64(3, [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9833 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./142/binderfs", [pid 5078] <... close resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] unlink("./142/binderfs"./strace-static-x86_64: Process 9832 attached [pid 9832] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9834 [pid 9832] <... set_robust_list resumed>) = 0 [pid 9832] memfd_create("syzkaller", 0) = 3 [pid 9832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 ./strace-static-x86_64: Process 9833 attached [pid 9833] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9833] chdir("./143") = 0 [pid 9833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9833] setpgid(0, 0) = 0 [pid 9833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9833] write(3, "1000", 4) = 4 [pid 9833] close(3) = 0 [pid 9833] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9833] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9833] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 9834 attached ) = 0 [pid 9833] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9835], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9835 [pid 9833] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9833] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9809] close(4) = 0 [pid 9809] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9808] <... futex resumed>) = 0 [pid 9808] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9809] <... futex resumed>) = 1 [pid 9808] <... futex resumed>) = 0 [pid 9809] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9808] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9834] set_robust_list(0x5555559d56e0, 24 [pid 9809] <... openat resumed>) = 3 [pid 9809] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9808] <... futex resumed>) = 0 [pid 9809] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9808] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9834] <... set_robust_list resumed>) = 0 [pid 9809] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9808] <... futex resumed>) = 0 [pid 9834] chdir("./142" [pid 9809] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9808] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9835 attached [pid 9834] <... chdir resumed>) = 0 [pid 9809] <... futex resumed>) = 0 [pid 9808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9835] set_robust_list(0x7ff2b37749e0, 24 [pid 9834] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9809] openat(AT_FDCWD, ".log", O_RDONLY [pid 9808] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9835] <... set_robust_list resumed>) = 0 [pid 9809] <... openat resumed>) = 4 [pid 9808] <... futex resumed>) = 0 [pid 9835] memfd_create("syzkaller", 0 [pid 9809] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9808] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9835] <... memfd_create resumed>) = 3 [pid 9809] <... futex resumed>) = 0 [pid 9808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9809] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9808] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9835] <... mmap resumed>) = 0x7ff2ab354000 [pid 9809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9808] <... futex resumed>) = 0 [pid 9809] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9808] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9809] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9809] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9808] <... futex resumed>) = 0 [pid 9809] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9808] exit_group(0 [pid 9809] <... futex resumed>) = ? [pid 9808] <... exit_group resumed>) = ? [pid 9834] <... prctl resumed>) = 0 [pid 9809] +++ exited with 0 +++ [pid 9808] +++ exited with 0 +++ [pid 9834] setpgid(0, 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9808, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 9834] <... setpgid resumed>) = 0 [pid 9834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9834] <... openat resumed>) = 3 [pid 9834] write(3, "1000", 4 [pid 5083] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 9834] <... write resumed>) = 4 [pid 5083] fstat(3, [pid 9834] close(3 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, [pid 9834] <... close resumed>) = 0 [pid 9834] symlink("/dev/binderfs", "./binderfs" [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9834] <... symlink resumed>) = 0 [pid 5083] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9834] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] lstat("./142/binderfs", [pid 9834] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9834] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] unlink("./142/binderfs" [pid 9834] <... mprotect resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 9834] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./142/file0", [pid 9834] <... clone resumed>, parent_tid=[9836], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9836 [pid 9834] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9836 attached [pid 9834] <... futex resumed>) = 0 [pid 5083] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9836] set_robust_list(0x7ff2b37749e0, 24 [pid 9834] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9836] <... set_robust_list resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9836] memfd_create("syzkaller", 0 [pid 5083] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9836] <... memfd_create resumed>) = 3 [pid 9836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] <... openat resumed>) = 4 [pid 9836] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./142/file0") = 0 [pid 5083] umount2("./142/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./142/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5083] unlink("./142/.log") = 0 [pid 5083] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./142") = 0 [pid 5083] mkdir("./143", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9837 ./strace-static-x86_64: Process 9837 attached [pid 9837] set_robust_list(0x5555559d56e0, 24 [pid 5084] <... umount2 resumed>) = 0 [pid 9837] <... set_robust_list resumed>) = 0 [pid 5084] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9837] chdir("./143" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./142/file0", [pid 9837] <... chdir resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9837] <... prctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9837] setpgid(0, 0 [pid 5084] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9837] <... setpgid resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 9837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9837] <... openat resumed>) = 3 [pid 5084] getdents64(4, [pid 9837] write(3, "1000", 4 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9837] <... write resumed>) = 4 [pid 5084] close(4 [pid 9837] close(3 [pid 5084] <... close resumed>) = 0 [pid 9837] <... close resumed>) = 0 [pid 5084] rmdir("./142/file0" [pid 9837] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... rmdir resumed>) = 0 [pid 9837] <... symlink resumed>) = 0 [pid 5084] getdents64(3, [pid 9837] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9837] <... futex resumed>) = 0 [pid 5084] close(3 [pid 9837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... close resumed>) = 0 [pid 9837] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] rmdir("./142" [pid 9837] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... rmdir resumed>) = 0 [pid 9837] <... mprotect resumed>) = 0 [pid 5084] mkdir("./143", 0777 [pid 9837] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9837] <... clone resumed>, parent_tid=[9838], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9838 [pid 5084] <... openat resumed>) = 3 [pid 9837] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9837] <... futex resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 9837] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9839 ./strace-static-x86_64: Process 9839 attached [pid 9839] set_robust_list(0x5555559d56e0, 24./strace-static-x86_64: Process 9838 attached ) = 0 [pid 9838] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9838] memfd_create("syzkaller", 0 [pid 9839] chdir("./143" [pid 9838] <... memfd_create resumed>) = 3 [pid 9839] <... chdir resumed>) = 0 [pid 9838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9839] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9838] <... mmap resumed>) = 0x7ff2ab354000 [pid 9839] <... prctl resumed>) = 0 [pid 9839] setpgid(0, 0) = 0 [pid 9839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9839] write(3, "1000", 4) = 4 [pid 9839] close(3) = 0 [pid 9839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9839] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9839] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9839] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9840], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9840 [pid 9839] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9839] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9840 attached [pid 9840] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9840] memfd_create("syzkaller", 0) = 3 [pid 9840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9828] <... write resumed>) = 16777216 [pid 9828] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9828] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 9828] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9828] close(3) = 0 [pid 9828] mkdir("./file0", 0777) = 0 [ 298.410631][ T9828] loop1: detected capacity change from 0 to 32768 [ 298.434814][ T9828] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor373 (9828) [pid 9828] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9832] <... write resumed>) = 16777216 [pid 9832] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9832] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9832] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9832] close(3) = 0 [pid 9832] mkdir("./file0", 0777) = 0 [pid 9835] <... write resumed>) = 16777216 [pid 9835] munmap(0x7ff2ab354000, 16777216 [pid 9832] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9835] <... munmap resumed>) = 0 [ 298.498008][ T9828] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 298.512971][ T9832] loop3: detected capacity change from 0 to 32768 [ 298.536013][ T9828] BTRFS info (device loop1): setting nodatasum [pid 9835] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9836] <... write resumed>) = 16777216 [pid 9835] <... openat resumed>) = 4 [pid 9835] ioctl(4, LOOP_SET_FD, 3 [pid 9836] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9836] ioctl(4, LOOP_SET_FD, 3 [pid 9835] <... ioctl resumed>) = 0 [pid 9835] close(3) = 0 [pid 9835] mkdir("./file0", 0777 [pid 9832] <... mount resumed>) = -1 EEXIST (File exists) [pid 9835] <... mkdir resumed>) = 0 [pid 9835] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9832] ioctl(4, LOOP_CLR_FD [pid 9836] <... ioctl resumed>) = 0 [pid 9836] close(3) = 0 [pid 9836] mkdir("./file0", 0777) = 0 [ 298.542205][ T9828] BTRFS info (device loop1): allowing degraded mounts [ 298.552602][ T9832] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9832) [ 298.565705][ T9835] loop2: detected capacity change from 0 to 32768 [ 298.571294][ T9836] loop0: detected capacity change from 0 to 32768 [ 298.583424][ T9835] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9835) [pid 9836] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9838] <... write resumed>) = 16777216 [pid 9835] <... mount resumed>) = -1 EEXIST (File exists) [pid 9835] ioctl(4, LOOP_CLR_FD [pid 9838] munmap(0x7ff2ab354000, 16777216 [pid 9840] <... write resumed>) = 16777216 [pid 9838] <... munmap resumed>) = 0 [pid 9840] munmap(0x7ff2ab354000, 16777216 [pid 9838] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9840] <... munmap resumed>) = 0 [pid 9838] <... openat resumed>) = 4 [pid 9840] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9838] ioctl(4, LOOP_SET_FD, 3 [pid 9840] <... openat resumed>) = 4 [pid 9840] ioctl(4, LOOP_SET_FD, 3 [pid 9838] <... ioctl resumed>) = 0 [pid 9838] close(3) = 0 [pid 9838] mkdir("./file0", 0777) = 0 [pid 9838] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9840] <... ioctl resumed>) = 0 [pid 9840] close(3) = 0 [pid 9840] mkdir("./file0", 0777) = 0 [ 298.588924][ T9828] BTRFS info (device loop1): use zlib compression, level 3 [ 298.602512][ T9828] BTRFS info (device loop1): using free space tree [ 298.610806][ T9836] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9836) [ 298.627543][ T9838] loop4: detected capacity change from 0 to 32768 [ 298.634892][ T9840] loop5: detected capacity change from 0 to 32768 [pid 9840] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9836] <... mount resumed>) = -1 EEXIST (File exists) [ 298.652685][ T9838] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9838) [pid 9836] ioctl(4, LOOP_CLR_FD [pid 9832] <... ioctl resumed>) = 0 [pid 9832] close(4) = 0 [pid 9838] <... mount resumed>) = -1 EEXIST (File exists) [pid 9838] ioctl(4, LOOP_CLR_FD [pid 9832] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9831] <... futex resumed>) = 0 [pid 9832] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9831] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9832] <... openat resumed>) = 3 [pid 9831] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9832] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9831] <... futex resumed>) = 0 [pid 9832] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9831] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9831] <... futex resumed>) = 0 [pid 9832] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9831] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9832] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9840] <... mount resumed>) = -1 EEXIST (File exists) [pid 9832] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9831] <... futex resumed>) = 0 [ 298.701734][ T9840] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9840) [ 298.739582][ T27] kauditd_printk_skb: 8 callbacks suppressed [pid 9840] ioctl(4, LOOP_CLR_FD [pid 9832] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9831] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9831] <... futex resumed>) = 0 [pid 9832] openat(AT_FDCWD, ".log", O_RDONLY [pid 9831] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9832] <... openat resumed>) = 4 [pid 9832] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9831] <... futex resumed>) = 0 [pid 9832] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9831] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9831] <... futex resumed>) = 0 [pid 9832] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9831] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9832] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9832] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9831] <... futex resumed>) = 0 [pid 9832] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9831] exit_group(0 [pid 9835] <... ioctl resumed>) = 0 [pid 9832] <... futex resumed>) = ? [ 298.739594][ T27] audit: type=1804 audit(1680236982.212:859): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/143/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 9831] <... exit_group resumed>) = ? [pid 9835] close(4 [pid 9832] +++ exited with 0 +++ [pid 9831] +++ exited with 0 +++ [pid 9835] <... close resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9831, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=30 /* 0.30 s */} --- [pid 9835] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9833] <... futex resumed>) = 0 [pid 5081] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9835] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9833] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9833] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 9835] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9833] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(3, [pid 9835] <... openat resumed>) = 3 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9835] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 9835] <... futex resumed>) = 1 [pid 9833] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9835] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9833] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9833] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9835] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9833] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] lstat("./143/binderfs", [pid 9835] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9835] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] unlink("./143/binderfs" [pid 9835] <... futex resumed>) = 1 [pid 9833] <... futex resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 9835] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9833] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9838] <... ioctl resumed>) = 0 [pid 9835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9833] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9838] close(4 [pid 9835] openat(AT_FDCWD, ".log", O_RDONLY [pid 9833] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] lstat("./143/file0", [pid 9838] <... close resumed>) = 0 [pid 9835] <... openat resumed>) = 4 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9838] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9835] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 9838] <... futex resumed>) = 1 [pid 9837] <... futex resumed>) = 0 [pid 9835] <... futex resumed>) = 1 [pid 9833] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9838] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9837] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9835] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9833] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4 [pid 9838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9837] <... futex resumed>) = 0 [pid 9835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9833] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 9838] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9837] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9835] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9833] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rmdir("./143/file0" [pid 9838] <... openat resumed>) = 3 [pid 9835] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5081] <... rmdir resumed>) = 0 [pid 9838] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9835] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./143/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9838] <... futex resumed>) = 1 [pid 9837] <... futex resumed>) = 0 [pid 9835] <... futex resumed>) = 1 [pid 9833] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9838] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9837] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9835] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9833] exit_group(0 [pid 5081] lstat("./143/.log", [pid 9838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9837] <... futex resumed>) = 0 [pid 9835] <... futex resumed>) = ? [pid 9833] <... exit_group resumed>) = ? [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9838] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9837] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9835] +++ exited with 0 +++ [pid 5081] unlink("./143/.log" [pid 9838] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9833] +++ exited with 0 +++ [pid 5081] <... unlink resumed>) = 0 [pid 9838] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 9838] <... futex resumed>) = 1 [pid 9837] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9833, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=27 /* 0.27 s */} --- [pid 9838] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9837] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [ 298.876411][ T9828] BTRFS info (device loop1): enabling ssd optimizations [ 298.883393][ T9828] BTRFS info (device loop1): auto enabling async discard [ 298.896704][ T27] audit: type=1804 audit(1680236982.372:860): pid=9835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.vJLjhl/143/.log" dev="sda1" ino=1163 res=1 errno=0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 9838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9837] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 9838] openat(AT_FDCWD, ".log", O_RDONLY [pid 9837] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rmdir("./143" [pid 9838] <... openat resumed>) = 4 [pid 5081] <... rmdir resumed>) = 0 [pid 9838] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9836] <... ioctl resumed>) = 0 [pid 5081] mkdir("./144", 0777 [pid 5080] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] fstat(3, [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] close(3 [pid 5080] getdents64(3, [pid 5081] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9838] <... futex resumed>) = 1 [pid 9837] <... futex resumed>) = 0 [pid 9837] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9857 [pid 5080] lstat("./143/binderfs", [pid 9838] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9837] <... futex resumed>) = 0 [pid 9836] close(4 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9838] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9837] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9836] <... close resumed>) = 0 [pid 5080] unlink("./143/binderfs"./strace-static-x86_64: Process 9857 attached [pid 9838] <... futex resumed>) = 0 [pid 9837] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9836] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... unlink resumed>) = 0 [pid 9857] set_robust_list(0x5555559d56e0, 24 [pid 9838] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9837] exit_group(0 [pid 9836] <... futex resumed>) = 1 [pid 9834] <... futex resumed>) = 0 [pid 5080] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9857] <... set_robust_list resumed>) = 0 [pid 9838] <... futex resumed>) = ? [pid 9837] <... exit_group resumed>) = ? [pid 9836] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9834] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9857] chdir("./144" [pid 9838] +++ exited with 0 +++ [pid 9837] +++ exited with 0 +++ [pid 9836] <... openat resumed>) = 3 [pid 9834] <... futex resumed>) = 0 [pid 5080] lstat("./143/file0", [pid 9857] <... chdir resumed>) = 0 [pid 9836] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9834] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9837, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9836] <... futex resumed>) = 0 [pid 9834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9857] <... prctl resumed>) = 0 [pid 9836] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9834] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9828] <... mount resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9857] setpgid(0, 0 [pid 9836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9834] <... futex resumed>) = 0 [pid 9828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9857] <... setpgid resumed>) = 0 [pid 9836] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9834] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9828] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 4 [pid 9857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9836] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9828] chdir("./file0" [pid 5083] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(4, [pid 9857] <... openat resumed>) = 3 [pid 9836] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9828] <... chdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9857] write(3, "1000", 4 [pid 9836] <... futex resumed>) = 1 [pid 9834] <... futex resumed>) = 0 [pid 9828] ioctl(4, LOOP_CLR_FD [pid 5083] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] getdents64(4, [pid 9857] <... write resumed>) = 4 [pid 9836] openat(AT_FDCWD, ".log", O_RDONLY [pid 9834] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9828] <... ioctl resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9857] close(3 [pid 9834] <... futex resumed>) = 0 [pid 9828] close(4 [pid 5083] fstat(3, [pid 5080] getdents64(4, [pid 9857] <... close resumed>) = 0 [pid 9834] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9828] <... close resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9857] symlink("/dev/binderfs", "./binderfs" [pid 9828] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [ 298.961019][ T9828] BTRFS info (device loop1): checking UUID tree [ 298.965347][ T27] audit: type=1804 audit(1680236982.432:861): pid=9838 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cYeNOx/143/.log" dev="sda1" ino=1150 res=1 errno=0 [pid 5080] close(4 [pid 9857] <... symlink resumed>) = 0 [pid 9836] <... openat resumed>) = 4 [pid 9828] <... futex resumed>) = 1 [pid 9827] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... close resumed>) = 0 [pid 9857] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9828] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9827] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./143/file0" [pid 9857] <... futex resumed>) = 0 [pid 9828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9827] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 9857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9828] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9827] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] lstat("./143/binderfs", [pid 5080] umount2("./143/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9857] <... mmap resumed>) = 0x7ff2b3754000 [pid 9828] <... openat resumed>) = 4 [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9857] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9828] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] unlink("./143/binderfs" [pid 5080] lstat("./143/.log", [pid 9857] <... mprotect resumed>) = 0 [pid 9828] <... futex resumed>) = 1 [pid 9827] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9857] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9828] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9827] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] unlink("./143/.log" [pid 9828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9827] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... unlink resumed>) = 0 [pid 9857] <... clone resumed>, parent_tid=[9859], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9859 [pid 9836] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9828] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9827] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] lstat("./143/file0", [pid 5080] getdents64(3, ./strace-static-x86_64: Process 9859 attached [pid 9857] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9840] <... ioctl resumed>) = 0 [pid 9836] <... futex resumed>) = 1 [pid 9859] set_robust_list(0x7ff2b37749e0, 24 [pid 9840] close(4 [pid 9836] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9859] <... set_robust_list resumed>) = 0 [pid 9840] <... close resumed>) = 0 [pid 9834] <... futex resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9859] memfd_create("syzkaller", 0 [pid 9857] <... futex resumed>) = 0 [pid 9840] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9834] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9859] <... memfd_create resumed>) = 3 [pid 9857] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9840] <... futex resumed>) = 1 [pid 9839] <... futex resumed>) = 0 [pid 9836] <... futex resumed>) = 0 [pid 9834] <... futex resumed>) = 1 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(3 [pid 9859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9840] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9839] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9836] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9834] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... close resumed>) = 0 [pid 9859] <... mmap resumed>) = 0x7ff2ab354000 [pid 9840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9839] <... futex resumed>) = 0 [pid 9836] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... openat resumed>) = 4 [pid 5080] rmdir("./143" [pid 9840] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9839] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9836] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] fstat(4, [pid 5080] <... rmdir resumed>) = 0 [pid 9840] <... openat resumed>) = 3 [pid 9836] <... futex resumed>) = 1 [pid 9834] <... futex resumed>) = 0 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] mkdir("./144", 0777 [pid 9840] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9836] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9834] exit_group(0 [pid 5083] getdents64(4, [pid 5080] <... mkdir resumed>) = 0 [pid 9840] <... futex resumed>) = 1 [pid 9839] <... futex resumed>) = 0 [pid 9836] <... futex resumed>) = ? [pid 9834] <... exit_group resumed>) = ? [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9840] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9839] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9836] +++ exited with 0 +++ [pid 9834] +++ exited with 0 +++ [pid 5083] getdents64(4, [pid 5080] <... openat resumed>) = 3 [ 299.036833][ T27] audit: type=1804 audit(1680236982.512:862): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/142/.log" dev="sda1" ino=1152 res=1 errno=0 [ 299.073424][ T9828] BTRFS info (device loop1): balance: start -s [pid 9840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9839] <... futex resumed>) = 0 [pid 9827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9834, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=34 /* 0.34 s */} --- [pid 9840] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9839] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9827] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(4 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9840] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9827] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5080] close(3 [pid 9840] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] rmdir("./143/file0" [pid 5080] <... close resumed>) = 0 [pid 5078] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9827] <... mmap resumed>) = 0x7ff2ac333000 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9827] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5083] umount2("./143/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9827] <... mprotect resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9861 [pid 5078] <... openat resumed>) = 3 [pid 9827] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] lstat("./143/.log", [pid 5078] fstat(3, [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9840] <... futex resumed>) = 1 [pid 9839] <... futex resumed>) = 0 [pid 9827] <... clone resumed>, parent_tid=[9862], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9862 [pid 5083] unlink("./143/.log" [pid 5078] getdents64(3, ./strace-static-x86_64: Process 9861 attached [pid 9840] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9839] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9827] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9861] set_robust_list(0x5555559d56e0, 24 [pid 9840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9839] <... futex resumed>) = 0 [pid 9827] <... futex resumed>) = 0 [pid 5083] getdents64(3, [pid 5078] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9862 attached [pid 9861] <... set_robust_list resumed>) = 0 [pid 9840] openat(AT_FDCWD, ".log", O_RDONLY [pid 9839] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9827] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9862] set_robust_list(0x7ff2ac3539e0, 24 [pid 9861] chdir("./144" [pid 9840] <... openat resumed>) = 4 [pid 5083] close(3 [pid 5078] lstat("./142/binderfs", [pid 9862] <... set_robust_list resumed>) = 0 [pid 9861] <... chdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9862] openat(AT_FDCWD, ".log", O_RDONLY [pid 9861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] rmdir("./143" [pid 5078] unlink("./142/binderfs" [pid 9862] <... openat resumed>) = 5 [pid 9861] <... prctl resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9862] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9861] setpgid(0, 0 [pid 5083] mkdir("./144", 0777 [pid 5078] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9862] <... futex resumed>) = 1 [pid 9861] <... setpgid resumed>) = 0 [pid 9827] <... futex resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9862] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9827] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] lstat("./142/file0", [pid 9862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9861] <... openat resumed>) = 3 [pid 9827] <... futex resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9862] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9861] write(3, "1000", 4 [pid 9827] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] ioctl(3, LOOP_CLR_FD [pid 9840] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9861] <... write resumed>) = 4 [pid 9840] <... futex resumed>) = 1 [pid 9839] <... futex resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9861] close(3 [pid 9840] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9839] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 5078] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9861] <... close resumed>) = 0 [pid 9840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9839] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 9861] symlink("/dev/binderfs", "./binderfs" [pid 9840] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9839] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] fstat(4, [pid 9861] <... symlink resumed>) = 0 [pid 9840] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9861] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9840] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9863 [pid 5078] getdents64(4, [pid 9861] <... futex resumed>) = 0 [pid 9840] <... futex resumed>) = 1 [pid 9839] <... futex resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9840] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9839] exit_group(0 [pid 5078] getdents64(4, [pid 9861] <... mmap resumed>) = 0x7ff2b3754000 [pid 9840] <... futex resumed>) = ? [pid 9839] <... exit_group resumed>) = ? [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 9863 attached [pid 9861] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9840] +++ exited with 0 +++ [pid 5078] close(4 [pid 9863] set_robust_list(0x5555559d56e0, 24 [pid 9861] <... mprotect resumed>) = 0 [pid 9839] +++ exited with 0 +++ [pid 5078] <... close resumed>) = 0 [pid 9863] <... set_robust_list resumed>) = 0 [pid 9861] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] rmdir("./142/file0" [pid 9863] chdir("./144" [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9839, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5078] <... rmdir resumed>) = 0 [pid 9863] <... chdir resumed>) = 0 [pid 9861] <... clone resumed>, parent_tid=[9864], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9864 [pid 5084] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./142/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9863] prctl(PR_SET_PDEATHSIG, SIGKILL [ 299.122249][ T9828] BTRFS info (device loop1): relocating block group 1048576 flags system [ 299.140050][ T27] audit: type=1804 audit(1680236982.612:863): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/143/.log" dev="sda1" ino=1139 res=1 errno=0 [pid 9861] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9863] <... prctl resumed>) = 0 [pid 9861] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] lstat("./142/.log", ./strace-static-x86_64: Process 9864 attached [pid 9863] setpgid(0, 0 [pid 9861] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9864] set_robust_list(0x7ff2b37749e0, 24 [pid 9863] <... setpgid resumed>) = 0 [pid 5084] fstat(3, [pid 5078] unlink("./142/.log" [pid 9864] <... set_robust_list resumed>) = 0 [pid 9863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9864] memfd_create("syzkaller", 0 [pid 9863] <... openat resumed>) = 3 [pid 5084] getdents64(3, [pid 5078] getdents64(3, [pid 9864] <... memfd_create resumed>) = 3 [pid 9863] write(3, "1000", 4 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9863] <... write resumed>) = 4 [pid 5084] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 9864] <... mmap resumed>) = 0x7ff2ab354000 [pid 9863] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 9863] <... close resumed>) = 0 [pid 9827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] lstat("./143/binderfs", [pid 5078] rmdir("./142" [pid 9863] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9863] <... symlink resumed>) = 0 [pid 5084] unlink("./143/binderfs" [pid 5078] mkdir("./143", 0777 [pid 9863] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 9863] <... futex resumed>) = 0 [pid 5084] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 9863] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] lstat("./143/file0", [pid 5078] ioctl(3, LOOP_CLR_FD [pid 9863] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9863] <... mprotect resumed>) = 0 [pid 5084] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 9863] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9863] <... clone resumed>, parent_tid=[9865], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9865 [pid 5084] <... openat resumed>) = 4 [pid 9863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] fstat(4, [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9866 [pid 9863] <... futex resumed>) = 0 [pid 5084] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 9865 attached [pid 5084] getdents64(4, [pid 9865] set_robust_list(0x7ff2b37749e0, 24 [pid 5084] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9865] <... set_robust_list resumed>) = 0 [pid 5084] close(4 [pid 9865] memfd_create("syzkaller", 0 [pid 5084] <... close resumed>) = 0 [pid 9865] <... memfd_create resumed>) = 3 [ 299.225576][ T27] audit: type=1804 audit(1680236982.612:864): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/143/file0/.log" dev="loop1" ino=263 res=1 errno=0 [ 299.251066][ T9862] BTRFS info (device loop1): scrub: started on devid 1 [ 299.251924][ T9828] BTRFS info (device loop1): balance: ended with status: 0 [pid 5084] rmdir("./143/file0"./strace-static-x86_64: Process 9866 attached [pid 9865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... rmdir resumed>) = 0 [pid 9866] set_robust_list(0x5555559d56e0, 24 [pid 9865] <... mmap resumed>) = 0x7ff2ab354000 [pid 5084] umount2("./143/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9866] <... set_robust_list resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9866] chdir("./143" [pid 5084] lstat("./143/.log", [pid 9866] <... chdir resumed>) = 0 [pid 5084] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9866] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] unlink("./143/.log" [pid 9866] <... prctl resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 9866] setpgid(0, 0 [pid 5084] getdents64(3, [pid 9866] <... setpgid resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] close(3) = 0 [pid 9866] <... openat resumed>) = 3 [pid 9828] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5084] rmdir("./143" [pid 9866] write(3, "1000", 4 [pid 9828] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 9866] <... write resumed>) = 4 [pid 9828] <... futex resumed>) = 0 [pid 5084] mkdir("./144", 0777 [pid 9866] close(3 [pid 9828] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... mkdir resumed>) = 0 [pid 9866] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9866] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... openat resumed>) = 3 [pid 9866] <... symlink resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 9866] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 299.274080][ T9862] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [pid 9866] <... futex resumed>) = 0 [pid 5084] close(3 [pid 9866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... close resumed>) = 0 [pid 9866] <... mmap resumed>) = 0x7ff2b3754000 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9867 [pid 9866] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 9867 attached [pid 9867] set_robust_list(0x5555559d56e0, 24 [pid 9866] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9867] <... set_robust_list resumed>) = 0 [pid 9862] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9867] chdir("./144" [pid 9866] <... clone resumed>, parent_tid=[9868], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9868 [pid 9862] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9827] exit_group(0 [pid 9867] <... chdir resumed>) = 0 [pid 9866] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9862] <... futex resumed>) = ? [pid 9859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9828] <... futex resumed>) = ? [pid 9827] <... exit_group resumed>) = ? [pid 9867] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9866] <... futex resumed>) = 0 [pid 9862] +++ exited with 0 +++ ./strace-static-x86_64: Process 9868 attached [pid 9867] <... prctl resumed>) = 0 [pid 9868] set_robust_list(0x7ff2b37749e0, 24 [pid 9867] setpgid(0, 0 [pid 9868] <... set_robust_list resumed>) = 0 [pid 9867] <... setpgid resumed>) = 0 [pid 9868] memfd_create("syzkaller", 0 [pid 9867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9868] <... memfd_create resumed>) = 3 [pid 9867] <... openat resumed>) = 3 [pid 9868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9867] write(3, "1000", 4 [pid 9868] <... mmap resumed>) = 0x7ff2ab354000 [pid 9867] <... write resumed>) = 4 [pid 9867] close(3 [pid 9866] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9828] +++ exited with 0 +++ [pid 9827] +++ exited with 0 +++ [pid 9867] <... close resumed>) = 0 [pid 9867] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9827, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=31 /* 0.31 s */} --- [pid 9867] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 9867] <... futex resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 9867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9867] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9867] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 9867] <... clone resumed>, parent_tid=[9869], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9869 [pid 5079] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9867] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] <... openat resumed>) = 3 [pid 9867] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 9869 attached [pid 5079] getdents64(3, [pid 9869] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9869] memfd_create("syzkaller", 0 [pid 5079] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9869] <... memfd_create resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] lstat("./143/binderfs", [pid 9869] <... mmap resumed>) = 0x7ff2ab354000 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./143/binderfs") = 0 [pid 5079] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5079] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./143/file0") = 0 [pid 5079] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./143") = 0 [pid 5079] mkdir("./144", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = 0 [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9870 ./strace-static-x86_64: Process 9870 attached [pid 9870] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9870] chdir("./144") = 0 [pid 9870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9870] setpgid(0, 0) = 0 [pid 9870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9870] write(3, "1000", 4) = 4 [pid 9870] close(3) = 0 [pid 9870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9870] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9870] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9870] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9871], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9871 [pid 9870] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9870] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9871 attached [pid 9871] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9871] memfd_create("syzkaller", 0) = 3 [pid 9871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9859] <... write resumed>) = 16777216 [pid 9859] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9859] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 9865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9859] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9859] close(3) = 0 [pid 9859] mkdir("./file0", 0777) = 0 [pid 9859] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [ 299.824481][ T9859] loop3: detected capacity change from 0 to 32768 [ 299.841031][ T9859] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor373 (9859) [ 299.919052][ T9859] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 299.956952][ T9859] BTRFS info (device loop3): setting nodatasum [ 299.963259][ T9859] BTRFS info (device loop3): allowing degraded mounts [ 299.988624][ T9859] BTRFS info (device loop3): use zlib compression, level 3 [pid 9869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 300.025623][ T9859] BTRFS info (device loop3): using free space tree [pid 9871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 9864] <... write resumed>) = 16777216 [pid 9871] munmap(0x7ff2ab354000, 16777216 [pid 9869] <... write resumed>) = 16777216 [pid 9871] <... munmap resumed>) = 0 [pid 9869] munmap(0x7ff2ab354000, 16777216 [pid 9871] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9869] <... munmap resumed>) = 0 [pid 9871] <... openat resumed>) = 4 [pid 9869] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 9865] <... write resumed>) = 16777216 [pid 9864] munmap(0x7ff2ab354000, 16777216 [pid 9868] <... write resumed>) = 16777216 [pid 9871] ioctl(4, LOOP_SET_FD, 3 [pid 9869] <... openat resumed>) = 4 [pid 9865] munmap(0x7ff2ab354000, 16777216 [pid 9864] <... munmap resumed>) = 0 [pid 9868] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9868] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 9868] ioctl(4, LOOP_SET_FD, 3 [pid 9871] <... ioctl resumed>) = 0 [ 300.270194][ T9859] BTRFS info (device loop3): enabling ssd optimizations [ 300.280468][ T9859] BTRFS info (device loop3): auto enabling async discard [ 300.295770][ T9859] BTRFS info (device loop3): checking UUID tree [ 300.298985][ T9871] loop1: detected capacity change from 0 to 32768 [ 300.305432][ T9868] loop0: detected capacity change from 0 to 32768 [pid 9869] ioctl(4, LOOP_SET_FD, 3 [pid 9865] <... munmap resumed>) = 0 [pid 9864] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9871] close(3 [pid 9868] <... ioctl resumed>) = 0 [pid 9868] close(3) = 0 [pid 9868] mkdir("./file0", 0777) = 0 [pid 9868] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9865] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9859] <... mount resumed>) = 0 [pid 9864] <... openat resumed>) = 4 [pid 9859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 9871] <... close resumed>) = 0 [pid 9869] <... ioctl resumed>) = 0 [pid 9865] <... openat resumed>) = 4 [pid 9864] ioctl(4, LOOP_SET_FD, 3 [pid 9859] <... openat resumed>) = 3 [pid 9859] chdir("./file0") = 0 [pid 9859] ioctl(4, LOOP_CLR_FD) = 0 [pid 9859] close(4) = 0 [pid 9859] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9857] <... futex resumed>) = 0 [pid 9859] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9857] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9868] <... mount resumed>) = -1 EEXIST (File exists) [pid 9865] ioctl(4, LOOP_SET_FD, 3 [pid 9864] <... ioctl resumed>) = 0 [pid 9859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9868] ioctl(4, LOOP_CLR_FD [pid 9864] close(3) = 0 [pid 9864] mkdir("./file0", 0777 [pid 9857] <... futex resumed>) = 0 [pid 9864] <... mkdir resumed>) = 0 [pid 9864] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9871] mkdir("./file0", 0777 [pid 9869] close(3 [pid 9865] <... ioctl resumed>) = 0 [pid 9859] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9857] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9871] <... mkdir resumed>) = 0 [pid 9869] <... close resumed>) = 0 [pid 9865] close(3 [pid 9859] <... openat resumed>) = 4 [ 300.311577][ T9869] loop5: detected capacity change from 0 to 32768 [ 300.323234][ T9868] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9868) [ 300.334280][ T9864] loop2: detected capacity change from 0 to 32768 [ 300.343010][ T9865] loop4: detected capacity change from 0 to 32768 [ 300.344680][ T9864] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9864) [pid 9871] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9869] mkdir("./file0", 0777 [pid 9865] <... close resumed>) = 0 [pid 9864] <... mount resumed>) = -1 EEXIST (File exists) [pid 9859] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] <... mkdir resumed>) = 0 [pid 9865] mkdir("./file0", 0777 [pid 9864] ioctl(4, LOOP_CLR_FD [pid 9859] <... futex resumed>) = 1 [pid 9857] <... futex resumed>) = 0 [pid 9869] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9865] <... mkdir resumed>) = 0 [pid 9859] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9857] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9865] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9857] <... futex resumed>) = 0 [ 300.381008][ T9871] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9871) [pid 9859] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9857] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9871] <... mount resumed>) = -1 EEXIST (File exists) [pid 9869] <... mount resumed>) = -1 EEXIST (File exists) [pid 9869] ioctl(4, LOOP_CLR_FD [pid 9871] ioctl(4, LOOP_CLR_FD [pid 9865] <... mount resumed>) = -1 EEXIST (File exists) [pid 9865] ioctl(4, LOOP_CLR_FD [pid 9857] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 300.424207][ T9869] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor373 (9869) [ 300.424416][ T9859] BTRFS info (device loop3): balance: start -s [ 300.442146][ T9865] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9865) [pid 9857] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2ac333000 [pid 9857] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9857] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9890], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9890 [pid 9857] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9857] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 9890 attached [pid 9890] set_robust_list(0x7ff2ac3539e0, 24) = 0 [pid 9890] openat(AT_FDCWD, ".log", O_RDONLY) = 5 [pid 9890] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9857] <... futex resumed>) = 0 [pid 9890] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9857] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9857] <... futex resumed>) = 0 [pid 9890] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [ 300.517503][ T9859] BTRFS info (device loop3): relocating block group 1048576 flags system [ 300.538114][ T27] audit: type=1804 audit(1680236984.012:865): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Lbb2uo/144/file0/.log" dev="loop3" ino=263 res=1 errno=0 [pid 9857] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 9868] <... ioctl resumed>) = 0 [pid 9890] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9890] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [ 300.636411][ T9890] BTRFS info (device loop3): scrub: started on devid 1 [ 300.637230][ T9859] BTRFS info (device loop3): balance: ended with status: 0 [ 300.654213][ T9890] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [pid 9868] close(4 [pid 9890] <... futex resumed>) = 0 [pid 9868] <... close resumed>) = 0 [pid 9859] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 9890] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9868] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9859] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9857] exit_group(0 [pid 9890] <... futex resumed>) = ? [pid 9868] <... futex resumed>) = 1 [pid 9866] <... futex resumed>) = 0 [pid 9859] <... futex resumed>) = ? [pid 9857] <... exit_group resumed>) = ? [pid 9890] +++ exited with 0 +++ [pid 9868] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9866] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9859] +++ exited with 0 +++ [pid 9857] +++ exited with 0 +++ [pid 9868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9866] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9857, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=36 /* 0.36 s */} --- [pid 9868] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9866] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9871] <... ioctl resumed>) = 0 [pid 9868] <... openat resumed>) = 3 [pid 9871] close(4 [pid 9869] <... ioctl resumed>) = 0 [pid 9868] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9871] <... close resumed>) = 0 [pid 9871] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] close(4 [pid 9868] <... futex resumed>) = 1 [pid 9866] <... futex resumed>) = 0 [pid 5081] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9871] <... futex resumed>) = 1 [pid 9870] <... futex resumed>) = 0 [pid 9869] <... close resumed>) = 0 [pid 9868] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9866] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9871] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9870] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9866] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9870] <... futex resumed>) = 0 [pid 9869] <... futex resumed>) = 1 [pid 9868] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9867] <... futex resumed>) = 0 [pid 9866] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9864] <... ioctl resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 9871] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9870] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9869] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9868] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9867] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9864] close(4 [pid 5081] fstat(3, [pid 9871] <... openat resumed>) = 3 [pid 9869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9868] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9867] <... futex resumed>) = 0 [pid 9864] <... close resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9871] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9868] <... futex resumed>) = 1 [pid 9867] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9866] <... futex resumed>) = 0 [pid 9864] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 9871] <... futex resumed>) = 1 [pid 9870] <... futex resumed>) = 0 [pid 9869] <... openat resumed>) = 3 [pid 9868] openat(AT_FDCWD, ".log", O_RDONLY [pid 9866] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9864] <... futex resumed>) = 1 [pid 9861] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 4 entries */, 32768) = 112 [pid 9871] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9870] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9868] <... openat resumed>) = 4 [pid 9866] <... futex resumed>) = 0 [pid 9865] <... ioctl resumed>) = 0 [pid 9864] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9861] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9870] <... futex resumed>) = 0 [pid 9869] <... futex resumed>) = 1 [pid 9868] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9867] <... futex resumed>) = 0 [pid 9866] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9865] close(4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9871] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9870] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9869] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9868] <... futex resumed>) = 0 [pid 9867] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9865] <... close resumed>) = 0 [pid 9864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9861] <... futex resumed>) = 0 [pid 5081] lstat("./144/binderfs", [pid 9871] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9869] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9868] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9867] <... futex resumed>) = 0 [pid 9866] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9865] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9864] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9861] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9871] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9867] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9866] <... futex resumed>) = 0 [pid 9865] <... futex resumed>) = 1 [pid 9864] <... openat resumed>) = 3 [pid 9863] <... futex resumed>) = 0 [pid 5081] unlink("./144/binderfs" [pid 9871] <... futex resumed>) = 1 [pid 9870] <... futex resumed>) = 0 [pid 9869] <... futex resumed>) = 0 [pid 9868] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9866] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9865] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9864] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 9871] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9870] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9868] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9867] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9864] <... futex resumed>) = 1 [pid 9863] <... futex resumed>) = 0 [pid 9861] <... futex resumed>) = 0 [pid 5081] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9870] <... futex resumed>) = 0 [pid 9869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9868] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9867] <... futex resumed>) = 0 [pid 9865] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9864] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9861] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9871] openat(AT_FDCWD, ".log", O_RDONLY [pid 9870] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9869] openat(AT_FDCWD, ".log", O_RDONLY [pid 9868] <... futex resumed>) = 1 [pid 9867] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9866] <... futex resumed>) = 0 [pid 9865] <... openat resumed>) = 3 [pid 9864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9861] <... futex resumed>) = 0 [pid 9871] <... openat resumed>) = 4 [pid 9869] <... openat resumed>) = 4 [pid 9868] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9866] exit_group(0 [pid 9865] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9864] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9861] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9871] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9866] <... exit_group resumed>) = ? [ 300.797387][ T27] audit: type=1804 audit(1680236984.272:866): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.cDq3Ea/143/.log" dev="sda1" ino=1162 res=1 errno=0 [pid 9871] <... futex resumed>) = 1 [pid 9869] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9868] <... futex resumed>) = ? [pid 9865] <... futex resumed>) = 1 [pid 9864] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9863] <... futex resumed>) = 0 [pid 9871] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9869] <... futex resumed>) = 1 [pid 9868] +++ exited with 0 +++ [pid 9867] <... futex resumed>) = 0 [pid 9866] +++ exited with 0 +++ [pid 9865] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9864] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9867] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9864] <... futex resumed>) = 1 [pid 9863] <... futex resumed>) = 0 [pid 9861] <... futex resumed>) = 0 [pid 9869] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9867] <... futex resumed>) = 0 [pid 9865] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9864] openat(AT_FDCWD, ".log", O_RDONLY [pid 9863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9861] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9867] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9865] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9864] <... openat resumed>) = 4 [pid 9861] <... futex resumed>) = 0 [pid 9869] <... futex resumed>) = 0 [pid 9867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9865] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9864] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9861] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9869] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9867] exit_group(0 [pid 9865] <... futex resumed>) = 1 [pid 9864] <... futex resumed>) = 0 [pid 9863] <... futex resumed>) = 0 [pid 9861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9869] <... futex resumed>) = ? [pid 9867] <... exit_group resumed>) = ? [pid 9865] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9864] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9861] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9869] +++ exited with 0 +++ [pid 9867] +++ exited with 0 +++ [pid 9865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9863] <... futex resumed>) = 0 [pid 9861] <... futex resumed>) = 0 [pid 9865] openat(AT_FDCWD, ".log", O_RDONLY [pid 9864] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9861] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9865] <... openat resumed>) = 4 [pid 9864] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9865] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9864] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9865] <... futex resumed>) = 1 [pid 9864] <... futex resumed>) = 1 [pid 9863] <... futex resumed>) = 0 [pid 9861] <... futex resumed>) = 0 [pid 9865] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9864] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9863] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9861] exit_group(0 [pid 9865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9864] <... futex resumed>) = ? [pid 9863] <... futex resumed>) = 0 [pid 9861] <... exit_group resumed>) = ? [pid 9865] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9864] +++ exited with 0 +++ [pid 9863] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9861] +++ exited with 0 +++ [pid 9865] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9865] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9863] <... futex resumed>) = 0 [pid 9865] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9863] exit_group(0 [pid 9865] <... futex resumed>) = ? [pid 9863] <... exit_group resumed>) = ? [pid 9865] +++ exited with 0 +++ [pid 9863] +++ exited with 0 +++ [pid 9870] <... futex resumed>) = 0 [pid 9870] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9871] <... futex resumed>) = 0 [pid 9870] <... futex resumed>) = 1 [pid 9871] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9870] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9871] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9871] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9870] <... futex resumed>) = 0 [pid 9871] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9870] exit_group(0 [pid 9871] <... futex resumed>) = ? [pid 9870] <... exit_group resumed>) = ? [pid 9871] +++ exited with 0 +++ [pid 9870] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9867, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=21 /* 0.21 s */} --- [pid 5084] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5084] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] unlink("./144/binderfs") = 0 [pid 5084] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./144/file0") = 0 [pid 5084] umount2("./144/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] lstat("./144/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5084] unlink("./144/.log") = 0 [pid 5084] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./144") = 0 [pid 5084] mkdir("./145", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5084] close(3) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9863, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9861, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=26 /* 0.26 s */} --- [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9870, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} --- [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9866, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5083] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5083] fstat(3, [pid 5080] fstat(3, [pid 5079] fstat(3, [pid 5078] fstat(3, [pid 5084] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9891 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(3, [pid 5080] getdents64(3, [pid 5079] getdents64(3, [pid 5078] getdents64(3, [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5083] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 300.855146][ T27] audit: type=1804 audit(1680236984.322:867): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.Riev8e/144/.log" dev="sda1" ino=1163 res=1 errno=0 [ 300.878165][ T27] audit: type=1804 audit(1680236984.322:868): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor373" name="/root/syzkaller.4Sx7vE/144/.log" dev="sda1" ino=1164 res=1 errno=0 [pid 5079] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./144/binderfs", [pid 5080] lstat("./144/binderfs", [pid 5079] lstat("./144/binderfs", [pid 5078] lstat("./143/binderfs", ./strace-static-x86_64: Process 9891 attached [pid 5083] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 9891] set_robust_list(0x5555559d56e0, 24 [pid 5083] unlink("./144/binderfs" [pid 5080] unlink("./144/binderfs" [pid 5079] unlink("./144/binderfs" [pid 5078] unlink("./143/binderfs" [pid 9891] <... set_robust_list resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 9891] chdir("./145" [pid 5083] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9891] <... chdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] lstat("./144/file0", [pid 5080] lstat("./144/file0", [pid 5079] lstat("./144/file0", [pid 5078] lstat("./143/file0", [pid 9891] <... prctl resumed>) = 0 [pid 5083] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9891] setpgid(0, 0 [pid 5083] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9891] <... setpgid resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9891] <... openat resumed>) = 3 [pid 5083] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 4 [pid 5079] <... openat resumed>) = 4 [pid 5078] <... openat resumed>) = 4 [pid 9891] write(3, "1000", 4 [pid 5083] fstat(4, [pid 5080] fstat(4, [pid 5079] fstat(4, [pid 5078] fstat(4, [pid 9891] <... write resumed>) = 4 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9891] close(3 [pid 5083] getdents64(4, [pid 5080] getdents64(4, [pid 5079] getdents64(4, [pid 5078] getdents64(4, [pid 9891] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9891] symlink("/dev/binderfs", "./binderfs" [pid 5083] getdents64(4, [pid 5080] getdents64(4, [pid 5079] getdents64(4, [pid 5078] getdents64(4, [pid 9891] <... symlink resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9891] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(4 [pid 5080] close(4 [pid 5079] close(4 [pid 5078] close(4 [pid 9891] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] rmdir("./144/file0" [pid 5080] rmdir("./144/file0" [pid 5079] rmdir("./144/file0" [pid 5078] rmdir("./143/file0" [pid 9891] <... mmap resumed>) = 0x7ff2b3754000 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9891] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5083] umount2("./144/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./144/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./144/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./143/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9891] <... mprotect resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9891] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] lstat("./144/.log", [pid 5080] lstat("./144/.log", [pid 5079] lstat("./144/.log", [pid 5078] lstat("./143/.log", [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9891] <... clone resumed>, parent_tid=[9892], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9892 [pid 5083] unlink("./144/.log" [pid 5080] unlink("./144/.log" [pid 5079] unlink("./144/.log" [pid 5078] unlink("./143/.log" [pid 9891] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 9892 attached [pid 9891] <... futex resumed>) = 0 [pid 5083] getdents64(3, [pid 5080] getdents64(3, [pid 5079] getdents64(3, [pid 5078] getdents64(3, [pid 9892] set_robust_list(0x7ff2b37749e0, 24 [pid 9891] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9892] <... set_robust_list resumed>) = 0 [pid 5083] close(3 [pid 5080] close(3 [pid 5079] close(3 [pid 5078] close(3 [pid 9892] memfd_create("syzkaller", 0 [pid 5083] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 9892] <... memfd_create resumed>) = 3 [pid 5083] rmdir("./144" [pid 5080] rmdir("./144" [pid 5079] rmdir("./144" [pid 5078] rmdir("./143" [pid 9892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 9892] <... mmap resumed>) = 0x7ff2ab354000 [pid 5083] mkdir("./145", 0777 [pid 5080] mkdir("./145", 0777 [pid 5079] mkdir("./145", 0777 [pid 5078] mkdir("./144", 0777 [pid 5083] <... mkdir resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 5080] close(3 [pid 5079] close(3 [pid 5078] close(3 [pid 5083] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9893 [pid 5080] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9894 [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9895 [pid 5078] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9896 ./strace-static-x86_64: Process 9895 attached [pid 9895] set_robust_list(0x5555559d56e0, 24./strace-static-x86_64: Process 9893 attached ) = 0 [pid 9895] chdir("./145" [pid 9893] set_robust_list(0x5555559d56e0, 24 [pid 9895] <... chdir resumed>) = 0 [pid 9893] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 9896 attached [pid 9895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9893] chdir("./145"./strace-static-x86_64: Process 9894 attached [pid 9896] set_robust_list(0x5555559d56e0, 24 [pid 9895] <... prctl resumed>) = 0 [pid 9893] <... chdir resumed>) = 0 [pid 9896] <... set_robust_list resumed>) = 0 [pid 9895] setpgid(0, 0 [pid 9894] set_robust_list(0x5555559d56e0, 24 [pid 9893] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9895] <... setpgid resumed>) = 0 [pid 9893] <... prctl resumed>) = 0 [pid 9896] chdir("./144" [pid 9894] <... set_robust_list resumed>) = 0 [pid 9896] <... chdir resumed>) = 0 [pid 9895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9894] chdir("./145" [pid 9893] setpgid(0, 0 [pid 9896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9895] <... openat resumed>) = 3 [pid 9894] <... chdir resumed>) = 0 [pid 9893] <... setpgid resumed>) = 0 [pid 9896] <... prctl resumed>) = 0 [pid 9895] write(3, "1000", 4 [pid 9894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 9893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9896] setpgid(0, 0 [pid 9895] <... write resumed>) = 4 [pid 9894] <... prctl resumed>) = 0 [pid 9893] <... openat resumed>) = 3 [pid 9896] <... setpgid resumed>) = 0 [pid 9895] close(3 [pid 9894] setpgid(0, 0 [pid 9893] write(3, "1000", 4 [pid 9896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9895] <... close resumed>) = 0 [pid 9894] <... setpgid resumed>) = 0 [pid 9893] <... write resumed>) = 4 [pid 9896] <... openat resumed>) = 3 [pid 9895] symlink("/dev/binderfs", "./binderfs" [pid 9894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 9893] close(3 [pid 9896] write(3, "1000", 4 [pid 9895] <... symlink resumed>) = 0 [pid 9894] <... openat resumed>) = 3 [pid 9893] <... close resumed>) = 0 [pid 9896] <... write resumed>) = 4 [pid 9895] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9894] write(3, "1000", 4 [pid 9893] symlink("/dev/binderfs", "./binderfs" [pid 9896] close(3 [pid 9895] <... futex resumed>) = 0 [pid 9894] <... write resumed>) = 4 [pid 9893] <... symlink resumed>) = 0 [pid 9896] <... close resumed>) = 0 [pid 9895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9894] close(3 [pid 9893] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9896] symlink("/dev/binderfs", "./binderfs" [pid 9895] <... mmap resumed>) = 0x7ff2b3754000 [pid 9894] <... close resumed>) = 0 [pid 9893] <... futex resumed>) = 0 [pid 9896] <... symlink resumed>) = 0 [pid 9895] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9894] symlink("/dev/binderfs", "./binderfs" [pid 9893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... umount2 resumed>) = 0 [pid 9896] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9895] <... mprotect resumed>) = 0 [pid 9894] <... symlink resumed>) = 0 [pid 9893] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9896] <... futex resumed>) = 0 [pid 9895] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9894] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9893] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9896] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9894] <... futex resumed>) = 0 [pid 9893] <... mprotect resumed>) = 0 [pid 5081] lstat("./144/file0", [pid 9896] <... mmap resumed>) = 0x7ff2b3754000 [pid 9895] <... clone resumed>, parent_tid=[9897], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9897 [pid 9894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9893] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9896] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9895] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9894] <... mmap resumed>) = 0x7ff2b3754000 [pid 5081] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 9897 attached [pid 9896] <... mprotect resumed>) = 0 [pid 9895] <... futex resumed>) = 0 [pid 9894] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE [pid 9893] <... clone resumed>, parent_tid=[9898], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9898 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 9898 attached [pid 9897] set_robust_list(0x7ff2b37749e0, 24 [pid 9896] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9895] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9894] <... mprotect resumed>) = 0 [pid 9893] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9898] set_robust_list(0x7ff2b37749e0, 24 [pid 9897] <... set_robust_list resumed>) = 0 [pid 9894] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9893] <... futex resumed>) = 0 [pid 9898] <... set_robust_list resumed>) = 0 [pid 9897] memfd_create("syzkaller", 0 [pid 9896] <... clone resumed>, parent_tid=[9899], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9899 [pid 9893] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... openat resumed>) = 4 ./strace-static-x86_64: Process 9899 attached [pid 9898] memfd_create("syzkaller", 0 [pid 9897] <... memfd_create resumed>) = 3 [pid 9896] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9894] <... clone resumed>, parent_tid=[9900], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9900 [pid 5081] fstat(4, [pid 9899] set_robust_list(0x7ff2b37749e0, 24 [pid 9898] <... memfd_create resumed>) = 3 [pid 9897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9896] <... futex resumed>) = 0 [pid 9894] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9899] <... set_robust_list resumed>) = 0 [pid 9898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 9897] <... mmap resumed>) = 0x7ff2ab354000 [pid 9896] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9894] <... futex resumed>) = 0 [pid 5081] getdents64(4, ./strace-static-x86_64: Process 9900 attached [pid 9899] memfd_create("syzkaller", 0 [pid 9898] <... mmap resumed>) = 0x7ff2ab354000 [pid 9894] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9900] set_robust_list(0x7ff2b37749e0, 24 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 9900] <... set_robust_list resumed>) = 0 [pid 9900] memfd_create("syzkaller", 0) = 3 [pid 9900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9899] <... memfd_create resumed>) = 3 [pid 5081] getdents64(4, [pid 9899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 9899] <... mmap resumed>) = 0x7ff2ab354000 [pid 5081] close(4) = 0 [pid 5081] rmdir("./144/file0") = 0 [pid 5081] getdents64(3, 0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./144") = 0 [pid 5081] mkdir("./145", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559d56d0) = 9901 ./strace-static-x86_64: Process 9901 attached [pid 9901] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9901] chdir("./145") = 0 [pid 9901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9901] setpgid(0, 0) = 0 [pid 9901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9901] write(3, "1000", 4) = 4 [pid 9901] close(3) = 0 [pid 9901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9901] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2b3754000 [pid 9901] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9901] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9902], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9902 [pid 9901] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9901] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 9902 attached [pid 9902] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9902] memfd_create("syzkaller", 0) = 3 [pid 9902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9892] <... write resumed>) = 16777216 [pid 9892] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9892] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 9892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 9892] close(3) = 0 [pid 9892] mkdir("./file0", 0777) = 0 [ 301.766066][ T9892] loop5: detected capacity change from 0 to 32768 [ 301.777942][ T9892] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor373 (9892) [ 301.820077][ T9892] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 301.849925][ T9892] BTRFS info (device loop5): setting nodatasum [pid 9892] mount("/dev/loop5", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9898] <... write resumed>) = 16777216 [pid 9898] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9898] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 301.875339][ T9892] BTRFS info (device loop5): allowing degraded mounts [ 301.882230][ T9892] BTRFS info (device loop5): use zlib compression, level 3 [ 301.906495][ T9892] BTRFS info (device loop5): using free space tree [pid 9898] ioctl(4, LOOP_SET_FD, 3 [pid 9899] <... write resumed>) = 16777216 [pid 9898] <... ioctl resumed>) = 0 [pid 9898] close(3) = 0 [pid 9902] <... write resumed>) = 16777216 [pid 9898] mkdir("./file0", 0777 [pid 9902] munmap(0x7ff2ab354000, 16777216 [pid 9898] <... mkdir resumed>) = 0 [pid 9902] <... munmap resumed>) = 0 [pid 9900] <... write resumed>) = 16777216 [pid 9899] munmap(0x7ff2ab354000, 16777216 [pid 9898] mount("/dev/loop4", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9902] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 9900] munmap(0x7ff2ab354000, 16777216 [pid 9897] <... write resumed>) = 16777216 [pid 9897] munmap(0x7ff2ab354000, 16777216) = 0 [pid 9897] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 9902] <... openat resumed>) = 4 [pid 9897] <... openat resumed>) = 4 [pid 9902] ioctl(4, LOOP_SET_FD, 3 [pid 9900] <... munmap resumed>) = 0 [ 301.949147][ T9898] loop4: detected capacity change from 0 to 32768 [ 301.987097][ T9898] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor373 (9898) [pid 9897] ioctl(4, LOOP_SET_FD, 3 [pid 9902] <... ioctl resumed>) = 0 [pid 9900] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 9899] <... munmap resumed>) = 0 [pid 9898] <... mount resumed>) = -1 EEXIST (File exists) [pid 9902] close(3 [pid 9900] <... openat resumed>) = 4 [pid 9899] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 9898] ioctl(4, LOOP_CLR_FD [pid 9902] <... close resumed>) = 0 [pid 9900] ioctl(4, LOOP_SET_FD, 3 [pid 9899] <... openat resumed>) = 4 [pid 9902] mkdir("./file0", 0777 [pid 9897] <... ioctl resumed>) = 0 [pid 9897] close(3) = 0 [pid 9897] mkdir("./file0", 0777) = 0 [pid 9897] mount("/dev/loop1", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9902] <... mkdir resumed>) = 0 [pid 9900] <... ioctl resumed>) = 0 [pid 9899] ioctl(4, LOOP_SET_FD, 3 [pid 9902] mount("/dev/loop3", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9900] close(3 [pid 9899] <... ioctl resumed>) = 0 [pid 9897] <... mount resumed>) = -1 EEXIST (File exists) [pid 9900] <... close resumed>) = 0 [pid 9900] mkdir("./file0", 0777) = 0 [pid 9900] mount("/dev/loop2", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9899] close(3) = 0 [pid 9899] mkdir("./file0", 0777) = 0 [pid 9899] mount("/dev/loop0", "./file0", "btrfs", MS_SYNCHRONOUS|MS_STRICTATIME, "datacow,noautodefrag,nodatasum,rescan_uuid_tree,degraded,compress," [pid 9897] ioctl(4, LOOP_CLR_FD [pid 9902] <... mount resumed>) = -1 EEXIST (File exists) [ 302.001122][ T9902] loop3: detected capacity change from 0 to 32768 [ 302.002185][ T9897] loop1: detected capacity change from 0 to 32768 [ 302.011344][ T9900] loop2: detected capacity change from 0 to 32768 [ 302.021514][ T9897] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor373 (9897) [ 302.022629][ T9899] loop0: detected capacity change from 0 to 32768 [ 302.040787][ T9902] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor373 (9902) [pid 9902] ioctl(4, LOOP_CLR_FD [pid 9900] <... mount resumed>) = -1 EEXIST (File exists) [pid 9900] ioctl(4, LOOP_CLR_FD [pid 9899] <... mount resumed>) = -1 EEXIST (File exists) [ 302.052838][ T9900] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor373 (9900) [ 302.060942][ T9892] BTRFS info (device loop5): enabling ssd optimizations [ 302.071931][ T9899] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor373 (9899) [ 302.084818][ T9892] BTRFS info (device loop5): auto enabling async discard [ 302.094653][ T9892] BTRFS info (device loop5): checking UUID tree [pid 9899] ioctl(4, LOOP_CLR_FD [pid 9897] <... ioctl resumed>) = 0 [pid 9897] close(4) = 0 [pid 9897] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9895] <... futex resumed>) = 0 [pid 9895] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9895] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9897] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 3 [pid 9897] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9895] <... futex resumed>) = 0 [pid 9895] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9895] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9897] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9897] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9895] <... futex resumed>) = 0 [pid 9897] openat(AT_FDCWD, ".log", O_RDONLY [pid 9895] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9895] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9897] <... openat resumed>) = 4 [pid 9897] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9895] <... futex resumed>) = 0 [pid 9897] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9895] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9897] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9895] <... futex resumed>) = 0 [pid 9897] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9895] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9897] <... futex resumed>) = 0 [pid 9895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9897] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9895] exit_group(0 [pid 9897] <... futex resumed>) = ? [pid 9895] <... exit_group resumed>) = ? [pid 9897] +++ exited with 0 +++ [pid 9895] +++ exited with 0 +++ [pid 9892] <... mount resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9895, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=32 /* 0.32 s */} --- [pid 9892] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 9892] chdir("./file0") = 0 [pid 9892] ioctl(4, LOOP_CLR_FD [pid 5079] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9892] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9892] close(4 [pid 5079] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 9892] <... close resumed>) = 0 [pid 9892] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 3 [pid 9892] <... futex resumed>) = 1 [pid 9891] <... futex resumed>) = 0 [pid 9891] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9891] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9892] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5079] fstat(3, [pid 9892] <... openat resumed>) = 4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 9892] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9891] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9892] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9891] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9891] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9891] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] lstat("./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./145/binderfs") = 0 [pid 5079] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [ 302.283394][ T9892] BTRFS info (device loop5): balance: start -s [pid 5079] rmdir("./145/file0") = 0 [pid 5079] umount2("./145/.log", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./145/.log", {st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5079] unlink("./145/.log") = 0 [pid 5079] getdents64(3, [pid 9891] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9891] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 9891] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./145" [pid 9891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5079] mkdir("./146", 0777 [pid 9891] <... mmap resumed>) = 0x7ff2ac333000 [pid 5079] <... mkdir resumed>) = 0 [pid 9891] mprotect(0x7ff2ac334000, 131072, PROT_READ|PROT_WRITE [pid 5079] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 9891] <... mprotect resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9891] clone(child_stack=0x7ff2ac3532f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5079] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9921 [pid 9891] <... clone resumed>, parent_tid=[9922], tls=0x7ff2ac353700, child_tidptr=0x7ff2ac3539d0) = 9922 [pid 9891] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 9921 attached [pid 9891] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9921] set_robust_list(0x5555559d56e0, 24) = 0 [pid 9921] chdir("./146") = 0 [pid 9921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 9921] setpgid(0, 0) = 0 [pid 9921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 9921] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 9922 attached [pid 9921] close(3) = 0 [pid 9921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 9922] set_robust_list(0x7ff2ac3539e0, 24 [pid 9921] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 9922] <... set_robust_list resumed>) = 0 [pid 9921] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 9922] openat(AT_FDCWD, ".log", O_RDONLY [pid 9921] <... mmap resumed>) = 0x7ff2b3754000 [ 302.326112][ T9892] BTRFS info (device loop5): relocating block group 1048576 flags system [pid 9921] mprotect(0x7ff2b3755000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 9922] <... openat resumed>) = 5 [pid 9922] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9921] clone(child_stack=0x7ff2b37742f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 9898] <... ioctl resumed>) = 0 [pid 9922] <... futex resumed>) = 1 [pid 9891] <... futex resumed>) = 0 [pid 9921] <... clone resumed>, parent_tid=[9923], tls=0x7ff2b3774700, child_tidptr=0x7ff2b37749d0) = 9923 [pid 9891] futex(0x7ff2b3854798, FUTEX_WAKE_PRIVATE, 1000000 [pid 9921] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9891] <... futex resumed>) = 0 [pid 9921] <... futex resumed>) = 0 [pid 9891] futex(0x7ff2b385479c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9921] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 9922] ioctl(5, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */}./strace-static-x86_64: Process 9923 attached [pid 9923] set_robust_list(0x7ff2b37749e0, 24) = 0 [pid 9923] memfd_create("syzkaller", 0) = 3 [pid 9923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2ab354000 [pid 9899] <... ioctl resumed>) = 0 [pid 9899] close(4 [pid 9898] close(4) = 0 [pid 9898] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9893] <... futex resumed>) = 0 [pid 9898] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9893] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9898] <... openat resumed>) = 3 [pid 9893] <... futex resumed>) = 0 [pid 9898] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9893] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9898] <... futex resumed>) = 0 [pid 9893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9898] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9893] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9898] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9893] <... futex resumed>) = 0 [pid 9898] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9893] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9899] <... close resumed>) = 0 [pid 9898] <... futex resumed>) = 0 [pid 9893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9898] openat(AT_FDCWD, ".log", O_RDONLY [pid 9893] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9898] <... openat resumed>) = 4 [pid 9893] <... futex resumed>) = 0 [pid 9898] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9893] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9898] <... futex resumed>) = 0 [pid 9893] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9898] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9893] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9898] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9893] <... futex resumed>) = 0 [pid 9898] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9893] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9898] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9902] <... ioctl resumed>) = 0 [pid 9898] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 9893] <... futex resumed>) = 0 [pid 9902] close(4 [pid 9898] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9893] exit_group(0 [pid 9902] <... close resumed>) = 0 [pid 9900] <... ioctl resumed>) = 0 [pid 9899] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9898] <... futex resumed>) = ? [pid 9893] <... exit_group resumed>) = ? [pid 9902] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9899] <... futex resumed>) = 1 [pid 9898] +++ exited with 0 +++ [pid 9896] <... futex resumed>) = 0 [pid 9893] +++ exited with 0 +++ [pid 9902] <... futex resumed>) = 1 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9893, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=22 /* 0.22 s */} --- [pid 9902] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] fstat(3, [pid 9900] close(4 [pid 5083] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 9901] <... futex resumed>) = 0 [pid 9900] <... close resumed>) = 0 [pid 9899] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9896] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9891] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] getdents64(3, [pid 9900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 9900] <... futex resumed>) = 1 [pid 5083] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] unlink("./145/binderfs") = 0 [pid 5083] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] lstat("./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] getdents64(4, 0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 9901] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9896] <... futex resumed>) = 0 [pid 9894] <... futex resumed>) = 0 [pid 5083] rmdir("./145/file0" [pid 9902] <... futex resumed>) = 0 [pid 9901] <... futex resumed>) = 1 [pid 9896] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9894] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... rmdir resumed>) = 0 [pid 9902] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9901] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9900] <... futex resumed>) = 0 [pid 9899] <... openat resumed>) = 3 [pid 9894] <... futex resumed>) = 1 [pid 5083] umount2("./145/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9902] <... openat resumed>) = 3 [pid 9900] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 9894] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 9902] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9900] <... openat resumed>) = 3 [pid 9899] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] lstat("./145/.log", [pid 9902] <... futex resumed>) = 1 [pid 9901] <... futex resumed>) = 0 [pid 9900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 9896] <... futex resumed>) = 0 [pid 9899] <... futex resumed>) = 1 [pid 9902] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9901] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9900] <... futex resumed>) = 1 [pid 9899] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9896] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9894] <... futex resumed>) = 0 [pid 5083] unlink("./145/.log" [pid 9902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9901] <... futex resumed>) = 0 [pid 9900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9899] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9896] <... futex resumed>) = 0 [pid 9894] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 9902] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 9900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] getdents64(3, [pid 9902] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9900] ioctl(3, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5083] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 9902] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9900] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] close(3 [pid 9902] <... futex resumed>) = 0 [pid 9900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9901] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... close resumed>) = 0 [pid 9902] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9900] <... futex resumed>) = 0 [pid 9899] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9896] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9894] <... futex resumed>) = 0 [pid 5083] rmdir("./145" [pid 9901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9899] <... futex resumed>) = 0 [pid 9896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9894] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... rmdir resumed>) = 0 [pid 9901] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9899] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9896] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 302.436150][ T9922] BTRFS info (device loop5): scrub: started on devid 1 [ 302.450631][ T9892] ------------[ cut here ]------------ [ 302.456345][ T9892] BTRFS: Transaction aborted (error -28) [ 302.462616][ T9922] BTRFS info (device loop5: state A): scrub: finished on devid 1 with status: 0 [pid 5083] mkdir("./146", 0777 [pid 9902] <... futex resumed>) = 0 [ 302.497400][ T9892] WARNING: CPU: 1 PID: 9892 at fs/btrfs/volumes.c:3182 btrfs_remove_chunk+0x164d/0x1a80 [ 302.507479][ T9892] Modules linked in: [ 302.511395][ T9892] CPU: 1 PID: 9892 Comm: syz-executor373 Not tainted 6.3.0-rc4-syzkaller-00051-g8bb95a1662f8 #0 [ 302.521870][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 302.531971][ T9892] RIP: 0010:btrfs_remove_chunk+0x164d/0x1a80 [ 302.538033][ T9892] Code: 48 c7 c7 c0 69 2a 8b 44 89 fe e8 3e fd c2 fd 0f 0b e9 2d fe ff ff e8 32 e6 fa fd 48 c7 c7 c0 69 2a 8b 44 89 fe e8 23 fd c2 fd <0f> 0b e9 3a fe ff ff e8 17 e6 fa fd 48 c7 c7 c0 69 2a 8b 44 89 fe [ 302.557686][ T9892] RSP: 0018:ffffc9000e037900 EFLAGS: 00010246 [ 302.563773][ T9892] RAX: f7d8891a884d4a00 RBX: ffff88801eae8001 RCX: ffff88802031d7c0 [ 302.571808][ T9892] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 302.579829][ T9892] RBP: ffffc9000e037ab0 R08: ffffffff81526c82 R09: ffffed101730515b [ 302.587861][ T9892] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11003970bf0 [ 302.595868][ T9892] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffffffffffe4 [ 302.603861][ T9892] FS: 00007ff2b3774700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 302.612855][ T9892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.619491][ T9892] CR2: 00007ff2ab799000 CR3: 000000007912d000 CR4: 00000000003506e0 [ 302.627530][ T9892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.635548][ T9892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.643534][ T9892] Call Trace: [pid 9901] <... futex resumed>) = 1 [pid 9899] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9896] <... futex resumed>) = 0 [pid 9894] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... mkdir resumed>) = 0 [pid 9922] <... ioctl resumed> => {progress={data_extents_scrubbed=1, tree_extents_scrubbed=13, data_bytes_scrubbed=12288, tree_bytes_scrubbed=53248, read_errors=0, csum_errors=0, verify_errors=0, no_csum=0, csum_discards=3, super_errors=0, malloc_errors=0, uncorrectable_errors=0, corrected_errors=0, last_physical=16777216, unverified_errors=0}}) = 0 [pid 9902] openat(AT_FDCWD, ".log", O_RDONLY [pid 9901] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9899] openat(AT_FDCWD, ".log", O_RDONLY [pid 9896] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9894] <... futex resumed>) = 1 [pid 9922] futex(0x7ff2b385479c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9899] <... openat resumed>) = 4 [pid 9894] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9922] <... futex resumed>) = 0 [pid 9899] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9922] futex(0x7ff2b3854798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9899] <... futex resumed>) = 1 [ 302.646867][ T9892] [ 302.649831][ T9892] ? btrfs_get_chunk_map+0x160/0x160 [ 302.655144][ T9892] ? start_transaction+0x3de/0x1050 [ 302.660490][ T9892] btrfs_relocate_chunk+0x252/0x350 [ 302.665736][ T9892] __btrfs_balance+0x1b06/0x2690 [ 302.670737][ T9892] ? describe_balance_start_or_resume+0x490/0x490 [ 302.677212][ T9892] ? do_wait_for_common+0x5b0/0x5f0 [ 302.682519][ T9892] ? do_raw_spin_unlock+0x13b/0x8b0 [ 302.687788][ T9892] ? validate_convert_profile+0x7d/0x2c0 [ 302.693450][ T9892] btrfs_balance+0xbdf/0x1120 [pid 9896] <... futex resumed>) = 0 [pid 9902] <... openat resumed>) = 4 [pid 9900] <... futex resumed>) = 0 [pid 9899] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9896] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 9902] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9900] openat(AT_FDCWD, ".log", O_RDONLY [pid 9899] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9896] <... futex resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 9902] <... futex resumed>) = 1 [pid 9901] <... futex resumed>) = 0 [pid 9900] <... openat resumed>) = 4 [pid 9899] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9896] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] ioctl(3, LOOP_CLR_FD [pid 9902] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9901] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 9900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9899] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 9902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9901] <... futex resumed>) = 0 [pid 9900] <... futex resumed>) = 1 [pid 9899] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9894] <... futex resumed>) = 0 [pid 5083] close(3 [ 302.698211][ T9892] btrfs_ioctl_balance+0x493/0x7c0 [ 302.703395][ T9892] ? btrfs_ioctl+0xb88/0xd40 [ 302.708048][ T9892] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 302.714480][ T9892] __se_sys_ioctl+0xf1/0x160 [ 302.719166][ T9892] do_syscall_64+0x41/0xc0 [ 302.723632][ T9892] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 302.729659][ T9892] RIP: 0033:0x7ff2b37d1a49 [pid 9902] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9901] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9899] <... futex resumed>) = 1 [pid 9896] <... futex resumed>) = 0 [pid 9894] futex(0x7ff2b3854788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... close resumed>) = 0 [pid 9902] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 9899] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9896] exit_group(0 [pid 9894] <... futex resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 9902] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 9900] ioctl(4, BTRFS_IOC_SCRUB, {devid=makedev(0, 0x1), start=0, end=3980028916874417576, flags=0x9557b4f676dc21ea /* BTRFS_SCRUB_??? */} [pid 9899] <... futex resumed>) = ? [pid 9896] <... exit_group resumed>) = ? [pid 9894] futex(0x7ff2b385478c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 9902] <... futex resumed>) = 1 [pid 9901] <... futex resumed>) = 0 [pid 9900] <... ioctl resumed>) = -1 ENOTTY (Inappropriate ioctl for device) [pid 9899] +++ exited with 0 +++ [pid 9896] +++ exited with 0 +++ [pid 5083] <... clone resumed>, child_tidptr=0x5555559d56d0) = 9924 [pid 9902] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9901] exit_group(0 [pid 9900] futex(0x7ff2b385478c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9896, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=30 /* 0.30 s */} --- [pid 9902] <... futex resumed>) = ? [pid 9901] <... exit_group resumed>) = ? [pid 9900] <... futex resumed>) = 1 [pid 9894] <... futex resumed>) = 0 [pid 9902] +++ exited with 0 +++ [pid 9901] +++ exited with 0 +++ [pid 9900] futex(0x7ff2b3854788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 9894] exit_group(0 [pid 9900] <... futex resumed>) = ? [pid 9894] <... exit_group resumed>) = ? [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9901, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5078] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 9923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 9900] +++ exited with 0 +++ [pid 9894] +++ exited with 0 +++ [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... restart_syscall resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9894, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5078] <... openat resumed>) = 3 [pid 5080] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(3, [pid 5081] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(3, [pid 5081] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5081] <... openat resumed>) = 3 [pid 5080] fstat(3, [ 302.734092][ T9892] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 302.753762][ T9892] RSP: 002b:00007ff2b3774208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.762230][ T9892] RAX: ffffffffffffffda RBX: 00007ff2b3854788 RCX: 00007ff2b37d1a49 [ 302.770264][ T9892] RDX: 0000000020000480 RSI: 00000000c4009420 RDI: 0000000000000004 [ 302.778286][ T9892] RBP: 00007ff2b3854780 R08: 0000000000000000 R09: 0000000000000000 [ 302.786318][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2b385478c [pid 5078] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] fstat(3, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5078] lstat("./144/binderfs", [pid 5081] getdents64(3, [pid 5080] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... getdents64 resumed>0x5555559d6720 /* 5 entries */, 32768) = 136 [pid 5080] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./144/binderfs" [pid 5081] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... unlink resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./145/binderfs", [pid 5078] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./145/binderfs", [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./145/binderfs" [pid 5078] lstat("./144/file0", [pid 5081] unlink("./145/binderfs" [pid 5080] <... unlink resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5080] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./145/file0", [pid 5078] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] lstat("./145/file0", [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(4, [pid 5081] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(4, [pid 5081] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... openat resumed>) = 4 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5081] <... openat resumed>) = 4 [pid 5080] fstat(4, [pid 5078] getdents64(4, [pid 5081] fstat(4, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5078] close(4 [pid 5081] getdents64(4, [pid 5080] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5078] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, [pid 5078] rmdir("./144/file0" [pid 5081] getdents64(4, [pid 5080] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555559de760 /* 0 entries */, 32768) = 0 [pid 5080] close(4 [pid 5078] umount2("./144/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] close(4 [pid 5080] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... close resumed>) = 0 [pid 5080] rmdir("./145/file0" [pid 5078] lstat("./144/.log", [pid 5081] rmdir("./145/file0" [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5081] <... rmdir resumed>) = 0 [ 302.794307][ T9892] R13: 00007ffd4e24e5df R14: 00007ff2b3774300 R15: 0000000000022000 [ 302.802356][ T9892] [ 302.805422][ T9892] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 302.812728][ T9892] CPU: 1 PID: 9892 Comm: syz-executor373 Not tainted 6.3.0-rc4-syzkaller-00051-g8bb95a1662f8 #0 [ 302.823154][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 302.833221][ T9892] Call Trace: [ 302.836514][ T9892] [ 302.839464][ T9892] dump_stack_lvl+0x1e7/0x2d0 [pid 5080] umount2("./145/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./144/.log" [pid 5081] umount2("./145/.log", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... unlink resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./145/.log", [pid 5078] getdents64(3, [pid 5081] lstat("./145/.log", [pid 5080] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559d6720 /* 0 entries */, 32768) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFREG|000, st_size=0, ...}) = 0 [pid 5080] unlink("./145/.log" [ 302.844173][ T9892] ? nf_tcp_handle_invalid+0x650/0x650 [ 302.849658][ T9892] ? panic+0x770/0x770 [ 302.853751][ T9892] ? vscnprintf+0x5d/0x80 [ 302.858095][ T9892] panic+0x31c/0x770 [ 302.861991][ T9892] ? __warn+0x171/0x4a0 [ 302.866190][ T9892] ? memcpy_page_flushcache+0x100/0x100 [ 302.871743][ T9892] __warn+0x314/0x4a0 [ 302.875719][ T9892] ? btrfs_remove_chunk+0x164d/0x1a80 [ 302.881083][ T9892] report_bug+0x2b3/0x500 [ 302.885413][ T9892] ? btrfs_remove_chunk+0x164d/0x1a80 [ 302.890780][ T9892] handle_bug+0x3d/0x70 [ 302.894936][ T9892] exc_invalid_op+0x1a/0x50 [ 302.899439][ T9892] asm_exc_invalid_op+0x1a/0x20 [ 302.904284][ T9892] RIP: 0010:btrfs_remove_chunk+0x164d/0x1a80 [ 302.910255][ T9892] Code: 48 c7 c7 c0 69 2a 8b 44 89 fe e8 3e fd c2 fd 0f 0b e9 2d fe ff ff e8 32 e6 fa fd 48 c7 c7 c0 69 2a 8b 44 89 fe e8 23 fd c2 fd <0f> 0b e9 3a fe ff ff e8 17 e6 fa fd 48 c7 c7 c0 69 2a 8b 44 89 fe [ 302.929856][ T9892] RSP: 0018:ffffc9000e037900 EFLAGS: 00010246 [ 302.935928][ T9892] RAX: f7d8891a884d4a00 RBX: ffff88801eae8001 RCX: ffff88802031d7c0 [ 302.943899][ T9892] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 302.951862][ T9892] RBP: ffffc9000e037ab0 R08: ffffffff81526c82 R09: ffffed101730515b [ 302.959825][ T9892] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11003970bf0 [ 302.967789][ T9892] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffffffffffe4 [ 302.975757][ T9892] ? __warn_printk+0x292/0x360 [ 302.980537][ T9892] ? btrfs_get_chunk_map+0x160/0x160 [ 302.985816][ T9892] ? start_transaction+0x3de/0x1050 [ 302.991023][ T9892] btrfs_relocate_chunk+0x252/0x350 [ 302.996217][ T9892] __btrfs_balance+0x1b06/0x2690 [ 303.001188][ T9892] ? describe_balance_start_or_resume+0x490/0x490 [ 303.007597][ T9892] ? do_wait_for_common+0x5b0/0x5f0 [ 303.012800][ T9892] ? do_raw_spin_unlock+0x13b/0x8b0 [ 303.018013][ T9892] ? validate_convert_profile+0x7d/0x2c0 [ 303.023657][ T9892] btrfs_balance+0xbdf/0x1120 [ 303.028348][ T9892] btrfs_ioctl_balance+0x493/0x7c0 [ 303.033457][ T9892] ? btrfs_ioctl+0xb88/0xd40 [ 303.038043][ T9892] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 303.044467][ T9892] __se_sys_ioctl+0xf1/0x160 [ 303.049063][ T9892] do_syscall_64+0x41/0xc0 [ 303.053484][ T9892] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 303.059376][ T9892] RIP: 0033:0x7ff2b37d1a49 [ 303.063781][ T9892] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 303.083378][ T9892] RSP: 002b:00007ff2b3774208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.091788][ T9892] RAX: ffffffffffffffda RBX: 00007ff2b3854788 RCX: 00007ff2b37d1a49 [ 303.099752][ T9892] RDX: 0000000020000480 RSI: 00000000c4009420 RDI: 0000000000000004 [ 303.107717][ T9892] RBP: 00007ff2b3854780 R08: 0000000000000000 R09: 0000000000000000 [ 303.115683][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2b385478c [ 303.123650][ T9892] R13: 00007ffd4e24e5df R14: 00007ff2b3774300 R15: 0000000000022000 [ 303.131630][ T9892] [ 303.134786][ T9892] Kernel Offset: disabled [ 303.139191][ T9892] Rebooting in 86400 seconds..